diff --git a/.github/workflows/Node_Project_Check.yml b/.github/workflows/Node_Project_Check.yml index 1116a307ceb7..3347edfbe84d 100644 --- a/.github/workflows/Node_Project_Check.yml +++ b/.github/workflows/Node_Project_Check.yml @@ -20,7 +20,7 @@ jobs: steps: - uses: actions/checkout@v6 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v6.3.0 + uses: actions/setup-node@v6.4.0 with: node-version: ${{ matrix.node-version }} - name: Install and Build Test diff --git a/.github/workflows/cipp_dev_build.yml b/.github/workflows/cipp_dev_build.yml index f0131a4f3692..394b8bc794f1 100644 --- a/.github/workflows/cipp_dev_build.yml +++ b/.github/workflows/cipp_dev_build.yml @@ -26,7 +26,7 @@ jobs: echo "node_version=$node_sanitized_version" >> $GITHUB_OUTPUT - name: Set up Node.js - uses: actions/setup-node@v6.3.0 + uses: actions/setup-node@v6.4.0 with: node-version: ${{ steps.get_node_version.outputs.node_version }} diff --git a/.github/workflows/cipp_frontend_build.yml b/.github/workflows/cipp_frontend_build.yml index 5ce0f6eece44..5c8d7230e9d3 100644 --- a/.github/workflows/cipp_frontend_build.yml +++ b/.github/workflows/cipp_frontend_build.yml @@ -26,7 +26,7 @@ jobs: echo "node_version=$node_sanitized_version" >> $GITHUB_OUTPUT - name: Set up Node.js - uses: actions/setup-node@v6.3.0 + uses: actions/setup-node@v6.4.0 with: node-version: ${{ steps.get_node_version.outputs.node_version }} @@ -38,6 +38,13 @@ jobs: - name: Build Project run: npm run build + # Update version.json with commit hash + - name: Update version.json + run: | + VERSION=$(jq -r '.version' public/version.json) + SHORT_SHA="${GITHUB_SHA::7}" + echo "{\"version\": \"${VERSION}\", \"commit\": \"${SHORT_SHA}\"}" > out/version.json + # Create ZIP File in a New Source Directory - name: Prepare and Zip Build Files run: | diff --git a/.github/workflows/pr_check.yml b/.github/workflows/pr_check.yml index ea36ac1e82f7..84555d0e0ebb 100644 --- a/.github/workflows/pr_check.yml +++ b/.github/workflows/pr_check.yml @@ -22,7 +22,7 @@ jobs: # Only process fork PRs with specific branch conditions # Must be a fork AND (source is main/master OR target is main/master) if: | - github.event.pull_request.head.repo.fork == true && + github.event.pull_request.head.repo.fork == true && ((github.event.pull_request.head.ref == 'main' || github.event.pull_request.head.ref == 'master') || (github.event.pull_request.base.ref == 'main' || github.event.pull_request.base.ref == 'master')) uses: actions/github-script@v9 @@ -31,7 +31,31 @@ jobs: script: | let message = ''; + // Check if the fork has open PRs (indicates pull bot or similar is active) + const forkOwner = context.payload.pull_request.head.repo.owner.login; + const forkRepo = context.payload.pull_request.head.repo.name; + const forkPullsUrl = context.payload.pull_request.head.repo.html_url + '/pulls'; + + let openPRs = []; + try { + const { data: prs } = await github.rest.pulls.list({ + owner: forkOwner, + repo: forkRepo, + state: 'open', + per_page: 5 + }); + openPRs = prs; + } catch (e) { + // Can't read fork PRs — skip + } + message += '🔄 If you are attempting to update your CIPP repo please follow the instructions at: https://docs.cipp.app/setup/self-hosting-guide/updating. Are you a sponsor? Contact the helpdesk for direct assistance with updating to the latest version.'; + + if (openPRs.length > 0) { + message += ` It looks like you may already have a pending update PR on your fork — check your [open pull requests](${forkPullsUrl}) to accept it.`; + } else { + message += ` You can enable [Pull Bot](https://github.com/apps/pull) or [Repo Sync](https://github.com/apps/repo-sync) to automatically keep your fork up to date.`; + } message += '\n\n'; // Check if PR is targeting main/master @@ -40,7 +64,7 @@ jobs: } // Check if PR is from a fork's main/master branch - if (context.payload.pull_request.head.repo.fork && + if (context.payload.pull_request.head.repo.fork && (context.payload.pull_request.head.ref === 'main' || context.payload.pull_request.head.ref === 'master')) { message += '⚠️ This PR cannot be merged because it originates from your fork\'s main/master branch. If you are attempting to contribute code please PR from your dev branch or another non-main/master branch.\n\n'; } diff --git a/Tests/Shapes/ListTests.json b/Tests/Shapes/ListTests.json index 7dd16b29e91d..a4553bd14c70 100644 --- a/Tests/Shapes/ListTests.json +++ b/Tests/Shapes/ListTests.json @@ -103,23 +103,19 @@ "ExoAcceptedDomains": "number", "ExoAdminAuditLogConfig": "number", "ExoAntiPhishPolicies": "number", - "ExoAntiPhishPolicy": "number", "ExoAntiPhishRules": "number", "ExoAtpPolicyForO365": "number", "ExoDkimSigningConfig": "number", "ExoHostedContentFilterPolicy": "number", "ExoHostedOutboundSpamFilterPolicy": "number", "ExoMalwareFilterPolicies": "number", - "ExoMalwareFilterPolicy": "number", "ExoMalwareFilterRules": "number", "ExoOrganizationConfig": "number", "ExoQuarantinePolicy": "number", "ExoRemoteDomain": "number", "ExoSafeAttachmentPolicies": "number", - "ExoSafeAttachmentPolicy": "number", "ExoSafeAttachmentRules": "number", "ExoSafeLinksPolicies": "number", - "ExoSafeLinksPolicy": "number", "ExoSafeLinksRules": "number", "ExoSharingPolicy": "number", "ExoTenantAllowBlockList": "number", diff --git a/Tools/Start-CippDevEmulators.ps1 b/Tools/Start-CippDevEmulators.ps1 index 2b5d4a4a7ac6..ecf6855fe1e5 100644 --- a/Tools/Start-CippDevEmulators.ps1 +++ b/Tools/Start-CippDevEmulators.ps1 @@ -22,7 +22,7 @@ $apiCommand = @' try { # Use a stable local identity so timer node selection treats this as the catch-all host. $env:WEBSITE_SITE_NAME = "cipp" - $env:CIPP_PROCESSOR = "true" + $env:CIPP_PROCESSOR = "false" $env:AzureFunctionsWebHost__hostid = "cipp-single" # Ensure prior offload simulation env overrides do not disable triggers in this shell. @@ -42,5 +42,11 @@ try { $frontendCommand = 'try { npm run dev } catch { Write-Error $_.Exception.Message } finally { Read-Host "Press Enter to exit" }' $swaCommand = 'try { npm run start-swa } catch { Write-Error $_.Exception.Message } finally { Read-Host "Press Enter to exit" }' +# Encode commands to avoid parsing issues with multi-line strings +$azuriteEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($azuriteCommand)) +$apiEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($apiCommand)) +$frontendEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($frontendCommand)) +$swaEncoded = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($swaCommand)) + # Start Windows Terminal with all tabs -wt --title CIPP`; new-tab --title 'Azurite' -d $Path pwsh -c $azuriteCommand`; new-tab --title 'FunctionApp' -d $ApiPath pwsh -c $apiCommand`; new-tab --title 'CIPP Frontend' -d $FrontendPath pwsh -c $frontendCommand`; new-tab --title 'SWA' -d $FrontendPath pwsh -c $swaCommand +wt --title CIPP`; new-tab --title 'Azurite' -d $Path pwsh -EncodedCommand $azuriteEncoded`; new-tab --title 'FunctionApp' -d $ApiPath pwsh -EncodedCommand $apiEncoded`; new-tab --title 'CIPP Frontend' -d $FrontendPath pwsh -EncodedCommand $frontendEncoded`; new-tab --title 'SWA' -d $FrontendPath pwsh -EncodedCommand $swaEncoded diff --git a/next.config.js b/next.config.js index 2399b9b84ed7..f2bc28bcd2bb 100644 --- a/next.config.js +++ b/next.config.js @@ -1,6 +1,28 @@ +const disableOptimizePackageImports = process.env.NEXT_DISABLE_OPTIMIZE_PACKAGE_IMPORTS === '1' + /** @type {import('next').NextConfig} */ const config = { reactStrictMode: false, + experimental: { + optimizePackageImports: disableOptimizePackageImports + ? [] + : [ + '@mui/material', + '@mui/icons-material', + '@mui/lab', + '@mui/system', + '@mui/x-date-pickers', + 'material-react-table', + 'mui-tiptap', + 'recharts', + '@react-pdf/renderer', + 'lodash', + ], + webpackMemoryOptimizations: true, + preloadEntriesOnStart: false, + turbopackFileSystemCacheForDev: false, + turbopackMemoryLimit: 4096, + }, images: { unoptimized: true, }, @@ -12,12 +34,6 @@ const config = { }, }, }, - experimental: { - webpackMemoryOptimizations: true, - preloadEntriesOnStart: false, - turbopackFileSystemCacheForDev: false, - turbopackMemoryLimit: 4096, - }, async redirects() { return [] }, diff --git a/package.json b/package.json index 17691311015a..a4402ea681b5 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "cipp", - "version": "10.3.1", + "version": "10.4.5", "author": "CIPP Contributors", "homepage": "https://cipp.app/", "bugs": { @@ -16,7 +16,7 @@ }, "scripts": { "dev": "next -H 127.0.0.1", - "build": "next build && rm -rf package.json yarn.lock", + "build": "next build --webpack && rm -rf package.json yarn.lock", "start": "next start", "export": "next export", "lint": "npx eslint .", @@ -31,10 +31,10 @@ "@emotion/styled": "11.14.1", "@heroicons/react": "2.2.0", "@monaco-editor/react": "^4.6.0", - "@mui/icons-material": "7.3.7", + "@mui/icons-material": "7.3.10", "@mui/lab": "7.0.0-beta.17", - "@mui/material": "7.3.7", - "@mui/system": "7.3.2", + "@mui/material": "7.3.10", + "@mui/system": "7.3.10", "@mui/x-date-pickers": "^9.0.2", "@musement/iso-duration": "^1.0.0", "@nivo/core": "^0.99.0", @@ -43,37 +43,35 @@ "@reduxjs/toolkit": "^2.11.2", "@tanstack/query-sync-storage-persister": "^5.90.25", "@tanstack/react-query": "^5.96.2", - "@tanstack/react-query-devtools": "^5.51.11", - "@tanstack/react-query-persist-client": "^5.76.0", + "@tanstack/react-query-devtools": "^5.96.2", + "@tanstack/react-query-persist-client": "^5.96.2", "@tanstack/react-table": "^8.19.2", "@tiptap/core": "^3.4.1", "@tiptap/extension-heading": "^3.4.1", - "@tiptap/extension-image": "^3.20.5", "@tiptap/extension-table": "^3.19.0", "@tiptap/pm": "^3.22.3", "@tiptap/react": "^3.20.5", "@tiptap/starter-kit": "^3.20.5", - "@uiw/react-json-view": "^2.0.0-alpha.41", "@vvo/tzdb": "^6.198.0", "apexcharts": "5.10.4", "axios": "1.15.0", "date-fns": "4.1.0", "diff": "^8.0.3", + "dompurify": "^3.4.2", "eml-parse-js": "^1.2.0-beta.0", "export-to-csv": "^1.3.0", "formik": "2.4.9", "gray-matter": "4.0.3", - "i18next": "25.8.18", "javascript-time-ago": "^2.6.2", "jspdf": "^4.2.0", "jspdf-autotable": "^5.0.7", "leaflet": "^1.9.4", - "leaflet-defaulticon-compatibility": "^0.1.2", "leaflet.markercluster": "^1.5.3", + "lodash": "^4.18.1", "lodash.isequal": "4.5.0", "material-react-table": "^3.0.1", "monaco-editor": "^0.55.1", - "mui-tiptap": "^1.29.1", + "mui-tiptap": "^1.30.0", "next": "^16.2.2", "nprogress": "0.2.0", "numeral": "2.0.6", @@ -82,15 +80,12 @@ "react": "19.2.5", "react-apexcharts": "2.1.0", "react-beautiful-dnd": "13.1.1", - "react-copy-to-clipboard": "^5.1.0", "react-dom": "19.2.5", "react-dropzone": "15.0.0", "react-error-boundary": "^6.1.1", - "react-grid-layout": "^2.2.3", "react-hook-form": "^7.72.0", "react-hot-toast": "2.6.0", "react-html-parser": "^2.0.2", - "react-i18next": "16.6.5", "react-leaflet": "5.0.0", "react-leaflet-markercluster": "^5.0.0-rc.0", "react-markdown": "10.1.0", @@ -101,28 +96,23 @@ "react-syntax-highlighter": "^16.1.0", "react-time-ago": "^7.3.3", "react-virtuoso": "^4.18.5", - "react-window": "^2.2.7", - "recharts": "^3.7.0", + "recharts": "^3.8.1", "redux": "5.0.1", - "redux-devtools-extension": "2.13.9", "redux-persist": "^6.0.0", - "redux-thunk": "3.1.0", "rehype-raw": "^7.0.0", "remark-gfm": "^4.0.0", + "remark-parse": "^11.0.0", "simplebar": "6.3.3", "simplebar-react": "3.3.2", "stylis-plugin-rtl": "2.1.1", - "typescript": "5.9.3", + "unified": "^11.0.5", "yup": "1.7.1" }, "devDependencies": { "@svgr/webpack": "8.1.0", - "@types/react": "^19.2.14", - "@types/react-dom": "^19.2.3", "eslint": "^9.39.4", "eslint-config-next": "^16.2.3", "eslint-config-prettier": "^10.1.8", - "prettier": "^3.8.1", - "prettier-eslint": "^16.4.2" + "prettier": "^3.8.1" } } diff --git a/public/assets/integrations/autotask.png b/public/assets/integrations/autotask.png new file mode 100644 index 000000000000..cf2940427613 Binary files /dev/null and b/public/assets/integrations/autotask.png differ diff --git a/public/assets/integrations/connectwise.png b/public/assets/integrations/connectwise.png new file mode 100644 index 000000000000..ef1dfd1234f0 Binary files /dev/null and b/public/assets/integrations/connectwise.png differ diff --git a/public/assets/integrations/kaseya.svg b/public/assets/integrations/kaseya.svg new file mode 100644 index 000000000000..7e34c610d76a --- /dev/null +++ b/public/assets/integrations/kaseya.svg @@ -0,0 +1,3 @@ + + Kaseya BMS + diff --git a/public/languageList.json b/public/languageList.json index 769bf0b60f6b..fe6f901b3089 100644 --- a/public/languageList.json +++ b/public/languageList.json @@ -160,6 +160,13 @@ "languageTag": "Danish (da-DK)", "LCID": "1030" }, + { + "language": "Dutch", + "Geographic area": "Belgium", + "tag": "nl-BE", + "languageTag": "Dutch (nl-BE)", + "LCID": "2067" + }, { "language": "Dutch", "Geographic area": "Netherlands", diff --git a/public/manifest.json b/public/manifest.json index 2cc60cd8b5a7..42f5d73ea6af 100644 --- a/public/manifest.json +++ b/public/manifest.json @@ -1,15 +1,26 @@ { - "short_name": "Carpatin", - "name": "Carpatin", + "short_name": "CIPP", + "name": "CIPP - CyberDrian Improved Partner Portal", "icons": [ { "src": "favicon.ico", "sizes": "64x64 32x32 24x24 16x16", "type": "image/x-icon" + }, + { + "src": "android-chrome-192x192.png", + "sizes": "192x192", + "type": "image/png" + }, + { + "src": "android-chrome-512x512.png", + "sizes": "512x512", + "type": "image/png" } ], - "start_url": ".", + "start_url": "/", + "scope": "/", "display": "standalone", - "theme_color": "#000000", + "theme_color": "#ffffff", "background_color": "#ffffff" -} \ No newline at end of file +} diff --git a/public/sw.js b/public/sw.js new file mode 100644 index 000000000000..a5b7af04ecf4 --- /dev/null +++ b/public/sw.js @@ -0,0 +1,8 @@ +// Minimal service worker to satisfy Chrome's installability criteria. +// This does NOT cache anything or provide offline support — it simply +// passes all requests through to the network so Chrome treats the site +// as an installable web app. + +self.addEventListener('install', () => self.skipWaiting()) +self.addEventListener('activate', (event) => event.waitUntil(self.clients.claim())) +self.addEventListener('fetch', () => {}) diff --git a/public/version.json b/public/version.json index 5646fed27b32..a09d0fcf2ccd 100644 --- a/public/version.json +++ b/public/version.json @@ -1,3 +1,3 @@ { - "version": "10.3.1" + "version": "10.4.5" } diff --git a/src/components/CippCards/CippDomainCards.jsx b/src/components/CippCards/CippDomainCards.jsx index 9268fcd08f96..fede72bd1347 100644 --- a/src/components/CippCards/CippDomainCards.jsx +++ b/src/components/CippCards/CippDomainCards.jsx @@ -470,6 +470,13 @@ export const CippDomainCards = ({ domain: propDomain = "", fullwidth = false }) waiting: !!domain, }); + const { data: autoDiscoverData, isFetching: autoDiscoverLoading } = ApiGetCall({ + url: "/api/ListDomainHealth", + queryKey: `autodiscover-${domain}`, + data: { Domain: domain, Action: "ReadAutoDiscover" }, + waiting: !!domain, + }); + const { data: httpsData, isFetching: httpsLoading } = ApiGetCall({ url: "/api/ListDomainHealth", queryKey: `https-${domain}-${subdomains}`, @@ -684,6 +691,26 @@ export const CippDomainCards = ({ domain: propDomain = "", fullwidth = false }) } /> + + +

+ AutoDiscover ({autoDiscoverData?.RecordType || "None"}): +

+ + + + } + /> + {enableHttps && ( { <> - Auto Expanding Archive: + {exchangeData?.AutoExpandingArchiveScope === 'Organization' + ? 'Auto Expanding Archive: (org)' + : 'Auto Expanding Archive:'} {getCippFormatting( diff --git a/src/components/CippCards/CippRemediationCard.jsx b/src/components/CippCards/CippRemediationCard.jsx index d864719f80e1..4546311a60fa 100644 --- a/src/components/CippCards/CippRemediationCard.jsx +++ b/src/components/CippCards/CippRemediationCard.jsx @@ -1,13 +1,13 @@ -import { Button, Typography, List, ListItem, SvgIcon } from "@mui/material"; -import CippButtonCard from "./CippButtonCard"; // Adjust the import path as needed -import { CippApiDialog } from "../CippComponents/CippApiDialog"; -import { useDialog } from "../../hooks/use-dialog"; -import { Sync } from "@mui/icons-material"; -import { ShieldCheckIcon } from "@heroicons/react/24/outline"; +import { Button, Typography, List, ListItem, SvgIcon } from '@mui/material' +import CippButtonCard from './CippButtonCard' // Adjust the import path as needed +import { CippApiDialog } from '../CippComponents/CippApiDialog' +import { useDialog } from '../../hooks/use-dialog' +import { Sync } from '@mui/icons-material' +import { ShieldCheckIcon } from '@heroicons/react/24/outline' export default function CippRemediationCard(props) { - const { userPrincipalName, isFetching, userId, tenantFilter, restartProcess } = props; - const createDialog = useDialog(); + const { userPrincipalName, isFetching, userId, tenantFilter, restartProcess } = props + const createDialog = useDialog() return ( Disconnect all current sessions Remove all MFA methods for the user Disable all inbox rules for the user + Disable OneDrive sharing - ); + ) } diff --git a/src/components/CippCards/CippStandardsDialog.jsx b/src/components/CippCards/CippStandardsDialog.jsx index 86de00f07d92..0e006ef43615 100644 --- a/src/components/CippCards/CippStandardsDialog.jsx +++ b/src/components/CippCards/CippStandardsDialog.jsx @@ -1,5 +1,5 @@ import React, { useState } from 'react' -import _ from 'lodash' +import { get } from 'lodash' import { Dialog, DialogTitle, @@ -311,7 +311,7 @@ export const CippStandardsDialog = ({ open, onClose, standardsData, currentTenan {info.addedComponent.map((component, componentIndex) => { - const value = _.get(templateItem, component.name) + const value = get(templateItem, component.name) let displayValue = 'N/A' if (value) { @@ -427,7 +427,7 @@ export const CippStandardsDialog = ({ open, onClose, standardsData, currentTenan let extractedValue = null // Try direct access first - componentValue = _.get(config, component.name) + componentValue = get(config, component.name) // If direct access fails and component name contains dots (nested structure) if ( @@ -441,7 +441,7 @@ export const CippStandardsDialog = ({ open, onClose, standardsData, currentTenan if (pathParts[0] === 'standards' && config.standards) { // Remove 'standards.' prefix and try to find the value in config.standards const nestedPath = pathParts.slice(1).join('.') - extractedValue = _.get(config.standards, nestedPath) + extractedValue = get(config.standards, nestedPath) // If still not found, try alternative nested structures // Some standards have double nesting like: config.standards.StandardName.fieldName @@ -452,7 +452,7 @@ export const CippStandardsDialog = ({ open, onClose, standardsData, currentTenan ) { const standardName = pathParts[1] const fieldPath = pathParts.slice(2).join('.') - extractedValue = _.get( + extractedValue = get( config.standards, `${standardName}.${fieldPath}` ) diff --git a/src/components/CippCards/CippUniversalSearchV2.jsx b/src/components/CippCards/CippUniversalSearchV2.jsx index 28a53f35ef82..070396f0a56e 100644 --- a/src/components/CippCards/CippUniversalSearchV2.jsx +++ b/src/components/CippCards/CippUniversalSearchV2.jsx @@ -348,6 +348,16 @@ export const CippUniversalSearchV2 = React.forwardRef( router.push( `/identity/administration/groups/group?groupId=${itemData.id}&tenantFilter=${tenantDomain}`, ); + } else if (searchType === "Applications") { + if (match.Type === "Apps") { + router.push( + `/tenant/administration/applications/app-registration?appId=${itemData.appId || itemData.id}&tenantFilter=${tenantDomain}`, + ); + } else { + router.push( + `/tenant/administration/applications/enterprise-app?spId=${itemData.id}&tenantFilter=${tenantDomain}`, + ); + } } else if (searchType === "Pages") { router.push(match.path, undefined, { shallow: true }); } @@ -389,6 +399,11 @@ export const CippUniversalSearchV2 = React.forwardRef( icon: "Group", onClick: () => handleTypeChange("Groups"), }, + { + label: "Applications", + icon: "Apps", + onClick: () => handleTypeChange("Applications"), + }, { label: "BitLocker", icon: "FilePresent", @@ -730,6 +745,20 @@ const Results = ({ )} )} + {searchType === "Applications" && ( + <> + {itemData.appId && ( + + {highlightMatch(itemData.appId || "")} + + )} + {itemData.publisherName && ( + + {highlightMatch(itemData.publisherName || "")} + + )} + + )} { } else { setFetchingVisible(false); } - if (!errorsOnly) { - if (allResults.length > 0) { - setFinalResults( - allResults.map((res, index) => ({ - id: index, - text: res.text, - copyField: res.copyField, - severity: res.severity, - visible: true, - ...res, - })), - ); - } else { - setFinalResults([]); - } + const resultsToShow = errorsOnly + ? allResults.filter((r) => r.severity === "error") + : allResults; + + if (resultsToShow.length > 0) { + setFinalResults( + resultsToShow.map((res, index) => ({ + id: index, + text: res.text, + copyField: res.copyField, + severity: res.severity, + visible: true, + ...res, + })), + ); + } else { + setFinalResults([]); } }, [ apiObject.isError, diff --git a/src/components/CippComponents/CippAppPermissionBuilder.jsx b/src/components/CippComponents/CippAppPermissionBuilder.jsx index da386b770f91..07d21613fb84 100644 --- a/src/components/CippComponents/CippAppPermissionBuilder.jsx +++ b/src/components/CippComponents/CippAppPermissionBuilder.jsx @@ -37,7 +37,7 @@ import { import { useWatch } from "react-hook-form"; import { CippCardTabPanel } from "./CippCardTabPanel"; import { CippApiResults } from "./CippApiResults"; -import _ from "lodash"; +import { isEqual } from "lodash"; import { CippCodeBlock } from "./CippCodeBlock"; import { CippOffCanvas } from "./CippOffCanvas"; import { FileDropzone } from "../file-dropzone"; @@ -388,7 +388,7 @@ const CippAppPermissionBuilder = ({ }); setExpanded("00000003-0000-0000-c000-000000000000"); // Automatically expand Microsoft Graph } - } else if (!_.isEqual(currentPermissions, initialPermissions)) { + } else if (!isEqual(currentPermissions, initialPermissions)) { setSelectedApp([]); // Avoid redundant updates setNewPermissions(currentPermissions); setInitialPermissions(currentPermissions); @@ -398,7 +398,7 @@ const CippAppPermissionBuilder = ({ initialAppIds.includes(sp.appId), )?.sort((a, b) => a.displayName.localeCompare(b.displayName)); - if (!_.isEqual(selectedApp, newApps)) { + if (!isEqual(selectedApp, newApps)) { setSelectedApp(newApps); // Prevent unnecessary updates } diff --git a/src/components/CippComponents/CippAppTemplateDrawer.jsx b/src/components/CippComponents/CippAppTemplateDrawer.jsx index 6be184eebaa6..4727f66988f2 100644 --- a/src/components/CippComponents/CippAppTemplateDrawer.jsx +++ b/src/components/CippComponents/CippAppTemplateDrawer.jsx @@ -1,4 +1,4 @@ -import React, { useEffect, useCallback, useState } from "react"; +import React, { useEffect, useCallback, useState } from 'react' import { Button, Divider, @@ -10,263 +10,265 @@ import { ListItemText, ListItemSecondaryAction, Alert, -} from "@mui/material"; -import { Grid } from "@mui/system"; -import { useForm, useWatch } from "react-hook-form"; -import { Add, Delete, Edit, Save } from "@mui/icons-material"; -import { CippOffCanvas } from "./CippOffCanvas"; -import CippFormComponent from "./CippFormComponent"; -import { CippFormCondition } from "./CippFormCondition"; -import { CippApiResults } from "./CippApiResults"; -import { ApiGetCall, ApiPostCall } from "../../api/ApiCall"; -import languageList from "../../data/languageList.json"; +} from '@mui/material' +import { Grid } from '@mui/system' +import { useForm, useWatch } from 'react-hook-form' +import { Add, Delete, Edit, Save } from '@mui/icons-material' +import { CippOffCanvas } from './CippOffCanvas' +import CippFormComponent from './CippFormComponent' +import { CippFormCondition } from './CippFormCondition' +import { CippApiResults } from './CippApiResults' +import { ApiGetCall, ApiPostCall } from '../../api/ApiCall' +import languageList from '../../data/languageList.json' const appTypeLabels = { - mspApp: "MSP Vendor App", - StoreApp: "Store App", - chocolateyApp: "Chocolatey App", - officeApp: "Microsoft Office", - win32ScriptApp: "Custom Application", -}; + mspApp: 'MSP Vendor App', + StoreApp: 'Store App', + chocolateyApp: 'Chocolatey App', + officeApp: 'Microsoft Office', + win32ScriptApp: 'Custom Application', +} export const CippAppTemplateDrawer = ({ - buttonText = "Create Template", + buttonText = 'Create Template', editData = null, open = false, onClose, }) => { - const [drawerVisible, setDrawerVisible] = useState(false); - const [apps, setApps] = useState([]); - const [editGUID, setEditGUID] = useState(null); - const formControl = useForm({ mode: "onChange" }); - const templateFormControl = useForm({ mode: "onChange" }); + const [drawerVisible, setDrawerVisible] = useState(false) + const [apps, setApps] = useState([]) + const [editGUID, setEditGUID] = useState(null) + const formControl = useForm({ mode: 'onChange' }) + const templateFormControl = useForm({ mode: 'onChange' }) - const [fetchKey, setFetchKey] = useState(null); + const [fetchKey, setFetchKey] = useState(null) useEffect(() => { if (open && editData?.GUID) { - setFetchKey(`AppTemplate-${editData.GUID}-${Date.now()}`); + setFetchKey(`AppTemplate-${editData.GUID}-${Date.now()}`) } - }, [open, editData?.GUID]); + }, [open, editData?.GUID]) const templateFetch = ApiGetCall({ url: editData?.GUID ? `/api/ListAppTemplates?ID=${editData.GUID}` : null, queryKey: fetchKey, waiting: !!(open && editData?.GUID && fetchKey), - }); + }) useEffect(() => { if (open && editData && templateFetch.isSuccess && templateFetch.data) { - const template = Array.isArray(templateFetch.data) ? templateFetch.data[0] : templateFetch.data; - if (!template) return; + const template = Array.isArray(templateFetch.data) + ? templateFetch.data[0] + : templateFetch.data + if (!template) return - setEditGUID(template.GUID || editData.GUID || null); + setEditGUID(template.GUID || editData.GUID || null) templateFormControl.reset({ - templateName: template.displayName || editData.displayName || "", - templateDescription: template.description || editData.description || "", - }); + templateName: template.displayName || editData.displayName || '', + templateDescription: template.description || editData.description || '', + }) - let appsArray = template.Apps || []; - if (typeof appsArray === "string") { + let appsArray = template.Apps || [] + if (typeof appsArray === 'string') { try { - appsArray = JSON.parse(appsArray); + appsArray = JSON.parse(appsArray) } catch { - appsArray = []; + appsArray = [] } } if (!Array.isArray(appsArray)) { - appsArray = []; + appsArray = [] } const loadedApps = appsArray.map((app) => ({ appType: app.appType, appName: app.appName, - config: typeof app.config === "string" ? app.config : JSON.stringify(app.config), - })); - setApps(loadedApps); - setDrawerVisible(true); + config: typeof app.config === 'string' ? app.config : JSON.stringify(app.config), + })) + setApps(loadedApps) + setDrawerVisible(true) } - }, [open, editData, templateFetch.isSuccess, templateFetch.data]); + }, [open, editData, templateFetch.isSuccess, templateFetch.data]) const applicationType = useWatch({ control: formControl.control, - name: "appType", - }); + name: 'appType', + }) const searchQuerySelection = useWatch({ control: formControl.control, - name: "packageSearch", - }); + name: 'packageSearch', + }) const updateSearchSelection = useCallback( (searchQuerySelection) => { if (searchQuerySelection) { - formControl.setValue("packagename", searchQuerySelection.value.packagename); - formControl.setValue("applicationName", searchQuerySelection.value.applicationName); - formControl.setValue("description", searchQuerySelection.value.description); + formControl.setValue('packagename', searchQuerySelection.value.packagename) + formControl.setValue('applicationName', searchQuerySelection.value.applicationName) + formControl.setValue('description', searchQuerySelection.value.description) if (searchQuerySelection.value.customRepo) { - formControl.setValue("customRepo", searchQuerySelection.value.customRepo); + formControl.setValue('customRepo', searchQuerySelection.value.customRepo) } } }, - [formControl.setValue], - ); + [formControl.setValue] + ) useEffect(() => { - updateSearchSelection(searchQuerySelection); - }, [updateSearchSelection, searchQuerySelection]); + updateSearchSelection(searchQuerySelection) + }, [updateSearchSelection, searchQuerySelection]) - const ChocosearchResults = ApiPostCall({ urlFromData: true }); - const winGetSearchResults = ApiPostCall({ urlFromData: true }); + const ChocosearchResults = ApiPostCall({ urlFromData: true }) + const winGetSearchResults = ApiPostCall({ urlFromData: true }) const saveTemplate = ApiPostCall({ urlFromData: true, - relatedQueryKeys: ["ListAppTemplates"], - }); + relatedQueryKeys: ['ListAppTemplates'], + }) const searchApp = (searchText, type) => { - if (type === "choco") { + if (type === 'choco') { ChocosearchResults.mutate({ - url: "/api/ListAppsRepository", + url: '/api/ListAppsRepository', data: { search: searchText }, queryKey: `SearchApp-${searchText}-${type}`, - }); + }) } - if (type === "StoreApp") { + if (type === 'StoreApp') { winGetSearchResults.mutate({ - url: "/api/ListPotentialApps", - data: { searchString: searchText, type: "WinGet" }, + url: '/api/ListPotentialApps', + data: { searchString: searchText, type: 'WinGet' }, queryKey: `SearchApp-${searchText}-${type}`, - }); + }) } - }; + } const getAppName = (formData) => { - const type = formData.appType?.value; - if (type === "mspApp") return formData.displayName || formData.rmmname?.label || "MSP App"; - if (type === "officeApp") return "Microsoft 365 Apps"; - return formData.applicationName || formData.packagename || "Unnamed App"; - }; + const type = formData.appType?.value + if (type === 'mspApp') return formData.displayName || formData.rmmname?.label || 'MSP App' + if (type === 'officeApp') return 'Microsoft 365 Apps' + return formData.applicationName || formData.packagename || 'Unnamed App' + } const handleAddApp = () => { - const formData = formControl.getValues(); - if (!formData.appType?.value) return; + const formData = formControl.getValues() + if (!formData.appType?.value) return const appEntry = { appType: formData.appType.value, appName: getAppName(formData), config: JSON.stringify(formData), - }; + } - setApps((prev) => [...prev, appEntry]); - formControl.reset({ appType: null }); - }; + setApps((prev) => [...prev, appEntry]) + formControl.reset({ appType: null }) + } const handleEditApp = (index) => { - const currentForm = formControl.getValues(); - const appToEdit = apps[index]; + const currentForm = formControl.getValues() + const appToEdit = apps[index] setApps((prev) => { - const updated = [...prev]; + const updated = [...prev] if (currentForm.appType?.value) { updated.push({ appType: currentForm.appType.value, appName: getAppName(currentForm), config: JSON.stringify(currentForm), - }); + }) } - return updated.filter((_, i) => i !== index); - }); + return updated.filter((_, i) => i !== index) + }) - const config = JSON.parse(appToEdit.config); - if (!config.appType || typeof config.appType === "string") { - const typeValue = appToEdit.appType || config.appType; + const config = JSON.parse(appToEdit.config) + if (!config.appType || typeof config.appType === 'string') { + const typeValue = appToEdit.appType || config.appType config.appType = { label: appTypeLabels[typeValue] || typeValue, value: typeValue, - }; + } } // Normalize "Save as Template" configs (IntuneBody format) to form fields if (config.IntuneBody && !config.applicationName) { - const body = config.IntuneBody; - config.applicationName = config.ApplicationName || body.displayName || ""; - config.description = body.description || ""; - config.AssignTo = config.assignTo || "On"; + const body = config.IntuneBody + config.applicationName = config.ApplicationName || body.displayName || '' + config.description = body.description || '' + config.AssignTo = config.assignTo || 'On' // WinGet/Store: packageIdentifier if (body.packageIdentifier) { - config.packagename = body.packageIdentifier; + config.packagename = body.packageIdentifier } // Chocolatey: extract package name from detection rules or install command if (!config.packagename && body.detectionRules?.[0]?.fileOrFolderName) { - config.packagename = body.detectionRules[0].fileOrFolderName; + config.packagename = body.detectionRules[0].fileOrFolderName } if (!config.packagename && body.installCommandLine) { - const match = body.installCommandLine.match(/-Packagename\s+(\S+)/i); - if (match) config.packagename = match[1]; + const match = body.installCommandLine.match(/-Packagename\s+(\S+)/i) + if (match) config.packagename = match[1] } // Chocolatey: custom repo if (body.installCommandLine) { - const repoMatch = body.installCommandLine.match(/-CustomRepo\s+(\S+)/i); - if (repoMatch) config.customRepo = repoMatch[1]; + const repoMatch = body.installCommandLine.match(/-CustomRepo\s+(\S+)/i) + if (repoMatch) config.customRepo = repoMatch[1] } } - formControl.reset({ appType: config.appType }); + formControl.reset({ appType: config.appType }) setTimeout(() => { Object.entries(config).forEach(([key, value]) => { - if (key !== "appType") { - formControl.setValue(key, value); + if (key !== 'appType') { + formControl.setValue(key, value) } - }); - }, 100); - }; + }) + }, 100) + } const handleRemoveApp = (index) => { - setApps((prev) => prev.filter((_, i) => i !== index)); - }; + setApps((prev) => prev.filter((_, i) => i !== index)) + } const getTotalApps = () => { - const currentForm = formControl.getValues(); - const formHasApp = !!currentForm.appType?.value; - return apps.length + (formHasApp ? 1 : 0); - }; + const currentForm = formControl.getValues() + const formHasApp = !!currentForm.appType?.value + return apps.length + (formHasApp ? 1 : 0) + } const handleSaveTemplate = () => { - const templateData = templateFormControl.getValues(); - const currentForm = formControl.getValues(); + const templateData = templateFormControl.getValues() + const currentForm = formControl.getValues() - const allApps = [...apps]; + const allApps = [...apps] if (currentForm.appType?.value) { allApps.push({ appType: currentForm.appType.value, appName: getAppName(currentForm), config: JSON.stringify(currentForm), - }); + }) } - if (!templateData.templateName || allApps.length === 0) return; + if (!templateData.templateName || allApps.length === 0) return const payload = { displayName: templateData.templateName, - description: templateData.templateDescription || "", + description: templateData.templateDescription || '', apps: allApps, - }; + } if (editGUID) { - payload.GUID = editGUID; + payload.GUID = editGUID } saveTemplate.mutate({ - url: "/api/AddAppTemplate", + url: '/api/AddAppTemplate', data: payload, - }); - }; + }) + } const handleClose = () => { - setDrawerVisible(false); - formControl.reset({ appType: null }); - templateFormControl.reset({ templateName: "", templateDescription: "" }); - setApps([]); - setEditGUID(null); - saveTemplate.reset(); - if (onClose) onClose(); - }; + setDrawerVisible(false) + formControl.reset({ appType: null }) + templateFormControl.reset({ templateName: '', templateDescription: '' }) + setApps([]) + setEditGUID(null) + saveTemplate.reset() + if (onClose) onClose() + } return ( <> @@ -276,12 +278,12 @@ export const CippAppTemplateDrawer = ({ )} +
+ + + } + > + + + + + + + + + option, + url: config.listTemplatesUrl, + }} + placeholder="Select a template or enter PowerShell JSON manually" + /> + + + + + + + + + + + + + ); +}; diff --git a/src/components/CippComponents/CippFormTemplateTenantSelector.jsx b/src/components/CippComponents/CippFormTemplateTenantSelector.jsx new file mode 100644 index 000000000000..4ee436723abf --- /dev/null +++ b/src/components/CippComponents/CippFormTemplateTenantSelector.jsx @@ -0,0 +1,146 @@ +import { useEffect, useState } from 'react' +import { CippFormComponent } from './CippFormComponent' +import { ApiGetCall } from '../../api/ApiCall' + +/** + * A tenant selector scoped to the tenants applicable to a given standards template. + * + * - If the template targets AllTenants, all tenants are offered plus an "All Tenants" option. + * - If the template targets tenant groups, each group's members are fetched and offered, + * plus the group itself as a "run for whole group" option. + * - Individual tenant entries are offered directly. + * + * The final value sent to the API will be the tenant's defaultDomainName, a group ID, or + * "allTenants". + */ +export const CippFormTemplateTenantSelector = ({ + formControl, + templateTenants = [], + excludedTenants = [], + name = 'tenantFilter', + label = 'Select Tenant', + placeholder = 'Select a tenant, group, or All Tenants...', + required = true, + ...other +}) => { + // Build a set of excluded values for fast lookup + const excludedValues = new Set( + excludedTenants.map((t) => (typeof t === 'object' ? t?.value : t)).filter(Boolean) + ) + const isExcluded = (value) => excludedValues.has(value) + const [options, setOptions] = useState([]) + + // Determine what the template targets + const hasAllTenants = templateTenants.some( + (t) => t?.value === 'AllTenants' || t?.value === 'allTenants' + ) + const groupIds = templateTenants.filter((t) => t?.type === 'Group').map((t) => t.value) + const individualTenants = templateTenants.filter( + (t) => t?.type !== 'Group' && t?.value !== 'AllTenants' && t?.value !== 'allTenants' + ) + + // Fetch all tenants when AllTenants is targeted + const allTenantList = ApiGetCall({ + url: '/api/ListTenants?AllTenantSelector=true', + queryKey: 'ListTenants-TemplateTenantSelector', + waiting: hasAllTenants, + }) + + // Fetch each group's members (one request per group) + const groupRequests = groupIds.map((id) => + // eslint-disable-next-line react-hooks/rules-of-hooks + ApiGetCall({ + url: `/api/ListTenantGroups?groupId=${id}`, + queryKey: `TenantGroup-${id}`, + waiting: groupIds.length > 0, + }) + ) + + useEffect(() => { + const built = [{ label: 'All Tenants in Template', value: 'allTenants', group: 'All Tenants' }] + + if (hasAllTenants) { + if (allTenantList.isSuccess && Array.isArray(allTenantList.data)) { + allTenantList.data.forEach((tenant) => { + if (isExcluded(tenant.defaultDomainName)) return + built.push({ + label: `${tenant.displayName} (${tenant.defaultDomainName})`, + value: tenant.defaultDomainName, + group: 'Individual Tenants', + }) + }) + } + } + + groupRequests.forEach((req, idx) => { + const groupId = groupIds[idx] + const groupEntry = templateTenants.find((t) => t.value === groupId) + const groupName = groupEntry?.label ?? groupId + + if (req.isSuccess) { + const results = Array.isArray(req.data?.Results) + ? req.data.Results + : Array.isArray(req.data) + ? req.data + : [] + const matchedGroup = results.find((g) => g.Id === groupId) ?? results[0] + + if (matchedGroup) { + // Individual members only — group itself is not selectable + const members = Array.isArray(matchedGroup.Members) ? matchedGroup.Members : [] + members.forEach((m) => { + if (isExcluded(m.defaultDomainName)) return + built.push({ + label: `${m.displayName ?? m.defaultDomainName} (${m.defaultDomainName})`, + value: m.defaultDomainName, + group: matchedGroup.Name ?? groupName, + }) + }) + } + } + }) + + // Individual tenant entries from the template + individualTenants.forEach((t) => { + if (isExcluded(t.value)) return + if (!built.some((b) => b.value === t.value)) { + built.push({ + label: t.label ?? t.value, + value: t.value, + group: 'Individual Tenants', + }) + } + }) + + setOptions(built) + }, [ + hasAllTenants, + allTenantList.isSuccess, + allTenantList.data, + ...groupRequests.map((r) => r.isSuccess), + ...groupRequests.map((r) => r.data), + ]) + + const isFetching = + (hasAllTenants && allTenantList.isFetching) || groupRequests.some((r) => r.isFetching) + + return ( + option.group} + validators={ + required ? { required: { value: true, message: 'Please select a tenant' } } : undefined + } + {...other} + /> + ) +} diff --git a/src/components/CippComponents/CippHVEUserDrawer.jsx b/src/components/CippComponents/CippHVEUserDrawer.jsx index 3c4ba53ca852..56505c0f18dd 100644 --- a/src/components/CippComponents/CippHVEUserDrawer.jsx +++ b/src/components/CippComponents/CippHVEUserDrawer.jsx @@ -98,7 +98,8 @@ export const CippHVEUserDrawer = ({ HVE SMTP Configuration Settings:
  • - Server: smtp-hve.office365.com + Server: smtp.hve.mx.microsoft (recommended) or + smtp-hve.office365.com (deprecated)
  • Port: 587 @@ -109,9 +110,12 @@ export const CippHVEUserDrawer = ({
  • TLS Support: TLS 1.2 and TLS 1.3
    • +
  • + Authentication: HVE account credentials or OAuth token +
    • - Use these settings to configure your email client for HVE access. + Use these settings to configure your application or device for HVE access. diff --git a/src/components/CippComponents/CippIntunePolicyActions.jsx b/src/components/CippComponents/CippIntunePolicyActions.jsx index 531245e94625..09faf1efebf5 100644 --- a/src/components/CippComponents/CippIntunePolicyActions.jsx +++ b/src/components/CippComponents/CippIntunePolicyActions.jsx @@ -1,15 +1,15 @@ -import { Book, LaptopChromebook } from "@mui/icons-material"; -import { GlobeAltIcon, TrashIcon, UserIcon, UserGroupIcon } from "@heroicons/react/24/outline"; +import { Book, LaptopChromebook } from '@mui/icons-material' +import { GlobeAltIcon, TrashIcon, UserIcon, UserGroupIcon } from '@heroicons/react/24/outline' const assignmentModeOptions = [ - { label: "Replace existing assignments", value: "replace" }, - { label: "Append to existing assignments", value: "append" }, -]; + { label: 'Replace existing assignments', value: 'replace' }, + { label: 'Append to existing assignments', value: 'append' }, +] const assignmentFilterTypeOptions = [ - { label: "Include - Apply policy to devices matching filter", value: "include" }, - { label: "Exclude - Apply policy to devices NOT matching filter", value: "exclude" }, -]; + { label: 'Include - Apply policy to devices matching filter', value: 'include' }, + { label: 'Exclude - Apply policy to devices NOT matching filter', value: 'exclude' }, +] /** * Get assignment actions for Intune policies @@ -30,184 +30,191 @@ export const useCippIntunePolicyActions = (tenant, policyType, options = {}) => includeDelete = true, deleteUrlName = policyType, templateData = null, - } = options; + } = options const getAssignmentFields = () => [ { - type: "radio", - name: "assignmentMode", - label: "Assignment mode", + type: 'radio', + name: 'assignmentMode', + label: 'Assignment mode', options: assignmentModeOptions, - defaultValue: "replace", + defaultValue: 'replace', helperText: - "Replace will overwrite existing assignments. Append keeps current assignments and adds/overwrites only for the selected groups.", + 'Replace will overwrite existing assignments. Append keeps current assignments and adds/overwrites only for the selected groups.', }, { - type: "autoComplete", - name: "assignmentFilter", - label: "Assignment Filter (Optional)", + type: 'autoComplete', + name: 'assignmentFilter', + label: 'Assignment Filter (Optional)', multiple: false, creatable: false, api: { - url: "/api/ListAssignmentFilters", + url: '/api/ListAssignmentFilters', queryKey: `ListAssignmentFilters-${tenant}`, labelField: (filter) => filter.displayName, - valueField: "displayName", + valueField: 'displayName', }, }, { - type: "radio", - name: "assignmentFilterType", - label: "Assignment Filter Mode", + type: 'radio', + name: 'assignmentFilterType', + label: 'Assignment Filter Mode', options: assignmentFilterTypeOptions, - defaultValue: "include", - helperText: "Choose whether to include or exclude devices matching the filter.", + defaultValue: 'include', + helperText: 'Choose whether to include or exclude devices matching the filter.', }, - ]; + { + type: 'textField', + name: 'excludeGroup', + label: 'Exclude Group Names separated by comma. Wildcards (*) are allowed', + }, + ] const getCustomDataFormatter = (assignTo) => (row, action, formData) => { - const rows = Array.isArray(row) ? row : [row]; + const rows = Array.isArray(row) ? row : [row] return rows.map((item) => ({ - tenantFilter: tenant === "AllTenants" && item?.Tenant ? item.Tenant : tenant, + tenantFilter: tenant === 'AllTenants' && item?.Tenant ? item.Tenant : tenant, ID: item?.id, type: item?.URLName || policyType, ...(platformType && { platformType }), AssignTo: assignTo, - assignmentMode: formData?.assignmentMode || "replace", + assignmentMode: formData?.assignmentMode || 'replace', + excludeGroup: formData?.excludeGroup || null, AssignmentFilterName: formData?.assignmentFilter?.value || null, AssignmentFilterType: formData?.assignmentFilter?.value - ? formData?.assignmentFilterType || "include" + ? formData?.assignmentFilterType || 'include' : null, - })); - }; + })) + } const getCustomDataFormatterForGroups = () => (row, action, formData) => { - const rows = Array.isArray(row) ? row : [row]; - const selectedGroups = Array.isArray(formData?.groupTargets) ? formData.groupTargets : []; + const rows = Array.isArray(row) ? row : [row] + const selectedGroups = Array.isArray(formData?.groupTargets) ? formData.groupTargets : [] return rows.map((item) => ({ - tenantFilter: tenant === "AllTenants" && item?.Tenant ? item.Tenant : tenant, + tenantFilter: tenant === 'AllTenants' && item?.Tenant ? item.Tenant : tenant, ID: item?.id, type: item?.URLName || policyType, ...(platformType && { platformType }), GroupIds: selectedGroups.map((group) => group.value).filter(Boolean), GroupNames: selectedGroups.map((group) => group.label).filter(Boolean), - assignmentMode: formData?.assignmentMode || "replace", + assignmentMode: formData?.assignmentMode || 'replace', + excludeGroup: formData?.excludeGroup || null, AssignmentFilterName: formData?.assignmentFilter?.value || null, AssignmentFilterType: formData?.assignmentFilter?.value - ? formData?.assignmentFilterType || "include" + ? formData?.assignmentFilterType || 'include' : null, - })); - }; + })) + } - const actions = []; + const actions = [] // Create template action if (includeCreateTemplate) { actions.push({ - label: "Create template based on policy", - type: "POST", - url: "/api/AddIntuneTemplate", + label: 'Create template based on policy', + type: 'POST', + url: '/api/AddIntuneTemplate', data: templateData || { - ID: "id", - URLName: policyType === "URLName" ? "URLName" : policyType, + ID: 'id', + URLName: policyType === 'URLName' ? 'URLName' : policyType, }, - confirmText: "Are you sure you want to create a template based on this policy?", + confirmText: 'Are you sure you want to create a template based on this policy?', icon: , - color: "info", + color: 'info', multiPost: false, - }); + }) } // Assign to All Users actions.push({ - label: "Assign to All Users", - type: "POST", - url: "/api/ExecAssignPolicy", + label: 'Assign to All Users', + type: 'POST', + url: '/api/ExecAssignPolicy', data: { - AssignTo: "allLicensedUsers", - ID: "id", - type: policyType === "URLName" ? "URLName" : policyType, - ...(platformType && { platformType: "!deviceAppManagement" }), + AssignTo: 'allLicensedUsers', + ID: 'id', + type: policyType === 'URLName' ? 'URLName' : policyType, + ...(platformType && { platformType: '!deviceAppManagement' }), }, multiPost: false, fields: getAssignmentFields(), - customDataformatter: getCustomDataFormatter("allLicensedUsers"), + customDataformatter: getCustomDataFormatter('allLicensedUsers'), confirmText: 'Are you sure you want to assign "[displayName]" to all users?', icon: , - color: "info", - }); + color: 'info', + }) // Assign to All Devices actions.push({ - label: "Assign to All Devices", - type: "POST", - url: "/api/ExecAssignPolicy", + label: 'Assign to All Devices', + type: 'POST', + url: '/api/ExecAssignPolicy', data: { - AssignTo: "AllDevices", - ID: "id", - type: policyType === "URLName" ? "URLName" : policyType, - ...(platformType && { platformType: "!deviceAppManagement" }), + AssignTo: 'AllDevices', + ID: 'id', + type: policyType === 'URLName' ? 'URLName' : policyType, + ...(platformType && { platformType: '!deviceAppManagement' }), }, multiPost: false, fields: getAssignmentFields(), - customDataformatter: getCustomDataFormatter("AllDevices"), + customDataformatter: getCustomDataFormatter('AllDevices'), confirmText: 'Are you sure you want to assign "[displayName]" to all devices?', icon: , - color: "info", - }); + color: 'info', + }) // Assign Globally (All Users / All Devices) actions.push({ - label: "Assign Globally (All Users / All Devices)", - type: "POST", - url: "/api/ExecAssignPolicy", + label: 'Assign Globally (All Users / All Devices)', + type: 'POST', + url: '/api/ExecAssignPolicy', data: { - AssignTo: "AllDevicesAndUsers", - ID: "id", - type: policyType === "URLName" ? "URLName" : policyType, - ...(platformType && { platformType: "!deviceAppManagement" }), + AssignTo: 'AllDevicesAndUsers', + ID: 'id', + type: policyType === 'URLName' ? 'URLName' : policyType, + ...(platformType && { platformType: '!deviceAppManagement' }), }, multiPost: false, fields: getAssignmentFields(), - customDataformatter: getCustomDataFormatter("AllDevicesAndUsers"), + customDataformatter: getCustomDataFormatter('AllDevicesAndUsers'), confirmText: 'Are you sure you want to assign "[displayName]" to all users and devices?', icon: , - color: "info", - }); + color: 'info', + }) // Assign to Custom Group actions.push({ - label: "Assign to Custom Group", - type: "POST", - url: "/api/ExecAssignPolicy", + label: 'Assign to Custom Group', + type: 'POST', + url: '/api/ExecAssignPolicy', icon: , - color: "info", + color: 'info', confirmText: 'Select the target groups for "[displayName]".', multiPost: false, fields: [ { - type: "autoComplete", - name: "groupTargets", - label: "Group(s)", + type: 'autoComplete', + name: 'groupTargets', + label: 'Group(s)', multiple: true, creatable: false, allowResubmit: true, - validators: { required: "Please select at least one group" }, + validators: { required: 'Please select at least one group' }, api: { - url: "/api/ListGraphRequest", - dataKey: "Results", + url: '/api/ListGraphRequest', + dataKey: 'Results', queryKey: `ListPolicyAssignmentGroups-${tenant}`, labelField: (group) => group.id ? `${group.displayName} (${group.id})` : group.displayName, - valueField: "id", + valueField: 'id', addedField: { - description: "description", + description: 'description', }, data: { - Endpoint: "groups", + Endpoint: 'groups', manualPagination: true, - $select: "id,displayName,description", - $orderby: "displayName", + $select: 'id,displayName,description', + $orderby: 'displayName', $top: 999, $count: true, }, @@ -216,23 +223,23 @@ export const useCippIntunePolicyActions = (tenant, policyType, options = {}) => ...getAssignmentFields(), ], customDataformatter: getCustomDataFormatterForGroups(), - }); + }) // Delete action if (includeDelete) { actions.push({ - label: "Delete Policy", - type: "POST", - url: "/api/RemovePolicy", + label: 'Delete Policy', + type: 'POST', + url: '/api/RemovePolicy', data: { - ID: "id", - URLName: deleteUrlName === "URLName" ? "URLName" : deleteUrlName, + ID: 'id', + URLName: deleteUrlName === 'URLName' ? 'URLName' : deleteUrlName, }, - confirmText: "Are you sure you want to delete this policy?", + confirmText: 'Are you sure you want to delete this policy?', icon: , - color: "danger", - }); + color: 'danger', + }) } - return actions; -}; + return actions +} diff --git a/src/components/CippComponents/CippIntunePolicyDetails.jsx b/src/components/CippComponents/CippIntunePolicyDetails.jsx new file mode 100644 index 000000000000..b1820e1c47b8 --- /dev/null +++ b/src/components/CippComponents/CippIntunePolicyDetails.jsx @@ -0,0 +1,64 @@ +import { Alert, CircularProgress, Stack, Typography } from '@mui/material' +import { ApiGetCall } from '../../api/ApiCall' +import CippJsonView from '../CippFormPages/CippJSONView' + +export const CippIntunePolicyDetails = ({ row, tenant }) => { + const isConfigurationPolicy = row?.URLName?.toLowerCase() === 'configurationpolicies' + const isAdministrativeTemplate = row?.URLName?.toLowerCase() === 'grouppolicyconfigurations' + const isSupportedPolicyType = isConfigurationPolicy || isAdministrativeTemplate + const urlName = isAdministrativeTemplate ? 'groupPolicyConfigurations' : 'configurationPolicies' + const policyTypeLabel = isAdministrativeTemplate ? 'Administrative Template' : 'Settings Catalog' + const tenantFilter = tenant === 'AllTenants' && row?.Tenant ? row.Tenant : tenant + + const policyDetails = ApiGetCall({ + url: '/api/ListIntunePolicy', + queryKey: `ListIntunePolicyDetails-${urlName}-${tenantFilter}-${row?.id}`, + data: { + TenantFilter: tenantFilter, + ID: row?.id, + URLName: urlName, + IncludeSettingDefinitions: true, + }, + waiting: Boolean(isSupportedPolicyType && tenantFilter && row?.id), + retry: 1, + refetchOnWindowFocus: false, + toast: false, + }) + + if (!isSupportedPolicyType) { + return null + } + + const details = Array.isArray(policyDetails.data) ? policyDetails.data[0] : policyDetails.data + const fallbackDetails = row?.settings || row?.definitionValues ? row : null + const settingsObject = details?.settings || details?.definitionValues ? details : fallbackDetails + + if (policyDetails.isLoading || policyDetails.isFetching) { + return ( + + + + Loading policy details and Microsoft descriptions... + + + ) + } + + if (policyDetails.isError && !settingsObject) { + return ( + + Could not load live {policyTypeLabel} details for this policy. + + ) + } + + if (!settingsObject) { + return ( + + This {policyTypeLabel} policy did not return any settings. + + ) + } + + return +} diff --git a/src/components/CippComponents/CippNotificationForm.jsx b/src/components/CippComponents/CippNotificationForm.jsx index 03ecce096ec9..f2f74b19d7f1 100644 --- a/src/components/CippComponents/CippNotificationForm.jsx +++ b/src/components/CippComponents/CippNotificationForm.jsx @@ -42,6 +42,7 @@ export const CippNotificationForm = ({ { label: "Adding a group", value: "AddGroup" }, { label: "Adding a tenant", value: "NewTenant" }, { label: "Executing the offboard wizard", value: "ExecOffboardUser" }, + { label: "Custom Test Alerts", value: "CustomTests" }, ]; const severityTypes = [ diff --git a/src/components/CippComponents/CippOffboardingDefaultSettings.jsx b/src/components/CippComponents/CippOffboardingDefaultSettings.jsx index 7ad68f3b74cb..5b6189ad2a7c 100644 --- a/src/components/CippComponents/CippOffboardingDefaultSettings.jsx +++ b/src/components/CippComponents/CippOffboardingDefaultSettings.jsx @@ -1,41 +1,41 @@ -import { CippPropertyListCard } from "../../components/CippCards/CippPropertyListCard"; -import CippFormComponent from "../../components/CippComponents/CippFormComponent"; -import { Typography, Box } from "@mui/material"; +import { CippPropertyListCard } from '../../components/CippCards/CippPropertyListCard' +import CippFormComponent from '../../components/CippComponents/CippFormComponent' +import { Typography, Box } from '@mui/material' export const CippOffboardingDefaultSettings = (props) => { - const { formControl, defaultsSource = null, title = "Offboarding Default Settings" } = props; - + const { formControl, defaultsSource = null, title = 'Offboarding Default Settings' } = props + const getSourceIndicator = () => { // Only show the indicator if defaultsSource is explicitly provided (for wizard, not tenant config) - if (!defaultsSource || defaultsSource === null) return null; - - let sourceText = ""; - let color = "text.secondary"; - + if (!defaultsSource || defaultsSource === null) return null + + let sourceText = '' + let color = 'text.secondary' + switch (defaultsSource) { - case "tenant": - sourceText = "Using Tenant Defaults"; - color = "primary.main"; - break; - case "user": - sourceText = "Using User Defaults"; - color = "info.main"; - break; - case "none": + case 'tenant': + sourceText = 'Using Tenant Defaults' + color = 'primary.main' + break + case 'user': + sourceText = 'Using User Defaults' + color = 'info.main' + break + case 'none': default: - sourceText = "Using Default Settings"; - color = "text.secondary"; - break; + sourceText = 'Using Default Settings' + color = 'text.secondary' + break } - + return ( - + {sourceText} - ); - }; + ) + } return ( <> @@ -45,178 +45,188 @@ export const CippOffboardingDefaultSettings = (props) => { showDivider={false} title={title} propertyItems={[ - { - label: "Convert to Shared Mailbox", - value: ( - - ), - }, - { - label: "Remove from all groups", - value: ( - - ), - }, - { - label: "Hide from Global Address List", - value: ( - - ), - }, - { - label: "Remove Licenses", - value: ( - - ), - }, - { - label: "Cancel all calendar invites", - value: ( - - ), - }, - { - label: "Revoke all sessions", - value: ( - - ), - }, - { - label: "Remove users mailbox permissions", - value: ( - - ), - }, - { - label: "Remove users calendar permissions", - value: ( - - ), - }, - { - label: "Remove all Rules", - value: ( - - ), - }, - { - label: "Reset Password", - value: ( - - ), - }, - { - label: "Keep copy of forwarded mail in source mailbox", - value: ( - - ), - }, - { - label: "Delete user", - value: ( - - ), - }, - { - label: "Remove all Mobile Devices", - value: ( - - ), - }, - { - label: "Disable Sign in", - value: ( - - ), - }, - { - label: "Remove all MFA Devices", - value: ( - - ), - }, - { - label: "Remove Teams Phone DID", - value: ( - - ), - }, - { - label: "Clear Immutable ID", - value: ( - - ), - }, - ]} - /> + { + label: 'Convert to Shared Mailbox', + value: ( + + ), + }, + { + label: 'Remove from all groups', + value: ( + + ), + }, + { + label: 'Hide from Global Address List', + value: ( + + ), + }, + { + label: 'Remove Licenses', + value: ( + + ), + }, + { + label: 'Cancel all calendar invites', + value: ( + + ), + }, + { + label: 'Revoke all sessions', + value: ( + + ), + }, + { + label: 'Remove users mailbox permissions', + value: ( + + ), + }, + { + label: 'Remove users calendar permissions', + value: ( + + ), + }, + { + label: 'Remove all Rules', + value: ( + + ), + }, + { + label: 'Reset Password', + value: ( + + ), + }, + { + label: 'Keep copy of forwarded mail in source mailbox', + value: ( + + ), + }, + { + label: 'Delete user', + value: ( + + ), + }, + { + label: 'Remove all Mobile Devices', + value: ( + + ), + }, + { + label: 'Disable Sign in', + value: ( + + ), + }, + { + label: 'Remove all MFA Devices', + value: ( + + ), + }, + { + label: 'Remove Teams Phone DID', + value: ( + + ), + }, + { + label: 'Clear Immutable ID', + value: ( + + ), + }, + { + label: 'Disable OneDrive Sharing Links', + value: ( + + ), + }, + ]} + /> - ); -}; + ) +} diff --git a/src/components/CippComponents/CippPolicyDeployDrawer.jsx b/src/components/CippComponents/CippPolicyDeployDrawer.jsx index 3810581daea9..ad695d39cace 100644 --- a/src/components/CippComponents/CippPolicyDeployDrawer.jsx +++ b/src/components/CippComponents/CippPolicyDeployDrawer.jsx @@ -201,6 +201,21 @@ export const CippPolicyDeployDrawer = ({ /> + + + + + { + setCacheOverride((prev) => { + const previousValue = prev.tenant === currentTenant ? prev.value : defaultCached; + const nextValue = + typeof valueOrUpdater === "function" ? valueOrUpdater(previousValue) : valueOrUpdater; + + return { tenant: currentTenant, value: nextValue }; + }); + }, + [currentTenant, defaultCached], + ); + + // Whether the toggle is actually clickable + const canToggle = allowToggle && !isAllTenants + + // Resolved API URL — append UseReportDB param when cached + const resolvedApiUrl = useMemo(() => { + if (!useReportDB) return apiUrl + const sep = apiUrl.includes('?') ? '&' : '?' + return `${apiUrl}${sep}UseReportDB=true` + }, [apiUrl, useReportDB]) + + // Keep mode flag in the URL only; CippTablePage merges apiData into query params. + const resolvedApiData = useMemo(() => { + if (!extraApiData) return undefined + return { + ...extraApiData, + } + }, [extraApiData]) + + // Query key that includes tenant + mode for proper cache separation + const resolvedQueryKey = useMemo(() => { + return `${queryKey}-${currentTenant}-${useReportDB}` + }, [queryKey, currentTenant, useReportDB]) + + // Extra columns to show when in cached mode + const extraColumns = useMemo(() => { + const cols = [] + if (useReportDB && isAllTenants) { + cols.push(tenantColumn) + } + if (useReportDB) { + cols.push(...cacheColumns) + } + return cols + }, [useReportDB, isAllTenants, tenantColumn, cacheColumns]) + + const handleSyncSuccess = useCallback((result) => { + if (result?.Metadata?.QueueId) { + setSyncQueueId(result.Metadata.QueueId) + } + }, []) + + // Tooltip text + const tooltipText = !allowToggle + ? 'This page always uses cached data from the CIPP reporting database.' + : isAllTenants + ? 'AllTenants always uses cached data' + : useReportDB + ? 'Showing cached data — click to switch to live' + : 'Showing live data — click to switch to cache' + + const confirmText = + syncConfirmText || + `Run ${cacheName} cache sync for ${currentTenant}? This will update data immediately.` + + // The controls JSX + const controls = ( + + {useReportDB && ( + <> + + + + )} + + + : } + label={useReportDB ? 'Cached' : 'Live'} + color="primary" + size="small" + onClick={canToggle ? () => setUseReportDB((prev) => !prev) : undefined} + clickable={canToggle} + disabled={!canToggle} + variant="outlined" + /> + + + + ) + + // The sync dialog JSX — render alongside the table page + const syncDialogElement = ( + + ) + + return { + useReportDB, + setUseReportDB, + isAllTenants, + resolvedApiUrl, + resolvedApiData, + resolvedQueryKey, + cacheColumns: extraColumns, + controls, + syncDialog: syncDialogElement, + } +} diff --git a/src/components/CippComponents/CippTemplateFieldRenderer.jsx b/src/components/CippComponents/CippTemplateFieldRenderer.jsx index 1757e400acda..8ecef26973eb 100644 --- a/src/components/CippComponents/CippTemplateFieldRenderer.jsx +++ b/src/components/CippComponents/CippTemplateFieldRenderer.jsx @@ -244,11 +244,43 @@ const CippTemplateFieldRenderer = ({ React.useEffect(() => { if (templateData && formControl) { const processedData = parseIntuneRawJson(templateData); - const formValues = {}; + // Recursively strip null values, empty arrays, empty strings, + // and @odata / Graph metadata keys so they don't create blank + // form fields or phantom sections in the builder. + const stripEmpty = (obj) => { + if (obj === null || obj === undefined) return undefined; + if (typeof obj === "string" && obj.trim() === "") return undefined; + if (Array.isArray(obj)) { + const filtered = obj + .map(stripEmpty) + .filter((v) => v !== undefined && v !== null); + return filtered.length > 0 ? filtered : undefined; + } + if (typeof obj === "object") { + const result = {}; + let hasContent = false; + for (const [k, v] of Object.entries(obj)) { + // Drop @odata annotations and Graph metadata + if (k.includes("@odata") || k.startsWith("#")) continue; + const cleaned = stripEmpty(v); + if (cleaned !== undefined) { + result[k] = cleaned; + hasContent = true; + } + } + return hasContent ? result : undefined; + } + return obj; + }; + + const formValues = {}; Object.keys(processedData).forEach((key) => { if (!isFieldBlacklisted(key)) { - formValues[key] = processedData[key]; + const cleaned = stripEmpty(processedData[key]); + if (cleaned !== undefined) { + formValues[key] = cleaned; + } } }); formControl.reset(formValues); @@ -258,6 +290,10 @@ const CippTemplateFieldRenderer = ({ const renderFormField = (key, value, path = "") => { const fieldPath = path ? `${path}.${key}` : key; + // Skip null/undefined values and @odata / metadata keys + if (value === null || value === undefined) return null; + if (key.includes("@odata") || key.startsWith("#")) return null; + if (isFieldBlacklisted(key)) { return null; } @@ -776,12 +812,16 @@ const CippTemplateFieldRenderer = ({ {priorityFields.map( (fieldName) => processedData[fieldName] !== undefined && + processedData[fieldName] !== null && renderFormField(fieldName, processedData[fieldName]) )} {/* Render all other fields except priority fields */} {Object.entries(processedData) - .filter(([key]) => !priorityFields.includes(key)) + .filter( + ([key, value]) => + !priorityFields.includes(key) && value !== null && value !== undefined + ) .map(([key, value]) => renderFormField(key, value))} ); diff --git a/src/components/CippComponents/CippTenantAllowBlockListTemplateDrawer.jsx b/src/components/CippComponents/CippTenantAllowBlockListTemplateDrawer.jsx index cc0ecf78b506..0e28dce6d188 100644 --- a/src/components/CippComponents/CippTenantAllowBlockListTemplateDrawer.jsx +++ b/src/components/CippComponents/CippTenantAllowBlockListTemplateDrawer.jsx @@ -23,13 +23,41 @@ export const CippTenantAllowBlockListTemplateDrawer = ({ buttonText = 'Add Template', requiredPermissions = [], PermissionButton = Button, + editData = null, + drawerVisible: controlledDrawerVisible, + setDrawerVisible: controlledSetDrawerVisible, }) => { - const [drawerVisible, setDrawerVisible] = useState(false) + const [internalDrawerVisible, internalSetDrawerVisible] = useState(false) + const drawerVisible = + controlledDrawerVisible !== undefined ? controlledDrawerVisible : internalDrawerVisible + const setDrawerVisible = + controlledSetDrawerVisible !== undefined ? controlledSetDrawerVisible : internalSetDrawerVisible + + const isEditMode = !!editData + const formControl = useForm({ mode: 'onChange', defaultValues, }) + useEffect(() => { + if (editData && drawerVisible) { + formControl.reset({ + templateName: editData.templateName || '', + entries: Array.isArray(editData.entries) + ? editData.entries.join(', ') + : editData.entries || '', + notes: editData.notes || '', + listType: editData.listType ? { label: editData.listType, value: editData.listType } : null, + listMethod: editData.listMethod + ? { label: editData.listMethod, value: editData.listMethod } + : null, + NoExpiration: editData.NoExpiration || false, + RemoveAfter: editData.RemoveAfter || false, + }) + } + }, [editData, drawerVisible, formControl]) + const { isValid } = useFormState({ control: formControl.control }) const noExpiration = useWatch({ control: formControl.control, name: 'NoExpiration' }) @@ -197,10 +225,18 @@ export const CippTenantAllowBlockListTemplateDrawer = ({ RemoveAfter: values.RemoveAfter, } - saveTemplate.mutate({ - url: '/api/AddTenantAllowBlockListTemplate', - data: payload, - }) + if (isEditMode && editData?.GUID) { + payload.GUID = editData.GUID + saveTemplate.mutate({ + url: '/api/EditTenantAllowBlockListTemplate', + data: payload, + }) + } else { + saveTemplate.mutate({ + url: '/api/AddTenantAllowBlockListTemplate', + data: payload, + }) + } }) const handleCloseDrawer = () => { @@ -210,16 +246,22 @@ export const CippTenantAllowBlockListTemplateDrawer = ({ return ( <> - setDrawerVisible(true)} - startIcon={} - > - {buttonText} - + {!isEditMode && controlledDrawerVisible === undefined && ( + setDrawerVisible(true)} + startIcon={} + > + {buttonText} + + )} + ) : isSuccess ? ( + + ) : isError ? ( + + ) : null} + + + ) +} diff --git a/src/components/CippComponents/SsoMigrationDialog.jsx b/src/components/CippComponents/SsoMigrationDialog.jsx new file mode 100644 index 000000000000..fe184c40cd72 --- /dev/null +++ b/src/components/CippComponents/SsoMigrationDialog.jsx @@ -0,0 +1,137 @@ +import { useCallback, useEffect, useState } from 'react' +import { + Alert, + Button, + CircularProgress, + Dialog, + DialogActions, + DialogContent, + DialogTitle, + FormControlLabel, + Switch, + Typography, +} from '@mui/material' +import { ApiGetCall, ApiPostCall } from '../../api/ApiCall' + +const DISMISS_KEY = 'cipp_sso_migration_dismissed' + +export const SsoMigrationDialog = () => { + const [open, setOpen] = useState(false) + const [multiTenant, setMultiTenant] = useState(false) + const [submitted, setSubmitted] = useState(false) + + const currentRole = ApiGetCall({ + url: '/api/me', + queryKey: 'authmecipp', + }) + + const ssoSetup = ApiPostCall({ + relatedQueryKeys: 'authmecipp', + }) + + const permissions = currentRole.data?.permissions || [] + const ssoMigration = currentRole.data?.ssoMigration + const hasPermission = permissions.includes('CIPP.AppSettings.ReadWrite') + + useEffect(() => { + if (!currentRole.isSuccess || !hasPermission || !ssoMigration) return + if (ssoMigration.status !== 'none') return + + const dismissed = localStorage.getItem(DISMISS_KEY) + if (dismissed === 'true') return + + setOpen(true) + }, [currentRole.isSuccess, hasPermission, ssoMigration]) + + const handleApprove = useCallback(() => { + setSubmitted(true) + ssoSetup.mutate({ + url: '/api/ExecSSOSetup', + data: { + Action: 'Create', + multiTenant, + }, + }) + }, [multiTenant, ssoSetup]) + + const handleDismiss = useCallback(() => { + localStorage.setItem(DISMISS_KEY, 'true') + setOpen(false) + }, []) + + const handleClose = useCallback(() => { + setOpen(false) + }, []) + + const result = ssoSetup.data?.data?.Results ?? ssoSetup.data?.Results + const isSuccess = result?.severity === 'success' + const isError = ssoSetup.isError || result?.severity === 'failed' + + return ( + + Prepare for CIPP Single Sign-On + + {!submitted ? ( + <> + + CIPP will soon be moving to a dedicated Single Sign-On model, giving you full control + over Conditional Access policies, MFA requirements, and session management for your + CIPP users. + + + To get ready, CIPP needs to create an app registration in your tenant called{' '} + CIPP-SSO with minimal permissions (OpenID, Profile, Email only). + This won't change how you log in today — it just prepares your tenant for when + the update rolls out. + + + Review the options below and click "Create App Registration" to get set up + ahead of time. + + + setMultiTenant(e.target.checked)} /> + } + label="Multi-tenant mode (allow users from multiple Entra ID tenants to log in)" + sx={{ mb: 1 }} + /> + + ) : ssoSetup.isPending ? ( + <> + + Creating CIPP-SSO app registration... + + ) : isSuccess ? ( + + {result.message} + + ) : isError ? ( + + {result?.message || ssoSetup.error?.message || 'SSO setup failed. It will be retried automatically.'} + + ) : null} + + + {!submitted ? ( + <> + + + + ) : ( + + )} + + + ) +} diff --git a/src/components/CippFormPages/CippAddEditUser.jsx b/src/components/CippFormPages/CippAddEditUser.jsx index a3dfde804c1c..1e4ac2353fd8 100644 --- a/src/components/CippFormPages/CippAddEditUser.jsx +++ b/src/components/CippFormPages/CippAddEditUser.jsx @@ -10,7 +10,7 @@ import { Grid } from '@mui/system' import { ApiGetCall } from '../../api/ApiCall' import { useSettings } from '../../hooks/use-settings' import { useWatch } from 'react-hook-form' -import { useEffect, useMemo, useState } from 'react' +import { useEffect, useMemo, useRef, useState } from 'react' import { useRouter } from 'next/router' import { Sync } from '@mui/icons-material' @@ -83,7 +83,34 @@ const CippAddEditUser = (props) => { return [] }, [tenantGroups.isSuccess, userGroups.isSuccess, tenantGroups.data, userGroups.data]) - const watcher = useWatch({ control: formControl.control }) + const watcher = useWatch({ + control: formControl.control, + name: ['givenName', 'surname', 'userTemplate', 'AddToGroups'], + }) + + // Debounce givenName/surname so auto-generated displayName/username + // don't trigger setValue on every keystroke + const rawGivenName = watcher[0] + const rawSurname = watcher[1] + const [debouncedName, setDebouncedName] = useState({ + givenName: rawGivenName, + surname: rawSurname, + }) + const debounceRef = useRef(null) + useEffect(() => { + debounceRef.current = setTimeout(() => { + setDebouncedName({ givenName: rawGivenName, surname: rawSurname }) + }, 250) + return () => clearTimeout(debounceRef.current) + }, [rawGivenName, rawSurname]) + + // useWatch with a name array returns values in the same order + const watchedFields = { + givenName: debouncedName.givenName, + surname: debouncedName.surname, + userTemplate: watcher[2], + AddToGroups: watcher[3], + } // Helper function to generate username from template format const generateUsername = ( @@ -100,14 +127,22 @@ const CippAddEditUser = (props) => { let username = formatString - // Replace %FirstName[n]% patterns (extract first n characters) + // Replace %FirstName[n]% patterns (extract first n characters per word) username = username.replace(/%FirstName\[(\d+)\]%/gi, (match, num) => { - return firstName.substring(0, parseInt(num)) + const n = parseInt(num) + return firstName + .split(/\s+/) + .map((word) => word.substring(0, n)) + .join('') }) - // Replace %LastName[n]% patterns (extract first n characters) + // Replace %LastName[n]% patterns (extract first n characters per word) username = username.replace(/%LastName\[(\d+)\]%/gi, (match, num) => { - return lastName.substring(0, parseInt(num)) + const n = parseInt(num) + return lastName + .split(/\s+/) + .map((word) => word.substring(0, n)) + .join('') }) // Replace %FirstName% and %LastName% @@ -142,11 +177,11 @@ const CippAddEditUser = (props) => { useEffect(() => { //if watch.firstname changes, and watch.lastname changes, set displayname to firstname + lastname - if (watcher.givenName && watcher.surname && formType === 'add') { + if (watchedFields.givenName && watchedFields.surname && formType === 'add') { // Only auto-set display name if user hasn't manually changed it if (!displayNameManuallySet) { // Build base display name from first and last name - let displayName = `${watcher.givenName} ${watcher.surname}` + let displayName = `${watchedFields.givenName} ${watchedFields.surname}` // Add template displayName as suffix if it exists if (selectedTemplate?.displayName) { @@ -181,8 +216,8 @@ const CippAddEditUser = (props) => { const generatedUsername = generateUsername( formatString, - watcher.givenName, - watcher.surname, + watchedFields.givenName, + watchedFields.surname, spaceHandling, spaceReplacement ) @@ -192,11 +227,16 @@ const CippAddEditUser = (props) => { } } } - }, [watcher.givenName, watcher.surname, selectedTemplate]) + }, [watchedFields.givenName, watchedFields.surname, selectedTemplate]) // Reset manual flags and selected template when form is reset (fields become empty) useEffect(() => { - if (formType === 'add' && !watcher.givenName && !watcher.surname && !watcher.userTemplate) { + if ( + formType === 'add' && + !watchedFields.givenName && + !watchedFields.surname && + !watchedFields.userTemplate + ) { setDisplayNameManuallySet(false) setUsernameManuallySet(false) // Only clear selected template if it's not the default template @@ -204,11 +244,17 @@ const CippAddEditUser = (props) => { setSelectedTemplate(null) } } - }, [watcher.givenName, watcher.surname, watcher.userTemplate, formType, selectedTemplate]) + }, [ + watchedFields.givenName, + watchedFields.surname, + watchedFields.userTemplate, + formType, + selectedTemplate, + ]) // Auto-select default template for tenant useEffect(() => { - if (formType === 'add' && userTemplates.isSuccess && !watcher.userTemplate) { + if (formType === 'add' && userTemplates.isSuccess && !watchedFields.userTemplate) { const defaultTemplate = userTemplates.data?.find( (template) => template.defaultForTenant === true ) @@ -225,8 +271,8 @@ const CippAddEditUser = (props) => { // Auto-populate fields when template selected useEffect(() => { - if (formType === 'add' && watcher.userTemplate?.addedFields) { - const template = watcher.userTemplate.addedFields + if (formType === 'add' && watchedFields.userTemplate?.addedFields) { + const template = watchedFields.userTemplate.addedFields setSelectedTemplate(template) // Reset manual edit flags when template changes @@ -235,7 +281,7 @@ const CippAddEditUser = (props) => { // Only set fields if they don't already have values (don't override user input) const setFieldIfEmpty = (fieldName, value) => { - if (!watcher[fieldName] && value) { + if (value) { formControl.setValue(fieldName, value) } } @@ -247,7 +293,7 @@ const CippAddEditUser = (props) => { typeof template.primDomain === 'string' ? { label: template.primDomain, value: template.primDomain } : template.primDomain - setFieldIfEmpty('primDomain', primDomainValue) + formControl.setValue('primDomain', primDomainValue) } if (template.usageLocation) { // Handle both object and string formats @@ -299,14 +345,14 @@ const CippAddEditUser = (props) => { } }) if (groups.length > 0) { - const currentGroups = watcher.AddToGroups + const currentGroups = watchedFields.AddToGroups if (!currentGroups || (Array.isArray(currentGroups) && currentGroups.length === 0)) { formControl.setValue('AddToGroups', groups, { shouldDirty: true }) } } } } - }, [watcher.userTemplate, formType]) + }, [watchedFields.userTemplate, formType]) return ( @@ -800,11 +846,22 @@ const CippAddEditUser = (props) => { label: userGroups.DisplayName, value: userGroups.id, addedFields: { - groupType: userGroups.groupType, + groupType: userGroups.calculatedGroupType || userGroups.groupType, }, }))} creatable={false} formControl={formControl} + customAction={{ + icon: , + tooltip: 'Refresh groups', + onClick: () => { + tenantGroups.refetch() + if (formType === 'edit') { + userGroups.refetch() + } + }, + position: 'outside', + }} /> )} diff --git a/src/components/CippFormPages/CippExchangeSettingsForm.jsx b/src/components/CippFormPages/CippExchangeSettingsForm.jsx index ee44517b8c51..0427d3d27d1f 100644 --- a/src/components/CippFormPages/CippExchangeSettingsForm.jsx +++ b/src/components/CippFormPages/CippExchangeSettingsForm.jsx @@ -124,6 +124,15 @@ const CippExchangeSettingsForm = (props) => { ...values[type], }; + // Include browser timezone for OOO so the API can display local times in the response + if (type === "ooo") { + try { + data.timezone = Intl.DateTimeFormat().resolvedOptions().timeZone; + } catch { + // Fallback: leave timezone unset; API will display UTC + } + } + // Format data for recipient limits if (type === "recipientLimits") { data.Identity = currentSettings.Mailbox[0].Identity; diff --git a/src/components/CippFormPages/CippJSONView.jsx b/src/components/CippFormPages/CippJSONView.jsx index 4f082ef9ac33..fb69ef966b37 100644 --- a/src/components/CippFormPages/CippJSONView.jsx +++ b/src/components/CippFormPages/CippJSONView.jsx @@ -1,100 +1,156 @@ -import React, { useState, useEffect } from "react"; +import React, { useState, useEffect } from 'react' import { Accordion, AccordionSummary, AccordionDetails, + Box, IconButton, + Link, Typography, Button, Tooltip, CircularProgress, Stack, -} from "@mui/material"; -import { Grid } from "@mui/system"; -import ExpandMoreIcon from "@mui/icons-material/ExpandMore"; -import VisibilityIcon from "@mui/icons-material/Visibility"; -import VisibilityOffIcon from "@mui/icons-material/VisibilityOff"; -import { PropertyListItem } from "../property-list-item"; -import { PropertyList } from "../property-list"; -import { getCippTranslation } from "../../utils/get-cipp-translation"; -import { getCippFormatting } from "../../utils/get-cipp-formatting"; -import { CippCodeBlock } from "../CippComponents/CippCodeBlock"; -import intuneCollection from "../../data/intuneCollection.json"; -import { useGuidResolver } from "../../hooks/use-guid-resolver"; +} from '@mui/material' +import { Grid } from '@mui/system' +import ExpandMoreIcon from '@mui/icons-material/ExpandMore' +import InfoOutlinedIcon from '@mui/icons-material/InfoOutlined' +import VisibilityIcon from '@mui/icons-material/Visibility' +import VisibilityOffIcon from '@mui/icons-material/VisibilityOff' +import { PropertyListItem } from '../property-list-item' +import { PropertyList } from '../property-list' +import { getCippTranslation } from '../../utils/get-cipp-translation' +import { getCippFormatting } from '../../utils/get-cipp-formatting' +import { CippCodeBlock } from '../CippComponents/CippCodeBlock' +import intuneCollection from '../../data/intuneCollection.json' +import { useGuidResolver } from '../../hooks/use-guid-resolver' +import { useAdminTemplateDefinitions } from '../../hooks/use-admin-template-definitions' +import { + definitionBindPattern, + presentationBindPattern, + extractBindGuid, +} from '../../utils/intune-bind-helpers' + +const intuneCollectionMap = new Map( + (intuneCollection || []).filter((item) => item?.id).map((item) => [item.id, item]) +) + +const linkPattern = /\[([^\]]+)\]\((https?:\/\/[^\s)]+)\)|(https?:\/\/[^\s<>)]+)/g + +const renderTextWithLinks = (text) => { + if (!text) { + return null + } + + const parts = [] + let lastIndex = 0 + let match + linkPattern.lastIndex = 0 + + while ((match = linkPattern.exec(text)) !== null) { + if (match.index > lastIndex) { + parts.push(text.slice(lastIndex, match.index)) + } + + const label = match[1] || match[3] + const href = match[2] || match[3] + + parts.push( + event.stopPropagation()} + sx={{ color: 'inherit', fontWeight: 600, textDecorationColor: 'currentColor' }} + > + {label} + + ) + + lastIndex = match.index + match[0].length + } + + if (lastIndex < text.length) { + parts.push(text.slice(lastIndex)) + } + + return parts +} const cleanObject = (obj) => { if (Array.isArray(obj)) { return obj .map((item) => cleanObject(item)) - .filter((item) => item !== null && item !== undefined && item !== ""); - } else if (typeof obj === "object" && obj !== null) { - const cleanedObj = {}; + .filter((item) => item !== null && item !== undefined && item !== '') + } else if (typeof obj === 'object' && obj !== null) { + const cleanedObj = {} Object.entries(obj).forEach(([key, value]) => { - const cleanedValue = cleanObject(value); - if (cleanedValue !== null && cleanedValue !== undefined && cleanedValue !== "") { - cleanedObj[key] = cleanedValue; + const cleanedValue = cleanObject(value) + if (cleanedValue !== null && cleanedValue !== undefined && cleanedValue !== '') { + cleanedObj[key] = cleanedValue } - }); - return Object.keys(cleanedObj).length > 0 ? cleanedObj : null; + }) + return Object.keys(cleanedObj).length > 0 ? cleanedObj : null } else { - return obj; + return obj } -}; +} const renderListItems = (data, onItemClick, guidMapping = {}, isLoadingGuids = false, isGuid) => { // Check if this data object is from a diff - const isDiffData = data?.__isDiffData === true; + const isDiffData = data?.__isDiffData === true // Helper to try parsing JSON strings const tryParseJson = (str) => { - if (typeof str !== "string") return null; + if (typeof str !== 'string') return null try { - return JSON.parse(str); + return JSON.parse(str) } catch { - return null; + return null } - }; + } // Helper to get deep object differences - const getObjectDiff = (oldObj, newObj, path = "") => { - const changes = []; - const allKeys = new Set([...Object.keys(oldObj || {}), ...Object.keys(newObj || {})]); + const getObjectDiff = (oldObj, newObj, path = '') => { + const changes = [] + const allKeys = new Set([...Object.keys(oldObj || {}), ...Object.keys(newObj || {})]) allKeys.forEach((key) => { - const currentPath = path ? `${path}.${key}` : key; - const oldVal = oldObj?.[key]; - const newVal = newObj?.[key]; + const currentPath = path ? `${path}.${key}` : key + const oldVal = oldObj?.[key] + const newVal = newObj?.[key] if (oldVal === undefined && newVal !== undefined) { - changes.push({ path: currentPath, type: "added", newValue: newVal }); + changes.push({ path: currentPath, type: 'added', newValue: newVal }) } else if (oldVal !== undefined && newVal === undefined) { - changes.push({ path: currentPath, type: "removed", oldValue: oldVal }); + changes.push({ path: currentPath, type: 'removed', oldValue: oldVal }) } else if (JSON.stringify(oldVal) !== JSON.stringify(newVal)) { - if (typeof oldVal === "object" && typeof newVal === "object" && oldVal && newVal) { - changes.push(...getObjectDiff(oldVal, newVal, currentPath)); + if (typeof oldVal === 'object' && typeof newVal === 'object' && oldVal && newVal) { + changes.push(...getObjectDiff(oldVal, newVal, currentPath)) } else { - changes.push({ path: currentPath, type: "modified", oldValue: oldVal, newValue: newVal }); + changes.push({ path: currentPath, type: 'modified', oldValue: oldVal, newValue: newVal }) } } - }); + }) - return changes; - }; + return changes + } return Object.entries(data).map(([key, value]) => { // Skip the diff marker key - if (key === "__isDiffData") { - return null; + if (key === '__isDiffData') { + return null } // Special handling for oldValue/newValue pairs - if (key === "oldValue" && data.newValue !== undefined) { - const oldObj = tryParseJson(value); - const newObj = tryParseJson(data.newValue); + if (key === 'oldValue' && data.newValue !== undefined) { + const oldObj = tryParseJson(value) + const newObj = tryParseJson(data.newValue) // If both are JSON objects, show detailed diff if (oldObj && newObj) { - const diff = getObjectDiff(oldObj, newObj); + const diff = getObjectDiff(oldObj, newObj) if (diff.length > 0) { return ( onItemClick({ changes: diff })}> - View {diff.length} change{diff.length > 1 ? "s" : ""} + View {diff.length} change{diff.length > 1 ? 's' : ''} } /> - ); + ) } } else { // For simple strings or non-JSON values, show old → new @@ -116,16 +172,16 @@ const renderListItems = (data, onItemClick, guidMapping = {}, isLoadingGuids = f label="Change" value={`${getCippFormatting(value, key)} → ${getCippFormatting( data.newValue, - "newValue" + 'newValue' )}`} /> - ); + ) } } // Skip newValue if we already handled it with oldValue - if (key === "newValue" && data.oldValue !== undefined) { - return null; + if (key === 'newValue' && data.oldValue !== undefined) { + return null } if (Array.isArray(value)) { @@ -136,12 +192,12 @@ const renderListItems = (data, onItemClick, guidMapping = {}, isLoadingGuids = f disabled={value.length === 0} value={ } /> - ); - } else if (typeof value === "object" && value !== null) { + ) + } else if (typeof value === 'object' && value !== null) { return ( } /> - ); - } else if (typeof value === "string" && isGuid(value) && guidMapping[value]) { + ) + } else if (typeof value === 'string' && isGuid(value) && guidMapping[value]) { return ( } /> - ); - } else if (typeof value === "string" && isGuid(value) && isLoadingGuids) { + ) + } else if (typeof value === 'string' && isGuid(value) && isLoadingGuids) { return ( +
    {getCippFormatting(value, key)}
    } /> - ); + ) } else { // If this is diff data, show the value directly without formatting - const displayValue = isDiffData ? value : getCippFormatting(value, key); + const displayValue = isDiffData ? value : getCippFormatting(value, key) - return ; + return } - }); -}; + }) +} function CippJsonView({ - object = { "No Data Selected": "No Data Selected" }, + object = { 'No Data Selected': 'No Data Selected' }, type, defaultOpen = false, - title = "Policy Details", + title = 'Policy Details', + tenant = null, }) { - const [viewJson, setViewJson] = useState(false); - const [accordionOpen, setAccordionOpen] = useState(defaultOpen); - const [drilldownData, setDrilldownData] = useState([]); // Array of { data, title } + const [viewJson, setViewJson] = useState(false) + const [accordionOpen, setAccordionOpen] = useState(defaultOpen) + const [drilldownData, setDrilldownData] = useState([]) // Array of { data, title } + + const objectTenant = + tenant || object?.Tenant || object?.tenant || object?.TenantFilter || object?.tenantFilter || null // Use the GUID resolver hook - const { guidMapping, isLoadingGuids, resolveGuids, isGuid } = useGuidResolver(); + const { guidMapping, isLoadingGuids, resolveGuids, isGuid } = useGuidResolver(objectTenant) + const resolvedType = + type || + (object?.omaSettings || object?.settings || object?.definitionValues || object?.added + ? 'intune' + : undefined) + const { + definitionsMap: addedDefinitionsMap, + isLoadingDefinitions, + isDefinitionsError, + } = useAdminTemplateDefinitions({ + added: object?.added, + manualTenant: objectTenant, + waiting: resolvedType === 'intune', + }) const renderIntuneItems = (data) => { - const items = []; - const policyNameKey = ["Name", "DisplayName", "displayName", "name"].find((key) => key in data); + const items = [] + const liveDefinitions = new Map() + + if (Array.isArray(data.settings)) { + data.settings.forEach((setting) => { + ;(setting?.settingDefinitions || []).forEach((definition) => { + if (definition?.id) { + liveDefinitions.set(definition.id, definition) + } + }) + }) + } + + const getSettingDefinition = (settingDefinitionId, setting) => { + const settingDefinitions = setting?.settingDefinitions || [] + return ( + settingDefinitions.find((definition) => definition?.id === settingDefinitionId) || + liveDefinitions.get(settingDefinitionId) || + intuneCollectionMap.get(settingDefinitionId) + ) + } + + const hasSettingValue = (settingValue) => + settingValue && + Object.prototype.hasOwnProperty.call(settingValue, 'value') && + settingValue.value !== undefined && + settingValue.value !== null + + const getOptionDefinition = (definition, value) => { + if (!Array.isArray(definition?.options)) { + return null + } + + return ( + definition.options.find((option) => option.id === value || option.itemId === value) || null + ) + } + + const renderDefinitionTooltip = (definition, optionDefinition) => { + const description = definition?.helpText || definition?.description || definition?.explainText + const optionDescription = optionDefinition?.helpText || optionDefinition?.description + const infoUrls = Array.isArray(definition?.infoUrls) ? definition.infoUrls : [] + + if (!description && !optionDescription && infoUrls.length === 0) { + return null + } + + return ( + + {description && ( + + {renderTextWithLinks(description)} + + )} + {optionDescription && ( + + Selected value: {renderTextWithLinks(optionDescription)} + + )} + {infoUrls.length > 0 && ( + + More info:{' '} + {infoUrls.map((url, index) => ( + + {index > 0 ? ', ' : ''} + event.stopPropagation()} + sx={{ color: 'inherit', fontWeight: 600, textDecorationColor: 'currentColor' }} + > + {url} + + + ))} + + )} + + ) + } + + const renderSettingLabel = (label, definition, optionDefinition) => { + const tooltip = renderDefinitionTooltip(definition, optionDefinition) + + if (!tooltip) { + return label + } + + return ( + + {label} + + event.stopPropagation()} + > + + + + + ) + } + + const renderSettingValue = (value) => { + if (typeof value === 'string' && isGuid(value) && guidMapping[value]) { + return ( + +
    + {guidMapping[value]} + + (GUID) + +
    +     + ) + } + + return value + } + + const getChoiceValue = (definition, rawValue) => { + const optionDefinition = getOptionDefinition(definition, rawValue) + + return { + optionDefinition, + value: optionDefinition?.displayName || rawValue, + } + } + + const getDisplayValue = (value) => { + if (value === null || value === undefined || value === '') { + return '' + } + + if (typeof value === 'boolean') { + return value ? 'Yes' : 'No' + } + + if (typeof value === 'string' || typeof value === 'number') { + return value + } + + try { + return JSON.stringify(value) + } catch { + return String(value) + } + } + + const getAdministrativeTemplatePresentationValue = (presentationValue) => { + if (!presentationValue || typeof presentationValue !== 'object') { + return 'Not configured' + } + + if (Object.prototype.hasOwnProperty.call(presentationValue, 'value')) { + const displayValue = getDisplayValue(presentationValue.value) + if (displayValue !== '') { + return displayValue + } + } + + if (Array.isArray(presentationValue.values)) { + const values = presentationValue.values + .map((entry) => { + if (entry && typeof entry === 'object') { + const entryLabel = + entry.name || + entry.key || + entry.displayName || + entry.id || + entry.PresentationDefinitionLabel || + '' + const entryValue = getDisplayValue( + entry.value ?? entry.text ?? entry.Value ?? entry.StringValue ?? entry + ) + + if (entryLabel && entryValue !== '') { + return `${entryLabel}: ${entryValue}` + } + + return entryValue + } + + return getDisplayValue(entry) + }) + .filter((entry) => entry !== null && entry !== undefined && entry !== '') + + if (values.length > 0) { + return values.join(', ') + } + } + + return 'Not configured' + } + + const getStatusText = (enabled) => + enabled === true ? 'Enabled' : enabled === false ? 'Disabled' : 'Configured' + + const addAdministrativeTemplateValue = ( + value, + index, + { definition, definitionId, label, keyPrefix, presentationKeyInfix, resolvePresentationLabel } + ) => { + if (!value || typeof value !== 'object') { + return + } + + const categoryPath = definition?.categoryPath + const presentationValues = Array.isArray(value.presentationValues) + ? value.presentationValues + : [] + const itemKey = value.id || definitionId || index + + items.push( + + + {getStatusText(value.enabled)} + + {categoryPath && ( + + {categoryPath} + + )} + {!definition && definitionId && ( + + Definition ID: {definitionId} + + )} + {presentationValues.map((presentationValue, presentationIndex) => { + const presentationLabel = resolvePresentationLabel( + definition, + presentationValue, + presentationIndex + ) + const presentationDisplayValue = getAdministrativeTemplatePresentationValue( + presentationValue + ) + + return ( + + + {presentationLabel}: + {' '} + {renderSettingValue(presentationDisplayValue)} + + ) + })} + + } + /> + ) + } + + const getPresentationTypeLabel = (odataType) => { + switch (odataType) { + case '#microsoft.graph.groupPolicyPresentationValueBoolean': + return 'Boolean value' + case '#microsoft.graph.groupPolicyPresentationValueDecimal': + case '#microsoft.graph.groupPolicyPresentationValueLongDecimal': + return 'Numeric value' + case '#microsoft.graph.groupPolicyPresentationValueMultiText': + return 'Text list' + case '#microsoft.graph.groupPolicyPresentationValueList': + return 'List value' + case '#microsoft.graph.groupPolicyPresentationValueText': + return 'Text value' + default: + return 'Value' + } + } + + const getAddedPresentationLabel = (definition, presentationValue) => { + const presentationId = extractBindGuid( + presentationValue?.['presentation@odata.bind'], + presentationBindPattern + ) + + if (presentationId && Array.isArray(definition?.presentations)) { + const resolvedPresentation = definition.presentations.find( + (presentation) => String(presentation?.id || '').toLowerCase() === presentationId + ) + + if (resolvedPresentation) { + return ( + resolvedPresentation.label || + resolvedPresentation.displayName || + resolvedPresentation.id || + getPresentationTypeLabel(presentationValue?.['@odata.type']) + ) + } + } + + return getPresentationTypeLabel(presentationValue?.['@odata.type']) + } + + const resolveLivePresentationLabel = (_definition, presentationValue, presentationIndex) => + presentationValue?.presentation?.label || + presentationValue?.presentation?.displayName || + presentationValue?.presentation?.id || + `Value ${presentationIndex + 1}` + + const addSettingInstance = (settingInstance, setting, keyPrefix) => { + if (!settingInstance) { + return + } + + const definition = getSettingDefinition(settingInstance.settingDefinitionId, setting) + const label = definition?.displayName || settingInstance.settingDefinitionId || 'Setting' + const key = `${keyPrefix}-${items.length}` + + if (Array.isArray(settingInstance.groupSettingCollectionValue)) { + settingInstance.groupSettingCollectionValue.forEach((groupValue, groupIndex) => { + ;(groupValue?.children || []).forEach((child, childIndex) => + addSettingInstance(child, setting, `${key}-group-${groupIndex}-child-${childIndex}`) + ) + }) + return + } + + if (hasSettingValue(settingInstance.simpleSettingValue)) { + items.push( + + ) + return + } + + if (hasSettingValue(settingInstance.choiceSettingValue)) { + const choiceValue = getChoiceValue(definition, settingInstance.choiceSettingValue.value) + items.push( + + ) + + ;(settingInstance.choiceSettingValue.children || []).forEach((child, childIndex) => + addSettingInstance(child, setting, `${key}-choice-child-${childIndex}`) + ) + return + } + + if (Array.isArray(settingInstance.choiceSettingCollectionValue)) { + const values = settingInstance.choiceSettingCollectionValue.map( + (choiceSetting) => getChoiceValue(definition, choiceSetting.value).value + ) + items.push( + + ) + return + } + + if (Array.isArray(settingInstance.simpleSettingCollectionValue)) { + const values = settingInstance.simpleSettingCollectionValue.map( + (simpleSetting) => simpleSetting.value + ) + items.push( + + ) + return + } + + items.push( + + ) + } + + const policyNameKey = ['Name', 'DisplayName', 'displayName', 'name'].find((key) => key in data) if (policyNameKey) { items.push( - ); + ) } if (data.omaSettings) { data.omaSettings.forEach((omaSetting, index) => { - // Check if value is a GUID that we've resolved - const value = - typeof omaSetting.value === "string" && - isGuid(omaSetting.value) && - guidMapping[omaSetting.value] ? ( - -
    - {guidMapping[omaSetting.value]} - - (GUID) - -
    -     - ) : ( - omaSetting.value - ); - items.push( - ); - }); + ) + }) } else if (data.settings) { data.settings.forEach((setting, index) => { - const settingInstance = setting.settingInstance; - const intuneObj = intuneCollection.find( - (item) => item.id === settingInstance.settingDefinitionId - ); - - // Handle groupSettingCollectionInstance - if ( - settingInstance["@odata.type"] === - "#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance" && - settingInstance.groupSettingCollectionValue - ) { - settingInstance.groupSettingCollectionValue.forEach((groupValue, gIndex) => { - if (groupValue.children && Array.isArray(groupValue.children)) { - groupValue.children.forEach((child, cIndex) => { - const childIntuneObj = intuneCollection.find( - (item) => item.id === child.settingDefinitionId - ); - const label = childIntuneObj?.displayName || child.settingDefinitionId; - let value; - if (child.choiceSettingValue && child.choiceSettingValue.value) { - value = - (Array.isArray(childIntuneObj?.options) && - childIntuneObj.options.find( - (option) => option.id === child.choiceSettingValue.value - )?.displayName) || - child.choiceSettingValue.value; - } - items.push( - - ); - }); + addSettingInstance(setting.settingInstance, setting, `setting-${index}`) + }) + } else if (Array.isArray(data.definitionValues)) { + if (data.definitionValues.length === 0) { + items.push( + + ) + } + + data.definitionValues.forEach((definitionValue, index) => { + const definition = definitionValue?.definition + addAdministrativeTemplateValue(definitionValue, index, { + definition, + definitionId: null, + label: definition?.displayName || definition?.id || definitionValue?.id || 'Setting', + keyPrefix: 'definitionValue', + presentationKeyInfix: 'presentation', + resolvePresentationLabel: resolveLivePresentationLabel, + }) + }) + } else if (Array.isArray(data.added)) { + const hasResolvedDefinitions = Object.keys(addedDefinitionsMap).length > 0 + + if (isLoadingDefinitions && !hasResolvedDefinitions) { + items.push( + + + Resolving administrative template settings... + } - }); - } else if (settingInstance?.simpleSettingValue?.value) { - const label = intuneObj?.displayName || settingInstance.settingDefinitionId; - const value = settingInstance.simpleSettingValue.value; - // Check if value is a GUID that we've resolved - const displayValue = - typeof value === "string" && isGuid(value) && guidMapping[value] ? ( - -
    - {guidMapping[value]} - - (GUID) - -
    -     - ) : ( - value - ); + /> + ) + return items + } - items.push( - - ); - } else if (settingInstance?.choiceSettingValue?.value) { - const label = intuneObj?.displayName || settingInstance.settingDefinitionId; - const rawValue = settingInstance.choiceSettingValue.value; - let optionValue = - (Array.isArray(intuneObj?.options) && - intuneObj.options.find((option) => option.id === rawValue)?.displayName) || - rawValue; - - // Check if optionValue is a GUID that we've resolved - if (typeof optionValue === "string" && isGuid(optionValue) && guidMapping[optionValue]) { - optionValue = ( - -
    - {guidMapping[optionValue]} - - (GUID) - -
    -     - ); - } + if (data.added.length === 0) { + items.push( + + ) + } - items.push( - - ); - } else { - const label = intuneObj?.displayName || settingInstance.settingDefinitionId; - items.push( - - ); - } - }); - } else if (data.added) { - items.push( - - ); + if (isDefinitionsError && !hasResolvedDefinitions) { + items.push( + + ) + } + + data.added.forEach((addedValue, index) => { + const definitionId = extractBindGuid( + addedValue?.['definition@odata.bind'], + definitionBindPattern + ) + const definition = definitionId ? addedDefinitionsMap[definitionId] : null + addAdministrativeTemplateValue(addedValue, index, { + definition, + definitionId, + label: definition?.displayName || definitionId || `Setting ${index + 1}`, + keyPrefix: 'addedDefinition', + presentationKeyInfix: 'added-presentation', + resolvePresentationLabel: getAddedPresentationLabel, + }) + }) } else { Object.entries(data).forEach(([key, value]) => { // Check if value is a GUID that we've resolved - if (typeof value === "string" && isGuid(value) && guidMapping[value]) { + if (typeof value === 'string' && isGuid(value) && guidMapping[value]) { items.push( (GUID) @@ -371,20 +797,20 @@ function CippJsonView({ } /> - ); - } else if (typeof value === "string" && isGuid(value) && isLoadingGuids) { + ) + } else if (typeof value === 'string' && isGuid(value) && isLoadingGuids) { items.push( +
    {getCippFormatting(value, key)}
    } /> - ); + ) } else { items.push( - ); + ) } - }); + }) } - return items; - }; + return items + } useEffect(() => { - if (!type && (object?.omaSettings || object?.settings || object?.added)) { - type = "intune"; - } const blacklist = [ - "selectedOption", - "GUID", - "ID", - "id", - "noSubmitButton", - "createdDateTime", - "modifiedDateTime", - ]; - const cleanedObj = cleanObject(object) || {}; + 'selectedOption', + 'GUID', + 'ID', + 'id', + 'noSubmitButton', + 'createdDateTime', + 'modifiedDateTime', + ] + const cleanedObj = cleanObject(object) || {} const filteredObj = Object.fromEntries( Object.entries(cleanedObj).filter(([key]) => !blacklist.includes(key)) - ); - setDrilldownData([{ data: filteredObj, title: null }]); + ) + setDrilldownData([{ data: filteredObj, title: null }]) // Using the resolveGuids function from the hook to handle GUID resolution - resolveGuids(cleanedObj); + resolveGuids(cleanedObj) // eslint-disable-next-line react-hooks/exhaustive-deps - }, [object]); + }, [object]) - const toggleView = () => setViewJson(!viewJson); + const toggleView = () => setViewJson(!viewJson) const handleItemClick = (itemData, level) => { - const updatedData = drilldownData.slice(0, level + 1); + const updatedData = drilldownData.slice(0, level + 1) // Helper to check if an array contains only simple key/value objects const isArrayOfKeyValuePairs = (arr) => { - if (!Array.isArray(arr) || arr.length === 0) return false; + if (!Array.isArray(arr) || arr.length === 0) return false return arr.every((item) => { - if (typeof item !== "object" || item === null || Array.isArray(item)) return false; + if (typeof item !== 'object' || item === null || Array.isArray(item)) return false // Check if all values are primitives (not nested objects/arrays) - return Object.values(item).every((val) => typeof val !== "object" || val === null); - }); - }; + return Object.values(item).every((val) => typeof val !== 'object' || val === null) + }) + } // Compress single-property objects and single-item arrays into the same pane - let dataToAdd = itemData; - const compressedKeys = []; - let wasCompressed = false; + let dataToAdd = itemData + const compressedKeys = [] + let wasCompressed = false // Special handling for diff changes object if (dataToAdd?.changes && Array.isArray(dataToAdd.changes)) { - const diffObject = {}; - const blacklistFields = ["createdDateTime", "modifiedDateTime", "id"]; + const diffObject = {} + const blacklistFields = ['createdDateTime', 'modifiedDateTime', 'id'] dataToAdd.changes.forEach((change) => { - const label = change.path; + const label = change.path // Skip blacklisted fields in nested paths - const pathParts = label.split("."); - const lastPart = pathParts[pathParts.length - 1]; + const pathParts = label.split('.') + const lastPart = pathParts[pathParts.length - 1] if (blacklistFields.includes(lastPart)) { - return; + return } - let hasValue = false; - let displayValue = ""; + let hasValue = false + let displayValue = '' - if (change.type === "added") { - if (change.newValue !== null && change.newValue !== undefined && change.newValue !== "") { - displayValue = `[ADDED] ${JSON.stringify(change.newValue)}`; - hasValue = true; + if (change.type === 'added') { + if (change.newValue !== null && change.newValue !== undefined && change.newValue !== '') { + displayValue = `[ADDED] ${JSON.stringify(change.newValue)}` + hasValue = true } - } else if (change.type === "removed") { - if (change.oldValue !== null && change.oldValue !== undefined && change.oldValue !== "") { - displayValue = `[REMOVED] ${JSON.stringify(change.oldValue)}`; - hasValue = true; + } else if (change.type === 'removed') { + if (change.oldValue !== null && change.oldValue !== undefined && change.oldValue !== '') { + displayValue = `[REMOVED] ${JSON.stringify(change.oldValue)}` + hasValue = true } - } else if (change.type === "modified") { + } else if (change.type === 'modified') { const oldHasValue = - change.oldValue !== null && change.oldValue !== undefined && change.oldValue !== ""; + change.oldValue !== null && change.oldValue !== undefined && change.oldValue !== '' const newHasValue = - change.newValue !== null && change.newValue !== undefined && change.newValue !== ""; + change.newValue !== null && change.newValue !== undefined && change.newValue !== '' // Only show if at least one side has a meaningful value (not both empty) if (oldHasValue || newHasValue) { @@ -484,90 +907,90 @@ function CippJsonView({ if (oldHasValue && newHasValue) { displayValue = `${JSON.stringify(change.oldValue)} → ${JSON.stringify( change.newValue - )}`; - hasValue = true; + )}` + hasValue = true } // If only new has value, treat as added else if (newHasValue) { - displayValue = `[ADDED] ${JSON.stringify(change.newValue)}`; - hasValue = true; + displayValue = `[ADDED] ${JSON.stringify(change.newValue)}` + hasValue = true } // If only old has value, treat as removed else if (oldHasValue) { - displayValue = `[REMOVED] ${JSON.stringify(change.oldValue)}`; - hasValue = true; + displayValue = `[REMOVED] ${JSON.stringify(change.oldValue)}` + hasValue = true } } } if (hasValue) { - diffObject[label] = displayValue; + diffObject[label] = displayValue } - }); + }) // Mark this object as containing diff data - dataToAdd = { ...diffObject, __isDiffData: true }; + dataToAdd = { ...diffObject, __isDiffData: true } } // Check if this is an array of items with oldValue/newValue (modifiedProperties pattern) const hasOldNewValues = (arr) => { - if (!Array.isArray(arr) || arr.length === 0) return false; - return arr.some((item) => item?.oldValue !== undefined || item?.newValue !== undefined); - }; + if (!Array.isArray(arr) || arr.length === 0) return false + return arr.some((item) => item?.oldValue !== undefined || item?.newValue !== undefined) + } // If the data is an array of key/value pairs, convert to a flat object // But skip if it's an array with oldValue/newValue properties (let normal rendering handle it) if (isArrayOfKeyValuePairs(dataToAdd) && !hasOldNewValues(dataToAdd)) { - const flatObject = {}; + const flatObject = {} dataToAdd.forEach((item) => { - const key = item.key || item.name || item.displayName; - const value = item.value || item.newValue || ""; + const key = item.key || item.name || item.displayName + const value = item.value || item.newValue || '' if (key) { - flatObject[key] = value; + flatObject[key] = value } - }); - dataToAdd = flatObject; + }) + dataToAdd = flatObject } - while (dataToAdd && typeof dataToAdd === "object") { + while (dataToAdd && typeof dataToAdd === 'object') { // Handle single-item arrays if (Array.isArray(dataToAdd) && dataToAdd.length === 1) { - const singleItem = dataToAdd[0]; - if (singleItem && typeof singleItem === "object") { - compressedKeys.push("[0]"); - dataToAdd = singleItem; - wasCompressed = true; - continue; + const singleItem = dataToAdd[0] + if (singleItem && typeof singleItem === 'object') { + compressedKeys.push('[0]') + dataToAdd = singleItem + wasCompressed = true + continue } else { - break; + break } } // Handle single-property objects if (!Array.isArray(dataToAdd) && Object.keys(dataToAdd).length === 1) { - const singleKey = Object.keys(dataToAdd)[0]; - const singleValue = dataToAdd[singleKey]; + const singleKey = Object.keys(dataToAdd)[0] + const singleValue = dataToAdd[singleKey] // Only compress if the value is also an object or single-item array - if (singleValue && typeof singleValue === "object") { - compressedKeys.push(singleKey); - dataToAdd = singleValue; - wasCompressed = true; - continue; + if (singleValue && typeof singleValue === 'object') { + compressedKeys.push(singleKey) + dataToAdd = singleValue + wasCompressed = true + continue } } - break; + break } // Create title from compressed keys if compression occurred - const title = wasCompressed ? compressedKeys.join(" > ") : null; + const title = wasCompressed ? compressedKeys.join(' > ') : null - updatedData[level + 1] = { data: dataToAdd, title }; - setDrilldownData(updatedData); + updatedData[level + 1] = { data: dataToAdd, title } + setDrilldownData(updatedData) // Use the resolveGuids function from the hook to handle GUID resolution for drill-down data - resolveGuids(dataToAdd); - }; + resolveGuids(dataToAdd) + } return ( } - sx={{ display: "flex", alignItems: "center" }} + sx={{ display: 'flex', alignItems: 'center' }} > - + {title} {isLoadingGuids && ( - + Resolving object identifiers... )} @@ -602,24 +1025,25 @@ function CippJsonView({ ?.filter((item) => item !== null && item !== undefined) .map((item, index) => ( 4, and add spacing between the top and bottom items paddingTop: index === 0 ? 0 : 2, - borderTop: index >= 4 && type !== "intune" ? "1px solid lightgrey" : "none", - borderRight: index < drilldownData.length - 1 ? "1px solid lightgrey" : "none", - overflowWrap: "anywhere", - whiteSpace: "pre-line", + borderTop: + index >= 4 && resolvedType !== 'intune' ? '1px solid lightgrey' : 'none', + borderRight: index < drilldownData.length - 1 ? '1px solid lightgrey' : 'none', + overflowWrap: 'anywhere', + whiteSpace: 'pre-line', paddingRight: 2, }} > {item.title && ( - + {getCippTranslation(item.title)} )} - {type !== "intune" && ( + {resolvedType !== 'intune' && ( {renderListItems( item.data, @@ -630,14 +1054,16 @@ function CippJsonView({ )} )} - {type === "intune" && {renderIntuneItems(item.data)}} + {resolvedType === 'intune' && ( + {renderIntuneItems(item.data)} + )} ))} )} - ); + ) } -export default CippJsonView; +export default CippJsonView diff --git a/src/components/CippIntegrations/CippApiClientManagement.jsx b/src/components/CippIntegrations/CippApiClientManagement.jsx index 3dab6bf2bf1b..a9a2d2960ef1 100644 --- a/src/components/CippIntegrations/CippApiClientManagement.jsx +++ b/src/components/CippIntegrations/CippApiClientManagement.jsx @@ -1,6 +1,7 @@ import { Button, Stack, SvgIcon, Menu, MenuItem, ListItemText, Alert } from "@mui/material"; -import { useState } from "react"; +import { useState, useEffect, useMemo } from "react"; import isEqual from "lodash/isEqual"; +import { useRouter } from "next/router"; import { useForm } from "react-hook-form"; import { ApiGetCall, ApiGetCallWithPagination, ApiPostCall } from "../../api/ApiCall"; import { CippDataTable } from "../CippTable/CippDataTable"; @@ -19,6 +20,7 @@ import { CippCopyToClipBoard } from "../CippComponents/CippCopyToClipboard"; import { Box } from "@mui/system"; const CippApiClientManagement = () => { + const router = useRouter(); const [openAddClientDialog, setOpenAddClientDialog] = useState(false); const [openAddExistingAppDialog, setOpenAddExistingAppDialog] = useState(false); const [addClientRetryPayload, setAddClientRetryPayload] = useState(null); @@ -45,6 +47,46 @@ const CippApiClientManagement = () => { queryKey: "ApiClients", }); + const hasUnsavedChanges = useMemo(() => { + if (!azureConfig.isSuccess || !apiClients.isSuccess) return false; + return !isEqual( + (apiClients.data?.pages?.[0]?.Results || []) + .filter((c) => c.Enabled) + .map((c) => c.ClientId) + .sort(), + (azureConfig.data?.Results?.ClientIDs || []).sort() + ); + }, [azureConfig.isSuccess, azureConfig.data, apiClients.isSuccess, apiClients.data]); + + useEffect(() => { + const handleBeforeUnload = (e) => { + if (hasUnsavedChanges) { + e.preventDefault(); + e.returnValue = ""; + } + }; + + const handleRouteChange = (url) => { + if ( + hasUnsavedChanges && + !window.confirm( + "You have unsaved API client changes. Are you sure you want to leave this page?" + ) + ) { + router.events.emit("routeChangeError"); + throw "Route change aborted due to unsaved changes."; + } + }; + + window.addEventListener("beforeunload", handleBeforeUnload); + router.events.on("routeChangeStart", handleRouteChange); + + return () => { + window.removeEventListener("beforeunload", handleBeforeUnload); + router.events.off("routeChangeStart", handleRouteChange); + }; + }, [hasUnsavedChanges, router.events]); + const handleMenuOpen = (event) => { setMenuAnchorEl(event.currentTarget); }; @@ -54,11 +96,18 @@ const CippApiClientManagement = () => { }; const handleSaveToAzure = () => { + handleMenuClose(); + if ( + !window.confirm( + "Saving to Azure will restart the CIPP instance. Changes may take up to 60 seconds to reflect. Do you want to continue?" + ) + ) { + return; + } postCall.mutate({ url: `/api/ExecApiClient?action=SaveToAzure`, data: {}, }); - handleMenuClose(); }; const getRetryPayload = (result) => { @@ -284,13 +333,7 @@ const CippApiClientManagement = () => { /> {azureConfig.isSuccess && apiClients.isSuccess && ( <> - {!isEqual( - (apiClients.data?.pages?.[0]?.Results || []) - .filter((c) => c.Enabled) - .map((c) => c.ClientId) - .sort(), - (azureConfig.data?.Results?.ClientIDs || []).sort() - ) && ( + {hasUnsavedChanges && ( You have unsaved changes. Click Actions > Save Azure Configuration to update diff --git a/src/components/CippSettings/CippContainerManagement.jsx b/src/components/CippSettings/CippContainerManagement.jsx new file mode 100644 index 000000000000..37daf6aa3e45 --- /dev/null +++ b/src/components/CippSettings/CippContainerManagement.jsx @@ -0,0 +1,442 @@ +import { useEffect } from "react"; +import { + Alert, + Button, + CardActions, + CardContent, + Chip, + Divider, + Skeleton, + Stack, + Typography, +} from "@mui/material"; +import { Grid } from "@mui/system"; +import { useForm } from "react-hook-form"; +import CippFormComponent from "../CippComponents/CippFormComponent"; +import CippButtonCard from "../CippCards/CippButtonCard"; +import { ApiGetCall, ApiPostCall } from "../../api/ApiCall"; +import { CippApiResults } from "../CippComponents/CippApiResults"; + +const channelLabels = { + latest: { label: "Latest (Stable)", color: "success" }, + dev: { label: "Dev", color: "warning" }, + nightly: { label: "Nightly", color: "info" }, + unknown: { label: "Unknown", color: "default" }, +}; + +const intervalOptions = [ + { label: "Disabled", value: "0" }, + { label: "Every hour", value: "1h" }, + { label: "Every 4 hours", value: "4h" }, + { label: "Every 12 hours", value: "12h" }, + { label: "Every day", value: "1d" }, +]; + +const hourOptions = Array.from({ length: 24 }, (_, i) => ({ + label: `${i.toString().padStart(2, "0")}:00`, + value: String(i), +})); + +export const CippContainerManagement = () => { + const channelForm = useForm({ + mode: "onChange", + defaultValues: { Channel: null }, + }); + + const updateSettingsForm = useForm({ + mode: "onChange", + defaultValues: { CheckInterval: null, AutoUpdate: false, CheckTime: null }, + }); + + const containerStatus = ApiGetCall({ + url: "/api/ExecContainerManagement", + data: { Action: "Status" }, + queryKey: "containerStatus", + }); + + const channelAction = ApiPostCall({ + relatedQueryKeys: ["containerStatus"], + }); + + const restartAction = ApiPostCall({ + relatedQueryKeys: ["containerStatus"], + }); + + const updateCheckAction = ApiPostCall({ + relatedQueryKeys: ["containerStatus"], + }); + + const updateSettingsAction = ApiPostCall({ + relatedQueryKeys: ["containerStatus"], + }); + + const data = containerStatus.data?.Results; + const channelInfo = channelLabels[data?.CurrentChannel] ?? channelLabels.unknown; + const updateSettings = data?.UpdateSettings; + + const channelOptions = (data?.ValidChannels ?? ["latest", "dev", "nightly"]).map((c) => ({ + label: channelLabels[c]?.label ?? c, + value: c, + })); + + useEffect(() => { + if (containerStatus.isSuccess && data?.CurrentChannel) { + const current = channelOptions.find((o) => o.value === data.CurrentChannel); + if (current) { + channelForm.reset({ Channel: current }); + } + } + }, [containerStatus.isSuccess, data?.CurrentChannel]); + + useEffect(() => { + if (containerStatus.isSuccess && updateSettings) { + const interval = intervalOptions.find((o) => o.value === (updateSettings.CheckInterval ?? "0")); + const hour = updateSettings.CheckTime != null + ? hourOptions.find((o) => o.value === String(updateSettings.CheckTime)) + : null; + updateSettingsForm.reset({ + CheckInterval: interval ?? intervalOptions[0], + AutoUpdate: updateSettings.AutoUpdate ?? false, + CheckTime: hour ?? null, + }); + } + }, [containerStatus.isSuccess, updateSettings?.CheckInterval, updateSettings?.AutoUpdate, updateSettings?.CheckTime]); + + const handleUpdateChannel = () => { + const selected = channelForm.getValues("Channel"); + const channel = selected?.value ?? selected; + channelAction.mutate({ + url: "/api/ExecContainerManagement", + data: { Action: "UpdateChannel", Channel: channel }, + }); + }; + + const handleRestart = () => { + restartAction.mutate({ + url: "/api/ExecContainerManagement", + data: { Action: "Restart" }, + }); + }; + + const handleCheckUpdate = () => { + updateCheckAction.mutate({ + url: "/api/ExecContainerManagement", + data: { Action: "CheckUpdate" }, + }); + }; + + const handleSaveUpdateSettings = () => { + const interval = updateSettingsForm.getValues("CheckInterval"); + const autoUpdate = updateSettingsForm.getValues("AutoUpdate"); + const checkTime = updateSettingsForm.getValues("CheckTime"); + updateSettingsAction.mutate({ + url: "/api/ExecContainerManagement", + data: { + Action: "SaveUpdateSettings", + CheckInterval: interval?.value ?? interval ?? "0", + AutoUpdate: autoUpdate ?? false, + CheckTime: checkTime?.value ?? checkTime ?? null, + }, + }); + }; + + const truncateDigest = (digest) => { + if (!digest) return "—"; + // Show algo prefix + first 12 hex chars + if (digest.startsWith("sha256:")) { + return `sha256:${digest.slice(7, 19)}…`; + } + return digest.length > 20 ? `${digest.slice(0, 20)}…` : digest; + }; + + return ( + + + + + {containerStatus.isLoading ? ( + + + + + ) : ( + + {data?.ConfiguredChannel && data.ConfiguredChannel !== data.CurrentChannel && ( + + A channel change is pending. Running: {data.CurrentChannel}, + configured: {data.ConfiguredChannel}. Restart the container to + apply. + + )} + {updateSettings?.UpdateAvailable && ( + + A container update is available. Restart the container to pull the latest image. + + )} + + + + Running Channel + + + + + + + + + Image Tag + + + + + {data?.ImageTag ?? "unknown"} + + + + + + App Version + + + + + {data?.CurrentVersion ?? "unknown"} + + + + + + Commit SHA + + + + + {data?.CommitSha ?? "unknown"} + + + + {updateSettings?.RunningDigest && ( + <> + + + Container Digest + + + + + {truncateDigest(updateSettings.RunningDigest)} + + + + )} + + {data?.CurrentImage && data.CurrentImage !== "unknown" && ( + <> + + + Container Image + + + + + {data.CurrentImage} + + + + )} + + {data?.SiteName && ( + <> + + + App Service + + + + {data.SiteName} + + + )} + + + )} + + + + + + + + + + Configure automatic update checking. CIPP will query the container registry for a new + image digest and optionally restart the container to apply the update. + NOTE: If the container restarts for any reason the latest image version for your update channel will be pulled regardless + + + + + + + + + + + + + {updateSettings?.LastCheck && ( + + Last checked: {new Date(updateSettings.LastCheck * 1000).toLocaleString()} + {updateSettings.UpdateAvailable ? ( + + ) : ( + + )} + + )} + + {updateSettings?.RunningDigest && updateSettings?.RemoteDigest && ( + + + + Running Digest + + + + + {truncateDigest(updateSettings.RunningDigest)} + + + + + Remote Digest + + + + + {truncateDigest(updateSettings.RemoteDigest)} + + + + )} + + + + + + + + + + + + + + + + + Changing the release channel updates the container image tag. The new image will be + pulled on the next container restart. Switching to "Dev" or + "Nightly" may include unstable or untested changes. + + + + + + + + + + + + + + + + + Restart the application container. This will cause a brief downtime while the container + restarts. If you changed the release channel, this will pull the new image. + + + + + + + + + + + ); +}; + +export default CippContainerManagement; diff --git a/src/components/CippSettings/CippPermissionResults.jsx b/src/components/CippSettings/CippPermissionResults.jsx index bd8e37000c0e..d5f0636a479c 100644 --- a/src/components/CippSettings/CippPermissionResults.jsx +++ b/src/components/CippSettings/CippPermissionResults.jsx @@ -133,7 +133,7 @@ export const CippPermissionResults = (props) => { - There are new permissions to apply. + There are new permissions to apply. Please click "Details" to review and apply the new permissions. )} diff --git a/src/components/CippSettings/CippSSOSettings.jsx b/src/components/CippSettings/CippSSOSettings.jsx new file mode 100644 index 000000000000..e22cd1ab6edf --- /dev/null +++ b/src/components/CippSettings/CippSSOSettings.jsx @@ -0,0 +1,202 @@ +import { useEffect, useState } from "react"; +import { + Alert, + Button, + CardActions, + CardContent, + CardHeader, + Chip, + Divider, + Skeleton, + Stack, + Typography, +} from "@mui/material"; +import { useForm } from "react-hook-form"; +import { Grid } from "@mui/system"; +import CippFormComponent from "../CippComponents/CippFormComponent"; +import CippButtonCard from "../CippCards/CippButtonCard"; +import { ApiGetCall, ApiPostCall } from "../../api/ApiCall"; +import { CippApiResults } from "../CippComponents/CippApiResults"; + +const statusLabels = { + none: { label: "Not Configured", color: "default" }, + app_created: { label: "App Created", color: "info" }, + appid_stored: { label: "App ID Stored", color: "info" }, + secrets_stored: { label: "Secrets Stored", color: "success" }, + complete: { label: "Complete", color: "success" }, + error: { label: "Error", color: "error" }, +}; + +export const CippSSOSettings = () => { + const [showCreate, setShowCreate] = useState(false); + + const formControl = useForm({ + mode: "onChange", + defaultValues: { multiTenant: false }, + }); + + const ssoStatus = ApiGetCall({ + url: "/api/ExecSSOSetup", + data: { Action: "Status" }, + queryKey: "SSOStatus", + }); + + const ssoAction = ApiPostCall({ + relatedQueryKeys: ["SSOStatus", "authmecipp"], + }); + + useEffect(() => { + if (ssoStatus.isSuccess && ssoStatus.data?.Results) { + const data = ssoStatus.data.Results; + formControl.reset({ multiTenant: data.multiTenant ?? false }); + setShowCreate(!data.configured); + } + }, [ssoStatus.isSuccess, ssoStatus.data]); + + const handleUpdate = () => { + if ( + !window.confirm( + "Updating SSO settings will restart the CIPP instance. Changes may take up to 60 seconds to reflect. Do you want to continue?" + ) + ) { + return; + } + ssoAction.mutate({ + url: "/api/ExecSSOSetup", + data: { + Action: "Update", + multiTenant: formControl.getValues("multiTenant"), + }, + }); + }; + + const handleCreate = () => { + ssoAction.mutate({ + url: "/api/ExecSSOSetup", + data: { + Action: "Create", + multiTenant: formControl.getValues("multiTenant"), + }, + }); + }; + + const handleRotateSecret = () => { + ssoAction.mutate({ + url: "/api/ExecSSOSetup", + data: { Action: "RotateSecret" }, + }); + }; + + const data = ssoStatus.data?.Results; + const statusInfo = statusLabels[data?.status] ?? statusLabels.none; + + return ( + + + {ssoStatus.isLoading ? ( + + + + + ) : ( + + + + + Status + + + + + + + {data?.appId && ( + <> + + + App ID + + + + + {data.appId} + + + + )} + + {data?.createdAt && ( + <> + + + Created + + + + + {new Date(data.createdAt).toLocaleString()} + + + + )} + + {data?.lastError && ( + <> + + + {data.lastError} + + + + )} + + + + + + + + + )} + + {!ssoStatus.isLoading && ( + + + {showCreate ? ( + + ) : ( + <> + + + + )} + + + )} + + ); +}; diff --git a/src/components/CippSettings/CippUserManagement.jsx b/src/components/CippSettings/CippUserManagement.jsx new file mode 100644 index 000000000000..ab4be74c1b2b --- /dev/null +++ b/src/components/CippSettings/CippUserManagement.jsx @@ -0,0 +1,221 @@ +import React, { useState } from "react"; +import { + Alert, + Box, + Button, + CardActions, + CardContent, + Chip, + Dialog, + DialogActions, + DialogContent, + DialogTitle, + Divider, + Stack, + SvgIcon, + Typography, +} from "@mui/material"; +import { Grid } from "@mui/system"; +import { useForm } from "react-hook-form"; +import { TrashIcon, PlusIcon, PencilIcon } from "@heroicons/react/24/outline"; +import { CippDataTable } from "../CippTable/CippDataTable"; +import CippFormComponent from "../CippComponents/CippFormComponent"; +import { CippApiResults } from "../CippComponents/CippApiResults"; +import { ApiGetCall, ApiPostCall } from "../../api/ApiCall"; + +export const CippUserManagement = () => { + const [dialogOpen, setDialogOpen] = useState(false); + const [editingUser, setEditingUser] = useState(null); + + const formControl = useForm({ + mode: "onChange", + defaultValues: { UPN: "", Roles: [] }, + }); + + const rolesQuery = ApiGetCall({ + url: "/api/ListCustomRole", + queryKey: "customRoleList", + }); + + const userAction = ApiPostCall({ + relatedQueryKeys: ["cippUsersList"], + }); + + const allRoles = Array.isArray(rolesQuery.data) ? rolesQuery.data : []; + const roleOptions = allRoles.map((r) => ({ + label: `${r.RoleName} (${r.Type})`, + value: r.RoleName, + })); + + const openAddDialog = () => { + setEditingUser(null); + formControl.reset({ UPN: "", Roles: [] }); + setDialogOpen(true); + }; + + const openEditDialog = (row) => { + setEditingUser(row); + const currentRoles = (row.Roles ?? []).map((r) => { + const match = roleOptions.find((opt) => opt.value === r); + return match ?? { label: r, value: r }; + }); + formControl.reset({ UPN: row.UPN, Roles: currentRoles }); + setDialogOpen(true); + }; + + const handleSaveUser = (data) => { + const roles = Array.isArray(data.Roles) ? data.Roles.map((r) => r.value ?? r) : [data.Roles]; + userAction.mutate( + { + url: "/api/ExecCIPPUsers", + data: { + Action: "AddUpdate", + UPN: data.UPN, + Roles: roles, + }, + }, + { + onSuccess: () => { + formControl.reset({ UPN: "", Roles: [] }); + setEditingUser(null); + setDialogOpen(false); + }, + } + ); + }; + + const actions = [ + { + label: "Edit Roles", + icon: ( + + + + ), + noConfirm: true, + customFunction: (row) => openEditDialog(row), + }, + { + label: "Delete User", + icon: ( + + + + ), + confirmText: "Are you sure you want to remove this user's access to CIPP?", + url: "/api/ExecCIPPUsers", + type: "POST", + data: { + Action: "Delete", + UPN: "UPN", + }, + relatedQueryKeys: ["cippUsersList"], + }, + ]; + + const offCanvas = { + children: (row) => ( + + + + Email / UPN + + {row.UPN} + + + + + Assigned Roles + + + {(row.Roles ?? []).map((role, idx) => ( + + ))} + + + + ), + }; + + return ( + + + + + } + onClick={openAddDialog} + > + Add User + + } + api={{ + url: "/api/ListCIPPUsers", + dataKey: "Users", + }} + queryKey="cippUsersList" + simpleColumns={["UPN", "Roles"]} + offCanvas={offCanvas} + /> + + + + setDialogOpen(false)} + maxWidth="sm" + fullWidth + > + {editingUser ? `Edit Roles — ${editingUser.UPN}` : "Add CIPP User"} + + + + {editingUser + ? "Update the roles assigned to this user." + : "Add a user by their email address (UPN) and assign one or more roles. If the user already exists, their roles will be updated."} + + {!editingUser && ( + + )} + + + + + + + + + + ); +}; + +export default CippUserManagement; diff --git a/src/components/CippStandards/CippStandardAccordion.jsx b/src/components/CippStandards/CippStandardAccordion.jsx index 1a2811d462c3..5aed7f6950a8 100644 --- a/src/components/CippStandards/CippStandardAccordion.jsx +++ b/src/components/CippStandards/CippStandardAccordion.jsx @@ -2,6 +2,7 @@ import React, { useEffect, useState, useMemo } from "react"; import { Card, Stack, + Alert, Avatar, Box, Typography, @@ -31,7 +32,7 @@ import { import { Grid } from "@mui/system"; import CippFormComponent from "../CippComponents/CippFormComponent"; import { useWatch, useFormState } from "react-hook-form"; -import _ from "lodash"; +import { get, isEqual, cloneDeep } from "lodash"; import Microsoft from "../../icons/iconly/bulk/microsoft"; import Azure from "../../icons/iconly/bulk/azure"; import Exchange from "../../icons/iconly/bulk/exchange"; @@ -53,8 +54,9 @@ const getAvailableActions = (disabledFeatures) => { return allActions.filter((action) => !disabledFeatures?.[action.value.toLowerCase()]); }; -const CippAddedComponent = React.memo(({ standardName, component, formControl }) => { +const CippAddedComponent = React.memo(({ standardName, component, formControl, currentValue }) => { const updatedComponent = { ...component }; + const fieldName = `${standardName}.${updatedComponent.name}`; if (component.type === "AdminRolesMultiSelect") { updatedComponent.type = "autoComplete"; @@ -73,15 +75,30 @@ const CippAddedComponent = React.memo(({ standardName, component, formControl }) updatedComponent.type = component.type; } + const warningThreshold = Number(updatedComponent.warningThreshold); + const numericValue = Number(currentValue); + const showThresholdWarning = + Number.isFinite(warningThreshold) && + !Number.isNaN(numericValue) && + `${currentValue}`.trim() !== "" && + numericValue > warningThreshold; + + const warningMessage = + updatedComponent.warningMessage || + `Values above ${warningThreshold} can match unrelated policies. Use with caution.`; + return ( - + + + {showThresholdWarning && {warningMessage}} + ); }); @@ -151,7 +168,7 @@ const CippStandardAccordion = ({ // ALWAYS require an action for any standard to be considered configured // The action field should be an array with at least one element - const actionValue = _.get(values, "action"); + const actionValue = get(values, "action"); if (!actionValue || (Array.isArray(actionValue) && actionValue.length === 0)) return false; // Additional checks for required components @@ -171,7 +188,7 @@ const CippStandardAccordion = ({ // Handle conditional fields if (component.condition) { const conditionField = component.condition.field; - const conditionValue = _.get(values, conditionField); + const conditionValue = get(values, conditionField); const compareType = component.condition.compareType || "is"; const compareValue = component.condition.compareValue; const propertyName = component.condition.propertyName || "value"; @@ -180,10 +197,10 @@ const CippStandardAccordion = ({ if (propertyName === "value") { switch (compareType) { case "is": - conditionMet = _.isEqual(conditionValue, compareValue); + conditionMet = isEqual(conditionValue, compareValue); break; case "isNot": - conditionMet = !_.isEqual(conditionValue, compareValue); + conditionMet = !isEqual(conditionValue, compareValue); break; default: conditionMet = false; @@ -207,7 +224,7 @@ const CippStandardAccordion = ({ if (!isRequired) return true; // Get field value using lodash's get to properly handle nested properties - const fieldValue = _.get(values, component.name); + const fieldValue = get(values, component.name); // Check if field has a value based on its type and multiple property if (component.type === "autoComplete" || component.type === "select") { @@ -246,10 +263,10 @@ const CippStandardAccordion = ({ // For each standard, get its current values and determine if it's configured Object.keys(selectedStandards).forEach((standardName) => { - const currentValues = _.get(watchedValues, standardName); + const currentValues = get(watchedValues, standardName); if (!currentValues) return; - initial[standardName] = _.cloneDeep(currentValues); + initial[standardName] = cloneDeep(currentValues); const baseStandardName = standardName.split("[")[0]; const standard = providedStandards.find((s) => s.name === baseStandardName); @@ -288,9 +305,9 @@ const CippStandardAccordion = ({ const updated = { ...prev }; removedKeys.forEach((k) => delete updated[k]); addedKeys.forEach((k) => { - const currentValues = _.get(watchedValues, k); + const currentValues = get(watchedValues, k); if (currentValues) { - updated[k] = _.cloneDeep(currentValues); + updated[k] = cloneDeep(currentValues); } }); return updated; @@ -302,7 +319,7 @@ const CippStandardAccordion = ({ addedKeys.forEach((k) => { const baseStandardName = k.split("[")[0]; const standard = providedStandards.find((s) => s.name === baseStandardName); - const currentValues = _.get(watchedValues, k); + const currentValues = get(watchedValues, k); if (standard && currentValues) { updated[k] = isStandardConfigured(k, standard, currentValues); } @@ -316,7 +333,7 @@ const CippStandardAccordion = ({ // Save changes for a standard const handleSave = (standardName, standard, current) => { // Clone the current values to avoid reference issues - const newValues = _.cloneDeep(current); + const newValues = cloneDeep(current); // Update saved values setSavedValues((prev) => ({ @@ -352,11 +369,11 @@ const CippStandardAccordion = ({ // Cancel changes for a standard const handleCancel = (standardName) => { // Get the last saved values - const savedValue = _.get(savedValues, standardName); + const savedValue = get(savedValues, standardName); if (!savedValue) return; // Set the entire standard's value at once to ensure proper handling of nested objects and arrays - formControl.setValue(standardName, _.cloneDeep(savedValue)); + formControl.setValue(standardName, cloneDeep(savedValue)); // Find the original standard definition to get the base standard const baseStandardName = standardName.split("[")[0]; @@ -432,9 +449,12 @@ const CippStandardAccordion = ({ (standard.cat && standard.cat.toLowerCase().includes(searchLower)) || (standard.tag && Array.isArray(standard.tag) && - standard.tag.some((tag) => tag.toLowerCase().includes(searchLower))); + standard.tag.some((tag) => tag.toLowerCase().includes(searchLower))) || + (standard.appliesToTest && + Array.isArray(standard.appliesToTest) && + standard.appliesToTest.some((testId) => testId.toLowerCase().includes(searchLower))); - const isConfigured = _.get(configuredState, standardName); + const isConfigured = get(configuredState, standardName); const matchesFilter = filter === "all" || (filter === "configured" && isConfigured) || @@ -596,10 +616,10 @@ const CippStandardAccordion = ({ const isExpanded = expanded === standardName; const hasAddedComponents = standard.addedComponent && standard.addedComponent.length > 0; - const isConfigured = _.get(configuredState, standardName); + const isConfigured = get(configuredState, standardName); const disabledFeatures = standard.disabledFeatures || {}; - let selectedActions = _.get(watchedValues, `${standardName}.action`); + let selectedActions = get(watchedValues, `${standardName}.action`); if (selectedActions && !Array.isArray(selectedActions)) { selectedActions = [selectedActions]; } @@ -608,13 +628,13 @@ const CippStandardAccordion = ({ let templateDisplayName = ""; if (standardName.startsWith("standards.IntuneTemplate")) { // Check for TemplateList selection - const templateList = _.get(watchedValues, `${standardName}.TemplateList`); + const templateList = get(watchedValues, `${standardName}.TemplateList`); if (templateList && templateList.label) { templateDisplayName = templateList.label; } // Check for TemplateList-Tags selection (takes priority) - const templateListTags = _.get(watchedValues, `${standardName}.TemplateList-Tags`); + const templateListTags = get(watchedValues, `${standardName}.TemplateList-Tags`); if (templateListTags && templateListTags.label) { templateDisplayName = templateListTags.label; } @@ -622,21 +642,21 @@ const CippStandardAccordion = ({ // For multiple standards, check the first added component const selectedTemplateName = standard.multiple - ? _.get(watchedValues, `${standardName}.${standard.addedComponent?.[0]?.name}`) + ? get(watchedValues, `${standardName}.${standard.addedComponent?.[0]?.name}`) : ""; // Build accordion title with template name if available const accordionTitle = templateDisplayName ? `${standard.label} - ${templateDisplayName}` - : selectedTemplateName && _.get(selectedTemplateName, "label") - ? `${standard.label} - ${_.get(selectedTemplateName, "label")}` + : selectedTemplateName && get(selectedTemplateName, "label") + ? `${standard.label} - ${get(selectedTemplateName, "label")}` : standard.label; // Get current values and check if they differ from saved values - const current = _.get(watchedValues, standardName); - const saved = _.get(savedValues, standardName) || {}; + const current = get(watchedValues, standardName); + const saved = get(savedValues, standardName) || {}; - const hasUnsaved = !_.isEqual(current, saved); + const hasUnsaved = !isEqual(current, saved); // Check if all required fields are filled const requiredFieldsFilled = current @@ -651,7 +671,7 @@ const CippStandardAccordion = ({ // Handle conditional fields if (component.condition) { const conditionField = component.condition.field; - const conditionValue = _.get(current, conditionField); + const conditionValue = get(current, conditionField); const compareType = component.condition.compareType || "is"; const compareValue = component.condition.compareValue; const propertyName = component.condition.propertyName || "value"; @@ -660,10 +680,10 @@ const CippStandardAccordion = ({ if (propertyName === "value") { switch (compareType) { case "is": - conditionMet = _.isEqual(conditionValue, compareValue); + conditionMet = isEqual(conditionValue, compareValue); break; case "isNot": - conditionMet = !_.isEqual(conditionValue, compareValue); + conditionMet = !isEqual(conditionValue, compareValue); break; default: conditionMet = false; @@ -685,7 +705,7 @@ const CippStandardAccordion = ({ } // Get field value for validation using lodash's get to properly handle nested properties - const fieldValue = _.get(current, component.name); + const fieldValue = get(current, component.name); // Check if required field has a value based on its type and multiple property if (component.type === "autoComplete" || component.type === "select") { @@ -714,12 +734,12 @@ const CippStandardAccordion = ({ ); // Action is always required and must be an array with at least one element - const actionValue = _.get(current, "action"); + const actionValue = get(current, "action"); const hasAction = actionValue && (!Array.isArray(actionValue) || actionValue.length > 0); // Check if this standard has any validation errors - const standardErrors = _.get(formErrors, standardName); + const standardErrors = get(formErrors, standardName); const hasValidationErrors = standardErrors && Object.keys(standardErrors).length > 0; // Allow saving if: @@ -937,6 +957,10 @@ const CippStandardAccordion = ({ standardName={standardName} component={component} formControl={formControl} + currentValue={get( + watchedValues, + `${standardName}.${component.name}`, + )} />     ) : ( @@ -945,6 +969,10 @@ const CippStandardAccordion = ({ standardName={standardName} component={component} formControl={formControl} + currentValue={get( + watchedValues, + `${standardName}.${component.name}`, + )} /> ), )} @@ -995,6 +1023,10 @@ const CippStandardAccordion = ({ standardName={standardName} component={component} formControl={formControl} + currentValue={get( + watchedValues, + `${standardName}.${component.name}`, + )} /> ) : ( @@ -1003,6 +1035,10 @@ const CippStandardAccordion = ({ standardName={standardName} component={component} formControl={formControl} + currentValue={get( + watchedValues, + `${standardName}.${component.name}`, + )} /> ), )} diff --git a/src/components/CippStandards/CippStandardDialog.jsx b/src/components/CippStandards/CippStandardDialog.jsx index 6ebe6362930c..4761ffcab94f 100644 --- a/src/components/CippStandards/CippStandardDialog.jsx +++ b/src/components/CippStandards/CippStandardDialog.jsx @@ -788,7 +788,11 @@ const CippStandardDialog = ({ standard.label.toLowerCase().includes(localSearchQuery.toLowerCase()) || standard.helpText.toLowerCase().includes(localSearchQuery.toLowerCase()) || (standard.tag && - standard.tag.some((tag) => tag.toLowerCase().includes(localSearchQuery.toLowerCase()))); + standard.tag.some((tag) => tag.toLowerCase().includes(localSearchQuery.toLowerCase()))) || + (standard.appliesToTest && + standard.appliesToTest.some((testId) => + testId.toLowerCase().includes(localSearchQuery.toLowerCase()) + )); // Category filter const matchesCategory = diff --git a/src/components/CippStandards/CippStandardsSideBar.jsx b/src/components/CippStandards/CippStandardsSideBar.jsx index f633f9b14ed9..2cab69c42f7e 100644 --- a/src/components/CippStandards/CippStandardsSideBar.jsx +++ b/src/components/CippStandards/CippStandardsSideBar.jsx @@ -29,7 +29,7 @@ import CheckIcon from "@heroicons/react/24/outline/CheckIcon"; import CloseIcon from "@mui/icons-material/Close"; import { useWatch } from "react-hook-form"; import { useEffect, useState } from "react"; -import _ from "lodash"; +import { get } from "lodash"; import CippFormComponent from "../CippComponents/CippFormComponent"; import { CippFormTenantSelector } from "../CippComponents/CippFormTenantSelector"; import { CippApiDialog } from "../CippComponents/CippApiDialog"; @@ -241,14 +241,14 @@ const CippStandardsSideBar = ({ useEffect(() => { const stepsStatus = { - step1: !!_.get(watchForm, "templateName"), - step2: _.get(watchForm, "tenantFilter", []).length > 0, + step1: !!get(watchForm, "templateName"), + step2: get(watchForm, "tenantFilter", []).length > 0, step3: Object.keys(selectedStandards).length > 0, step4: - _.get(watchForm, "standards") && + get(watchForm, "standards") && Object.keys(selectedStandards).length > 0 && Object.keys(selectedStandards).every((standardName) => { - const standardValues = _.get(watchForm, `${standardName}`, {}); + const standardValues = get(watchForm, `${standardName}`, {}); const standard = selectedStandards[standardName]; // Check if this standard requires an action const hasRequiredComponents = @@ -258,7 +258,7 @@ const CippStandardsSideBar = ({ ); const actionRequired = standard?.disabledFeatures !== undefined || hasRequiredComponents; // Always require an action value which should be an array with at least one element - const actionValue = _.get(standardValues, "action"); + const actionValue = get(standardValues, "action"); return actionValue && (!Array.isArray(actionValue) || actionValue.length > 0); }), }; @@ -269,17 +269,17 @@ const CippStandardsSideBar = ({ // Create a local reference to the stepsStatus from the latest effect run const stepsStatus = { - step1: !!_.get(watchForm, "templateName"), - step2: _.get(watchForm, "tenantFilter", []).length > 0, + step1: !!get(watchForm, "templateName"), + step2: get(watchForm, "tenantFilter", []).length > 0, step3: Object.keys(selectedStandards).length > 0, step4: - _.get(watchForm, "standards") && + get(watchForm, "standards") && Object.keys(selectedStandards).length > 0 && Object.keys(selectedStandards).every((standardName) => { - const standardValues = _.get(watchForm, `${standardName}`, {}); + const standardValues = get(watchForm, `${standardName}`, {}); const standard = selectedStandards[standardName]; // Always require an action for all standards (must be an array with at least one element) - const actionValue = _.get(standardValues, "action"); + const actionValue = get(standardValues, "action"); return actionValue && (!Array.isArray(actionValue) || actionValue.length > 0); }), }; diff --git a/src/components/CippTable/CIPPTableToptoolbar.js b/src/components/CippTable/CIPPTableToptoolbar.js index 58d8a180813b..232c752bb2c9 100644 --- a/src/components/CippTable/CIPPTableToptoolbar.js +++ b/src/components/CippTable/CIPPTableToptoolbar.js @@ -1239,7 +1239,7 @@ export const CIPPTableToptoolbar = React.memo( )} {/* Cold start indicator */} - {getRequestData?.data?.pages?.[0].Metadata?.ColdStart === true && ( + {getRequestData?.data?.pages?.[0]?.Metadata?.ColdStart === true && ( diff --git a/src/components/CippTable/CippDataTable.js b/src/components/CippTable/CippDataTable.js index 100837ab17d3..22c9bfe66ff2 100644 --- a/src/components/CippTable/CippDataTable.js +++ b/src/components/CippTable/CippDataTable.js @@ -341,6 +341,7 @@ export const CippDataTable = (props) => { }, exportEnabled = true, simpleColumns = [], + dataFilter, actions, title = 'Report', simple = false, @@ -476,7 +477,7 @@ export const CippDataTable = (props) => { const nestedData = getNestedValue(page, api.dataKey) return nestedData !== undefined ? nestedData : [] }) - setUsedData(combinedResults) + setUsedData(dataFilter ? combinedResults.filter(dataFilter) : combinedResults) } }, [ getRequestData.isSuccess, @@ -579,6 +580,9 @@ export const CippDataTable = (props) => { }, [columns.length, usedData, queryKey, settings?.currentTenant, filterTypeMap]) const createDialog = useDialog() + const hasActions = !!actions + const hasOffCanvas = !!offCanvas + const hasOnChange = !!onChange // Compute modeInfo via useMemo so it stays stable but updates when relevant inputs change. const modeInfo = useMemo( @@ -593,7 +597,7 @@ export const CippDataTable = (props) => { maxHeightOffset, settings ), - [simple, !!actions, !!offCanvas, !!onChange, maxHeightOffset, settings?.tablePageSize?.value] + [simple, hasActions, hasOffCanvas, hasOnChange, maxHeightOffset, settings?.tablePageSize?.value] ) // Include updateTrigger in data memo to force re-render when license backfill completes @@ -651,7 +655,15 @@ export const CippDataTable = (props) => { const muiTableBodyRowProps = useMemo(() => { if (offCanvasOnRowClick && offCanvas) { return ({ row }) => ({ - onClick: () => { + onClick: (event) => { + if ( + event.target?.closest?.( + 'button, a, input, textarea, select, [role="button"], [role="menuitem"], [data-no-row-click="true"]' + ) + ) { + return + } + setOffCanvasData(row.original) const filteredRowsArray = table?.getFilteredRowModel?.()?.rows if (filteredRowsArray) { @@ -856,6 +868,8 @@ export const CippDataTable = (props) => { layoutMode: 'grid-no-grow', enableRowVirtualization: true, enableColumnVirtualization: true, + enableColumnResizing: true, + columnResizeMode: 'onChange', rowVirtualizerOptions: { overscan: 5, }, diff --git a/src/components/CippTable/CippDataTableButton.jsx b/src/components/CippTable/CippDataTableButton.jsx index 79eec0f04bc5..86c3c887e1e9 100644 --- a/src/components/CippTable/CippDataTableButton.jsx +++ b/src/components/CippTable/CippDataTableButton.jsx @@ -5,7 +5,9 @@ import { getCippTranslation } from "../../utils/get-cipp-translation"; const CippDataTableButton = ({ data, title, tableTitle = "Data" }) => { const [openDialogs, setOpenDialogs] = useState([]); - const handleOpenDialog = () => { + const handleOpenDialog = (event) => { + event?.stopPropagation(); + let dataArray; if (Array.isArray(data)) { @@ -21,7 +23,8 @@ const CippDataTableButton = ({ data, title, tableTitle = "Data" }) => { setOpenDialogs([...openDialogs, dataArray]); }; - const handleCloseDialog = (index) => { + const handleCloseDialog = (index, event) => { + event?.stopPropagation?.(); setOpenDialogs(openDialogs.filter((_, i) => i !== index)); }; const dataIsNotANullArray = @@ -48,7 +51,9 @@ const CippDataTableButton = ({ data, title, tableTitle = "Data" }) => { handleCloseDialog(index)} + onClose={(event) => handleCloseDialog(index, event)} + onMouseDown={(event) => event.stopPropagation()} + onClick={(event) => event.stopPropagation()} fullWidth maxWidth="lg" > diff --git a/src/components/CippTable/CippGraphExplorerFilter.js b/src/components/CippTable/CippGraphExplorerFilter.js index 14f089ad2b17..0848c595b252 100644 --- a/src/components/CippTable/CippGraphExplorerFilter.js +++ b/src/components/CippTable/CippGraphExplorerFilter.js @@ -32,6 +32,7 @@ const CippGraphExplorerFilter = ({ selectedPreset = null, onPresetSelect, hideButtons = false, + initialValues = null, }) => { const [offCanvasOpen, setOffCanvasOpen] = useState(false) const [cardExpanded, setCardExpanded] = useState(true) @@ -67,6 +68,12 @@ const CippGraphExplorerFilter = ({ }, }) + useEffect(() => { + if (initialValues && !selectedPreset) { + formControl.reset({ ...formControl.getValues(), ...initialValues }, { keepDefaultValues: true }) + } + }, []) + const defaultGraphExplorerTitle = 'Graph Explorer' var gridItemSize = 6 @@ -517,9 +524,19 @@ const CippGraphExplorerFilter = ({ if (values.$count === false) { delete values.$count } + if (values.AsApp === false) { + delete values.AsApp + } + + // Remove non-API fields and null/empty values + delete values.name + delete values.id + delete values.IsShared + delete values.reportTemplate + delete values.ReverseTenantLookupProperty Object.keys(values).forEach((key) => { - if (values[key] === null) { + if (values[key] === null || values[key] === '') { delete values[key] } }) diff --git a/src/components/CippTable/CippGraphExplorerSimpleFilter.js b/src/components/CippTable/CippGraphExplorerSimpleFilter.js index 24d32b8cb795..38ef0f0cadda 100644 --- a/src/components/CippTable/CippGraphExplorerSimpleFilter.js +++ b/src/components/CippTable/CippGraphExplorerSimpleFilter.js @@ -188,6 +188,7 @@ const CippGraphExplorerSimpleFilter = ({ relatedQueryKeys={relatedQueryKeys} selectedPreset={selectedPreset} onPresetSelect={handlePresetChange} + initialValues={currentFilterValues} /> diff --git a/src/components/CippTable/util-columnsFromAPI.js b/src/components/CippTable/util-columnsFromAPI.js index b3d3c0e61be5..65fdbb411f19 100644 --- a/src/components/CippTable/util-columnsFromAPI.js +++ b/src/components/CippTable/util-columnsFromAPI.js @@ -9,78 +9,136 @@ const skipRecursion = ['location', 'ScheduledBackupValues', 'Tenant'] const MAX_SIZE_SAMPLE = 30 // Average character width in pixels at compact density (roughly 7–8px per char). const CHAR_WIDTH = 8 -// Extra padding per cell (sort icon, filter icon, cell padding). -const CELL_PADDING = 36 +// Extra padding per cell (sort icon, filter icon, cell padding, resize handle). +const CELL_PADDING = 5 const MIN_COL_SIZE = 80 const MAX_COL_SIZE = 500 +// Extra pixels reserved in the header for MRT chrome (sort icon, column actions menu, +// resize handle, filter icon). These sit alongside the header text and consume space. +const HEADER_CHROME_PX = 75 + +// Extra pixels per chip for icon + internal padding + margin. +const CHIP_CHROME_PX = 45 + +// DateTime columns render as relative time (e.g. "about 2 months ago"). Use a fixed +// character length instead of measuring the raw ISO date string. +const RELATIVE_TIME_CHARS = 20 + +// Known datetime accessor names and pattern — must stay in sync with get-cipp-formatting.js +const TIME_AGO_NAMES = new Set([ + 'ExecutedTime', 'ScheduledTime', 'Timestamp', 'timestamp', 'DateTime', 'LastRun', + 'LastRefresh', 'createdDateTime', 'activatedDateTime', 'lastModifiedDateTime', + 'endDateTime', 'ReceivedTime', 'Expires', 'updatedAt', 'createdAt', 'Received', + 'Date', 'WhenCreated', 'WhenChanged', 'CreationTime', 'renewalDate', + 'commitmentTerm.renewalConfiguration.renewalDate', 'purchaseDate', 'NextOccurrence', + 'LastOccurrence', 'NotBefore', 'NotAfter', 'latestDataCollection', + 'requestDate', 'reviewedDate', 'GeneratedAt', +]) +const MATCH_DATE_TIME = /([dD]ate[tT]ime|[Ee]xpiration|[Tt]imestamp|[sS]tart[Dd]ate)/ +const isDateTimeColumn = (key) => TIME_AGO_NAMES.has(key) || MATCH_DATE_TIME.test(key) + // Measure the pixel width a column needs based on its header and sampled cell values. // rawValues are the original data values (before formatting) — if they contain arrays or // complex objects the column renders as a button/chip list, so we cap to header width. -// Returns { size, minSize } where minSize is always header-width + 30px safe space. -const measureColumnSize = (header, valuesForColumn, rawValues) => { +// Returns { size, minSize } where minSize is always header-width + chrome safe space. +const measureColumnSize = (header, valuesForColumn, rawValues, accessorKey) => { const headerLen = header ? header.length : 6 - const headerPx = Math.round(headerLen * CHAR_WIDTH + CELL_PADDING + 30) + const headerPx = Math.round(headerLen * CHAR_WIDTH + CELL_PADDING + HEADER_CHROME_PX) const minSize = Math.max(MIN_COL_SIZE, headerPx) - // If any raw value is an array or complex object, the cell renders as a compact - // button or chip list. We measure the longest individual chip/item rather than the - // full joined text. For object arrays that format into comma-separated chip labels - // (e.g. assignedLicenses), we split the formatted text on commas to measure each chip. + // If any raw value is an array or complex object, the cell renders as either: + // - A CippDataTableButton ("X items" button) for object arrays and plain objects + // - A CollapsibleChipList for string/primitive arrays + // Size accordingly: buttons are compact, chips need per-item measurement. if (rawValues && rawValues.length > 0) { const hasComplex = rawValues.some( (v) => Array.isArray(v) || (typeof v === 'object' && v !== null) ) if (hasComplex) { + // Check if these are object arrays or plain objects — they render as a small + // "X items" button (CippDataTableButton), so size to the button width. + const allObjectLike = rawValues.every((v) => { + if (v === null || v === undefined) return true // nulls are fine, they show "No items" + if (Array.isArray(v)) return v.length === 0 || v.some((el) => typeof el === 'object' && el !== null) + return typeof v === 'object' + }) + if (allObjectLike) { + // The formatted text tells us how this column actually renders: + // - JSON strings (starts with [ or {) → CippDataTableButton ("X items"), compact + // - Comma-separated text → chips/inline content, needs real measurement + const looksLikeButton = valuesForColumn.every((t) => { + if (t === null || t === undefined || t === '' || t === 'No data') return true + if (Array.isArray(t)) return true // handler returned a raw array (e.g. []) + const s = typeof t === 'string' ? t.trim() : '' + return s.startsWith('[') || s.startsWith('{') || s === 'Password hidden' + }) + if (looksLikeButton) { + return { size: minSize, minSize } + } + // Object arrays that render as chips — measure the longest item from the + // comma-separated text representation. + let longestObjItem = headerLen + for (const t of valuesForColumn) { + if (typeof t !== 'string') continue + const parts = t.split(',') + for (const p of parts) { + const len = p.trim().length + if (len > longestObjItem) longestObjItem = len + } + } + const objChipPx = Math.round(longestObjItem * CHAR_WIDTH + CELL_PADDING + CHIP_CHROME_PX + HEADER_CHROME_PX) + const objSize = Math.max(minSize, Math.min(MAX_COL_SIZE, objChipPx)) + return { size: objSize, minSize } + } + + // String/primitive arrays → rendered as chip list. Measure the longest + // single item across all rows, then size like a regular text column. let longestItem = headerLen for (let i = 0; i < rawValues.length; i++) { const v = rawValues[i] if (Array.isArray(v)) { - const isObjectArray = v.some((el) => typeof el === 'object' && el !== null) - if (isObjectArray) { - // Object arrays get translated by getCippFormatting into comma-joined text. - // Split on ", " and measure each segment (each becomes a chip). - const formatted = valuesForColumn[i] - if (typeof formatted === 'string') { - for (const seg of formatted.split(', ')) { - if (seg.length > longestItem) longestItem = seg.length - } - } - continue - } - // Arrays of strings/numbers → chips — measure each item for (const el of v) { const s = typeof el === 'string' ? el : el != null ? String(el) : '' if (s.length > longestItem) longestItem = s.length } } - // Plain objects → may also format into chip text - if (typeof v === 'object' && v !== null && !Array.isArray(v)) { - const formatted = valuesForColumn[i] - if (typeof formatted === 'string') { - for (const seg of formatted.split(', ')) { - if (seg.length > longestItem) longestItem = seg.length - } - } - } } - const chipPx = Math.round(longestItem * CHAR_WIDTH + CELL_PADDING) + const chipPx = Math.round(longestItem * CHAR_WIDTH + CELL_PADDING + CHIP_CHROME_PX + HEADER_CHROME_PX) const size = Math.max(minSize, Math.min(MAX_COL_SIZE, chipPx)) return { size, minSize } } } - let maxLen = headerLen + // DateTime columns render as relative time — use a fixed width instead of the raw string. + if (accessorKey && isDateTimeColumn(accessorKey)) { + const dtLen = Math.max(headerLen, RELATIVE_TIME_CHARS) + const dtPx = Math.round(dtLen * CHAR_WIDTH + CELL_PADDING) + const size = Math.max(minSize, Math.min(MAX_COL_SIZE, dtPx)) + return { size, minSize } + } + const sample = valuesForColumn.length > MAX_SIZE_SAMPLE ? valuesForColumn.slice(0, MAX_SIZE_SAMPLE) : valuesForColumn - for (const v of sample) { - const str = typeof v === 'string' ? v : v != null ? String(v) : '' - // URLs render as icons/links in the cell — don't measure the full URL text. - if (str.match(/^https?:\/\//i) || str.match(/^\/api\//i)) continue - if (str.length > maxLen) maxLen = str.length + const lengths = sample + .map((v) => { + const str = typeof v === 'string' ? v : v != null ? String(v) : '' + // URLs render as icons/links in the cell — don't measure the full URL text. + if (str.match(/^https?:\/\//i) || str.match(/^\/api\//i)) return 0 + return str.length + }) + .sort((a, b) => a - b) + + // Trim the top and bottom 10% to remove outliers, then use the longest remaining value. + let trimmedLengths = lengths + if (lengths.length >= 5) { + const trimCount = Math.max(1, Math.floor(lengths.length * 0.1)) + trimmedLengths = lengths.slice(trimCount, lengths.length - trimCount) } + const maxLen = Math.max(headerLen, ...trimmedLengths) + const px = Math.round(maxLen * CHAR_WIDTH + CELL_PADDING) const size = Math.max(minSize, Math.min(MAX_COL_SIZE, px)) return { size, minSize } @@ -206,11 +264,11 @@ export const utilColumnsFromAPI = (dataArray) => { // Measure content width from formatted text values for this column. const textValues = valuesForColumn.map((v) => getCippFormatting(v, accessorKey, 'text')) const header = getCippTranslation(accessorKey) - const measuredSize = measureColumnSize(header, textValues, valuesForColumn) + const measuredSize = measureColumnSize(header, textValues, valuesForColumn, accessorKey) // Allow per-column size overrides for columns whose rendered output // doesn't match text width (icons, progress bars, etc.). - const sizeOverride = getCippColumnSize(accessorKey) + const sizeOverride = getCippColumnSize(accessorKey, header) let finalSize = { ...measuredSize } if (sizeOverride) { const resolve = (v) => (v === 'header' ? measuredSize.minSize : v) diff --git a/src/components/CippTestDetail/CippTestDetailOffCanvas.jsx b/src/components/CippTestDetail/CippTestDetailOffCanvas.jsx index 290387d2bb75..990ed7472a08 100644 --- a/src/components/CippTestDetail/CippTestDetailOffCanvas.jsx +++ b/src/components/CippTestDetail/CippTestDetailOffCanvas.jsx @@ -49,25 +49,19 @@ const getImpactColor = (impact) => { } }; -const checkCIPPStandardAvailable = (testName) => { - if (!testName) return "No"; - console.log(testName); - // Check if any standard's tag array contains a reference to this test - const hasStandard = standardsData.some((standard) => { - if (!standard.tag || !Array.isArray(standard.tag)) return false; - // Check if any tag matches the test name or contains it - return standard.tag.some((tag) => { - const tagLower = tag.toLowerCase(); - const testLower = testName.toLowerCase(); - return tagLower.includes(testLower) || testLower.includes(tagLower); - }); - }); - - return hasStandard ? "Yes" : "No"; +// Find every CIPP standard whose appliesToTest array includes this test's RowKey. +// appliesToTest stores TestIds (e.g. "CIS_1_1_1", "ZTNA21772", "SMB1001_2_5"); the +// row's RowKey is the same TestId, so this is an exact lookup. +const getMatchingStandards = (testName) => { + if (!testName) return []; + return standardsData.filter( + (standard) => + Array.isArray(standard.appliesToTest) && standard.appliesToTest.includes(testName) + ); }; // Shared markdown styling for consistent rendering -const markdownStyles = { +export const markdownStyles = { "& a": { color: (theme) => theme.palette.primary.main, textDecoration: "underline", @@ -135,11 +129,13 @@ export const CippTestDetailOffCanvas = ({ row }) => { } const computedCustomMarkdown = - hasRawCustomData && parsedCustomResult !== null + hasRawCustomData && parsedCustomResult !== null && !row.ResultMarkdown ? renderCustomScriptMarkdownTemplate(parsedCustomResult, row.MarkdownTemplate || "") : null; - const shouldRenderCustomJson = hasRawCustomData && row.ReturnType === "JSON"; - const shouldRenderCustomMarkdown = hasRawCustomData && !shouldRenderCustomJson; + const shouldRenderCustomJson = hasRawCustomData && row.ReturnType === "JSON" && !row.ResultMarkdown; + const shouldRenderCustomMarkdown = hasRawCustomData && !shouldRenderCustomJson && !row.ResultMarkdown; + + const matchingStandards = getMatchingStandards(row.RowKey); return ( @@ -235,8 +231,8 @@ export const CippTestDetailOffCanvas = ({ row }) => { 0 ? `Yes (${matchingStandards.length})` : "No"} + color={matchingStandards.length > 0 ? "success" : "default"} size="small" /> @@ -246,6 +242,30 @@ export const CippTestDetailOffCanvas = ({ row }) => { + {matchingStandards.length > 0 && ( + + + + CIPP Standards that satisfy this test + + + The following CIPP standards can be deployed to remediate or enforce this test. + + + {matchingStandards.map((standard) => ( + + ))} + + + + )} + {(row.ResultMarkdown || shouldRenderCustomJson || shouldRenderCustomMarkdown) && ( diff --git a/src/components/CippWizard/CippAddTenantTypeSelection.jsx b/src/components/CippWizard/CippAddTenantTypeSelection.jsx index f8ba6a384884..520d1b978936 100644 --- a/src/components/CippWizard/CippAddTenantTypeSelection.jsx +++ b/src/components/CippWizard/CippAddTenantTypeSelection.jsx @@ -1,68 +1,82 @@ -import { Avatar, Card, CardContent, Stack, SvgIcon, Typography } from "@mui/material"; -import { useState, useEffect } from "react"; -import { CippWizardStepButtons } from "./CippWizardStepButtons"; -import { BuildingOfficeIcon, CloudIcon } from "@heroicons/react/24/outline"; +import { Avatar, Card, CardContent, Stack, SvgIcon, Typography } from '@mui/material' +import { useState, useEffect } from 'react' +import { CippWizardStepButtons } from './CippWizardStepButtons' +import { BuildingOfficeIcon, CloudIcon, LinkIcon } from '@heroicons/react/24/outline' export const CippAddTenantTypeSelection = (props) => { - const { onNextStep, formControl, currentStep, onPreviousStep } = props; + const { onNextStep, formControl, currentStep, onPreviousStep } = props - const [selectedOption, setSelectedOption] = useState(null); + const [selectedOption, setSelectedOption] = useState(null) // Register the tenantType field in react-hook-form - formControl.register("tenantType", { + formControl.register('tenantType', { required: true, - }); + }) // Restore selection if already set (when navigating back) useEffect(() => { - const currentValue = formControl.getValues("tenantType"); + const currentValue = formControl.getValues('tenantType') if (currentValue) { - setSelectedOption(currentValue); + setSelectedOption(currentValue) } // Restore the form's selectedOption state if navigating back - const selectedOptionValue = formControl.getValues("selectedOption"); + const selectedOptionValue = formControl.getValues('selectedOption') if (selectedOptionValue) { - formControl.setValue("selectedOption", selectedOptionValue); + formControl.setValue('selectedOption', selectedOptionValue) } - }, [formControl]); + }, [formControl]) const handleOptionClick = (value) => { - setSelectedOption(value); - formControl.setValue("tenantType", value); + setSelectedOption(value) + formControl.setValue('tenantType', value) // Clear validation fields from other paths when changing selection // This ensures going back and choosing a different option doesn't keep old validations - if (value === "GDAP") { + if (value === 'GDAP') { // Clear Direct tenant fields - formControl.unregister("DirectTenantAuth"); - } else if (value === "Direct") { + formControl.unregister('DirectTenantAuth') + } else if (value === 'Direct') { // Clear GDAP fields - formControl.unregister("GDAPTemplate"); - formControl.unregister("GDAPInviteAccepted"); - formControl.unregister("GDAPRelationshipId"); - formControl.unregister("GDAPOnboardingComplete"); + formControl.unregister('GDAPTemplate') + formControl.unregister('GDAPInviteAccepted') + formControl.unregister('GDAPRelationshipId') + formControl.unregister('GDAPOnboardingComplete') + } else if (value === 'IndirectReseller') { + // Clear other paths + formControl.unregister('DirectTenantAuth') + formControl.unregister('GDAPTemplate') + formControl.unregister('GDAPInviteAccepted') + formControl.unregister('GDAPRelationshipId') + formControl.unregister('GDAPOnboardingComplete') } // Trigger validation only for the tenantType field - formControl.trigger("tenantType"); - }; + formControl.trigger('tenantType') + } const options = [ { - value: "GDAP", - label: "Add GDAP Tenant", + value: 'GDAP', + label: 'Add GDAP Tenant', description: "Select this option to add a new tenant to your Microsoft Partner center environment. We'll walk you through the steps of setting up GDAP.", icon: , }, { - value: "Direct", - label: "Add Direct Tenant", + value: 'Direct', + label: 'Add Direct Tenant', description: - "Select this option if you are not a Microsoft partner, or want to add a tenant outside of the scope of your partner center.", + 'Select this option if you are not a Microsoft partner, or want to add a tenant outside of the scope of your partner center.', icon: , }, - ]; + { + value: 'IndirectReseller', + label: 'Get Reseller Invite Link', + description: + 'Generate a reseller relationship invite link to send to a customer. This does not add the tenant to CIPP, but may be used by other vendors to populate their customer list.', + icon: , + }, + ] return ( @@ -74,7 +88,7 @@ export const CippAddTenantTypeSelection = (props) => { {options.map((option) => { - const isSelected = selectedOption === option.value; + const isSelected = selectedOption === option.value return ( { onClick={() => handleOptionClick(option.value)} variant="outlined" sx={{ - cursor: "pointer", + cursor: 'pointer', ...(isSelected && { boxShadow: (theme) => `0px 0px 0px 2px ${theme.palette.primary.main}`, }), - "&:hover": { + '&:hover': { ...(isSelected ? {} : { boxShadow: 8 }), }, }} @@ -96,9 +110,9 @@ export const CippAddTenantTypeSelection = (props) => { @@ -111,7 +125,7 @@ export const CippAddTenantTypeSelection = (props) => { - ); + ) })} { formControl={formControl} /> - ); -}; + ) +} -export default CippAddTenantTypeSelection; +export default CippAddTenantTypeSelection diff --git a/src/components/CippWizard/CippGDAPTenantOnboarding.jsx b/src/components/CippWizard/CippGDAPTenantOnboarding.jsx index 4c5dc48a77cc..6357c5642eb5 100644 --- a/src/components/CippWizard/CippGDAPTenantOnboarding.jsx +++ b/src/components/CippWizard/CippGDAPTenantOnboarding.jsx @@ -45,11 +45,7 @@ export const CippGDAPTenantOnboarding = (props) => { }); const relationshipList = ApiGetCall({ - url: "/api/ListGraphRequest", - data: { - TenantFilter: "", - Endpoint: "tenantRelationships/delegatedAdminRelationships", - }, + url: "/api/ListGDAPRelationships", queryKey: "GDAPRelationshipOnboarding-wizard", }); diff --git a/src/components/CippWizard/CippIndirectResellerLink.jsx b/src/components/CippWizard/CippIndirectResellerLink.jsx new file mode 100644 index 000000000000..991e18683f34 --- /dev/null +++ b/src/components/CippWizard/CippIndirectResellerLink.jsx @@ -0,0 +1,133 @@ +import { useEffect, useMemo } from 'react' +import { Alert, Box, Skeleton, Stack, TextField, Typography } from '@mui/material' +import { ApiGetCall } from '../../api/ApiCall' +import { CippWizardStepButtons } from './CippWizardStepButtons' +import { CippCopyToClipBoard } from '../CippComponents/CippCopyToClipboard' +import CippFormComponent from '../CippComponents/CippFormComponent' +import { useWatch } from 'react-hook-form' + +export const CippIndirectResellerLink = (props) => { + const { formControl, currentStep, onPreviousStep, onNextStep } = props + + const linkData = ApiGetCall({ + url: '/api/ListResellerRelationshipLink', + queryKey: 'ListResellerRelationshipLink', + }) + + const inviteUrl = linkData.data?.inviteUrl ?? null + const indirectProviders = linkData.data?.indirectProviders ?? [] + const inviteUrlError = linkData.data?.inviteUrlError ?? null + + const noneOption = { label: 'None (no indirect provider)', value: null } + + const providerOptions = useMemo(() => { + const providers = indirectProviders.map((p) => ({ + label: `${p.name} — MPN: ${p.mpnId} (${p.location})`, + value: p.id, + })) + return [noneOption, ...providers] + }, [indirectProviders]) + + useEffect(() => { + if (!linkData.isFetching && providerOptions.length > 0) { + const current = formControl.getValues('indirectProviderId') + if (!current) { + formControl.setValue('indirectProviderId', noneOption) + } + } + }, [linkData.isFetching, providerOptions]) + + const selectedProvider = useWatch({ control: formControl.control, name: 'indirectProviderId' }) + + const finalUrl = useMemo(() => { + if (!inviteUrl) return null + if (!selectedProvider?.value) return inviteUrl + const hashIndex = inviteUrl.indexOf('#') + const base = hashIndex !== -1 ? inviteUrl.slice(0, hashIndex) : inviteUrl + const hash = hashIndex !== -1 ? inviteUrl.slice(hashIndex) : '' + return `${base}&indirectCSPId=${selectedProvider.value}${hash}` + }, [inviteUrl, selectedProvider]) + + return ( + + + + Indirect Reseller Relationship Link + + + Generate an invite link to send to a customer so they can authorize you as their indirect + reseller. This does not add the tenant to CIPP — it only provides the + Microsoft Admin Portal invitation link. + + + + {linkData.isFetching && ( + + + + + + + + + )} + + {linkData.isError && ( + + Failed to load relationship link from the Partner Center API. Ensure your CIPP application + has the required Partner Center permissions. + + )} + + {inviteUrlError && !linkData.isError && {inviteUrlError}} + + {!linkData.isFetching && !linkData.isError && inviteUrl && ( + <> + + + + + Invite Link + + + + + + + Send this link to your customer. When they follow it, they will be linked to your + reseller account in the Microsoft Admin Portal. + + + + + There is no automatic confirmation when the customer accepts this invite. You can verify + the relationship in Partner Center once the customer has completed the process. + + + )} + + + + ) +} diff --git a/src/components/CippWizard/CippIntunePolicy.jsx b/src/components/CippWizard/CippIntunePolicy.jsx index 455c14adf751..10d46a1b7e83 100644 --- a/src/components/CippWizard/CippIntunePolicy.jsx +++ b/src/components/CippWizard/CippIntunePolicy.jsx @@ -1,63 +1,63 @@ -import { Stack } from "@mui/material"; -import { Grid } from "@mui/system"; -import { CippWizardStepButtons } from "./CippWizardStepButtons"; -import CippJsonView from "../CippFormPages/CippJSONView"; -import CippFormComponent from "../CippComponents/CippFormComponent"; -import { ApiGetCall } from "../../api/ApiCall"; -import { useEffect, useState } from "react"; -import { useWatch } from "react-hook-form"; -import { CippFormCondition } from "../CippComponents/CippFormCondition"; -import { useSettings } from "../../hooks/use-settings"; +import { Stack } from '@mui/material' +import { Grid } from '@mui/system' +import { CippWizardStepButtons } from './CippWizardStepButtons' +import CippJsonView from '../CippFormPages/CippJSONView' +import CippFormComponent from '../CippComponents/CippFormComponent' +import { ApiGetCall } from '../../api/ApiCall' +import { useEffect, useState } from 'react' +import { useWatch } from 'react-hook-form' +import { CippFormCondition } from '../CippComponents/CippFormCondition' +import { useSettings } from '../../hooks/use-settings' const assignmentFilterTypeOptions = [ - { label: "Include - Apply policy to devices matching filter", value: "include" }, - { label: "Exclude - Apply policy to devices NOT matching filter", value: "exclude" }, -]; + { label: 'Include - Apply policy to devices matching filter', value: 'include' }, + { label: 'Exclude - Apply policy to devices NOT matching filter', value: 'exclude' }, +] export const CippIntunePolicy = (props) => { - const { formControl, onPreviousStep, onNextStep, currentStep } = props; - const values = formControl.getValues(); - const tenantFilter = useSettings()?.currentTenant; - const CATemplates = ApiGetCall({ url: "/api/ListIntuneTemplates", queryKey: "IntuneTemplates" }); - const [JSONData, setJSONData] = useState(); - const watcher = useWatch({ control: formControl.control, name: "TemplateList" }); - const jsonWatch = useWatch({ control: formControl.control, name: "RAWJson" }); - const selectedTenants = useWatch({ control: formControl.control, name: "tenantFilter" }); + const { formControl, onPreviousStep, onNextStep, currentStep } = props + const values = formControl.getValues() + const tenantFilter = useSettings()?.currentTenant + const CATemplates = ApiGetCall({ url: '/api/ListIntuneTemplates', queryKey: 'IntuneTemplates' }) + const [JSONData, setJSONData] = useState() + const watcher = useWatch({ control: formControl.control, name: 'TemplateList' }) + const jsonWatch = useWatch({ control: formControl.control, name: 'RAWJson' }) + const selectedTenants = useWatch({ control: formControl.control, name: 'tenantFilter' }) // do not provide inputs for reserved placeholders const reservedPlaceholders = [ - "%serial%", - "%systemroot%", - "%systemdrive%", - "%temp%", - "%tenantid%", - "%tenantfilter%", - "%initialdomain%", - "%tenantname%", - "%partnertenantid%", - "%samappid%", - "%userprofile%", - "%username%", - "%userdomain%", - "%windir%", - "%programfiles%", - "%programfiles(x86)%", - "%programdata%", - ]; + '%serial%', + '%systemroot%', + '%systemdrive%', + '%temp%', + '%tenantid%', + '%tenantfilter%', + '%initialdomain%', + '%tenantname%', + '%partnertenantid%', + '%samappid%', + '%userprofile%', + '%username%', + '%userdomain%', + '%windir%', + '%programfiles%', + '%programfiles(x86)%', + '%programdata%', + ] useEffect(() => { if (CATemplates.isSuccess && watcher?.value) { - const template = CATemplates.data.find((template) => template.GUID === watcher.value); + const template = CATemplates.data.find((template) => template.GUID === watcher.value) if (template) { - const jsonTemplate = template.RAWJson ? JSON.parse(template.RAWJson) : null; - setJSONData(jsonTemplate); - formControl.setValue("RAWJson", template.RAWJson); - formControl.setValue("displayName", template.Displayname); - formControl.setValue("description", template.Description); - formControl.setValue("TemplateType", template.Type); + const jsonTemplate = template.RAWJson ? JSON.parse(template.RAWJson) : null + setJSONData(jsonTemplate) + formControl.setValue('RAWJson', template.RAWJson) + formControl.setValue('displayName', template.Displayname) + formControl.setValue('description', template.Description) + formControl.setValue('TemplateType', template.Type) } } - }, [watcher]); + }, [watcher]) return ( @@ -93,11 +93,11 @@ export const CippIntunePolicy = (props) => { type="radio" name="AssignTo" options={[ - { label: "Do not assign", value: "On" }, - { label: "Assign to all users", value: "allLicensedUsers" }, - { label: "Assign to all devices", value: "AllDevices" }, - { label: "Assign to all users and devices", value: "AllDevicesAndUsers" }, - { label: "Assign to Custom Group", value: "customGroup" }, + { label: 'Do not assign', value: 'On' }, + { label: 'Assign to all users', value: 'allLicensedUsers' }, + { label: 'Assign to all devices', value: 'AllDevices' }, + { label: 'Assign to all users and devices', value: 'AllDevicesAndUsers' }, + { label: 'Assign to Custom Group', value: 'customGroup' }, ]} formControl={formControl} /> @@ -114,7 +114,22 @@ export const CippIntunePolicy = (props) => { label="Custom Group Names separated by comma. Wildcards (*) are allowed" name="customGroup" formControl={formControl} - validators={{ required: "Please specify custom group names" }} + validators={{ required: 'Please specify custom group names' }} + /> + + + + + @@ -122,7 +137,7 @@ export const CippIntunePolicy = (props) => { formControl={formControl} field="AssignTo" compareType="isOneOf" - compareValue={["allLicensedUsers", "AllDevices", "AllDevicesAndUsers", "customGroup"]} + compareValue={['allLicensedUsers', 'AllDevices', 'AllDevicesAndUsers', 'customGroup']} > { creatable={false} formControl={formControl} api={{ - url: "/api/ListAssignmentFilters", + url: '/api/ListAssignmentFilters', queryKey: `ListAssignmentFilters-${tenantFilter}`, labelField: (filter) => filter.displayName, - valueField: "displayName", + valueField: 'displayName', }} /> @@ -159,15 +174,15 @@ export const CippIntunePolicy = (props) => { compareValue={/%(\w+)%/} > {(() => { - const rawJson = jsonWatch ? jsonWatch : ""; - const placeholderMatches = [...rawJson.matchAll(/%(\w+)%/g)].map((m) => m[1]); - const uniquePlaceholders = Array.from(new Set(placeholderMatches)); + const rawJson = jsonWatch ? jsonWatch : '' + const placeholderMatches = [...rawJson.matchAll(/%(\w+)%/g)].map((m) => m[1]) + const uniquePlaceholders = Array.from(new Set(placeholderMatches)) // Filter out reserved placeholders const filteredPlaceholders = uniquePlaceholders.filter( (placeholder) => !reservedPlaceholders.includes(`%${placeholder.toLowerCase()}%`) - ); + ) if (filteredPlaceholders.length === 0 || selectedTenants.length === 0) { - return null; + return null } return filteredPlaceholders.map((placeholder) => ( @@ -177,11 +192,11 @@ export const CippIntunePolicy = (props) => { type="textField" defaultValue={ //if the placeholder is tenantid then replace it with tenant.addedFields.customerId, if the placeholder is tenantdomain then replace it with tenant.addedFields.defaultDomainName. - placeholder === "tenantid" + placeholder === 'tenantid' ? tenant?.addedFields?.customerId - : placeholder === "tenantdomain" - ? tenant?.addedFields?.defaultDomainName - : "" + : placeholder === 'tenantdomain' + ? tenant?.addedFields?.defaultDomainName + : '' } name={`replacemap.${tenant.value}.%${placeholder}%`} label={`Value for '${placeholder}' in Tenant '${tenant.addedFields.defaultDomainName}'`} @@ -190,7 +205,7 @@ export const CippIntunePolicy = (props) => { /> ))} - )); + )) })()} @@ -198,10 +213,10 @@ export const CippIntunePolicy = (props) => { currentStep={currentStep} onPreviousStep={onPreviousStep} onNextStep={onNextStep} - noNextButton={values.selectedOption === "UpdateTokens"} + noNextButton={values.selectedOption === 'UpdateTokens'} formControl={formControl} noSubmitButton={true} /> - ); -}; + ) +} diff --git a/src/components/CippWizard/CippWizardCSVImport.jsx b/src/components/CippWizard/CippWizardCSVImport.jsx index 80983ad4f549..9d12eb088874 100644 --- a/src/components/CippWizard/CippWizardCSVImport.jsx +++ b/src/components/CippWizard/CippWizardCSVImport.jsx @@ -31,7 +31,9 @@ export const CippWizardCSVImport = (props) => { const handleRemoveItem = (row) => { if (row === undefined) return false; - const index = tableData?.findIndex((item) => item === row); + const rowKey = JSON.stringify(row); + const index = tableData?.findIndex((item) => JSON.stringify(item) === rowKey); + if (index === -1) return false; const newTableData = [...tableData]; newTableData.splice(index, 1); setTableData(newTableData); @@ -158,4 +160,4 @@ export const CippWizardCSVImport = (props) => { /> ); -}; \ No newline at end of file +}; diff --git a/src/components/CippWizard/CippWizardOffboarding.jsx b/src/components/CippWizard/CippWizardOffboarding.jsx index d1a651e5c3a5..990cb9d35b11 100644 --- a/src/components/CippWizard/CippWizardOffboarding.jsx +++ b/src/components/CippWizard/CippWizardOffboarding.jsx @@ -205,6 +205,13 @@ export const CippWizardOffboarding = (props) => { formControl={formControl} disabled={!!deleteUser} /> + { /> {deleteUser && ( - When a user is deleted, their OneDrive is retained for 30 days by default unless otherwise configured. + When a user is deleted, their OneDrive is retained for 30 days by default unless + otherwise configured. )} { }, }} /> - Email Forwarding diff --git a/src/components/CippWizard/CippWizardVacationConfirmation.jsx b/src/components/CippWizard/CippWizardVacationConfirmation.jsx index aa4867bfcb71..2b2604d85d5f 100644 --- a/src/components/CippWizard/CippWizardVacationConfirmation.jsx +++ b/src/components/CippWizard/CippWizardVacationConfirmation.jsx @@ -41,21 +41,21 @@ export const CippWizardVacationConfirmation = (props) => { const handleSubmit = () => { if (values.enableCAExclusion) { const policies = Array.isArray(values.PolicyId) ? values.PolicyId : [values.PolicyId] - policies.forEach((policy) => { - caExclusion.mutate({ - url: '/api/ExecCAExclusion', - data: { - tenantFilter, - Users: values.Users, - PolicyId: policy?.value ?? policy, - StartDate: values.startDate, - EndDate: values.endDate, - vacation: true, - reference: values.reference || null, - postExecution: values.postExecution || [], - excludeLocationAuditAlerts: values.excludeLocationAuditAlerts || false, - }, - }) + const policyData = policies.map((policy) => ({ + tenantFilter, + Users: values.Users, + PolicyId: policy?.value ?? policy, + StartDate: values.startDate, + EndDate: values.endDate, + vacation: true, + reference: values.reference || null, + postExecution: values.postExecution || [], + excludeLocationAuditAlerts: values.excludeLocationAuditAlerts || false, + })) + caExclusion.mutate({ + url: '/api/ExecCAExclusion', + data: policyData, + bulkRequest: true, }) } @@ -105,32 +105,6 @@ export const CippWizardVacationConfirmation = (props) => { }) } - if (values.enableForwarding) { - const forwardingData = { - tenantFilter, - Users: values.Users, - forwardOption: values.forwardOption, - KeepCopy: values.forwardKeepCopy || false, - startDate: values.startDate, - endDate: values.endDate, - reference: values.reference || null, - postExecution: values.postExecution || [], - } - - if (values.forwardOption === 'internalAddress') { - forwardingData.ForwardInternal = values.forwardInternal - } - - if (values.forwardOption === 'ExternalAddress') { - forwardingData.ForwardExternal = values.forwardExternal - } - - forwardingVacation.mutate({ - url: '/api/ExecScheduleForwardingVacation', - data: forwardingData, - }) - } - if (values.enableOOO) { const oooData = { tenantFilter, diff --git a/src/components/CippWizard/OnboardingWizardPage.jsx b/src/components/CippWizard/OnboardingWizardPage.jsx new file mode 100644 index 000000000000..6b0876ad9a58 --- /dev/null +++ b/src/components/CippWizard/OnboardingWizardPage.jsx @@ -0,0 +1,163 @@ +import { CippWizardConfirmation } from './CippWizardConfirmation.jsx' +import { CippDeploymentStep } from './CIPPDeploymentStep.jsx' +import CippWizardPage from './CippWizardPage.jsx' +import { CippWizardOptionsList } from './CippWizardOptionsList.jsx' +import { CippSAMDeploy } from './CippSAMDeploy.jsx' +import { CippTenantModeDeploy } from './CippTenantModeDeploy.jsx' +import { CippBaselinesStep } from './CippBaselinesStep.jsx' +import { CippNotificationsStep } from './CippNotificationsStep.jsx' +import { CippAlertsStep } from './CippAlertsStep.jsx' +import { CippAddTenantTypeSelection } from './CippAddTenantTypeSelection.jsx' +import { CippDirectTenantDeploy } from './CippDirectTenantDeploy.jsx' +import { CippGDAPTenantSetup } from './CippGDAPTenantSetup.jsx' +import { CippIndirectResellerLink } from './CippIndirectResellerLink.jsx' +import { CippGDAPTenantOnboarding } from './CippGDAPTenantOnboarding.jsx' +import { BuildingOfficeIcon, CloudIcon, CpuChipIcon } from '@heroicons/react/24/outline' +import { useRouter } from 'next/router' + +const OnboardingWizardPage = () => { + const router = useRouter() + const selectedOptionQuery = router.query?.selectedOption + const deepLinkedOption = Array.isArray(selectedOptionQuery) + ? selectedOptionQuery[0] + : selectedOptionQuery + + const setupOptions = [ + { + description: + "Choose this option if this is your first setup, or if you'd like to redo the previous setup.", + icon: , + label: 'First Setup', + value: 'FirstSetup', + }, + { + description: 'Choose this option if you would like to add a tenant to your environment.', + icon: , + label: 'Add a tenant', + value: 'AddTenant', + }, + { + description: + 'Choose this option if you want to setup which application registration is used to connect to your tenants.', + icon: , + label: 'Create a new application registration for me and connect to my tenants', + value: 'CreateApp', + }, + { + description: "I would like to refresh my token or replace the account I've used.", + icon: , + label: 'Refresh Tokens for existing application registration', + value: 'UpdateTokens', + }, + { + description: + 'I have an existing application and would like to manually enter my token, or update them. This is only recommended for advanced users.', + icon: , + label: 'Manually enter credentials', + value: 'Manual', + }, + ] + + const hasDeepLinkedOption = + typeof deepLinkedOption === 'string' && + setupOptions.some((option) => option.value === deepLinkedOption) + + const steps = [ + { + description: 'Onboarding', + component: CippWizardOptionsList, + hideStepWhen: () => hasDeepLinkedOption, + componentProps: { + title: 'Select your setup method', + subtext: + 'This wizard will guide you through setting up CIPPs access to your client tenants. If this is your first time setting up CIPP you will want to choose the option "Create application for me and connect to my tenants".', + valuesKey: 'SyncTool', + options: setupOptions, + }, + }, + { + description: 'Application', + component: CippSAMDeploy, + showStepWhen: (values) => + values?.selectedOption === 'CreateApp' || values?.selectedOption === 'FirstSetup', + }, + { + description: 'Tenants', + component: CippTenantModeDeploy, + showStepWhen: (values) => + values?.selectedOption === 'CreateApp' || values?.selectedOption === 'FirstSetup', + }, + { + description: 'Tenant Type', + component: CippAddTenantTypeSelection, + showStepWhen: (values) => values?.selectedOption === 'AddTenant', + }, + { + description: 'Direct Tenant', + component: CippDirectTenantDeploy, + showStepWhen: (values) => + values?.selectedOption === 'AddTenant' && values?.tenantType === 'Direct', + }, + { + description: 'GDAP Setup', + component: CippGDAPTenantSetup, + showStepWhen: (values) => + values?.selectedOption === 'AddTenant' && values?.tenantType === 'GDAP', + }, + { + description: 'Reseller Link', + component: CippIndirectResellerLink, + showStepWhen: (values) => + values?.selectedOption === 'AddTenant' && values?.tenantType === 'IndirectReseller', + }, + { + description: 'GDAP Onboarding', + component: CippGDAPTenantOnboarding, + showStepWhen: (values) => + values?.selectedOption === 'AddTenant' && + values?.tenantType === 'GDAP' && + values?.GDAPInviteAccepted === true, + }, + { + description: 'Baselines', + component: CippBaselinesStep, + showStepWhen: (values) => values?.selectedOption === 'FirstSetup', + }, + { + description: 'Notifications', + component: CippNotificationsStep, + showStepWhen: (values) => values?.selectedOption === 'FirstSetup', + }, + { + description: 'Next Steps', + component: CippAlertsStep, + showStepWhen: (values) => values?.selectedOption === 'FirstSetup', + }, + { + description: 'Refresh Tokens', + component: CippDeploymentStep, + showStepWhen: (values) => values?.selectedOption === 'UpdateTokens', + }, + { + description: 'Manually enter credentials', + component: CippDeploymentStep, + showStepWhen: (values) => values?.selectedOption === 'Manual', + }, + { + description: 'Confirmation', + component: CippWizardConfirmation, + }, + ] + + return ( + + ) +} + +export default OnboardingWizardPage diff --git a/src/components/PrivateRoute.js b/src/components/PrivateRoute.js index 5b067cf4e7c3..15b438b2c608 100644 --- a/src/components/PrivateRoute.js +++ b/src/components/PrivateRoute.js @@ -2,8 +2,11 @@ import { ApiGetCall } from "../api/ApiCall.jsx"; import UnauthenticatedPage from "../pages/unauthenticated.js"; import LoadingPage from "../pages/loading.js"; import ApiOfflinePage from "../pages/api-offline.js"; +import { useState, useEffect } from "react"; export const PrivateRoute = ({ children, routeType }) => { + const [unauthLatched, setUnauthLatched] = useState(false); + const session = ApiGetCall({ url: "/.auth/me", queryKey: "authmeswa", @@ -11,13 +14,34 @@ export const PrivateRoute = ({ children, routeType }) => { staleTime: 120000, // 2 minutes }); + // Latch the unauthenticated state so refetches from child components + // don't flip us back to loading. Clear the latch when session succeeds (after login). + useEffect(() => { + if ( + !session.isLoading && + !session.isFetching && + (session.isError || + null === session?.data?.clientPrincipal || + session?.data === undefined) + ) { + setUnauthLatched(true); + } else if (session.isSuccess && session.data?.clientPrincipal) { + setUnauthLatched(false); + } + }, [session.isLoading, session.isFetching, session.isError, session.isSuccess, session.data]); + const apiRoles = ApiGetCall({ url: "/api/me", queryKey: "authmecipp", - retry: 2, // Reduced retry count to show offline message sooner - waiting: !session.isSuccess || session.data?.clientPrincipal === null, + retry: 2, + waiting: session.isSuccess && session.data?.clientPrincipal !== null, }); + // If latched as unauthenticated, always show unauthenticated page + if (unauthLatched) { + return ; + } + // Check if the session is still loading before determining authentication status if ( session.isLoading || @@ -38,11 +62,6 @@ export const PrivateRoute = ({ children, routeType }) => { return ; } - // if not logged into swa - if (null === session?.data?.clientPrincipal || session?.data === undefined) { - return ; - } - let roles = null; if ( diff --git a/src/components/bulk-actions-menu.js b/src/components/bulk-actions-menu.js index ff9a8613665a..ff9e8e1f36dd 100644 --- a/src/components/bulk-actions-menu.js +++ b/src/components/bulk-actions-menu.js @@ -2,7 +2,7 @@ import PropTypes from "prop-types"; import ChevronDownIcon from "@heroicons/react/24/outline/ChevronDownIcon"; import { Button, Link, ListItemText, Menu, MenuItem, SvgIcon } from "@mui/material"; import { usePopover } from "../hooks/use-popover"; -import { FilePresent, Laptop, Mail, Share, Shield, ShieldMoon, PrecisionManufacturing, BarChart, Group } from "@mui/icons-material"; +import { FilePresent, Laptop, Mail, Share, Shield, ShieldMoon, PrecisionManufacturing, BarChart, Group, Apps } from "@mui/icons-material"; import { GlobeAltIcon, UsersIcon, ServerIcon } from "@heroicons/react/24/outline"; function getIconByName(iconName) { @@ -31,6 +31,8 @@ function getIconByName(iconName) { return ; case "Group": return ; + case "Apps": + return ; default: return null; } diff --git a/src/components/csvExportButton.js b/src/components/csvExportButton.js index adce8e92e376..0a05aa64fbe6 100644 --- a/src/components/csvExportButton.js +++ b/src/components/csvExportButton.js @@ -1,97 +1,95 @@ -import { BackupTableTwoTone } from "@mui/icons-material"; -import { IconButton, Tooltip } from "@mui/material"; -import { mkConfig, generateCsv, download } from "export-to-csv"; -import { getCippFormatting } from "../utils/get-cipp-formatting"; +import { BackupTableTwoTone } from '@mui/icons-material' +import { IconButton, Tooltip } from '@mui/material' +import { mkConfig, generateCsv, download } from 'export-to-csv' +import { getCippFormatting } from '../utils/get-cipp-formatting' const csvConfig = mkConfig({ - fieldSeparator: ",", - decimalSeparator: ".", + fieldSeparator: ',', + decimalSeparator: '.', useKeysAsHeaders: true, -}); +}) // Flatten nested objects so deeply nested properties export as dotted columns. -const flattenObject = (obj, parentKey = "") => { - const flattened = {}; +const flattenObject = (obj, parentKey = '') => { + const flattened = {} Object.keys(obj).forEach((key) => { - const fullKey = parentKey ? `${parentKey}.${key}` : key; - if (typeof obj[key] === "object" && obj[key] !== null && !Array.isArray(obj[key])) { - Object.assign(flattened, flattenObject(obj[key], fullKey)); - } else if (Array.isArray(obj[key]) && typeof obj[key][0] === "string") { - flattened[fullKey] = obj[key]; + const fullKey = parentKey ? `${parentKey}.${key}` : key + if (typeof obj[key] === 'object' && obj[key] !== null && !Array.isArray(obj[key])) { + Object.assign(flattened, flattenObject(obj[key], fullKey)) + } else if (Array.isArray(obj[key]) && typeof obj[key][0] === 'string') { + flattened[fullKey] = obj[key] } else if (Array.isArray(obj[key])) { - let testFormatting = getCippFormatting(obj[key], key, "text", false, false); - if (typeof testFormatting === "string" && !testFormatting.includes("[object Object]")) { - flattened[fullKey] = testFormatting; + let testFormatting = getCippFormatting(obj[key], key, 'text', false, false) + if (typeof testFormatting === 'string' && !testFormatting.includes('[object Object]')) { + flattened[fullKey] = testFormatting } else { flattened[fullKey] = obj[key] .map((item) => - typeof item === "object" + typeof item === 'object' ? JSON.stringify( Object.fromEntries( Object.entries(flattenObject(item)).map(([k, v]) => [ k, - getCippFormatting(v, k, "text", false), + getCippFormatting(v, k, 'text', false), ]) ) ) - : getCippFormatting(item, fullKey, "text", false, false) + : getCippFormatting(item, fullKey, 'text', false, false) ) - .join(", "); + .join(', ') } } else { - flattened[fullKey] = obj[key]; + flattened[fullKey] = obj[key] } - }); - return flattened; -}; + }) + return flattened +} // Shared helper so both toolbar buttons and bulk actions reuse identical CSV logic. export const exportRowsToCsv = ({ rows = [], columns = [], - reportName = "Export", + reportName = 'Export', columnVisibility = {}, }) => { if (!rows.length || !columns.length) { - return; + return } - const rowData = rows.map((row) => flattenObject(row.original ?? row)); - const columnKeys = columns.filter((c) => columnVisibility[c.id]).map((c) => c.id); + const rowData = rows.map((row) => flattenObject(row.original ?? row)) + const columnKeys = columns.filter((c) => columnVisibility[c.id]).map((c) => c.id) const filterRowData = (row, allowedKeys) => { - const filteredRow = {}; + const filteredRow = {} allowedKeys.forEach((key) => { - if (key in row) { - filteredRow[key] = row[key]; - } - }); - return filteredRow; - }; + filteredRow[key] = key in row ? row[key] : null + }) + return filteredRow + } - const filteredData = rowData.map((row) => filterRowData(row, columnKeys)); + const filteredData = rowData.map((row) => filterRowData(row, columnKeys)) // Apply standard CIPP formatting so CSV values match on-screen representations. const formattedData = filteredData.map((row) => { - const formattedRow = {}; + const formattedRow = {} columnKeys.forEach((key) => { - const value = row[key]; - if (typeof value === "string") { - formattedRow[key] = value; - return; + const value = row[key] + if (typeof value === 'string') { + formattedRow[key] = value + return } - formattedRow[key] = getCippFormatting(value, key, "text", false); - }); - return formattedRow; - }); + formattedRow[key] = getCippFormatting(value, key, 'text', false) + }) + return formattedRow + }) - const csv = generateCsv(csvConfig)(formattedData); - csvConfig["filename"] = `${reportName}`; - download(csvConfig)(csv); -}; + const csv = generateCsv(csvConfig)(formattedData) + csvConfig['filename'] = `${reportName}` + download(csvConfig)(csv) +} export const CSVExportButton = (props) => { - const { rows = [], columns = [], reportName, columnVisibility = {}, ...other } = props; + const { rows = [], columns = [], reportName, columnVisibility = {}, ...other } = props return ( @@ -105,5 +103,5 @@ export const CSVExportButton = (props) => { - ); -}; + ) +} diff --git a/src/components/pdfExportButton.js b/src/components/pdfExportButton.js index f0c0ce803b08..f8939bb59ead 100644 --- a/src/components/pdfExportButton.js +++ b/src/components/pdfExportButton.js @@ -1,133 +1,131 @@ -import { IconButton, Tooltip } from "@mui/material"; -import { PictureAsPdf } from "@mui/icons-material"; -import jsPDF from "jspdf"; -import autoTable from "jspdf-autotable"; -import { getCippFormatting } from "../utils/get-cipp-formatting"; -import { useSettings } from "../hooks/use-settings"; +import { IconButton, Tooltip } from '@mui/material' +import { PictureAsPdf } from '@mui/icons-material' +import jsPDF from 'jspdf' +import autoTable from 'jspdf-autotable' +import { getCippFormatting } from '../utils/get-cipp-formatting' +import { useSettings } from '../hooks/use-settings' // Flatten nested objects so deeply nested properties export properly. // This function only restructures data without formatting - formatting happens later in one pass. -const flattenObject = (obj, parentKey = "") => { - const flattened = {}; +const flattenObject = (obj, parentKey = '') => { + const flattened = {} Object.keys(obj).forEach((key) => { - const fullKey = parentKey ? `${parentKey}.${key}` : key; - if (typeof obj[key] === "object" && obj[key] !== null && !Array.isArray(obj[key])) { - Object.assign(flattened, flattenObject(obj[key], fullKey)); + const fullKey = parentKey ? `${parentKey}.${key}` : key + if (typeof obj[key] === 'object' && obj[key] !== null && !Array.isArray(obj[key])) { + Object.assign(flattened, flattenObject(obj[key], fullKey)) } else { // Store the raw value - formatting will happen in a single pass later - flattened[fullKey] = obj[key]; + flattened[fullKey] = obj[key] } - }); - return flattened; -}; + }) + return flattened +} // Shared helper so the toolbar buttons and bulk export path share the same PDF logic. export const exportRowsToPdf = ({ rows = [], columns = [], - reportName = "Export", + reportName = 'Export', columnVisibility = {}, brandingSettings = {}, }) => { if (!rows.length || !columns.length) { - return; + return } - const unit = "pt"; - const size = "A3"; - const orientation = "landscape"; - const doc = new jsPDF(orientation, unit, size); - const tableData = rows.map((row) => flattenObject(row.original ?? row)); + const unit = 'pt' + const size = 'A3' + const orientation = 'landscape' + const doc = new jsPDF(orientation, unit, size) + const tableData = rows.map((row) => flattenObject(row.original ?? row)) const exportColumns = columns .filter((c) => columnVisibility[c.id]) - .map((c) => ({ header: c.header, dataKey: c.id })); + .map((c) => ({ header: c.header, dataKey: c.id })) // Use the existing formatting helper so PDF output mirrors table formatting. const formattedData = tableData.map((row) => { - const formattedRow = {}; + const formattedRow = {} exportColumns.forEach((col) => { - const key = col.dataKey; - if (key in row) { - formattedRow[key] = getCippFormatting(row[key], key, "text", false); - } - }); - return formattedRow; - }); + const key = col.dataKey + formattedRow[key] = getCippFormatting(key in row ? row[key] : null, key, 'text', false) + }) + return formattedRow + }) - let logoHeight = 0; + let logoHeight = 0 if (brandingSettings?.logo) { try { - const logoSize = 60; - const logoX = 40; - const logoY = 30; - doc.addImage(brandingSettings.logo, "PNG", logoX, logoY, logoSize, logoSize); - logoHeight = logoSize + 20; + const logoSize = 60 + const logoX = 40 + const logoY = 30 + doc.addImage(brandingSettings.logo, 'PNG', logoX, logoY, logoSize, logoSize) + logoHeight = logoSize + 20 } catch (error) { - console.warn("Failed to add logo to PDF:", error); + console.warn('Failed to add logo to PDF:', error) } } - const pageWidth = doc.internal.pageSize.getWidth(); - const margin = 40; - const availableWidth = pageWidth - 2 * margin; - const columnCount = exportColumns.length; + const pageWidth = doc.internal.pageSize.getWidth() + const margin = 40 + const availableWidth = pageWidth - 2 * margin + const columnCount = exportColumns.length // Estimate column widths from content to keep tables readable regardless of dataset. const columnWidths = exportColumns.map((col) => { - const headerLength = col.header.length; + const headerLength = col.header.length const maxContentLength = Math.max( - ...formattedData.map((row) => String(row[col.dataKey] || "").length), - ); - const estimatedWidth = Math.max(headerLength, maxContentLength) * 6; - return Math.min(estimatedWidth, (availableWidth / columnCount) * 1.5); - }); + ...formattedData.map((row) => String(row[col.dataKey] || '').length) + ) + const estimatedWidth = Math.max(headerLength, maxContentLength) * 6 + return Math.min(estimatedWidth, (availableWidth / columnCount) * 1.5) + }) - const totalEstimatedWidth = columnWidths.reduce((sum, width) => sum + width, 0); + const totalEstimatedWidth = columnWidths.reduce((sum, width) => sum + width, 0) const normalizedWidths = columnWidths.map( - (width) => (width / totalEstimatedWidth) * availableWidth, - ); + (width) => (width / totalEstimatedWidth) * availableWidth + ) // Honor tenant branding colors when present so exports stay on-brand. const getHeaderColor = () => { if (brandingSettings?.colour) { - const hex = brandingSettings.colour.replace("#", ""); - const r = parseInt(hex.substr(0, 2), 16); - const g = parseInt(hex.substr(2, 2), 16); - const b = parseInt(hex.substr(4, 2), 16); - return [r, g, b]; + const hex = brandingSettings.colour.replace('#', '') + const r = parseInt(hex.substr(0, 2), 16) + const g = parseInt(hex.substr(2, 2), 16) + const b = parseInt(hex.substr(4, 2), 16) + return [r, g, b] } - return [247, 127, 0]; - }; + return [247, 127, 0] + } const content = { startY: 100 + logoHeight, head: [exportColumns.map((col) => col.header)], - body: formattedData.map((row) => exportColumns.map((col) => String(row[col.dataKey] || ""))), - theme: "striped", + body: formattedData.map((row) => exportColumns.map((col) => String(row[col.dataKey] || ''))), + theme: 'striped', headStyles: { fillColor: getHeaderColor(), textColor: [255, 255, 255], - fontStyle: "bold", - halign: "center", - valign: "middle", + fontStyle: 'bold', + halign: 'center', + valign: 'middle', fontSize: 10, cellPadding: 8, }, bodyStyles: { fontSize: 9, cellPadding: 6, - valign: "top", - overflow: "linebreak", - cellWidth: "wrap", + valign: 'top', + overflow: 'linebreak', + cellWidth: 'wrap', }, columnStyles: exportColumns.reduce((styles, col, index) => { styles[index] = { cellWidth: normalizedWidths[index], - halign: "left", - valign: "top", - }; - return styles; + halign: 'left', + valign: 'top', + } + return styles }, {}), margin: { top: margin, @@ -135,22 +133,22 @@ export const exportRowsToPdf = ({ bottom: margin, left: margin, }, - tableWidth: "auto", + tableWidth: 'auto', styles: { - overflow: "linebreak", - cellWidth: "wrap", + overflow: 'linebreak', + cellWidth: 'wrap', fontSize: 9, cellPadding: 6, }, - }; - autoTable(doc, content); + } + autoTable(doc, content) - doc.save(`${reportName}.pdf`); -}; + doc.save(`${reportName}.pdf`) +} export const PDFExportButton = (props) => { - const { rows = [], columns = [], reportName, columnVisibility = {}, ...other } = props; - const brandingSettings = useSettings().customBranding; + const { rows = [], columns = [], reportName, columnVisibility = {}, ...other } = props + const brandingSettings = useSettings().customBranding return ( @@ -172,5 +170,5 @@ export const PDFExportButton = (props) => { - ); -}; + ) +} diff --git a/src/data/AuditLogTemplates.json b/src/data/AuditLogTemplates.json index 051f0dc16283..63df852bd318 100644 --- a/src/data/AuditLogTemplates.json +++ b/src/data/AuditLogTemplates.json @@ -420,5 +420,39 @@ } ] } + }, + { + "value": "TAPCreated", + "name": "A Temporary Access Pass has been created for a user", + "template": { + "preset": { + "value": "TAPCreated", + "label": "A Temporary Access Pass has been created for a user" + }, + "logbook": { "value": "Audit.AzureActiveDirectory", "label": "Azure AD" }, + "conditions": [ + { + "Property": { "value": "List:Operation", "label": "Operation" }, + "Operator": { "value": "EQ", "label": "Equals to" }, + "Input": { + "value": "Update user.", + "label": "updated user" + } + }, + { + "Property": { "value": "String", "label": "SecuredAccessPassData" }, + "Operator": { "value": "ne", "label": "Not Equals to" }, + "Input": { + "value": "[]", + "label": "[]" + } + }, + { + "Property": { "value": "String", "label": "SecuredAccessPassData" }, + "Operator": { "value": "like", "label": "Like" }, + "Input": { "value": "[*]" } + } + ] + } } ] diff --git a/src/data/CIPPDBCacheTypes.json b/src/data/CIPPDBCacheTypes.json index 28fac3a6fde8..0d0588d2b624 100644 --- a/src/data/CIPPDBCacheTypes.json +++ b/src/data/CIPPDBCacheTypes.json @@ -204,26 +204,6 @@ "friendlyName": "Exchange Hosted Outbound Spam Filter Policy", "description": "Exchange Online hosted outbound spam filter policy" }, - { - "type": "ExoAntiPhishPolicy", - "friendlyName": "Exchange Anti-Phish Policy", - "description": "Exchange Online anti-phishing policy" - }, - { - "type": "ExoSafeLinksPolicy", - "friendlyName": "Exchange Safe Links Policy", - "description": "Exchange Online Safe Links policy" - }, - { - "type": "ExoSafeAttachmentPolicy", - "friendlyName": "Exchange Safe Attachment Policy", - "description": "Exchange Online Safe Attachment policy" - }, - { - "type": "ExoMalwareFilterPolicy", - "friendlyName": "Exchange Malware Filter Policy", - "description": "Exchange Online malware filter policy" - }, { "type": "ExoAtpPolicyForO365", "friendlyName": "Exchange ATP Policy for O365", @@ -264,6 +244,11 @@ "friendlyName": "Mailboxes", "description": "All Exchange Online mailboxes" }, + { + "type": "HVEAccounts", + "friendlyName": "HVE Accounts", + "description": "High Volume Email accounts" + }, { "type": "CASMailboxes", "friendlyName": "CAS Mailboxes", @@ -274,11 +259,26 @@ "friendlyName": "Mailbox Usage", "description": "Exchange Online mailbox usage statistics" }, + { + "type": "OneDriveSiteListing", + "friendlyName": "OneDrive Site Listing", + "description": "OneDrive personal site listing details used for usage reporting" + }, { "type": "OneDriveUsage", "friendlyName": "OneDrive Usage", "description": "OneDrive usage statistics" }, + { + "type": "SharePointSiteListing", + "friendlyName": "SharePoint Site Listing", + "description": "SharePoint site listing details used for usage reporting" + }, + { + "type": "SharePointSiteUsage", + "friendlyName": "SharePoint Site Usage", + "description": "SharePoint site usage statistics" + }, { "type": "ConditionalAccessPolicies", "friendlyName": "Conditional Access Policies", diff --git a/src/data/ContainerLogPresets.json b/src/data/ContainerLogPresets.json new file mode 100644 index 000000000000..71f3dc5b8e93 --- /dev/null +++ b/src/data/ContainerLogPresets.json @@ -0,0 +1,52 @@ +[ + { + "name": "Recent Errors (Last 1h)", + "id": "cl-preset-errors-1h", + "query": "where Level in (\"ERR\", \"CRT\")\n| where Timestamp > ago(1h)\n| take 500\n| sort by Timestamp desc" + }, + { + "name": "Warnings & Errors (Last 24h)", + "id": "cl-preset-warn-err-24h", + "query": "where Level in (\"ERR\", \"CRT\", \"WRN\")\n| where Timestamp > ago(24h)\n| take 1000\n| sort by Timestamp desc" + }, + { + "name": "All Logs (Last 15 min)", + "id": "cl-preset-all-15m", + "query": "where Timestamp > ago(15m)\n| take 500\n| sort by Timestamp desc" + }, + { + "name": "Startup Logs", + "id": "cl-preset-startup", + "query": "where Message contains \"Starting\"\n| where Message !contains \"heartbeat\"\n| take 200\n| sort by Timestamp desc" + }, + { + "name": "Graph API Errors", + "id": "cl-preset-graph-errors", + "query": "where Level in (\"ERR\", \"CRT\")\n| where Message matches regex \"graph|Graph|GRAPH\"\n| where Timestamp > ago(24h)\n| take 500\n| sort by Timestamp desc" + }, + { + "name": "Token / Auth Issues", + "id": "cl-preset-auth", + "query": "where Message matches regex \"token|auth|unauthorized|forbidden|401|403\"\n| where Timestamp > ago(24h)\n| take 500\n| sort by Timestamp desc" + }, + { + "name": "Timeout Errors", + "id": "cl-preset-timeouts", + "query": "where Message matches regex \"timeout|timed out|TaskCanceled\"\n| where Timestamp > ago(24h)\n| take 500\n| sort by Timestamp desc" + }, + { + "name": "All Errors (Search All Files)", + "id": "cl-preset-all-errors", + "query": "search all files\n| where Level in (\"ERR\", \"CRT\")\n| take 1000\n| sort by Timestamp desc" + }, + { + "name": "Standards Processing", + "id": "cl-preset-standards", + "query": "where Message contains \"Standard\"\n| where Timestamp > ago(24h)\n| take 500\n| sort by Timestamp desc" + }, + { + "name": "Full Log (Last 1h, no heartbeats)", + "id": "cl-preset-full-clean", + "query": "where Timestamp > ago(1h)\n| where Message !contains \"heartbeat\"\n| take 1000\n| sort by Timestamp desc" + } +] diff --git a/src/data/Extensions.json b/src/data/Extensions.json index 52df55dd4726..66ff5b1a482d 100644 --- a/src/data/Extensions.json +++ b/src/data/Extensions.json @@ -938,5 +938,35 @@ } ], "mappingRequired": false + }, + { + "name": "ConnectWise PSA", + "id": "ConnectWisePSA", + "type": "ConnectWisePSA", + "cat": "Ticketing", + "logo": "/assets/integrations/connectwise.png", + "comingSoon": true, + "description": "Enable the ConnectWise PSA integration to send alerts to your ticketing system.", + "mappingRequired": false + }, + { + "name": "Autotask PSA", + "id": "AutotaskPSA", + "type": "AutotaskPSA", + "cat": "Ticketing", + "logo": "/assets/integrations/autotask.png", + "comingSoon": true, + "description": "Enable the Autotask PSA integration to send alerts to your ticketing system.", + "mappingRequired": false + }, + { + "name": "Kaseya BMS", + "id": "KaseyaBMS", + "type": "KaseyaBMS", + "cat": "Ticketing", + "logo": "/assets/integrations/kaseya.svg", + "comingSoon": true, + "description": "Enable the Kaseya BMS integration to send alerts to your ticketing system.", + "mappingRequired": false } ] diff --git a/src/data/alerts.json b/src/data/alerts.json index 33396fa152bf..ac8a28fa6cc0 100644 --- a/src/data/alerts.json +++ b/src/data/alerts.json @@ -125,7 +125,7 @@ "inputType": "textField", "inputLabel": "Enter quota percentage", "inputName": "QuotaUsedQuota", - "recommendedRunInterval": "4h" + "recommendedRunInterval": "1d" }, { "name": "SharePointQuota", @@ -134,7 +134,7 @@ "inputType": "textField", "inputLabel": "Enter quota percentage", "inputName": "SharePointQuota", - "recommendedRunInterval": "4h" + "recommendedRunInterval": "1d" }, { "name": "OneDriveQuota", @@ -143,7 +143,7 @@ "inputType": "textField", "inputLabel": "Enter quota percentage (default: 90)", "inputName": "OneDriveQuota", - "recommendedRunInterval": "4h" + "recommendedRunInterval": "1d" }, { "name": "ExpiringLicenses", @@ -562,7 +562,7 @@ "inputs": [ { "inputType": "autoComplete", - "inputLabel": "Threshold type absolute number or percent", + "inputLabel": "Threshold type", "inputName": "ThresholdType", "creatable": false, "multiple": false, @@ -574,23 +574,48 @@ { "label": "Absolute", "value": "absolute" + }, + { + "label": "Drop (% decrease from previous score)", + "value": "drop" } ], "required": true }, { "inputType": "number", - "inputLabel": "Threshold Value (below this will trigger the alert)", + "inputLabel": "Threshold Value (absolute/percent: alert when below this value, drop: alert when score decreases by this percentage)", "inputName": "InputValue", "required": true } ], - "description": "Monitors Secure Score and alerts when it falls below the specified threshold (absolute or percent value). Helps identify security gaps and areas for improvement." + "description": "Monitors Secure Score and alerts when it falls below the specified threshold (absolute or percent value) or when it drops by a defined percentage compared to the previous score. Helps identify security gaps, regressions, and areas for improvement." }, { "name": "TenantAccess", "label": "Alert on tenant accessibility issues (Graph, Exchange, GDAP roles)", "recommendedRunInterval": "1d", "description": "Proactively monitors tenant accessibility by testing Graph API connectivity, GDAP role assignments, and Exchange Online access. Alerts when tenants have lost permissions, removed GDAP consent, or are missing required roles. Helps identify tenants that need a permission refresh or offboarding." + }, + { + "name": "CheckExtension", + "label": "Alert on new Check phishing extension detections", + "recommendedRunInterval": "30m", + "description": "Monitors for new phishing site detections reported by the Check browser extension. Alerts when a user visits a page that the extension flags as a potential credential phishing or AiTM attack. Requires the Check browser extension to be deployed to users." + }, + { + "name": "UserReportedPhishing", + "label": "Alert on emails reported by users via Outlook Report Phishing", + "recommendedRunInterval": "4h", + "requiresInput": true, + "multipleInput": true, + "inputs": [ + { + "inputType": "number", + "inputLabel": "Hours to look back (default: 24)", + "inputName": "HoursBack" + } + ], + "description": "Monitors for emails reported by users through Outlook's built-in Report Phishing feature. Alerts when new user-reported email threat submissions are found in Microsoft Defender. Requires ThreatSubmission.ReadWrite.All permission." } ] diff --git a/src/data/cipp-roles.json b/src/data/cipp-roles.json index f95e32fa18c6..ac3c389f65a2 100644 --- a/src/data/cipp-roles.json +++ b/src/data/cipp-roles.json @@ -1,10 +1,19 @@ { "readonly": { - "include": ["*.Read"], - "exclude": ["CIPP.SuperAdmin.*"] + "include": [ + "*.Read" + ], + "exclude": [ + "CIPP.SuperAdmin.*", + "CIPP.Admin.*", + "CIPP.AppSettings.*" + ] }, "editor": { - "include": ["*.Read", "*.ReadWrite"], + "include": [ + "*.Read", + "*.ReadWrite" + ], "exclude": [ "CIPP.SuperAdmin.*", "CIPP.Admin.*", @@ -13,11 +22,17 @@ ] }, "admin": { - "include": ["*"], - "exclude": ["CIPP.SuperAdmin.*"] + "include": [ + "*" + ], + "exclude": [ + "CIPP.SuperAdmin.*" + ] }, "superadmin": { - "include": ["*"], + "include": [ + "*" + ], "exclude": [] } -} +} \ No newline at end of file diff --git a/src/data/conditionalAccessSchema.json b/src/data/conditionalAccessSchema.json new file mode 100644 index 000000000000..e6161261854e --- /dev/null +++ b/src/data/conditionalAccessSchema.json @@ -0,0 +1,664 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "microsoft.graph.conditionalAccessPolicy", + "title": "Conditional Access Policy", + "description": "Schema derived from the Microsoft Graph v1.0 conditionalAccessPolicy resource type. Reference: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccesspolicy?view=graph-rest-1.0", + "type": "object", + "required": ["displayName", "state", "conditions"], + "properties": { + "displayName": { + "type": "string", + "title": "Display Name", + "description": "A display name for the policy.", + "minLength": 1, + "maxLength": 256 + }, + "state": { + "type": "string", + "title": "Policy State", + "description": "The state of the policy.", + "enum": ["enabled", "disabled", "enabledForReportingButNotEnforced"], + "enumLabels": { + "enabled": "Enabled", + "disabled": "Disabled", + "enabledForReportingButNotEnforced": "Report-only" + } + }, + "conditions": { + "$ref": "#/$defs/conditionalAccessConditionSet" + }, + "grantControls": { + "$ref": "#/$defs/conditionalAccessGrantControls" + }, + "sessionControls": { + "$ref": "#/$defs/conditionalAccessSessionControls" + } + }, + "$defs": { + "conditionalAccessConditionSet": { + "type": "object", + "title": "Conditions", + "description": "Rules that must be met for the policy to apply.", + "required": ["users", "applications", "clientAppTypes"], + "properties": { + "users": { + "$ref": "#/$defs/conditionalAccessUsers" + }, + "applications": { + "$ref": "#/$defs/conditionalAccessApplications" + }, + "clientAppTypes": { + "type": "array", + "title": "Client App Types", + "description": "Client application types included in the policy.", + "items": { + "type": "string", + "enum": ["all", "browser", "mobileAppsAndDesktopClients", "exchangeActiveSync", "easSupported", "other"] + }, + "enumLabels": { + "all": "All", + "browser": "Browser", + "mobileAppsAndDesktopClients": "Mobile apps and desktop clients", + "exchangeActiveSync": "Exchange ActiveSync", + "easSupported": "EAS supported", + "other": "Other clients" + } + }, + "platforms": { + "$ref": "#/$defs/conditionalAccessPlatforms" + }, + "locations": { + "$ref": "#/$defs/conditionalAccessLocations" + }, + "devices": { + "$ref": "#/$defs/conditionalAccessDevices" + }, + "clientApplications": { + "$ref": "#/$defs/conditionalAccessClientApplications" + }, + "signInRiskLevels": { + "type": "array", + "title": "Sign-in Risk Levels", + "description": "Sign-in risk levels included in the policy. Requires Entra ID P2.", + "items": { + "type": "string", + "enum": ["low", "medium", "high", "hidden", "none"] + }, + "enumLabels": { + "low": "Low", + "medium": "Medium", + "high": "High", + "hidden": "Hidden", + "none": "No risk" + }, + "requiresLicense": "AAD_PREMIUM_P2" + }, + "userRiskLevels": { + "type": "array", + "title": "User Risk Levels", + "description": "User risk levels included in the policy. Requires Entra ID P2.", + "items": { + "type": "string", + "enum": ["low", "medium", "high", "hidden", "none"] + }, + "enumLabels": { + "low": "Low", + "medium": "Medium", + "high": "High", + "hidden": "Hidden", + "none": "No risk" + }, + "requiresLicense": "AAD_PREMIUM_P2" + }, + "servicePrincipalRiskLevels": { + "type": "array", + "title": "Service Principal Risk Levels", + "description": "Service principal risk levels included in the policy.", + "items": { + "type": "string", + "enum": ["low", "medium", "high", "none"] + }, + "enumLabels": { + "low": "Low", + "medium": "Medium", + "high": "High", + "none": "No risk" + } + }, + "insiderRiskLevels": { + "type": "string", + "title": "Insider Risk Levels", + "description": "Insider risk levels included in the policy.", + "enum": ["minor", "moderate", "elevated"], + "enumLabels": { + "minor": "Minor", + "moderate": "Moderate", + "elevated": "Elevated" + } + }, + "authenticationFlows": { + "$ref": "#/$defs/conditionalAccessAuthenticationFlows" + } + } + }, + "conditionalAccessUsers": { + "type": "object", + "title": "Users and Groups", + "description": "Users, groups, and roles included in and excluded from the policy.", + "properties": { + "includeUsers": { + "type": "array", + "title": "Include Users", + "description": "User IDs in scope, or 'All', 'None', 'GuestsOrExternalUsers'.", + "items": { "type": "string" }, + "specialValues": ["All", "None", "GuestsOrExternalUsers"], + "graphLookup": "users" + }, + "excludeUsers": { + "type": "array", + "title": "Exclude Users", + "description": "User IDs excluded from scope.", + "items": { "type": "string" }, + "specialValues": ["GuestsOrExternalUsers"], + "graphLookup": "users" + }, + "includeGroups": { + "type": "array", + "title": "Include Groups", + "description": "Group IDs in scope of the policy.", + "items": { "type": "string" }, + "graphLookup": "groups" + }, + "excludeGroups": { + "type": "array", + "title": "Exclude Groups", + "description": "Group IDs excluded from the policy.", + "items": { "type": "string" }, + "graphLookup": "groups" + }, + "includeRoles": { + "type": "array", + "title": "Include Roles", + "description": "Directory role IDs in scope of the policy.", + "items": { "type": "string" }, + "graphLookup": "directoryRoles" + }, + "excludeRoles": { + "type": "array", + "title": "Exclude Roles", + "description": "Directory role IDs excluded from the policy.", + "items": { "type": "string" }, + "graphLookup": "directoryRoles" + }, + "includeGuestsOrExternalUsers": { + "$ref": "#/$defs/conditionalAccessGuestsOrExternalUsers" + }, + "excludeGuestsOrExternalUsers": { + "$ref": "#/$defs/conditionalAccessGuestsOrExternalUsers" + } + } + }, + "conditionalAccessGuestsOrExternalUsers": { + "type": "object", + "title": "Guests or External Users", + "description": "Internal guests or external user types.", + "properties": { + "guestOrExternalUserTypes": { + "type": "string", + "title": "Guest or External User Types", + "description": "Multi-valued flags. Combine with commas.", + "flagEnum": ["none", "internalGuest", "b2bCollaborationGuest", "b2bCollaborationMember", "b2bDirectConnectUser", "otherExternalUser", "serviceProvider"], + "flagEnumLabels": { + "none": "None", + "internalGuest": "Internal guest", + "b2bCollaborationGuest": "B2B collaboration guest", + "b2bCollaborationMember": "B2B collaboration member", + "b2bDirectConnectUser": "B2B direct connect user", + "otherExternalUser": "Other external user", + "serviceProvider": "Service provider" + } + }, + "externalTenants": { + "$ref": "#/$defs/conditionalAccessExternalTenants" + } + } + }, + "conditionalAccessExternalTenants": { + "type": "object", + "title": "External Tenants", + "description": "External tenant scope.", + "properties": { + "@odata.type": { + "type": "string", + "title": "Membership Kind", + "description": "Whether to enumerate or specify all tenants.", + "enum": [ + "#microsoft.graph.conditionalAccessAllExternalTenants", + "#microsoft.graph.conditionalAccessEnumeratedExternalTenants" + ], + "enumLabels": { + "#microsoft.graph.conditionalAccessAllExternalTenants": "All external tenants", + "#microsoft.graph.conditionalAccessEnumeratedExternalTenants": "Specific tenants" + } + }, + "members": { + "type": "array", + "title": "Tenant IDs", + "description": "List of tenant IDs when using enumerated membership.", + "items": { "type": "string" }, + "visibleWhen": { + "field": "@odata.type", + "value": "#microsoft.graph.conditionalAccessEnumeratedExternalTenants" + } + } + } + }, + "conditionalAccessApplications": { + "type": "object", + "title": "Cloud Apps or Actions", + "description": "Applications and user actions included in and excluded from the policy.", + "properties": { + "includeApplications": { + "type": "array", + "title": "Include Applications", + "description": "Application client IDs the policy applies to, or 'All', 'Office365', 'MicrosoftAdminPortals'.", + "items": { "type": "string" }, + "specialValues": ["All", "Office365", "MicrosoftAdminPortals"], + "specialValueLabels": { + "All": "All cloud apps", + "Office365": "Office 365", + "MicrosoftAdminPortals": "Microsoft Admin Portals" + }, + "graphLookup": "servicePrincipals" + }, + "excludeApplications": { + "type": "array", + "title": "Exclude Applications", + "description": "Application client IDs explicitly excluded.", + "items": { "type": "string" }, + "graphLookup": "servicePrincipals" + }, + "includeUserActions": { + "type": "array", + "title": "User Actions", + "description": "User actions to include instead of cloud apps.", + "items": { + "type": "string", + "enum": ["urn:user:registersecurityinfo", "urn:user:registerdevice"] + }, + "enumLabels": { + "urn:user:registersecurityinfo": "Register security information", + "urn:user:registerdevice": "Register or join devices" + } + }, + "includeAuthenticationContextClassReferences": { + "type": "array", + "title": "Authentication Context", + "description": "Authentication context class references included.", + "items": { "type": "string" } + }, + "applicationFilter": { + "$ref": "#/$defs/conditionalAccessFilter", + "title": "Application Filter", + "description": "Dynamic filter rule for applications." + } + } + }, + "conditionalAccessPlatforms": { + "type": "object", + "title": "Device Platforms", + "description": "Device platforms included in and excluded from the policy.", + "properties": { + "includePlatforms": { + "type": "array", + "title": "Include Platforms", + "description": "Platforms the policy applies to.", + "items": { + "type": "string", + "enum": ["android", "iOS", "windows", "windowsPhone", "macOS", "linux", "all"] + }, + "enumLabels": { + "android": "Android", + "iOS": "iOS", + "windows": "Windows", + "windowsPhone": "Windows Phone", + "macOS": "macOS", + "linux": "Linux", + "all": "All platforms" + } + }, + "excludePlatforms": { + "type": "array", + "title": "Exclude Platforms", + "description": "Platforms excluded from the policy.", + "items": { + "type": "string", + "enum": ["android", "iOS", "windows", "windowsPhone", "macOS", "linux"] + }, + "enumLabels": { + "android": "Android", + "iOS": "iOS", + "windows": "Windows", + "windowsPhone": "Windows Phone", + "macOS": "macOS", + "linux": "Linux" + } + } + } + }, + "conditionalAccessLocations": { + "type": "object", + "title": "Locations", + "description": "Locations included in and excluded from the policy.", + "properties": { + "includeLocations": { + "type": "array", + "title": "Include Locations", + "description": "Named location IDs or 'All', 'AllTrusted'.", + "items": { "type": "string" }, + "specialValues": ["All", "AllTrusted"], + "specialValueLabels": { + "All": "Any location", + "AllTrusted": "All trusted locations" + }, + "graphLookup": "namedLocations" + }, + "excludeLocations": { + "type": "array", + "title": "Exclude Locations", + "description": "Named location IDs excluded.", + "items": { "type": "string" }, + "specialValues": ["AllTrusted"], + "specialValueLabels": { + "AllTrusted": "All trusted locations" + }, + "graphLookup": "namedLocations" + } + } + }, + "conditionalAccessDevices": { + "type": "object", + "title": "Devices", + "description": "Device filter for the policy.", + "properties": { + "deviceFilter": { + "$ref": "#/$defs/conditionalAccessFilter", + "title": "Device Filter", + "description": "Dynamic filter rule for devices using device properties." + } + } + }, + "conditionalAccessFilter": { + "type": "object", + "title": "Filter", + "description": "Dynamic filter with rule syntax.", + "properties": { + "mode": { + "type": "string", + "title": "Filter Mode", + "description": "Whether to include or exclude matching items.", + "enum": ["include", "exclude"], + "enumLabels": { + "include": "Include filtered items", + "exclude": "Exclude filtered items" + } + }, + "rule": { + "type": "string", + "title": "Filter Rule", + "description": "Dynamic membership rule expression. Syntax matches Entra ID dynamic group rules." + } + }, + "required": ["mode", "rule"] + }, + "conditionalAccessClientApplications": { + "type": "object", + "title": "Workload Identities", + "description": "Service principals and workload identities included in and excluded from the policy.", + "properties": { + "includeServicePrincipals": { + "type": "array", + "title": "Include Service Principals", + "description": "Service principal IDs, or 'ServicePrincipalsInMyTenant'.", + "items": { "type": "string" }, + "specialValues": ["ServicePrincipalsInMyTenant"], + "specialValueLabels": { + "ServicePrincipalsInMyTenant": "All service principals" + } + }, + "excludeServicePrincipals": { + "type": "array", + "title": "Exclude Service Principals", + "description": "Service principal IDs excluded.", + "items": { "type": "string" } + }, + "servicePrincipalFilter": { + "$ref": "#/$defs/conditionalAccessFilter", + "title": "Service Principal Filter", + "description": "Dynamic filter rule for service principals." + } + } + }, + "conditionalAccessAuthenticationFlows": { + "type": "object", + "title": "Authentication Flows", + "description": "Authentication flow types in scope.", + "properties": { + "transferMethods": { + "type": "string", + "title": "Transfer Methods", + "description": "Transfer methods in scope for the policy.", + "enum": ["none", "deviceCodeFlow", "authenticationTransfer"], + "enumLabels": { + "none": "None", + "deviceCodeFlow": "Device code flow", + "authenticationTransfer": "Authentication transfer" + } + } + } + }, + "conditionalAccessGrantControls": { + "type": "object", + "title": "Grant Controls", + "description": "Grant controls that must be fulfilled to pass the policy.", + "properties": { + "operator": { + "type": "string", + "title": "Control Operator", + "description": "How multiple controls relate to each other.", + "enum": ["AND", "OR"], + "enumLabels": { + "AND": "Require all selected controls", + "OR": "Require one of the selected controls" + } + }, + "builtInControls": { + "type": "array", + "title": "Built-in Controls", + "description": "Built-in grant controls required by the policy.", + "items": { + "type": "string", + "enum": ["block", "mfa", "compliantDevice", "domainJoinedDevice", "approvedApplication", "compliantApplication", "passwordChange", "riskRemediation"] + }, + "enumLabels": { + "block": "Block access", + "mfa": "Require multifactor authentication", + "compliantDevice": "Require device to be marked as compliant", + "domainJoinedDevice": "Require Microsoft Entra hybrid joined device", + "approvedApplication": "Require approved client app", + "compliantApplication": "Require app protection policy", + "passwordChange": "Require password change", + "riskRemediation": "Require risk remediation" + }, + "constraints": { + "mutuallyExclusive": [["block"], ["mfa", "compliantDevice", "domainJoinedDevice", "approvedApplication", "compliantApplication", "passwordChange", "riskRemediation"]], + "passwordChangeRequires": ["mfa"], + "riskRemediationExcludes": ["passwordChange"] + } + }, + "customAuthenticationFactors": { + "type": "array", + "title": "Custom Controls", + "description": "Custom control IDs required by the policy.", + "items": { "type": "string" } + }, + "termsOfUse": { + "type": "array", + "title": "Terms of Use", + "description": "Terms of use IDs required by the policy.", + "items": { "type": "string" } + }, + "authenticationStrength": { + "$ref": "#/$defs/authenticationStrengthPolicy" + } + } + }, + "authenticationStrengthPolicy": { + "type": "object", + "title": "Authentication Strength", + "description": "Authentication strength policy required. Use instead of or alongside builtInControls.", + "properties": { + "id": { + "type": "string", + "title": "Authentication Strength Policy", + "description": "ID of the authentication strength policy.", + "graphLookup": "authenticationStrengthPolicies", + "wellKnownValues": { + "00000000-0000-0000-0000-000000000002": "Multifactor authentication", + "00000000-0000-0000-0000-000000000003": "Passwordless MFA", + "00000000-0000-0000-0000-000000000004": "Phishing-resistant MFA" + } + } + } + }, + "conditionalAccessSessionControls": { + "type": "object", + "title": "Session Controls", + "description": "Session controls enforced after sign-in.", + "properties": { + "applicationEnforcedRestrictions": { + "$ref": "#/$defs/applicationEnforcedRestrictionsSessionControl" + }, + "cloudAppSecurity": { + "$ref": "#/$defs/cloudAppSecuritySessionControl" + }, + "signInFrequency": { + "$ref": "#/$defs/signInFrequencySessionControl" + }, + "persistentBrowser": { + "$ref": "#/$defs/persistentBrowserSessionControl" + }, + "disableResilienceDefaults": { + "type": "boolean", + "title": "Disable Resilience Defaults", + "description": "When true, Entra ID will not extend existing sessions based on information collected prior to an outage." + } + } + }, + "applicationEnforcedRestrictionsSessionControl": { + "type": "object", + "title": "App Enforced Restrictions", + "description": "Enforce application restrictions. Only Exchange Online and SharePoint Online support this.", + "properties": { + "isEnabled": { + "type": "boolean", + "title": "Enabled", + "description": "Whether application enforced restrictions are enabled." + } + } + }, + "cloudAppSecuritySessionControl": { + "type": "object", + "title": "Conditional Access App Control", + "description": "Apply Defender for Cloud Apps controls.", + "properties": { + "isEnabled": { + "type": "boolean", + "title": "Enabled", + "description": "Whether cloud app security control is enabled." + }, + "cloudAppSecurityType": { + "type": "string", + "title": "Control Type", + "description": "Type of cloud app security enforcement.", + "enum": ["mcasConfigured", "monitorOnly", "blockDownloads"], + "enumLabels": { + "mcasConfigured": "Use custom policy", + "monitorOnly": "Monitor only", + "blockDownloads": "Block downloads" + } + } + } + }, + "signInFrequencySessionControl": { + "type": "object", + "title": "Sign-in Frequency", + "description": "Enforce periodic reauthentication.", + "properties": { + "isEnabled": { + "type": "boolean", + "title": "Enabled", + "description": "Whether sign-in frequency control is enabled." + }, + "value": { + "type": "integer", + "title": "Frequency Value", + "description": "Number of hours or days.", + "minimum": 1 + }, + "type": { + "type": "string", + "title": "Frequency Unit", + "description": "Unit of the sign-in frequency.", + "enum": ["hours", "days"], + "enumLabels": { + "hours": "Hours", + "days": "Days" + } + }, + "frequencyInterval": { + "type": "string", + "title": "Frequency Interval", + "description": "Whether frequency is time-based or every sign-in.", + "enum": ["timeBased", "everyTime"], + "enumLabels": { + "timeBased": "Time-based (use value/type above)", + "everyTime": "Every time" + } + }, + "authenticationType": { + "type": "string", + "title": "Authentication Type", + "description": "Which authentication types this applies to.", + "enum": ["primaryAndSecondaryAuthentication", "secondaryAuthentication"], + "enumLabels": { + "primaryAndSecondaryAuthentication": "Primary and secondary authentication", + "secondaryAuthentication": "Secondary authentication only" + } + } + } + }, + "persistentBrowserSessionControl": { + "type": "object", + "title": "Persistent Browser Session", + "description": "Whether to persist cookies after browser close.", + "properties": { + "isEnabled": { + "type": "boolean", + "title": "Enabled", + "description": "Whether persistent browser session control is enabled." + }, + "mode": { + "type": "string", + "title": "Mode", + "description": "Whether browser sessions should always or never persist.", + "enum": ["always", "never"], + "enumLabels": { + "always": "Always persistent", + "never": "Never persistent" + } + } + } + } + } +} diff --git a/src/data/intuneCollection.json b/src/data/intuneCollection.json index c6d19ca27858..879a69a8f4dd 100644 --- a/src/data/intuneCollection.json +++ b/src/data/intuneCollection.json @@ -1,257816 +1 @@ -[ - { - "id": ".globalpreferences_.globalpreferences", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": ".globalpreferences_com.apple.autologout.autologoutdelay", - "displayName": "Auto Log Out Delay", - "options": null - }, - { - "id": ".globalpreferences_multiplesessionenabled", - "displayName": "Multiple Session Enabled", - "options": [ - { - "id": ".globalpreferences_multiplesessionenabled_false", - "displayName": "False", - "description": null - }, - { - "id": ".globalpreferences_multiplesessionenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetversionprefixmicrosoftedge", - "displayName": "Target version override", - "options": [ - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetversionprefixmicrosoftedge_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetversionprefixmicrosoftedge_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetversionprefixmicrosoftedge_part_targetversionprefix", - "displayName": "Target version (Device)", - "options": null - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_targetversionprefixmicrosoftedgebeta", - "displayName": "Target version override", - "options": [ - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_targetversionprefixmicrosoftedgebeta_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_targetversionprefixmicrosoftedgebeta_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_targetversionprefixmicrosoftedgebeta_part_targetversionprefix", - "displayName": "Target version (Device)", - "options": null - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_targetversionprefixmicrosoftedgecanary", - "displayName": "Target version override", - "options": [ - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_targetversionprefixmicrosoftedgecanary_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_targetversionprefixmicrosoftedgecanary_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_targetversionprefixmicrosoftedgecanary_part_targetversionprefix", - "displayName": "Target version (Device)", - "options": null - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_targetversionprefixmicrosoftedgedev", - "displayName": "Target version override", - "options": [ - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_targetversionprefixmicrosoftedgedev_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_targetversionprefixmicrosoftedgedev_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_targetversionprefixmicrosoftedgedev_part_targetversionprefix", - "displayName": "Target version (Device)", - "options": null - }, - { - "id": "3~policy~microsoft_edge_targetblankimpliesnoopener", - "displayName": "Do not set window.opener for links targeting _blank (obsolete) (User)", - "options": [ - { - "id": "3~policy~microsoft_edge_targetblankimpliesnoopener_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "3~policy~microsoft_edge_targetblankimpliesnoopener_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "3~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled", - "displayName": "Allow Basic authentication for HTTP (User)", - "options": [ - { - "id": "3~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "3~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "ade_activatecellulardata", - "displayName": "Carrier activation server URL", - "options": null - }, - { - "id": "ade_activatecellulardatachoices", - "displayName": "Activate cellular data", - "options": [ - { - "id": "ade_activatecellulardatachoices_0", - "displayName": "No", - "description": null - }, - { - "id": "ade_activatecellulardatachoices_1", - "displayName": "Yes", - "description": null - } - ] - }, - { - "id": "ade_appledevicenametemplate", - "displayName": "Device name template", - "options": null - }, - { - "id": "ade_authenticationmethod", - "displayName": "Intune authentication method", - "options": { - "id": "ade_authenticationmethod_2", - "displayName": "Setup Assistant with modern authentication", - "description": null - } - }, - { - "id": "ade_awaitconfiguration_basic", - "displayName": "Await final configuration", - "options": [ - { - "id": "ade_awaitconfiguration_basic_0", - "displayName": "No", - "description": null - }, - { - "id": "ade_awaitconfiguration_basic_1", - "displayName": "Yes", - "description": null - } - ] - }, - { - "id": "ade_devicenametemplatechoices", - "displayName": "Apple device name template", - "options": [ - { - "id": "ade_devicenametemplatechoices_0", - "displayName": "No", - "description": null - }, - { - "id": "ade_devicenametemplatechoices_1", - "displayName": "Yes", - "description": null - } - ] - }, - { - "id": "ade_lockedenrollment", - "displayName": "Locked enrollment", - "options": [ - { - "id": "ade_lockedenrollment_0", - "displayName": "No", - "description": null - }, - { - "id": "ade_lockedenrollment_1", - "displayName": "Yes", - "description": null - } - ] - }, - { - "id": "ade_maximumcachedusers", - "displayName": "Maximum cached users", - "options": null - }, - { - "id": "ade_maximumsecondsafterscreenlockbeofrepasswordisrequired", - "displayName": "Maximum seconds after screen lock before password is required", - "options": null - }, - { - "id": "ade_maximumsecondsinactivityuntiltemporarysessionlogsout", - "displayName": "Maximum seconds of inactivity until temporary session logs out", - "options": null - }, - { - "id": "ade_maximumsecondsinactivityuntiluserlogsout", - "displayName": "Maximum seconds of inactivity until user session logs out", - "options": null - }, - { - "id": "ade_modernauth_awaitfinalconfiguration", - "displayName": "Await final configuration", - "options": [ - { - "id": "ade_modernauth_awaitfinalconfiguration_0", - "displayName": "No", - "description": null - }, - { - "id": "ade_modernauth_awaitfinalconfiguration_1", - "displayName": "Yes", - "description": null - } - ] - }, - { - "id": "ade_requiresharedipadtemporarysessiononly", - "displayName": "Require Shared iPad temporary session only", - "options": [ - { - "id": "ade_requiresharedipadtemporarysessiononly_0", - "displayName": "Not configured", - "description": null - }, - { - "id": "ade_requiresharedipadtemporarysessiononly_1", - "displayName": "Yes", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_actionbutton", - "displayName": "Action Button", - "options": [ - { - "id": "ade_setupassistant_actionbutton_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_actionbutton_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_androidmigration", - "displayName": "Android migration", - "options": [ - { - "id": "ade_setupassistant_androidmigration_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_androidmigration_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_appearance", - "displayName": "Appearance", - "options": [ - { - "id": "ade_setupassistant_appearance_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_appearance_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_appleid", - "displayName": "Apple ID", - "options": [ - { - "id": "ade_setupassistant_appleid_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_appleid_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_applepay", - "displayName": "Apple Pay", - "options": [ - { - "id": "ade_setupassistant_applepay_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_applepay_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_department", - "displayName": "Department", - "options": null - }, - { - "id": "ade_setupassistant_departmentphone", - "displayName": "Department phone", - "options": null - }, - { - "id": "ade_setupassistant_devicemigration", - "displayName": "Device to device migration", - "options": [ - { - "id": "ade_setupassistant_devicemigration_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_devicemigration_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_diagnosticsdata", - "displayName": "Diagnostics Data", - "options": [ - { - "id": "ade_setupassistant_diagnosticsdata_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_diagnosticsdata_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_enablelockdownmode", - "displayName": "Enable Lock down Mode", - "options": [ - { - "id": "ade_setupassistant_enablelockdownmode_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_enablelockdownmode_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_getstarted", - "displayName": "Get Started", - "options": [ - { - "id": "ade_setupassistant_getstarted_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_getstarted_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_imessagefacetime", - "displayName": "iMessage and FaceTime", - "options": [ - { - "id": "ade_setupassistant_imessagefacetime_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_imessagefacetime_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_intelligence", - "displayName": "Intelligence", - "options": [ - { - "id": "ade_setupassistant_intelligence_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_intelligence_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_locationservices", - "displayName": "Location services", - "options": [ - { - "id": "ade_setupassistant_locationservices_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_locationservices_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_passcode", - "displayName": "Passcode", - "options": [ - { - "id": "ade_setupassistant_passcode_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_passcode_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_privacy", - "displayName": "Privacy", - "options": [ - { - "id": "ade_setupassistant_privacy_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_privacy_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_restore", - "displayName": "Restore", - "options": [ - { - "id": "ade_setupassistant_restore_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_restore_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_restorecompleted", - "displayName": "Restore completed", - "options": [ - { - "id": "ade_setupassistant_restorecompleted_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_restorecompleted_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_safety", - "displayName": "Emergency SOS", - "options": [ - { - "id": "ade_setupassistant_safety_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_safety_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_screentime", - "displayName": "Screen Time", - "options": [ - { - "id": "ade_setupassistant_screentime_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_screentime_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_simsetup", - "displayName": "SIM setup", - "options": [ - { - "id": "ade_setupassistant_simsetup_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_simsetup_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_siri", - "displayName": "Siri", - "options": [ - { - "id": "ade_setupassistant_siri_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_siri_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_softwareupdate", - "displayName": "Software Update", - "options": [ - { - "id": "ade_setupassistant_softwareupdate_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_softwareupdate_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_softwareupdatecompleted", - "displayName": "Software Update completed", - "options": [ - { - "id": "ade_setupassistant_softwareupdatecompleted_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_softwareupdatecompleted_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_termsandconditions", - "displayName": "Terms and conditions", - "options": [ - { - "id": "ade_setupassistant_termsandconditions_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_termsandconditions_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_termsofaddress", - "displayName": "Terms of Address", - "options": [ - { - "id": "ade_setupassistant_termsofaddress_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_termsofaddress_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_touchfaceid", - "displayName": "Touch ID and Face ID", - "options": [ - { - "id": "ade_setupassistant_touchfaceid_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_touchfaceid_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_voiceselection", - "displayName": "Voice selection", - "options": [ - { - "id": "ade_setupassistant_voiceselection_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_voiceselection_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_setupassistant_watchmigration", - "displayName": "Watch migration", - "options": [ - { - "id": "ade_setupassistant_watchmigration_0", - "displayName": "Hide", - "description": null - }, - { - "id": "ade_setupassistant_watchmigration_1", - "displayName": "Show", - "description": null - } - ] - }, - { - "id": "ade_useraffinity", - "displayName": "User affinity", - "options": [ - { - "id": "ade_useraffinity_1", - "displayName": "Enroll with user affinity", - "description": null - }, - { - "id": "ade_useraffinity_0", - "displayName": "Enroll without user affinity", - "description": null - }, - { - "id": "ade_useraffinity_2", - "displayName": "Enroll with Microsoft Entra ID shared mode", - "description": null - }, - { - "id": "ade_useraffinity_3", - "displayName": "Enroll with Shared iPad", - "description": null - } - ] - }, - { - "id": "ade_useraffinity_awaitfinalconfiguration", - "displayName": "Await final configuration", - "options": [ - { - "id": "ade_useraffinity_awaitfinalconfiguration_0", - "displayName": "No", - "description": null - }, - { - "id": "ade_useraffinity_awaitfinalconfiguration_1", - "displayName": "Yes", - "description": null - } - ] - }, - { - "id": "ade_useraffinitybasic", - "displayName": "User affinity", - "options": { - "id": "ade_useraffinitybasic_0", - "displayName": "Enroll without user affinity", - "description": null - } - }, - { - "id": "apple_customprofile_profile", - "displayName": "Profile", - "options": null - }, - { - "id": "audioaccessory_audioaccessory", - "displayName": "com.apple.configuration.audio-accessory.settings", - "options": null - }, - { - "id": "audioaccessory_temporarypairing", - "displayName": "Temporary Pairing", - "options": null - }, - { - "id": "audioaccessory_temporarypairing_configuration", - "displayName": "Configuration", - "options": null - }, - { - "id": "audioaccessory_temporarypairing_configuration_unpairingtime", - "displayName": "Unpairing Time", - "options": null - }, - { - "id": "audioaccessory_temporarypairing_configuration_unpairingtime_hour", - "displayName": "Hour", - "options": null - }, - { - "id": "audioaccessory_temporarypairing_configuration_unpairingtime_policy", - "displayName": "Policy", - "options": [ - { - "id": "audioaccessory_temporarypairing_configuration_unpairingtime_policy_0", - "displayName": "None", - "description": null - }, - { - "id": "audioaccessory_temporarypairing_configuration_unpairingtime_policy_1", - "displayName": "Hour", - "description": null - } - ] - }, - { - "id": "audioaccessory_temporarypairing_disabled", - "displayName": "Disabled", - "options": [ - { - "id": "audioaccessory_temporarypairing_disabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "audioaccessory_temporarypairing_disabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.accountsblockmodification", - "displayName": "Block account changes", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.accountsblockmodification_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.accountsblockmodification_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.appsallowinstallfromunknownsources", - "displayName": "Allow installation from unknown sources", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.appsallowinstallfromunknownsources_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.appsallowinstallfromunknownsources_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.appsautoupdatepolicy", - "displayName": "App auto-updates (work profile-level)", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.appsautoupdatepolicy_notconfigured", - "displayName": "Not configured", - "description": "Not configured; this value is ignored." - }, - { - "id": "com.android.devicerestrictionpolicy.appsautoupdatepolicy_userchoice", - "displayName": "User choice", - "description": "The user can control auto-updates." - }, - { - "id": "com.android.devicerestrictionpolicy.appsautoupdatepolicy_never", - "displayName": "Never", - "description": "Apps are never auto-updated." - }, - { - "id": "com.android.devicerestrictionpolicy.appsautoupdatepolicy_wifionly", - "displayName": "Wi-Fi only", - "description": "Apps are auto-updated over Wi-Fi only." - }, - { - "id": "com.android.devicerestrictionpolicy.appsautoupdatepolicy_always", - "displayName": "Always", - "description": "Apps are auto-updated at any time. Data charges may apply." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.appsblockinstallfromunknownsourcesaosp", - "displayName": "Block user from turning on unknown sources", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.appsblockinstallfromunknownsourcesaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.appsblockinstallfromunknownsourcesaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy", - "displayName": "Default permission policy (work profile-level)", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy_devicedefault", - "displayName": "Device default", - "description": "Device default value, no intent." - }, - { - "id": "com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy_prompt", - "displayName": "Prompt", - "description": "Prompt." - }, - { - "id": "com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy_autogrant", - "displayName": "Auto grant", - "description": "Auto grant." - }, - { - "id": "com.android.devicerestrictionpolicy.appsdefaultpermissionpolicy_autodeny", - "displayName": "Auto deny", - "description": "Auto deny." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.appsrecommendskippingfirstusehints", - "displayName": "Skip first use hints", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.appsrecommendskippingfirstusehints_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.appsrecommendskippingfirstusehints_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.assistcontentpolicy", - "displayName": "Block assist content sharing with privileged apps", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.assistcontentpolicy_false", - "displayName": "False", - "description": "Assist content is allowed to be sent to a privileged app." - }, - { - "id": "com.android.devicerestrictionpolicy.assistcontentpolicy_true", - "displayName": "True", - "description": "Assist content is blocked from being sent to a privileged app." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockconfiguration", - "displayName": "Block Bluetooth configuration", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockconfiguration_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockconfiguration_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockconfigurationaosp", - "displayName": "Block Bluetooth configuration", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockconfigurationaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockconfigurationaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockcontactsharing", - "displayName": "Block contact sharing via Bluetooth (work profile-level)", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockcontactsharing_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockcontactsharing_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblocked", - "displayName": "Block Bluetooth", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.bluetoothblocked_true", - "displayName": "True", - "description": "True" - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblocked_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockedaosp", - "displayName": "Block Bluetooth", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockedaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.bluetoothblockedaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.camerablocked", - "displayName": "Block access to camera (work profile-level)", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.camerablocked_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.camerablocked_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.camerablockedaosp", - "displayName": "Block access to camera", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.camerablockedaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.camerablockedaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.cellularblockwifitethering", - "displayName": "Block tethering and access to hotspots", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.cellularblockwifitethering_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.cellularblockwifitethering_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.certificatecredentialconfigurationdisabled", - "displayName": "Block users from configuring credentials (work profile-level)", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.certificatecredentialconfigurationdisabled_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.certificatecredentialconfigurationdisabled_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesallowcopypaste", - "displayName": "Allow copy and paste between work and personal profiles ", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesallowcopypaste_false", - "displayName": "False", - "description": "false" - }, - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesallowcopypaste_true", - "displayName": "True", - "description": "true" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing", - "displayName": "Data sharing between work and personal profile", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing_notconfigured", - "displayName": "Device default", - "description": "Not configured; this value defaults to CROSS_PROFILE_DATA_SHARING_UNSPECIFIED." - }, - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing_crossprofiledatasharingblocked", - "displayName": "Block all sharing between profiles", - "description": "Data cannot be shared from both the personal profile to work profile and the work profile to the personal profile." - }, - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing_datasharingfromworktopersonalblocked", - "displayName": "Block sharing from work to personal profile", - "description": "Prevents users from sharing data from the work profile to apps in the personal profile. Personal data can be shared with work apps." - }, - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesallowdatasharing_crossprofiledatasharingallowed", - "displayName": "No restrictions on sharing", - "description": "Data from either profile can be shared with the other profile." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesshowworkcontactsinpersonalprofile", - "displayName": "Block searching of work contacts and displaying work contact caller-id in personal profile", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesshowworkcontactsinpersonalprofile_false", - "displayName": "False", - "description": "false" - }, - { - "id": "com.android.devicerestrictionpolicy.crossprofilepoliciesshowworkcontactsinpersonalprofile_true", - "displayName": "True", - "description": "true" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.dataroamingblocked", - "displayName": "Block roaming data services", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.dataroamingblocked_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.dataroamingblocked_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.datetimeconfigurationblocked", - "displayName": "Block date and time changes", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.datetimeconfigurationblocked_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.datetimeconfigurationblocked_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.enterprisedisplaynamevisibility", - "displayName": "Hide organization name", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.enterprisedisplaynamevisibility_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.enterprisedisplaynamevisibility_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.factoryresetblocked", - "displayName": "Block factory reset", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.factoryresetblocked_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.factoryresetblocked_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.factoryresetblockedaosp", - "displayName": "Block factory reset", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.factoryresetblockedaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.factoryresetblockedaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.locationmode", - "displayName": "Block location", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.locationmode_notconfigured", - "displayName": "False", - "description": "No restrictions on the location setting and no specific behavior is set or enforced. This is the default." - }, - { - "id": "com.android.devicerestrictionpolicy.locationmode_disabled", - "displayName": "True", - "description": "Location setting is disabled on the device." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.microphoneforcemute", - "displayName": "Block microphone adjustment", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.microphoneforcemute_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.microphoneforcemute_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.networkescapehatchallowed", - "displayName": "Allow network escape hatch", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.networkescapehatchallowed_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.networkescapehatchallowed_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.nfcblockoutgoingbeam", - "displayName": "Block beaming data from apps using NFC (work profile-level)", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.nfcblockoutgoingbeam_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.nfcblockoutgoingbeam_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.passwordblockkeyguard", - "displayName": "Disable lock screen", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.passwordblockkeyguard_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.passwordblockkeyguard_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.passwordexpirationdays", - "displayName": "Number of days until password expires", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminimumlength", - "displayName": "Minimum password length", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminimumlengthaosp", - "displayName": "Minimum password length", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminimumlettercharacters", - "displayName": "Number of characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminimumlowercasecharacters", - "displayName": "Number of lowercase characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminimumnonlettercharacters", - "displayName": "Number of non-letter characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminimumnumericcharacters", - "displayName": "Number of numeric characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminimumsymbolcharacters", - "displayName": "Number of symbol characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminimumuppercasecharacters", - "displayName": "Number of uppercase characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminutesofinactivitybeforescreentimeoutaosp", - "displayName": "Maximum minutes of inactivity until screen locks", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.passwordminutesofinactivitybeforescreentimeoutaosp_1minute", - "displayName": "1 Minute", - "description": "Screen Timeout after 1 Minute of Inactivity" - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminutesofinactivitybeforescreentimeoutaosp_5minutes", - "displayName": "5 Minutes", - "description": "Screen Timeout after 5 Minutes of Inactivity" - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminutesofinactivitybeforescreentimeoutaosp_15minutes", - "displayName": "15 Minutes", - "description": "Screen Timeout after 15 Minutes of Inactivity" - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminutesofinactivitybeforescreentimeoutaosp_30minutes", - "displayName": "30 Minutes", - "description": "Screen Timeout after 30 Minutes of Inactivity" - }, - { - "id": "com.android.devicerestrictionpolicy.passwordminutesofinactivitybeforescreentimeoutaosp_1hour", - "displayName": "1 Hour", - "description": "Screen Timeout after 1 Hour of Inactivity" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.passwordpreviouspasswordcounttoblock", - "displayName": "Number of passwords required before user can reuse a password", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype", - "displayName": "Required password type", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype_devicedefault", - "displayName": "Device default", - "description": "Device default value, no intent." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype_required", - "displayName": "Password required, no restrictions", - "description": "There must be a password set, but there are no restrictions on type." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype_lowsecuritybiometric", - "displayName": "Weak Biometric", - "description": "Low security biometrics based password required." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype_numeric", - "displayName": "Numeric", - "description": "At least numeric." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype_numericcomplex", - "displayName": "Numeric Complex", - "description": "At least numeric with no repeating or ordered sequences." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype_alphabetic", - "displayName": "Alphabetic", - "description": "At least alphabetic password." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype_alphanumeric", - "displayName": "Alphanumeric", - "description": "At least alphanumeric password" - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtype_alphanumericwithsymbols", - "displayName": "Alphanumeric with symbols", - "description": "At least alphanumeric with symbols." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp", - "displayName": "Required password type", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp_devicedefault", - "displayName": "Device default", - "description": "Device default value, no intent." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp_required", - "displayName": "Password required, no restrictions", - "description": "There must be a password set, but there are no restrictions on type." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp_lowsecuritybiometric", - "displayName": "Weak Biometric", - "description": "Low security biometrics based password required." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp_numeric", - "displayName": "Numeric", - "description": "At least numeric." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp_numericcomplex", - "displayName": "Numeric Complex", - "description": "At least numeric with no repeating or ordered sequences." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp_alphabetic", - "displayName": "Alphabetic", - "description": "At least alphabetic password." - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp_alphanumeric", - "displayName": "Alphanumeric", - "description": "At least alphanumeric password" - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequiredtypeaosp_alphanumericwithsymbols", - "displayName": "Alphanumeric with symbols", - "description": "At least alphanumeric with symbols." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequireunlock", - "displayName": "Required unlock frequency", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.passwordrequireunlock_devicedefault", - "displayName": "Device default", - "description": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordrequireunlock_requiredpasswordunlockdailyoption", - "displayName": "24 hours since last PIN, password, or pattern unlock", - "description": null - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.passwordsigninfailurecountbeforefactoryreset", - "displayName": "Number of sign-in failures before wiping device", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.passwordsigninfailurecountbeforefactoryresetaosp", - "displayName": "Number of sign-in failures before wiping device", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.personalprofileappsallowinstallfromunknownsources", - "displayName": "Allow users to enable app installation from unknown sources in the personal profile", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.personalprofileappsallowinstallfromunknownsources_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.personalprofileappsallowinstallfromunknownsources_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.personalprofilecamerablocked", - "displayName": "Block camera", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.personalprofilecamerablocked_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.personalprofilecamerablocked_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.personalprofilescreencaptureblocked", - "displayName": "Block screen capture", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.personalprofilescreencaptureblocked_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.personalprofilescreencaptureblocked_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.privatespacepolicy", - "displayName": "Block private space", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.privatespacepolicy_allowed", - "displayName": "False", - "description": "Users can create a private space profile." - }, - { - "id": "com.android.devicerestrictionpolicy.privatespacepolicy_disallowed", - "displayName": "True", - "description": "Users cannot create a private space profile. Supported only for company-owned devices with a work profile. Caution: Any existing private space will be removed." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.screencaptureblocked", - "displayName": "Block screen capture", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.screencaptureblocked_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.screencaptureblocked_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.screencaptureblockedaosp", - "displayName": "Block screen capture", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.screencaptureblockedaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.screencaptureblockedaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.securityallowdebuggingfeaturesaosp", - "displayName": "Allow users to turn on debugging features", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.securityallowdebuggingfeaturesaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.securityallowdebuggingfeaturesaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.securitycommoncriteriamodeenabled", - "displayName": "Require Common Criteria mode​", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.securitycommoncriteriamodeenabled_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.securitycommoncriteriamodeenabled_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.securitydevelopersettingsenabled", - "displayName": "Allow access to developer settings", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.securitydevelopersettingsenabled_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.securitydevelopersettingsenabled_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.securityrequireverifyapps", - "displayName": "Require threat scan on apps", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.securityrequireverifyapps_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.securityrequireverifyapps_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.statusbarblocked", - "displayName": "Block access to status bar", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.statusbarblocked_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.statusbarblocked_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.storageallowusb", - "displayName": "Allow USB storage", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.storageallowusb_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.storageallowusb_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.storageblockexternalmedia", - "displayName": "Block mounting of external media", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.storageblockexternalmedia_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.storageblockexternalmedia_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.storageblockexternalmediaaosp", - "displayName": "Block mounting of external media", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.storageblockexternalmediaaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.storageblockexternalmediaaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.storageblockusbfiletransferaosp", - "displayName": "Block USB file transfer", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.storageblockusbfiletransferaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.storageblockusbfiletransferaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.systemwindowsblocked", - "displayName": "Block notification windows", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.systemwindowsblocked_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.systemwindowsblocked_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.usbdataaccess", - "displayName": "USB access", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.usbdataaccess_allowusbdatatransfer", - "displayName": "Allow USB data transfer", - "description": "All types of USB data transfers are allowed. usbFileTransferDisabled is ignored." - }, - { - "id": "com.android.devicerestrictionpolicy.usbdataaccess_disallowusbfiletransfer", - "displayName": "Disallow USB file transfer", - "description": "Transferring files over USB is disallowed. Other types of USB data connections, such as mouse and keyboard connection, are allowed. usbFileTransferDisabled is ignored." - }, - { - "id": "com.android.devicerestrictionpolicy.usbdataaccess_disallowusbdatatransfer", - "displayName": "Disallow USB data transfer", - "description": "When set, all types of USB data transfers are prohibited. Supported for devices running Android 12 or above with USB HAL 1.3 or above. If the setting is not supported, DISALLOW_USB_FILE_TRANSFER will be set. A NonComplianceDetail with API_LEVEL is reported if the Android version is less than 12. A NonComplianceDetail with DEVICE_INCOMPATIBLE is reported if the device does not have USB HAL 1.3 or above. usbFileTransferDisabled is ignored." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.volumeblockadjustment", - "displayName": "Block volume changes", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.volumeblockadjustment_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.volumeblockadjustment_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditconfigurations", - "displayName": "Block Wi-Fi access point configuration", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditconfigurations_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditconfigurations_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditconfigurationsaosp", - "displayName": "Block Wi-Fi setting changes", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditconfigurationsaosp_false", - "displayName": "False", - "description": "False" - }, - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditconfigurationsaosp_true", - "displayName": "True", - "description": "True" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditpolicydefinedconfigurations", - "displayName": "Block Wi-Fi setting changes", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditpolicydefinedconfigurations_true", - "displayName": "True", - "description": "true" - }, - { - "id": "com.android.devicerestrictionpolicy.wifiblockeditpolicydefinedconfigurations_false", - "displayName": "False", - "description": "false" - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.wifidirectsettings", - "displayName": "Block Wi-Fi Direct", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.wifidirectsettings_allowed", - "displayName": "False", - "description": "The user is allowed to use Wi-Fi direct." - }, - { - "id": "com.android.devicerestrictionpolicy.wifidirectsettings_disallowed", - "displayName": "True", - "description": "The user is not allowed to use Wi-Fi direct. A NonComplianceDetail with API_LEVEL is reported if the Android version is less than 13." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordexpirationdays", - "displayName": "Number of days until password expires", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordminimumlength", - "displayName": "Minimum password length", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordminimumlettercharacters", - "displayName": "Number of characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordminimumlowercasecharacters", - "displayName": "Number of lowercase characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordminimumnonlettercharacters", - "displayName": "Number of non-letter characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordminimumnumericcharacters", - "displayName": "Number of numeric characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordminimumsymbolcharacters", - "displayName": "Number of symbol characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordminimumuppercasecharacters", - "displayName": "Number of uppercase characters required", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordpreviouspasswordcounttoblock", - "displayName": "Number of passwords required before user can reuse a password", - "options": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype", - "displayName": "Required password type", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_devicedefault", - "displayName": "Device default", - "description": "Device default value, no intent." - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_required", - "displayName": "Password required, no restrictions", - "description": "There must be a password set, but there are no restrictions on type." - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_lowsecuritybiometric", - "displayName": "Weak Biometric", - "description": "Low security biometrics based password required." - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_numeric", - "displayName": "Numeric", - "description": "At least numeric." - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_numericcomplex", - "displayName": "Numeric Complex", - "description": "At least numeric with no repeating or ordered sequences." - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_alphabetic", - "displayName": "Alphabetic", - "description": "At least alphabetic password." - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_alphanumeric", - "displayName": "Alphanumeric", - "description": "At least alphanumeric password" - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequiredtype_alphanumericwithsymbols", - "displayName": "Alphanumeric with symbols", - "description": "At least alphanumeric with symbols." - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequireunlock", - "displayName": "Required unlock frequency", - "options": [ - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequireunlock_devicedefault", - "displayName": "Device default", - "description": null - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordrequireunlock_requiredpasswordunlockdailyoption", - "displayName": "24 hours since last PIN, password, or pattern unlock", - "description": null - } - ] - }, - { - "id": "com.android.devicerestrictionpolicy.workprofilepasswordsigninfailurecountbeforefactoryreset", - "displayName": "Number of sign-in failures before wiping device", - "options": null - }, - { - "id": "com.apple.airplay_allowlist", - "displayName": "Allow List", - "options": null - }, - { - "id": "com.apple.airplay_allowlist_item_deviceid", - "displayName": "Device ID (Deprecated)", - "options": null - }, - { - "id": "com.apple.airplay_allowlist_item_devicename", - "displayName": "Device Name", - "options": null - }, - { - "id": "com.apple.airplay_com.apple.airplay", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.airplay_passwords", - "displayName": "Password", - "options": null - }, - { - "id": "com.apple.airplay_passwords_item_deviceid", - "displayName": "Device ID", - "options": null - }, - { - "id": "com.apple.airplay_passwords_item_devicename", - "displayName": "Device Name", - "options": null - }, - { - "id": "com.apple.airplay_passwords_item_password", - "displayName": "Password", - "options": null - }, - { - "id": "com.apple.airprint_airprint", - "displayName": "Printers", - "options": null - }, - { - "id": "com.apple.airprint_airprint_item_forcetls", - "displayName": "Force TLS", - "options": [ - { - "id": "com.apple.airprint_airprint_item_forcetls_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.airprint_airprint_item_forcetls_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.airprint_airprint_item_ipaddress", - "displayName": "IP Address", - "options": null - }, - { - "id": "com.apple.airprint_airprint_item_port", - "displayName": "Port", - "options": null - }, - { - "id": "com.apple.airprint_airprint_item_resourcepath", - "displayName": "Resource Path", - "options": null - }, - { - "id": "com.apple.airprint_com.apple.airprint", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.app.lock_app", - "displayName": "App", - "options": null - }, - { - "id": "com.apple.app.lock_app_identifier", - "displayName": "App Identifier", - "options": null - }, - { - "id": "com.apple.app.lock_app_options", - "displayName": "Options", - "options": null - }, - { - "id": "com.apple.app.lock_app_options_disableautolock", - "displayName": "Disable Auto Lock", - "options": [ - { - "id": "com.apple.app.lock_app_options_disableautolock_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_disableautolock_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_disabledevicerotation", - "displayName": "Disable Device Rotation", - "options": [ - { - "id": "com.apple.app.lock_app_options_disabledevicerotation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_disabledevicerotation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_disableringerswitch", - "displayName": "Disable Ringer Switch", - "options": [ - { - "id": "com.apple.app.lock_app_options_disableringerswitch_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_disableringerswitch_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_disablesleepwakebutton", - "displayName": "Disable Sleep Wake Button", - "options": [ - { - "id": "com.apple.app.lock_app_options_disablesleepwakebutton_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_disablesleepwakebutton_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_disabletouch", - "displayName": "Disable Touch", - "options": [ - { - "id": "com.apple.app.lock_app_options_disabletouch_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_disabletouch_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_disablevolumebuttons", - "displayName": "Disable Volume Buttons", - "options": [ - { - "id": "com.apple.app.lock_app_options_disablevolumebuttons_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_disablevolumebuttons_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_enableassistivetouch", - "displayName": "Enable Assistive Touch", - "options": [ - { - "id": "com.apple.app.lock_app_options_enableassistivetouch_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_enableassistivetouch_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_enableinvertcolors", - "displayName": "Enable Invert Colors", - "options": [ - { - "id": "com.apple.app.lock_app_options_enableinvertcolors_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_enableinvertcolors_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_enablemonoaudio", - "displayName": "Enable Mono Audio", - "options": [ - { - "id": "com.apple.app.lock_app_options_enablemonoaudio_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_enablemonoaudio_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_enablespeakselection", - "displayName": "Enable Speak Selection", - "options": [ - { - "id": "com.apple.app.lock_app_options_enablespeakselection_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_enablespeakselection_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_enablevoicecontrol", - "displayName": "Enable Voice Control", - "options": [ - { - "id": "com.apple.app.lock_app_options_enablevoicecontrol_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_enablevoicecontrol_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_enablevoiceover", - "displayName": "Enable Voice Over", - "options": [ - { - "id": "com.apple.app.lock_app_options_enablevoiceover_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_enablevoiceover_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_options_enablezoom", - "displayName": "Enable Zoom", - "options": [ - { - "id": "com.apple.app.lock_app_options_enablezoom_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_options_enablezoom_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_userenabledoptions", - "displayName": "User Enabled Options", - "options": null - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_assistivetouch", - "displayName": "Assistive Touch", - "options": [ - { - "id": "com.apple.app.lock_app_userenabledoptions_assistivetouch_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_assistivetouch_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_invertcolors", - "displayName": "Invert Colors", - "options": [ - { - "id": "com.apple.app.lock_app_userenabledoptions_invertcolors_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_invertcolors_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_voicecontrol", - "displayName": "Voice Control", - "options": [ - { - "id": "com.apple.app.lock_app_userenabledoptions_voicecontrol_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_voicecontrol_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_voiceover", - "displayName": "Voice Over", - "options": [ - { - "id": "com.apple.app.lock_app_userenabledoptions_voiceover_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_voiceover_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_zoom", - "displayName": "Zoom", - "options": [ - { - "id": "com.apple.app.lock_app_userenabledoptions_zoom_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.app.lock_app_userenabledoptions_zoom_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.app.lock_com.apple.app.lock", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.applicationaccess_allowaccountmodification", - "displayName": "Allow Account Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowaccountmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowaccountmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowactivitycontinuation", - "displayName": "Allow Activity Continuation", - "options": [ - { - "id": "com.apple.applicationaccess_allowactivitycontinuation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowactivitycontinuation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowaddinggamecenterfriends", - "displayName": "Allow Adding Game Center Friends", - "options": [ - { - "id": "com.apple.applicationaccess_allowaddinggamecenterfriends_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowaddinggamecenterfriends_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowairdrop", - "displayName": "Allow AirDrop", - "options": [ - { - "id": "com.apple.applicationaccess_allowairdrop_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowairdrop_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowairplayincomingrequests", - "displayName": "Allow Air Play Incoming Requests", - "options": [ - { - "id": "com.apple.applicationaccess_allowairplayincomingrequests_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowairplayincomingrequests_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowairprint", - "displayName": "Allow AirPrint", - "options": [ - { - "id": "com.apple.applicationaccess_allowairprint_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowairprint_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowairprintcredentialsstorage", - "displayName": "Allow AirPrint Credentials Storage", - "options": [ - { - "id": "com.apple.applicationaccess_allowairprintcredentialsstorage_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowairprintcredentialsstorage_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowairprintibeacondiscovery", - "displayName": "Allow AirPrint iBeacon Discovery", - "options": [ - { - "id": "com.apple.applicationaccess_allowairprintibeacondiscovery_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowairprintibeacondiscovery_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowappcellulardatamodification", - "displayName": "Allow App Cellular Data Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowappcellulardatamodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowappcellulardatamodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowappclips", - "displayName": "Allow App Clips", - "options": [ - { - "id": "com.apple.applicationaccess_allowappclips_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowappclips_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowappinstallation", - "displayName": "Allow App Installation", - "options": [ - { - "id": "com.apple.applicationaccess_allowappinstallation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowappinstallation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowappleintelligencereport", - "displayName": "Allow Apple Intelligence Report", - "options": [ - { - "id": "com.apple.applicationaccess_allowappleintelligencereport_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowappleintelligencereport_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowapplepersonalizedadvertising", - "displayName": "Allow Apple Personalized Advertising", - "options": [ - { - "id": "com.apple.applicationaccess_allowapplepersonalizedadvertising_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowapplepersonalizedadvertising_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowappremoval", - "displayName": "Allow App Removal", - "options": [ - { - "id": "com.apple.applicationaccess_allowappremoval_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowappremoval_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowappstobehidden", - "displayName": "Allow Apps To Be Hidden", - "options": [ - { - "id": "com.apple.applicationaccess_allowappstobehidden_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowappstobehidden_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowappstobelocked", - "displayName": "Allow Apps To Be Locked", - "options": [ - { - "id": "com.apple.applicationaccess_allowappstobelocked_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowappstobelocked_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowardremotemanagementmodification", - "displayName": "Allow ARD Remote Management Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowardremotemanagementmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowardremotemanagementmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowassistant", - "displayName": "Allow Assistant", - "options": [ - { - "id": "com.apple.applicationaccess_allowassistant_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowassistant_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowassistantusergeneratedcontent", - "displayName": "Allow Assistant User Generated Content", - "options": [ - { - "id": "com.apple.applicationaccess_allowassistantusergeneratedcontent_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowassistantusergeneratedcontent_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowassistantwhilelocked", - "displayName": "Allow Assistant While Locked", - "options": [ - { - "id": "com.apple.applicationaccess_allowassistantwhilelocked_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowassistantwhilelocked_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowautocorrection", - "displayName": "Allow Auto Correction", - "options": [ - { - "id": "com.apple.applicationaccess_allowautocorrection_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowautocorrection_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowautodim", - "displayName": "Allow Auto Dim", - "options": [ - { - "id": "com.apple.applicationaccess_allowautodim_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowautodim_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowautomaticappdownloads", - "displayName": "Allow Automatic App Downloads", - "options": [ - { - "id": "com.apple.applicationaccess_allowautomaticappdownloads_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowautomaticappdownloads_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowautounlock", - "displayName": "Allow Auto Unlock", - "options": [ - { - "id": "com.apple.applicationaccess_allowautounlock_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowautounlock_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowbluetoothmodification", - "displayName": "Allow Bluetooth Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowbluetoothmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowbluetoothmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowbluetoothsharingmodification", - "displayName": "Allow Bluetooth Sharing Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowbluetoothsharingmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowbluetoothsharingmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowbookstore", - "displayName": "Allow Bookstore", - "options": [ - { - "id": "com.apple.applicationaccess_allowbookstore_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowbookstore_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowbookstoreerotica", - "displayName": "Allow Bookstore Erotica", - "options": [ - { - "id": "com.apple.applicationaccess_allowbookstoreerotica_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowbookstoreerotica_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcallrecording", - "displayName": "Allow Call Recording", - "options": [ - { - "id": "com.apple.applicationaccess_allowcallrecording_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcallrecording_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcamera", - "displayName": "Allow Camera", - "options": [ - { - "id": "com.apple.applicationaccess_allowcamera_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcamera_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcellularplanmodification", - "displayName": "Allow Cellular Plan Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowcellularplanmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcellularplanmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowchat", - "displayName": "Allow Chat", - "options": [ - { - "id": "com.apple.applicationaccess_allowchat_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowchat_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudaddressbook", - "displayName": "Allow Cloud Address Book", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudaddressbook_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudaddressbook_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudbackup", - "displayName": "Allow Cloud Backup", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudbackup_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudbackup_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudbookmarks", - "displayName": "Allow Cloud Bookmarks", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudbookmarks_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudbookmarks_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudcalendar", - "displayName": "Allow Cloud Calendar", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudcalendar_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudcalendar_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowclouddesktopanddocuments", - "displayName": "Allow Cloud Desktop And Documents", - "options": [ - { - "id": "com.apple.applicationaccess_allowclouddesktopanddocuments_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowclouddesktopanddocuments_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowclouddocumentsync", - "displayName": "Allow Cloud Document Sync", - "options": [ - { - "id": "com.apple.applicationaccess_allowclouddocumentsync_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowclouddocumentsync_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudfreeform", - "displayName": "Allow Cloud Freeform", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudfreeform_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudfreeform_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudkeychainsync", - "displayName": "Allow Cloud Keychain Sync", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudkeychainsync_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudkeychainsync_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudmail", - "displayName": "Allow Cloud Mail", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudmail_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudmail_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudnotes", - "displayName": "Allow Cloud Notes", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudnotes_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudnotes_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudphotolibrary", - "displayName": "Allow Cloud Photo Library", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudphotolibrary_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudphotolibrary_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudprivaterelay", - "displayName": "Allow Cloud Private Relay", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudprivaterelay_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudprivaterelay_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcloudreminders", - "displayName": "Allow Cloud Reminders", - "options": [ - { - "id": "com.apple.applicationaccess_allowcloudreminders_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcloudreminders_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcontentcaching", - "displayName": "Allow Content Caching", - "options": [ - { - "id": "com.apple.applicationaccess_allowcontentcaching_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcontentcaching_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowcontinuouspathkeyboard", - "displayName": "Allow Continuous Path Keyboard", - "options": [ - { - "id": "com.apple.applicationaccess_allowcontinuouspathkeyboard_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowcontinuouspathkeyboard_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowdefaultbrowsermodification", - "displayName": "Allow Default Browser Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowdefaultbrowsermodification_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowdefaultbrowsermodification_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowdefaultcallingappmodification", - "displayName": "Allow Default Calling App Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowdefaultcallingappmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowdefaultcallingappmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowdefaultmessagingappmodification", - "displayName": "Allow Default Messaging App Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowdefaultmessagingappmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowdefaultmessagingappmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowdefinitionlookup", - "displayName": "Allow Definition Lookup", - "options": [ - { - "id": "com.apple.applicationaccess_allowdefinitionlookup_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowdefinitionlookup_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowdevicenamemodification", - "displayName": "Allow Device Name Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowdevicenamemodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowdevicenamemodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowdiagnosticsubmission", - "displayName": "Allow Diagnostic Submission", - "options": [ - { - "id": "com.apple.applicationaccess_allowdiagnosticsubmission_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowdiagnosticsubmission_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowdiagnosticsubmissionmodification", - "displayName": "Allow Diagnostic Submission Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowdiagnosticsubmissionmodification_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowdiagnosticsubmissionmodification_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowdictation", - "displayName": "Allow Dictation", - "options": [ - { - "id": "com.apple.applicationaccess_allowdictation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowdictation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowedcamerarestrictionbundleids", - "displayName": "Allowed Camera Restriction Bundle IDs", - "options": null - }, - { - "id": "com.apple.applicationaccess_allowedexternalintelligenceworkspaceids", - "displayName": "Allowed External Intelligence Workspace IDs", - "options": null - }, - { - "id": "com.apple.applicationaccess_allowenablingrestrictions", - "displayName": "Allow Enabling Restrictions", - "options": [ - { - "id": "com.apple.applicationaccess_allowenablingrestrictions_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowenablingrestrictions_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowenterpriseapptrust", - "displayName": "Allow Enterprise App Trust", - "options": [ - { - "id": "com.apple.applicationaccess_allowenterpriseapptrust_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowenterpriseapptrust_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowenterprisebookbackup", - "displayName": "Allow Enterprise Book Backup", - "options": [ - { - "id": "com.apple.applicationaccess_allowenterprisebookbackup_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowenterprisebookbackup_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowenterprisebookmetadatasync", - "displayName": "Allow Enterprise Book Metadata Sync", - "options": [ - { - "id": "com.apple.applicationaccess_allowenterprisebookmetadatasync_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowenterprisebookmetadatasync_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowerasecontentandsettings", - "displayName": "Allow Erase Content And Settings", - "options": [ - { - "id": "com.apple.applicationaccess_allowerasecontentandsettings_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowerasecontentandsettings_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowesimmodification", - "displayName": "Allow ESIM Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowesimmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowesimmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowesimoutgoingtransfers", - "displayName": "Allow ESIM Outgoing Transfers", - "options": [ - { - "id": "com.apple.applicationaccess_allowesimoutgoingtransfers_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowesimoutgoingtransfers_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowexplicitcontent", - "displayName": "Allow Explicit Content", - "options": [ - { - "id": "com.apple.applicationaccess_allowexplicitcontent_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowexplicitcontent_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowexternalintelligenceintegrations", - "displayName": "Allow External Intelligence Integrations", - "options": [ - { - "id": "com.apple.applicationaccess_allowexternalintelligenceintegrations_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowexternalintelligenceintegrations_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowexternalintelligenceintegrationssignin", - "displayName": "Allow External Intelligence Integrations Sign In", - "options": [ - { - "id": "com.apple.applicationaccess_allowexternalintelligenceintegrationssignin_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowexternalintelligenceintegrationssignin_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowfilesharingmodification", - "displayName": "Allow File Sharing Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowfilesharingmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowfilesharingmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowfilesnetworkdriveaccess", - "displayName": "Allow Files Network Drive Access", - "options": [ - { - "id": "com.apple.applicationaccess_allowfilesnetworkdriveaccess_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowfilesnetworkdriveaccess_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowfilesusbdriveaccess", - "displayName": "Allow Files USB Drive Access", - "options": [ - { - "id": "com.apple.applicationaccess_allowfilesusbdriveaccess_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowfilesusbdriveaccess_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowfindmydevice", - "displayName": "Allow Find My Device", - "options": [ - { - "id": "com.apple.applicationaccess_allowfindmydevice_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowfindmydevice_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowfindmyfriends", - "displayName": "Allow Find My Friends", - "options": [ - { - "id": "com.apple.applicationaccess_allowfindmyfriends_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowfindmyfriends_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowfindmyfriendsmodification", - "displayName": "Allow Find My Friends Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowfindmyfriendsmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowfindmyfriendsmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowfingerprintforunlock", - "displayName": "Allow Fingerprint For Unlock", - "options": [ - { - "id": "com.apple.applicationaccess_allowfingerprintforunlock_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowfingerprintforunlock_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowfingerprintmodification", - "displayName": "Allow Fingerprint Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowfingerprintmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowfingerprintmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowgamecenter", - "displayName": "Allow Game Center", - "options": [ - { - "id": "com.apple.applicationaccess_allowgamecenter_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowgamecenter_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowgenmoji", - "displayName": "Allow Genmoji", - "options": [ - { - "id": "com.apple.applicationaccess_allowgenmoji_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowgenmoji_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowglobalbackgroundfetchwhenroaming", - "displayName": "Allow Global Background Fetch When Roaming", - "options": [ - { - "id": "com.apple.applicationaccess_allowglobalbackgroundfetchwhenroaming_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowglobalbackgroundfetchwhenroaming_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowhostpairing", - "displayName": "Allow Host Pairing", - "options": [ - { - "id": "com.apple.applicationaccess_allowhostpairing_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowhostpairing_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowimageplayground", - "displayName": "Allow Image Playground", - "options": [ - { - "id": "com.apple.applicationaccess_allowimageplayground_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowimageplayground_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowimagewand", - "displayName": "Allow Image Wand", - "options": [ - { - "id": "com.apple.applicationaccess_allowimagewand_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowimagewand_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowinapppurchases", - "displayName": "Allow In App Purchases", - "options": [ - { - "id": "com.apple.applicationaccess_allowinapppurchases_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowinapppurchases_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowinternetsharingmodification", - "displayName": "Allow Internet Sharing Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowinternetsharingmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowinternetsharingmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowiphonemirroring", - "displayName": "Allow iPhone Mirroring", - "options": [ - { - "id": "com.apple.applicationaccess_allowiphonemirroring_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowiphonemirroring_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowiphonewidgetsonmac", - "displayName": "Allow iPhone Widgets On Mac", - "options": [ - { - "id": "com.apple.applicationaccess_allowiphonewidgetsonmac_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowiphonewidgetsonmac_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowitunes", - "displayName": "Allow iTunes", - "options": [ - { - "id": "com.apple.applicationaccess_allowitunes_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowitunes_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowitunesfilesharing", - "displayName": "Allow iTunes File Sharing", - "options": [ - { - "id": "com.apple.applicationaccess_allowitunesfilesharing_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowitunesfilesharing_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowkeyboardshortcuts", - "displayName": "Allow Keyboard Shortcuts", - "options": [ - { - "id": "com.apple.applicationaccess_allowkeyboardshortcuts_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowkeyboardshortcuts_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowlistedappbundleids", - "displayName": "Allow Listed App Bundle IDs", - "options": null - }, - { - "id": "com.apple.applicationaccess_allowlivevoicemail", - "displayName": "Allow Live Voicemail", - "options": [ - { - "id": "com.apple.applicationaccess_allowlivevoicemail_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowlivevoicemail_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowlocalusercreation", - "displayName": "Allow Local User Creation", - "options": [ - { - "id": "com.apple.applicationaccess_allowlocalusercreation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowlocalusercreation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowlockscreencontrolcenter", - "displayName": "Allow Lock Screen Control Center", - "options": [ - { - "id": "com.apple.applicationaccess_allowlockscreencontrolcenter_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowlockscreencontrolcenter_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowlockscreennotificationsview", - "displayName": "Allow Lock Screen Notifications View", - "options": [ - { - "id": "com.apple.applicationaccess_allowlockscreennotificationsview_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowlockscreennotificationsview_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowlockscreentodayview", - "displayName": "Allow Lock Screen Today View", - "options": [ - { - "id": "com.apple.applicationaccess_allowlockscreentodayview_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowlockscreentodayview_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmailprivacyprotection", - "displayName": "Allow Mail Privacy Protection", - "options": [ - { - "id": "com.apple.applicationaccess_allowmailprivacyprotection_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmailprivacyprotection_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmailsmartreplies", - "displayName": "Allow Mail Smart Replies", - "options": [ - { - "id": "com.apple.applicationaccess_allowmailsmartreplies_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmailsmartreplies_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmailsummary", - "displayName": "Allow Mail Summary", - "options": [ - { - "id": "com.apple.applicationaccess_allowmailsummary_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmailsummary_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmanagedappscloudsync", - "displayName": "Allow Managed Apps Cloud Sync", - "options": [ - { - "id": "com.apple.applicationaccess_allowmanagedappscloudsync_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmanagedappscloudsync_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmanagedtowriteunmanagedcontacts", - "displayName": "Allow Managed To Write Unmanaged Contacts", - "options": [ - { - "id": "com.apple.applicationaccess_allowmanagedtowriteunmanagedcontacts_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmanagedtowriteunmanagedcontacts_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmarketplaceappinstallation", - "displayName": "Allow Marketplace App Installation", - "options": [ - { - "id": "com.apple.applicationaccess_allowmarketplaceappinstallation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmarketplaceappinstallation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmediasharingmodification", - "displayName": "Allow Media Sharing Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowmediasharingmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmediasharingmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmultiplayergaming", - "displayName": "Allow Multiplayer Gaming", - "options": [ - { - "id": "com.apple.applicationaccess_allowmultiplayergaming_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmultiplayergaming_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowmusicservice", - "displayName": "Allow Music Service", - "options": [ - { - "id": "com.apple.applicationaccess_allowmusicservice_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowmusicservice_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allownews", - "displayName": "Allow News", - "options": [ - { - "id": "com.apple.applicationaccess_allownews_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allownews_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allownfc", - "displayName": "Allow NFC", - "options": [ - { - "id": "com.apple.applicationaccess_allownfc_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allownfc_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allownotestranscription", - "displayName": "Allow Notes Transcription", - "options": [ - { - "id": "com.apple.applicationaccess_allownotestranscription_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allownotestranscription_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allownotestranscriptionsummary", - "displayName": "Allow Notes Transcription Summary", - "options": [ - { - "id": "com.apple.applicationaccess_allownotestranscriptionsummary_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allownotestranscriptionsummary_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allownotificationsmodification", - "displayName": "Allow Notifications Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allownotificationsmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allownotificationsmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowopenfrommanagedtounmanaged", - "displayName": "Allow Open From Managed To Unmanaged", - "options": [ - { - "id": "com.apple.applicationaccess_allowopenfrommanagedtounmanaged_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowopenfrommanagedtounmanaged_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowopenfromunmanagedtomanaged", - "displayName": "Allow Open From Unmanaged To Managed", - "options": [ - { - "id": "com.apple.applicationaccess_allowopenfromunmanagedtomanaged_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowopenfromunmanagedtomanaged_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowotapkiupdates", - "displayName": "Allow OTAPKI Updates", - "options": [ - { - "id": "com.apple.applicationaccess_allowotapkiupdates_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowotapkiupdates_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpairedwatch", - "displayName": "Allow Paired Watch", - "options": [ - { - "id": "com.apple.applicationaccess_allowpairedwatch_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpairedwatch_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpassbookwhilelocked", - "displayName": "Allow Passbook While Locked", - "options": [ - { - "id": "com.apple.applicationaccess_allowpassbookwhilelocked_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpassbookwhilelocked_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpasscodemodification", - "displayName": "Allow Passcode Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowpasscodemodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpasscodemodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpasswordautofill", - "displayName": "Allow Password Auto Fill", - "options": [ - { - "id": "com.apple.applicationaccess_allowpasswordautofill_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpasswordautofill_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpasswordproximityrequests", - "displayName": "Allow Password Proximity Requests", - "options": [ - { - "id": "com.apple.applicationaccess_allowpasswordproximityrequests_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpasswordproximityrequests_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpasswordsharing", - "displayName": "Allow Password Sharing", - "options": [ - { - "id": "com.apple.applicationaccess_allowpasswordsharing_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpasswordsharing_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpersonalhotspotmodification", - "displayName": "Allow Personal Hotspot Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowpersonalhotspotmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpersonalhotspotmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpersonalizedhandwritingresults", - "displayName": "Allow Personalized Handwriting Results", - "options": [ - { - "id": "com.apple.applicationaccess_allowpersonalizedhandwritingresults_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpersonalizedhandwritingresults_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowphotostream", - "displayName": "Allow Photo Stream (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_allowphotostream_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowphotostream_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpodcasts", - "displayName": "Allow Podcasts", - "options": [ - { - "id": "com.apple.applicationaccess_allowpodcasts_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpodcasts_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowpredictivekeyboard", - "displayName": "Allow Predictive Keyboard", - "options": [ - { - "id": "com.apple.applicationaccess_allowpredictivekeyboard_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowpredictivekeyboard_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowprintersharingmodification", - "displayName": "Allow Printer Sharing Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowprintersharingmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowprintersharingmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowproximitysetuptonewdevice", - "displayName": "Allow Proximity Setup To New Device", - "options": [ - { - "id": "com.apple.applicationaccess_allowproximitysetuptonewdevice_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowproximitysetuptonewdevice_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowradioservice", - "displayName": "Allow Radio Service", - "options": [ - { - "id": "com.apple.applicationaccess_allowradioservice_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowradioservice_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowrapidsecurityresponseinstallation", - "displayName": "Allow Background Security Improvement Installation (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_allowrapidsecurityresponseinstallation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowrapidsecurityresponseinstallation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowrapidsecurityresponseremoval", - "displayName": "Allow Background Security Improvement Removal (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_allowrapidsecurityresponseremoval_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowrapidsecurityresponseremoval_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowrcsmessaging", - "displayName": "Allow RCS Messaging", - "options": [ - { - "id": "com.apple.applicationaccess_allowrcsmessaging_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowrcsmessaging_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowremoteappleeventsmodification", - "displayName": "Allow Remote Apple Events Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowremoteappleeventsmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowremoteappleeventsmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowremotescreenobservation", - "displayName": "Allow Remote Screen Observation", - "options": [ - { - "id": "com.apple.applicationaccess_allowremotescreenobservation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowremotescreenobservation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowsafari", - "displayName": "Allow Safari", - "options": [ - { - "id": "com.apple.applicationaccess_allowsafari_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowsafari_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowsafarihistoryclearing", - "displayName": "Allow Safari History Clearing", - "options": [ - { - "id": "com.apple.applicationaccess_allowsafarihistoryclearing_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowsafarihistoryclearing_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowsafariprivatebrowsing", - "displayName": "Allow Safari Private Browsing", - "options": [ - { - "id": "com.apple.applicationaccess_allowsafariprivatebrowsing_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowsafariprivatebrowsing_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowsafarisummary", - "displayName": "Allow Safari Summary", - "options": [ - { - "id": "com.apple.applicationaccess_allowsafarisummary_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowsafarisummary_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowsatelliteconnection", - "displayName": "Allow Satellite Connection", - "options": [ - { - "id": "com.apple.applicationaccess_allowsatelliteconnection_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowsatelliteconnection_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowscreenshot", - "displayName": "Allow Screen Shot", - "options": [ - { - "id": "com.apple.applicationaccess_allowscreenshot_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowscreenshot_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowshareddevicetemporarysession", - "displayName": "Allow Shared Device Temporary Session", - "options": [ - { - "id": "com.apple.applicationaccess_allowshareddevicetemporarysession_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowshareddevicetemporarysession_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowsharedstream", - "displayName": "Allow Shared Stream", - "options": [ - { - "id": "com.apple.applicationaccess_allowsharedstream_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowsharedstream_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowspellcheck", - "displayName": "Allow Spell Check", - "options": [ - { - "id": "com.apple.applicationaccess_allowspellcheck_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowspellcheck_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowspotlightinternetresults", - "displayName": "Allow Spotlight Internet Results", - "options": [ - { - "id": "com.apple.applicationaccess_allowspotlightinternetresults_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowspotlightinternetresults_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowstartupdiskmodification", - "displayName": "Allow Startup Disk Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowstartupdiskmodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowstartupdiskmodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowsystemappremoval", - "displayName": "Allow System App Removal", - "options": [ - { - "id": "com.apple.applicationaccess_allowsystemappremoval_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowsystemappremoval_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowtimemachinebackup", - "displayName": "Allow Time Machine Backup", - "options": [ - { - "id": "com.apple.applicationaccess_allowtimemachinebackup_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowtimemachinebackup_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowuiappinstallation", - "displayName": "Allow UI App Installation", - "options": [ - { - "id": "com.apple.applicationaccess_allowuiappinstallation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowuiappinstallation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowuiconfigurationprofileinstallation", - "displayName": "Allow UI Configuration Profile Installation", - "options": [ - { - "id": "com.apple.applicationaccess_allowuiconfigurationprofileinstallation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowuiconfigurationprofileinstallation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowuniversalcontrol", - "displayName": "Allow Universal Control", - "options": [ - { - "id": "com.apple.applicationaccess_allowuniversalcontrol_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowuniversalcontrol_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowunmanagedtoreadmanagedcontacts", - "displayName": "Allow Unmanaged To Read Managed Contacts", - "options": [ - { - "id": "com.apple.applicationaccess_allowunmanagedtoreadmanagedcontacts_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowunmanagedtoreadmanagedcontacts_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowunpairedexternalboottorecovery", - "displayName": "Allow Unpaired External Boot To Recovery", - "options": [ - { - "id": "com.apple.applicationaccess_allowunpairedexternalboottorecovery_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowunpairedexternalboottorecovery_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowuntrustedtlsprompt", - "displayName": "Allow Untrusted TLS Prompt", - "options": [ - { - "id": "com.apple.applicationaccess_allowuntrustedtlsprompt_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowuntrustedtlsprompt_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowusbrestrictedmode", - "displayName": "Allow USB Restricted Mode", - "options": [ - { - "id": "com.apple.applicationaccess_allowusbrestrictedmode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowusbrestrictedmode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowvideoconferencing", - "displayName": "Allow Video Conferencing", - "options": [ - { - "id": "com.apple.applicationaccess_allowvideoconferencing_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowvideoconferencing_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowvideoconferencingremotecontrol", - "displayName": "Allow Video Conferencing Remote Control (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_allowvideoconferencingremotecontrol_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowvideoconferencingremotecontrol_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowvisualintelligencesummary", - "displayName": "Allow Visual Intelligence Summary", - "options": [ - { - "id": "com.apple.applicationaccess_allowvisualintelligencesummary_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowvisualintelligencesummary_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowvoicedialing", - "displayName": "Allow Voice Dialing (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_allowvoicedialing_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowvoicedialing_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowvpncreation", - "displayName": "Allow VPN Creation", - "options": [ - { - "id": "com.apple.applicationaccess_allowvpncreation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowvpncreation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowwallpapermodification", - "displayName": "Allow Wallpaper Modification", - "options": [ - { - "id": "com.apple.applicationaccess_allowwallpapermodification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowwallpapermodification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowwebdistributionappinstallation", - "displayName": "Allow Web Distribution App Installation", - "options": [ - { - "id": "com.apple.applicationaccess_allowwebdistributionappinstallation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowwebdistributionappinstallation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_allowwritingtools", - "displayName": "Allow Writing Tools", - "options": [ - { - "id": "com.apple.applicationaccess_allowwritingtools_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_allowwritingtools_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_autonomoussingleappmodepermittedappids", - "displayName": "Autonomous Single App Mode Permitted App IDs", - "options": null - }, - { - "id": "com.apple.applicationaccess_blockedappbundleids", - "displayName": "Blocked App Bundle IDs", - "options": null - }, - { - "id": "com.apple.applicationaccess_com.apple.applicationaccess", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.applicationaccess_deniediccidsforimessagefacetime", - "displayName": "Denied ICCIDs For iMessage And FaceTime", - "options": null - }, - { - "id": "com.apple.applicationaccess_deniediccidsforrcs", - "displayName": "Denied ICCIDs For RCS", - "options": null - }, - { - "id": "com.apple.applicationaccess_enforcedfingerprinttimeout", - "displayName": "Enforced Fingerprint Timeout", - "options": null - }, - { - "id": "com.apple.applicationaccess_enforcedsoftwareupdatedelay", - "displayName": "Enforced Software Update Delay (Deprecated)", - "options": null - }, - { - "id": "com.apple.applicationaccess_enforcedsoftwareupdatemajorosdeferredinstalldelay", - "displayName": "Enforced Software Update Major OS Deferred Install Delay (Deprecated)", - "options": null - }, - { - "id": "com.apple.applicationaccess_enforcedsoftwareupdateminorosdeferredinstalldelay", - "displayName": "Enforced Software Update Minor OS Deferred Install Delay (Deprecated)", - "options": null - }, - { - "id": "com.apple.applicationaccess_enforcedsoftwareupdatenonosdeferredinstalldelay", - "displayName": "Enforced Software Update Non OS Deferred Install Delay (Deprecated)", - "options": null - }, - { - "id": "com.apple.applicationaccess_forceairdropunmanaged", - "displayName": "Force AirDrop Unmanaged", - "options": [ - { - "id": "com.apple.applicationaccess_forceairdropunmanaged_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceairdropunmanaged_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceairplayoutgoingrequestspairingpassword", - "displayName": "Force AirPlay Outgoing Requests Pairing Password", - "options": [ - { - "id": "com.apple.applicationaccess_forceairplayoutgoingrequestspairingpassword_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceairplayoutgoingrequestspairingpassword_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceairprinttrustedtlsrequirement", - "displayName": "Force AirPrint Trusted TLS Requirement", - "options": [ - { - "id": "com.apple.applicationaccess_forceairprinttrustedtlsrequirement_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceairprinttrustedtlsrequirement_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceassistantprofanityfilter", - "displayName": "Force Assistant Profanity Filter", - "options": [ - { - "id": "com.apple.applicationaccess_forceassistantprofanityfilter_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceassistantprofanityfilter_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceauthenticationbeforeautofill", - "displayName": "Force Authentication Before Auto Fill", - "options": [ - { - "id": "com.apple.applicationaccess_forceauthenticationbeforeautofill_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceauthenticationbeforeautofill_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceautomaticdateandtime", - "displayName": "Force Automatic Date And Time", - "options": [ - { - "id": "com.apple.applicationaccess_forceautomaticdateandtime_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceautomaticdateandtime_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcebypassscreencapturealert", - "displayName": "Force Bypass Screen Capture Alert", - "options": [ - { - "id": "com.apple.applicationaccess_forcebypassscreencapturealert_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcebypassscreencapturealert_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceclassroomautomaticallyjoinclasses", - "displayName": "Force Classroom Automatically Join Classes", - "options": [ - { - "id": "com.apple.applicationaccess_forceclassroomautomaticallyjoinclasses_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceclassroomautomaticallyjoinclasses_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceclassroomrequestpermissiontoleaveclasses", - "displayName": "Force Classroom Request Permission To Leave Classes", - "options": [ - { - "id": "com.apple.applicationaccess_forceclassroomrequestpermissiontoleaveclasses_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceclassroomrequestpermissiontoleaveclasses_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceclassroomunpromptedappanddevicelock", - "displayName": "Force Classroom Unprompted App And Device Lock", - "options": [ - { - "id": "com.apple.applicationaccess_forceclassroomunpromptedappanddevicelock_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceclassroomunpromptedappanddevicelock_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceclassroomunpromptedscreenobservation", - "displayName": "Force Classroom Unprompted Screen Observation", - "options": [ - { - "id": "com.apple.applicationaccess_forceclassroomunpromptedscreenobservation_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceclassroomunpromptedscreenobservation_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcedelayedappsoftwareupdates", - "displayName": "Force Delayed App Software Updates (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_forcedelayedappsoftwareupdates_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcedelayedappsoftwareupdates_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcedelayedmajorsoftwareupdates", - "displayName": "Force Delayed Major Software Updates (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_forcedelayedmajorsoftwareupdates_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcedelayedmajorsoftwareupdates_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcedelayedsoftwareupdates", - "displayName": "Force Delayed Software Updates (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_forcedelayedsoftwareupdates_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcedelayedsoftwareupdates_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceencryptedbackup", - "displayName": "Force Encrypted Backup", - "options": [ - { - "id": "com.apple.applicationaccess_forceencryptedbackup_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceencryptedbackup_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceitunesstorepasswordentry", - "displayName": "Force iTunes Store Password Entry (Deprecated)", - "options": [ - { - "id": "com.apple.applicationaccess_forceitunesstorepasswordentry_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceitunesstorepasswordentry_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcelimitadtracking", - "displayName": "Force Limit Ad Tracking", - "options": [ - { - "id": "com.apple.applicationaccess_forcelimitadtracking_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcelimitadtracking_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceondeviceonlydictation", - "displayName": "Force On Device Only Dictation", - "options": [ - { - "id": "com.apple.applicationaccess_forceondeviceonlydictation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceondeviceonlydictation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forceondeviceonlytranslation", - "displayName": "Force On Device Only Translation", - "options": [ - { - "id": "com.apple.applicationaccess_forceondeviceonlytranslation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forceondeviceonlytranslation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcepreserveesimonerase", - "displayName": "Force Preserve ESIM On Erase", - "options": [ - { - "id": "com.apple.applicationaccess_forcepreserveesimonerase_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcepreserveesimonerase_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcewatchwristdetection", - "displayName": "Force Watch Wrist Detection", - "options": [ - { - "id": "com.apple.applicationaccess_forcewatchwristdetection_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcewatchwristdetection_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcewifipoweron", - "displayName": "Force WiFi Power On", - "options": [ - { - "id": "com.apple.applicationaccess_forcewifipoweron_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcewifipoweron_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_forcewifitoallowednetworksonly", - "displayName": "Force WiFi To Allowed Networks Only", - "options": [ - { - "id": "com.apple.applicationaccess_forcewifitoallowednetworksonly_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_forcewifitoallowednetworksonly_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsau", - "displayName": "Rating Apps - Australia", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsau_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_1", - "displayName": "1+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_2", - "displayName": "2+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_3", - "displayName": "3+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_4", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_5", - "displayName": "5+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_6", - "displayName": "6+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_7", - "displayName": "7+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_8", - "displayName": "8+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_9", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_10", - "displayName": "10+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_11", - "displayName": "11+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_12", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_13", - "displayName": "13+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_14", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_15", - "displayName": "15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_16", - "displayName": "16+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_17", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_18", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_19", - "displayName": "19+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_20", - "displayName": "20+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_21", - "displayName": "21+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsau_22", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsca", - "displayName": "Rating Apps - Canada", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsca_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_1", - "displayName": "1+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_2", - "displayName": "2+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_3", - "displayName": "3+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_4", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_5", - "displayName": "5+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_6", - "displayName": "6+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_7", - "displayName": "7+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_8", - "displayName": "8+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_9", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_10", - "displayName": "10+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_11", - "displayName": "11+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_12", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_13", - "displayName": "13+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_14", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_15", - "displayName": "15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_16", - "displayName": "16+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_17", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_18", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_19", - "displayName": "19+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_20", - "displayName": "20+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_21", - "displayName": "21+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsca_22", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsde", - "displayName": "Rating Apps - Germany", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsde_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_1", - "displayName": "1+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_2", - "displayName": "2+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_3", - "displayName": "3+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_4", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_5", - "displayName": "5+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_6", - "displayName": "6+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_7", - "displayName": "7+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_8", - "displayName": "8+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_9", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_10", - "displayName": "10+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_11", - "displayName": "11+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_12", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_13", - "displayName": "13+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_14", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_15", - "displayName": "15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_16", - "displayName": "16+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_17", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_18", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_19", - "displayName": "19+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_20", - "displayName": "20+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_21", - "displayName": "21+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsde_22", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsexemptedbundleids", - "displayName": "Rating Apps Exempted Bundle IDs", - "options": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr", - "displayName": "Rating Apps - France", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsfr_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_1", - "displayName": "1+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_2", - "displayName": "2+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_3", - "displayName": "3+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_4", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_5", - "displayName": "5+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_6", - "displayName": "6+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_7", - "displayName": "7+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_8", - "displayName": "8+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_9", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_10", - "displayName": "10+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_11", - "displayName": "11+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_12", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_13", - "displayName": "13+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_14", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_15", - "displayName": "15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_16", - "displayName": "16+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_17", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_18", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_19", - "displayName": "19+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_20", - "displayName": "20+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_21", - "displayName": "21+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsfr_22", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsgb", - "displayName": "Rating Apps - Great Britain", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsgb_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_1", - "displayName": "1+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_2", - "displayName": "2+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_3", - "displayName": "3+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_4", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_5", - "displayName": "5+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_6", - "displayName": "6+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_7", - "displayName": "7+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_8", - "displayName": "8+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_9", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_10", - "displayName": "10+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_11", - "displayName": "11+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_12", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_13", - "displayName": "13+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_14", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_15", - "displayName": "15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_16", - "displayName": "16+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_17", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_18", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_19", - "displayName": "19+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_20", - "displayName": "20+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_21", - "displayName": "21+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsgb_22", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsie", - "displayName": "Rating Apps - Ireland", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsie_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_1", - "displayName": "1+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_2", - "displayName": "2+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_3", - "displayName": "3+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_4", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_5", - "displayName": "5+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_6", - "displayName": "6+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_7", - "displayName": "7+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_8", - "displayName": "8+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_9", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_10", - "displayName": "10+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_11", - "displayName": "11+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_12", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_13", - "displayName": "13+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_14", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_15", - "displayName": "15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_16", - "displayName": "16+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_17", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_18", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_19", - "displayName": "19+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_20", - "displayName": "20+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_21", - "displayName": "21+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsie_22", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsjp", - "displayName": "Rating Apps - Japan", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsjp_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_1", - "displayName": "1+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_2", - "displayName": "2+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_3", - "displayName": "3+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_4", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_5", - "displayName": "5+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_6", - "displayName": "6+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_7", - "displayName": "7+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_8", - "displayName": "8+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_9", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_10", - "displayName": "10+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_11", - "displayName": "11+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_12", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_13", - "displayName": "13+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_14", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_15", - "displayName": "15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_16", - "displayName": "16+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_17", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_18", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_19", - "displayName": "19+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_20", - "displayName": "20+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_21", - "displayName": "21+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsjp_22", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsnz", - "displayName": "Rating Apps - New Zealand", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsnz_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_1", - "displayName": "1+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_2", - "displayName": "2+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_3", - "displayName": "3+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_4", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_5", - "displayName": "5+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_6", - "displayName": "6+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_7", - "displayName": "7+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_8", - "displayName": "8+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_9", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_10", - "displayName": "10+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_11", - "displayName": "11+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_12", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_13", - "displayName": "13+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_14", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_15", - "displayName": "15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_16", - "displayName": "16+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_17", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_18", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_19", - "displayName": "19+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_20", - "displayName": "20+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_21", - "displayName": "21+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsnz_22", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingappsus", - "displayName": "Rating Apps - United States", - "options": [ - { - "id": "com.apple.applicationaccess_ratingappsus_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsus_1", - "displayName": "4+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsus_2", - "displayName": "9+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsus_3", - "displayName": "12+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsus_4", - "displayName": "17+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingappsus_5", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesau", - "displayName": "Rating Movies - Australia", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesau_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesau_1", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesau_2", - "displayName": "PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesau_3", - "displayName": "M", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesau_4", - "displayName": "MA15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesau_5", - "displayName": "R18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesau_6", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesca", - "displayName": "Rating Movies - Canada", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesca_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesca_1", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesca_2", - "displayName": "PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesca_3", - "displayName": "14A", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesca_4", - "displayName": "18A", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesca_5", - "displayName": "R", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesca_6", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesde", - "displayName": "Rating Movies - Germany", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesde_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesde_1", - "displayName": "Ab 0 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesde_2", - "displayName": "Ab 6 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesde_3", - "displayName": "Ab 12 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesde_4", - "displayName": "Ab 16 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesde_5", - "displayName": "Ab 18 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesde_6", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesfr", - "displayName": "Rating Movies - France", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesfr_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesfr_2", - "displayName": "10", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesfr_3", - "displayName": "12", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesfr_4", - "displayName": "16", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesfr_5", - "displayName": "18", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesfr_6", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb", - "displayName": "Rating Movies - Great Britain", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesgb_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb_1", - "displayName": "U", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb_2", - "displayName": "UC", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb_3", - "displayName": "PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb_4", - "displayName": "12", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb_5", - "displayName": "12A", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb_6", - "displayName": "15", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb_7", - "displayName": "18", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesgb_8", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesie", - "displayName": "Rating Movies - Ireland", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesie_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesie_1", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesie_2", - "displayName": "PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesie_3", - "displayName": "12A", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesie_4", - "displayName": "15A", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesie_5", - "displayName": "16", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesie_6", - "displayName": "18", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesie_7", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesjp", - "displayName": "Rating Movies - Japan", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesjp_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesjp_1", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesjp_2", - "displayName": "PG-12", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesjp_3", - "displayName": "R15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesjp_4", - "displayName": "R18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesjp_5", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz", - "displayName": "Rating Movies - New Zealand", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesnz_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_1", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_2", - "displayName": "PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_3", - "displayName": "M", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_4", - "displayName": "R13", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_5", - "displayName": "R15", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_6", - "displayName": "R16", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_7", - "displayName": "R18", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_8", - "displayName": "R", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_9", - "displayName": "RP16", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesnz_10", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingmoviesus", - "displayName": "Rating Movies - United States", - "options": [ - { - "id": "com.apple.applicationaccess_ratingmoviesus_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesus_1", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesus_2", - "displayName": "PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesus_3", - "displayName": "PG-13", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesus_4", - "displayName": "R", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesus_5", - "displayName": "NC-17", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingmoviesus_6", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingregion", - "displayName": "Rating Region", - "options": [ - { - "id": "com.apple.applicationaccess_ratingregion_0", - "displayName": "United States", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingregion_1", - "displayName": "Australia", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingregion_2", - "displayName": "Canada", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingregion_3", - "displayName": "Germany", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingregion_4", - "displayName": "France", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingregion_5", - "displayName": "Ireland", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingregion_6", - "displayName": "Japan", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingregion_7", - "displayName": "New Zealand", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingregion_8", - "displayName": "Great Britain", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau", - "displayName": "Rating TV Shows - Australia", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsau_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_1", - "displayName": "P", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_2", - "displayName": "C", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_3", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_4", - "displayName": "PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_5", - "displayName": "M", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_6", - "displayName": "MA15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_7", - "displayName": "AV15+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_8", - "displayName": "All", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsau_9", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsca", - "displayName": "Rating TV Shows - Canada", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsca_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsca_1", - "displayName": "C", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsca_2", - "displayName": "C8", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsca_3", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsca_4", - "displayName": "PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsca_5", - "displayName": "14+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsca_6", - "displayName": "18+", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsca_7", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsde", - "displayName": "Rating TV Shows - Germany", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsde_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsde_1", - "displayName": "Ab 0 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsde_2", - "displayName": "Ab 6 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsde_3", - "displayName": "Ab 12 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsde_4", - "displayName": "Ab 16 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsde_5", - "displayName": "Ab 18 Jahren", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsde_7", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsfr", - "displayName": "Rating TV Shows - France", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsfr_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsfr_1", - "displayName": "-10", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsfr_2", - "displayName": "-12", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsfr_3", - "displayName": "-16", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsfr_4", - "displayName": "-18", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsfr_5", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsgb", - "displayName": "Rating TV Shows - Great Britain", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsgb_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsgb_1", - "displayName": "Caution", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsgb_2", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsie", - "displayName": "Rating TV Shows - Ireland", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsie_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsie_1", - "displayName": "GA", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsie_2", - "displayName": "CH", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsie_3", - "displayName": "YA", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsie_4", - "displayName": "PS", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsie_5", - "displayName": "MA", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsie_6", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsjp", - "displayName": "Rating TV Shows - Japan", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsjp_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsjp_1", - "displayName": "Explicit Allowed", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsjp_2", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsnz", - "displayName": "Rating TV Shows - New Zealand", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsnz_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsnz_1", - "displayName": "G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsnz_2", - "displayName": "PGR", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsnz_3", - "displayName": "AO", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsnz_4", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsus", - "displayName": "Rating TV Shows - United States", - "options": [ - { - "id": "com.apple.applicationaccess_ratingtvshowsus_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsus_1", - "displayName": "TV-Y", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsus_2", - "displayName": "TV-Y7", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsus_3", - "displayName": "TV-G", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsus_4", - "displayName": "TV-PG", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsus_5", - "displayName": "TV-14", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsus_6", - "displayName": "TB-MA", - "description": null - }, - { - "id": "com.apple.applicationaccess_ratingtvshowsus_7", - "displayName": "All", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_requiremanagedpasteboard", - "displayName": "Require Managed Pasteboard", - "options": [ - { - "id": "com.apple.applicationaccess_requiremanagedpasteboard_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_requiremanagedpasteboard_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_safariacceptcookies", - "displayName": "Safari Accept Cookies", - "options": [ - { - "id": "com.apple.applicationaccess_safariacceptcookies_0", - "displayName": "Prevent Cross-Site Tracking and Block All Cookies are enabled and the user canʼt disable either setting.", - "description": null - }, - { - "id": "com.apple.applicationaccess_safariacceptcookies_1", - "displayName": "Prevent Cross-Site Tracking is enabled and the user canʼt disable it. Block All Cookies is not enabled, although the user can enable it.", - "description": null - }, - { - "id": "com.apple.applicationaccess_safariacceptcookies_2", - "displayName": "Prevent Cross-Site Tracking is enabled and Block All Cookies is not enabled. The user can toggle either setting.", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_safariallowautofill", - "displayName": "Safari Allow Autofill", - "options": [ - { - "id": "com.apple.applicationaccess_safariallowautofill_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_safariallowautofill_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_safariallowjavascript", - "displayName": "Safari Allow Java Script", - "options": [ - { - "id": "com.apple.applicationaccess_safariallowjavascript_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_safariallowjavascript_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_safariallowpopups", - "displayName": "Safari Allow Popups", - "options": [ - { - "id": "com.apple.applicationaccess_safariallowpopups_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_safariallowpopups_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess_safariforcefraudwarning", - "displayName": "Safari Force Fraud Warning", - "options": [ - { - "id": "com.apple.applicationaccess_safariforcefraudwarning_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess_safariforcefraudwarning_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.applicationaccess.new_com.apple.applicationaccess.new", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.applicationaccess.new_familycontrolsenabled", - "displayName": "Family Controls Enabled", - "options": [ - { - "id": "com.apple.applicationaccess.new_familycontrolsenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.applicationaccess.new_familycontrolsenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.appstore_com.apple.appstore", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.appstore_disablesoftwareupdatenotifications", - "displayName": "Disable Software Update Notifications", - "options": [ - { - "id": "com.apple.appstore_disablesoftwareupdatenotifications_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.appstore_disablesoftwareupdatenotifications_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.appstore_restrict-store-disable-app-adoption", - "displayName": "Restrict-store-disable-app-adoption", - "options": [ - { - "id": "com.apple.appstore_restrict-store-disable-app-adoption_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.appstore_restrict-store-disable-app-adoption_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.appstore_restrict-store-softwareupdate-only", - "displayName": "Restrict Store Software Update Only", - "options": [ - { - "id": "com.apple.appstore_restrict-store-softwareupdate-only_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.appstore_restrict-store-softwareupdate-only_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.asam_allowedapplications", - "displayName": "Allowed Applications", - "options": null - }, - { - "id": "com.apple.asam_allowedapplications_item_bundleidentifier", - "displayName": "Bundle Identifier", - "options": null - }, - { - "id": "com.apple.asam_allowedapplications_item_teamidentifier", - "displayName": "Team Identifier", - "options": null - }, - { - "id": "com.apple.asam_com.apple.asam", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.assetcache.managed_allowcachedelete", - "displayName": "Allow Cache Delete", - "options": [ - { - "id": "com.apple.assetcache.managed_allowcachedelete_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_allowcachedelete_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_allowpersonalcaching", - "displayName": "Allow Personal Caching", - "options": [ - { - "id": "com.apple.assetcache.managed_allowpersonalcaching_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_allowpersonalcaching_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_allowsharedcaching", - "displayName": "Allow Shared Caching", - "options": [ - { - "id": "com.apple.assetcache.managed_allowsharedcaching_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_allowsharedcaching_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_autoactivation", - "displayName": "Auto Activation", - "options": [ - { - "id": "com.apple.assetcache.managed_autoactivation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_autoactivation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_autoenabletetheredcaching", - "displayName": "Auto Enable Tethered Caching", - "options": [ - { - "id": "com.apple.assetcache.managed_autoenabletetheredcaching_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_autoenabletetheredcaching_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_cachelimit", - "displayName": "Cache Limit", - "options": null - }, - { - "id": "com.apple.assetcache.managed_com.apple.assetcache.managed", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.assetcache.managed_datapath", - "displayName": "Data Path", - "options": null - }, - { - "id": "com.apple.assetcache.managed_denytetheredcaching", - "displayName": "Deny Tethered Caching", - "options": [ - { - "id": "com.apple.assetcache.managed_denytetheredcaching_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_denytetheredcaching_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_displayalerts", - "displayName": "Display Alerts", - "options": [ - { - "id": "com.apple.assetcache.managed_displayalerts_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_displayalerts_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_keepawake", - "displayName": "Keep Awake", - "options": [ - { - "id": "com.apple.assetcache.managed_keepawake_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_keepawake_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_listenranges", - "displayName": "Listen Ranges", - "options": null - }, - { - "id": "com.apple.assetcache.managed_listenranges_item_first", - "displayName": "First", - "options": null - }, - { - "id": "com.apple.assetcache.managed_listenranges_item_last", - "displayName": "Last", - "options": null - }, - { - "id": "com.apple.assetcache.managed_listenranges_item_type", - "displayName": "IP Address Type", - "options": [ - { - "id": "com.apple.assetcache.managed_listenranges_item_type_0", - "displayName": "IPv4", - "description": null - }, - { - "id": "com.apple.assetcache.managed_listenranges_item_type_1", - "displayName": "IPv6", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_listenrangesonly", - "displayName": "Listen Ranges Only", - "options": [ - { - "id": "com.apple.assetcache.managed_listenrangesonly_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_listenrangesonly_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_listenwithpeersandparents", - "displayName": "Listen With Peers And Parents", - "options": [ - { - "id": "com.apple.assetcache.managed_listenwithpeersandparents_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_listenwithpeersandparents_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_localsubnetsonly", - "displayName": "Local Subnets Only", - "options": [ - { - "id": "com.apple.assetcache.managed_localsubnetsonly_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_localsubnetsonly_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_logclientidentity", - "displayName": "Log Client Identity", - "options": [ - { - "id": "com.apple.assetcache.managed_logclientidentity_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_logclientidentity_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_parents", - "displayName": "Parents", - "options": null - }, - { - "id": "com.apple.assetcache.managed_parentselectionpolicy", - "displayName": "Parent Selection Policy", - "options": [ - { - "id": "com.apple.assetcache.managed_parentselectionpolicy_0", - "displayName": "first-available", - "description": null - }, - { - "id": "com.apple.assetcache.managed_parentselectionpolicy_1", - "displayName": "url-path-hash", - "description": null - }, - { - "id": "com.apple.assetcache.managed_parentselectionpolicy_2", - "displayName": "random", - "description": null - }, - { - "id": "com.apple.assetcache.managed_parentselectionpolicy_3", - "displayName": "round-robin", - "description": null - }, - { - "id": "com.apple.assetcache.managed_parentselectionpolicy_4", - "displayName": "sticky-available", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_peerfilterranges", - "displayName": "Peer Filter Ranges", - "options": null - }, - { - "id": "com.apple.assetcache.managed_peerfilterranges_item_first", - "displayName": "First", - "options": null - }, - { - "id": "com.apple.assetcache.managed_peerfilterranges_item_last", - "displayName": "Last", - "options": null - }, - { - "id": "com.apple.assetcache.managed_peerfilterranges_item_type", - "displayName": "IP Address Type", - "options": [ - { - "id": "com.apple.assetcache.managed_peerfilterranges_item_type_0", - "displayName": "IPv4", - "description": null - }, - { - "id": "com.apple.assetcache.managed_peerfilterranges_item_type_1", - "displayName": "IPv6", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_peerlistenranges", - "displayName": "Peer Listen Ranges", - "options": null - }, - { - "id": "com.apple.assetcache.managed_peerlistenranges_item_first", - "displayName": "First", - "options": null - }, - { - "id": "com.apple.assetcache.managed_peerlistenranges_item_last", - "displayName": "Last", - "options": null - }, - { - "id": "com.apple.assetcache.managed_peerlistenranges_item_type", - "displayName": "IP Address Type", - "options": [ - { - "id": "com.apple.assetcache.managed_peerlistenranges_item_type_0", - "displayName": "IPv4", - "description": null - }, - { - "id": "com.apple.assetcache.managed_peerlistenranges_item_type_1", - "displayName": "IPv6", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_peerlocalsubnetsonly", - "displayName": "Peer Local Subnets Only", - "options": [ - { - "id": "com.apple.assetcache.managed_peerlocalsubnetsonly_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.assetcache.managed_peerlocalsubnetsonly_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.assetcache.managed_port", - "displayName": "Port", - "options": null - }, - { - "id": "com.apple.assetcache.managed_publicranges", - "displayName": "Public Ranges", - "options": null - }, - { - "id": "com.apple.assetcache.managed_publicranges_item_first", - "displayName": "First", - "options": null - }, - { - "id": "com.apple.assetcache.managed_publicranges_item_last", - "displayName": "Last", - "options": null - }, - { - "id": "com.apple.assetcache.managed_publicranges_item_type", - "displayName": "IP Address Type", - "options": [ - { - "id": "com.apple.assetcache.managed_publicranges_item_type_0", - "displayName": "IPv4", - "description": null - }, - { - "id": "com.apple.assetcache.managed_publicranges_item_type_1", - "displayName": "IPv6", - "description": null - } - ] - }, - { - "id": "com.apple.associated-domains_com.apple.associated-domains", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.associated-domains_configuration", - "displayName": "Configuration", - "options": null - }, - { - "id": "com.apple.associated-domains_configuration_item_applicationidentifier", - "displayName": "Application Identifier", - "options": null - }, - { - "id": "com.apple.associated-domains_configuration_item_associateddomains", - "displayName": "Associated Domains", - "options": null - }, - { - "id": "com.apple.associated-domains_configuration_item_enabledirectdownloads", - "displayName": "Enable Direct Downloads", - "options": [ - { - "id": "com.apple.associated-domains_configuration_item_enabledirectdownloads_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.associated-domains_configuration_item_enabledirectdownloads_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.caldav.account_caldavaccountdescription", - "displayName": "Cal DAV Account Description", - "options": null - }, - { - "id": "com.apple.caldav.account_caldavhostname", - "displayName": "Cal DAV Host Name", - "options": null - }, - { - "id": "com.apple.caldav.account_caldavpassword", - "displayName": "Cal DAV Password", - "options": null - }, - { - "id": "com.apple.caldav.account_caldavport", - "displayName": "Cal DAV Port", - "options": null - }, - { - "id": "com.apple.caldav.account_caldavprincipalurl", - "displayName": "Cal DAV Principal URL", - "options": null - }, - { - "id": "com.apple.caldav.account_caldavusername", - "displayName": "Cal DAV Username", - "options": null - }, - { - "id": "com.apple.caldav.account_caldavusessl", - "displayName": "Cal DAV Use SSL", - "options": [ - { - "id": "com.apple.caldav.account_caldavusessl_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.caldav.account_caldavusessl_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.caldav.account_com.apple.caldav.account", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.carddav.account_carddavaccountdescription", - "displayName": "Card DAV Account Description", - "options": null - }, - { - "id": "com.apple.carddav.account_carddavhostname", - "displayName": "Card DAV Host Name", - "options": null - }, - { - "id": "com.apple.carddav.account_carddavpassword", - "displayName": "Card DAV Password", - "options": null - }, - { - "id": "com.apple.carddav.account_carddavport", - "displayName": "Card DAV Port", - "options": null - }, - { - "id": "com.apple.carddav.account_carddavprincipalurl", - "displayName": "Card DAV Principal URL", - "options": null - }, - { - "id": "com.apple.carddav.account_carddavusername", - "displayName": "Card DAV Username", - "options": null - }, - { - "id": "com.apple.carddav.account_carddavusessl", - "displayName": "Card DAV Use SSL", - "options": [ - { - "id": "com.apple.carddav.account_carddavusessl_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.carddav.account_carddavusessl_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.carddav.account_com.apple.carddav.account", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.cellular_apns", - "displayName": "APNs", - "options": null - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmask", - "displayName": "Allowed Protocol Mask", - "options": [ - { - "id": "com.apple.cellular_apns_item_allowedprotocolmask_0", - "displayName": "IPv4", - "description": null - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmask_1", - "displayName": "IPv6", - "description": null - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmask_2", - "displayName": "Both", - "description": null - } - ] - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmaskindomesticroaming", - "displayName": "Allowed Protocol Mask In Domestic Roaming", - "options": [ - { - "id": "com.apple.cellular_apns_item_allowedprotocolmaskindomesticroaming_0", - "displayName": "IPv4", - "description": null - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmaskindomesticroaming_1", - "displayName": "IPv6", - "description": null - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmaskindomesticroaming_2", - "displayName": "Both", - "description": null - } - ] - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmaskinroaming", - "displayName": "Allowed Protocol Mask In Roaming", - "options": [ - { - "id": "com.apple.cellular_apns_item_allowedprotocolmaskinroaming_0", - "displayName": "IPv4", - "description": null - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmaskinroaming_1", - "displayName": "IPv6", - "description": null - }, - { - "id": "com.apple.cellular_apns_item_allowedprotocolmaskinroaming_2", - "displayName": "Both", - "description": null - } - ] - }, - { - "id": "com.apple.cellular_apns_item_authenticationtype", - "displayName": "Authentication Type", - "options": [ - { - "id": "com.apple.cellular_apns_item_authenticationtype_0", - "displayName": "CHAP", - "description": null - }, - { - "id": "com.apple.cellular_apns_item_authenticationtype_1", - "displayName": "PAP", - "description": null - } - ] - }, - { - "id": "com.apple.cellular_apns_item_enablexlat464", - "displayName": "Enable XLAT464", - "options": [ - { - "id": "com.apple.cellular_apns_item_enablexlat464_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.cellular_apns_item_enablexlat464_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.cellular_apns_item_name", - "displayName": "Name", - "options": null - }, - { - "id": "com.apple.cellular_apns_item_password", - "displayName": "Password", - "options": null - }, - { - "id": "com.apple.cellular_apns_item_proxyport", - "displayName": "Proxy Port", - "options": null - }, - { - "id": "com.apple.cellular_apns_item_proxyserver", - "displayName": "Proxy Server", - "options": null - }, - { - "id": "com.apple.cellular_apns_item_username", - "displayName": "Username", - "options": null - }, - { - "id": "com.apple.cellular_attachapn", - "displayName": "Attach APN", - "options": null - }, - { - "id": "com.apple.cellular_attachapn_allowedprotocolmask", - "displayName": "Allowed Protocol Mask", - "options": [ - { - "id": "com.apple.cellular_attachapn_allowedprotocolmask_0", - "displayName": "IPv4", - "description": null - }, - { - "id": "com.apple.cellular_attachapn_allowedprotocolmask_1", - "displayName": "IPv6", - "description": null - }, - { - "id": "com.apple.cellular_attachapn_allowedprotocolmask_2", - "displayName": "Both", - "description": null - } - ] - }, - { - "id": "com.apple.cellular_attachapn_authenticationtype", - "displayName": "Authentication Type", - "options": [ - { - "id": "com.apple.cellular_attachapn_authenticationtype_0", - "displayName": "CHAP", - "description": null - }, - { - "id": "com.apple.cellular_attachapn_authenticationtype_1", - "displayName": "PAP", - "description": null - } - ] - }, - { - "id": "com.apple.cellular_attachapn_name", - "displayName": "Name", - "options": null - }, - { - "id": "com.apple.cellular_attachapn_password", - "displayName": "Password", - "options": null - }, - { - "id": "com.apple.cellular_attachapn_username", - "displayName": "Username", - "options": null - }, - { - "id": "com.apple.cellular_com.apple.cellular", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_cellulardatapreferred", - "displayName": "Cellular Data Preferred", - "options": [ - { - "id": "com.apple.cellularprivatenetwork.managed_cellulardatapreferred_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_cellulardatapreferred_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.cellularprivatenetwork.managed_com.apple.cellularprivatenetwork.managed", - "displayName": "com.apple.cellularprivatenetwork.managed", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_csgnetworkidentifier", - "displayName": "Csg Network Identifier", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_datasetname", - "displayName": "Data Set Name", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_enablenrstandalone", - "displayName": "Enable NR Standalone", - "options": [ - { - "id": "com.apple.cellularprivatenetwork.managed_enablenrstandalone_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_enablenrstandalone_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.cellularprivatenetwork.managed_geofences", - "displayName": "Geofences", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_geofences_item_geofenceid", - "displayName": "Geofence Id", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_geofences_item_latitude", - "displayName": "Latitude", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_geofences_item_longitude", - "displayName": "Longitude", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_geofences_item_radius", - "displayName": "Radius", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_networkidentifier", - "displayName": "Network Identifier", - "options": null - }, - { - "id": "com.apple.cellularprivatenetwork.managed_versionnumber", - "displayName": "Version Number", - "options": null - }, - { - "id": "com.apple.configurationprofile.identification_com.apple.configurationprofile.identification", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification", - "displayName": "Payload Identification (Deprecated)", - "options": null - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification_authmethod", - "displayName": "Auth Method", - "options": [ - { - "id": "com.apple.configurationprofile.identification_payloadidentification_authmethod_0", - "displayName": "Password", - "description": null - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification_authmethod_1", - "displayName": "UserEnteredPassword", - "description": null - } - ] - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification_emailaddress", - "displayName": "Email Address", - "options": null - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification_fullname", - "displayName": "Full Name", - "options": null - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification_password", - "displayName": "Password", - "options": null - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification_prompt", - "displayName": "Prompt", - "options": null - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification_promptmessage", - "displayName": "Prompt Message", - "options": null - }, - { - "id": "com.apple.configurationprofile.identification_payloadidentification_username", - "displayName": "User Name", - "options": null - }, - { - "id": "com.apple.desktop_com.apple.desktop", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.desktop_override-picture-path", - "displayName": "Override Picture Path", - "options": null - }, - { - "id": "com.apple.dictionary_com.apple.dictionary", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.dictionary_parentalcontrol", - "displayName": "Parental Control", - "options": [ - { - "id": "com.apple.dictionary_parentalcontrol_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dictionary_parentalcontrol_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adallowmultidomainauth", - "displayName": "AD Allow Multi Domain Auth", - "options": [ - { - "id": "com.apple.directoryservice.managed_adallowmultidomainauth_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adallowmultidomainauth_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adallowmultidomainauthflag", - "displayName": "AD Allow Multi Domain Auth Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adallowmultidomainauthflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adallowmultidomainauthflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adcreatemobileaccountatlogin", - "displayName": "AD Create Mobile Account At Login", - "options": [ - { - "id": "com.apple.directoryservice.managed_adcreatemobileaccountatlogin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adcreatemobileaccountatlogin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adcreatemobileaccountatloginflag", - "displayName": "AD Create Mobile Account At Login Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adcreatemobileaccountatloginflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adcreatemobileaccountatloginflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_addefaultusershell", - "displayName": "AD Default User Shell", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_addefaultusershellflag", - "displayName": "AD Default User Shell Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_addefaultusershellflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_addefaultusershellflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_addomainadmingrouplist", - "displayName": "AD Domain Admin Group List", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_addomainadmingrouplistflag", - "displayName": "AD Domain Admin Group List Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_addomainadmingrouplistflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_addomainadmingrouplistflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adforcehomelocal", - "displayName": "AD Force Home Local", - "options": [ - { - "id": "com.apple.directoryservice.managed_adforcehomelocal_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adforcehomelocal_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adforcehomelocalflag", - "displayName": "AD Force Home Local Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adforcehomelocalflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adforcehomelocalflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_admapggidattribute", - "displayName": "AD Map GGID Attribute", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_admapggidattributeflag", - "displayName": "AD Map GGID Attribute Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_admapggidattributeflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_admapggidattributeflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_admapgidattribute", - "displayName": "AD Map GID Attribute", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_admapgidattributeflag", - "displayName": "AD Map GID Attribute Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_admapgidattributeflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_admapgidattributeflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_admapuidattribute", - "displayName": "AD Map UID Attribute", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_admapuidattributeflag", - "displayName": "AD Map UID Attribute Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_admapuidattributeflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_admapuidattributeflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_admountstyle", - "displayName": "AD Mount Style", - "options": [ - { - "id": "com.apple.directoryservice.managed_admountstyle_0", - "displayName": "afp", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_admountstyle_1", - "displayName": "smb", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adnamespace", - "displayName": "AD Namespace", - "options": [ - { - "id": "com.apple.directoryservice.managed_adnamespace_0", - "displayName": "forest", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adnamespace_1", - "displayName": "domain", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adnamespaceflag", - "displayName": "AD Namespace Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adnamespaceflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adnamespaceflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adorganizationalunit", - "displayName": "AD Organizational Unit", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_adpacketencrypt", - "displayName": "AD Packet Encrypt", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_adpacketencryptflag", - "displayName": "AD Packet Encrypt Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adpacketencryptflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adpacketencryptflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adpacketsign", - "displayName": "AD Packet Sign", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_adpacketsignflag", - "displayName": "AD Packet Sign Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adpacketsignflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adpacketsignflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adpreferreddcserver", - "displayName": "AD Preferred DC Server", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_adpreferreddcserverflag", - "displayName": "AD Preferred DC Server Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adpreferreddcserverflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adpreferreddcserverflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adrestrictddns", - "displayName": "AD Restrict DDNS", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_adrestrictddnsflag", - "displayName": "AD Restrict DDNS Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adrestrictddnsflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adrestrictddnsflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adtrustchangepassintervaldays", - "displayName": "AD Trust Change Pass Interval Days", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_adtrustchangepassintervaldaysflag", - "displayName": "AD Trust Change Pass Interval Days Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adtrustchangepassintervaldaysflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adtrustchangepassintervaldaysflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adusewindowsuncpath", - "displayName": "AD Use Windows UNC Path", - "options": [ - { - "id": "com.apple.directoryservice.managed_adusewindowsuncpath_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adusewindowsuncpath_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adusewindowsuncpathflag", - "displayName": "AD Use Windows UNC Path Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adusewindowsuncpathflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adusewindowsuncpathflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adwarnuserbeforecreatingma", - "displayName": "AD Warn User Before Creating MA", - "options": [ - { - "id": "com.apple.directoryservice.managed_adwarnuserbeforecreatingma_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adwarnuserbeforecreatingma_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_adwarnuserbeforecreatingmaflag", - "displayName": "AD Warn User Before Creating MA Flag", - "options": [ - { - "id": "com.apple.directoryservice.managed_adwarnuserbeforecreatingmaflag_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.directoryservice.managed_adwarnuserbeforecreatingmaflag_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.directoryservice.managed_clientid", - "displayName": "Client ID", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_com.apple.directoryservice.managed", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_description", - "displayName": "Description", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_hostname", - "displayName": "Host Name", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_password", - "displayName": "Password", - "options": null - }, - { - "id": "com.apple.directoryservice.managed_username", - "displayName": "User Name", - "options": null - }, - { - "id": "com.apple.discrecording_burnsupport", - "displayName": "Burn Support", - "options": [ - { - "id": "com.apple.discrecording_burnsupport_0", - "displayName": "off", - "description": null - }, - { - "id": "com.apple.discrecording_burnsupport_1", - "displayName": "authenticate", - "description": null - }, - { - "id": "com.apple.discrecording_burnsupport_2", - "displayName": "on", - "description": null - } - ] - }, - { - "id": "com.apple.discrecording_com.apple.discrecording", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_com.apple.dnssettings.managed", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_dnssettings", - "displayName": "DNS Settings", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_dnssettings_dnsprotocol", - "displayName": "DNS Protocol", - "options": [ - { - "id": "com.apple.dnssettings.managed_dnssettings_dnsprotocol_0", - "displayName": "HTTPS", - "description": null - }, - { - "id": "com.apple.dnssettings.managed_dnssettings_dnsprotocol_1", - "displayName": "TLS", - "description": null - } - ] - }, - { - "id": "com.apple.dnssettings.managed_dnssettings_serveraddresses", - "displayName": "Server Addresses", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_dnssettings_servername", - "displayName": "Server Name", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_dnssettings_serverurl", - "displayName": "Server URL", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_dnssettings_supplementalmatchdomains", - "displayName": "Supplemental Match Domains", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules", - "displayName": "On Demand Rules", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_action", - "displayName": "Action", - "options": [ - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_action_0", - "displayName": "Connect", - "description": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_action_1", - "displayName": "Disconnect", - "description": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_action_2", - "displayName": "Evaluate Connection", - "description": null - } - ] - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters", - "displayName": "Action Parameters", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters_domainaction", - "displayName": "Domain Action (Deprecated)", - "options": [ - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters_domainaction_0", - "displayName": "Never Connect", - "description": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters_domainaction_1", - "displayName": "Connect If Needed", - "description": null - } - ] - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters_domains", - "displayName": "Domains (Deprecated)", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters_item_domainaction", - "displayName": "Domain Action", - "options": [ - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters_item_domainaction_0", - "displayName": "NeverConnect", - "description": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters_item_domainaction_1", - "displayName": "ConnectIfNeeded", - "description": null - } - ] - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_actionparameters_item_domains", - "displayName": "Domains", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_dnsdomainmatch", - "displayName": "DNS Domain Match", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_dnsserveraddressmatch", - "displayName": "DNS Server Address Match", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_interfacetypematch", - "displayName": "Interface Type Match", - "options": [ - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_interfacetypematch_0", - "displayName": "Ethernet", - "description": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_interfacetypematch_1", - "displayName": "WiFi", - "description": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_interfacetypematch_2", - "displayName": "Cellular", - "description": null - } - ] - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_ssidmatch", - "displayName": "SSID Match", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_ondemandrules_item_urlstringprobe", - "displayName": "URL String Probe", - "options": null - }, - { - "id": "com.apple.dnssettings.managed_prohibitdisablement", - "displayName": "Prohibit Disablement", - "options": [ - { - "id": "com.apple.dnssettings.managed_prohibitdisablement_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.dnssettings.managed_prohibitdisablement_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.dock_allowdockfixupoverride", - "displayName": "Allow Dock Fixup Override", - "options": [ - { - "id": "com.apple.dock_allowdockfixupoverride_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_allowdockfixupoverride_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_autohide", - "displayName": "Auto Hide", - "options": [ - { - "id": "com.apple.dock_autohide_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_autohide_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_autohide-immutable", - "displayName": "Auto Hide Immutable", - "options": [ - { - "id": "com.apple.dock_autohide-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_autohide-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_com.apple.dock", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.dock_contents-immutable", - "displayName": "Contents Immutable", - "options": [ - { - "id": "com.apple.dock_contents-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_contents-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_dblclickbehavior", - "displayName": "Double Click Behavior", - "options": [ - { - "id": "com.apple.dock_dblclickbehavior_0", - "displayName": "Minimize", - "description": null - }, - { - "id": "com.apple.dock_dblclickbehavior_1", - "displayName": "Maximize", - "description": null - }, - { - "id": "com.apple.dock_dblclickbehavior_2", - "displayName": "None", - "description": null - } - ] - }, - { - "id": "com.apple.dock_dblclickbehavior-immutable", - "displayName": "Double Click Behavior Immutable", - "options": [ - { - "id": "com.apple.dock_dblclickbehavior-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_dblclickbehavior-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_largesize", - "displayName": "Large Size", - "options": null - }, - { - "id": "com.apple.dock_launchanim", - "displayName": "Launch Animation", - "options": [ - { - "id": "com.apple.dock_launchanim_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_launchanim_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_launchanim-immutable", - "displayName": "Launch Animation Immutable", - "options": [ - { - "id": "com.apple.dock_launchanim-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_launchanim-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_magnification", - "displayName": "Magnification", - "options": [ - { - "id": "com.apple.dock_magnification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_magnification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_magnify-immutable", - "displayName": "Magnify Immutable", - "options": [ - { - "id": "com.apple.dock_magnify-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_magnify-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_magsize-immutable", - "displayName": "Magnification Size Immutable", - "options": [ - { - "id": "com.apple.dock_magsize-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_magsize-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_mcxdockspecialfolders", - "displayName": "MCX Dock Special Folders", - "options": null - }, - { - "id": "com.apple.dock_mineffect", - "displayName": "Minimize Effect", - "options": [ - { - "id": "com.apple.dock_mineffect_0", - "displayName": "Genie", - "description": null - }, - { - "id": "com.apple.dock_mineffect_1", - "displayName": "Scale", - "description": null - } - ] - }, - { - "id": "com.apple.dock_mineffect-immutable", - "displayName": "Minimize Effect Immutable", - "options": [ - { - "id": "com.apple.dock_mineffect-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_mineffect-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_minimize-to-application", - "displayName": "Minimize To Application", - "options": [ - { - "id": "com.apple.dock_minimize-to-application_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_minimize-to-application_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_minintoapp-immutable", - "displayName": "Minimize Into Application Immutable", - "options": [ - { - "id": "com.apple.dock_minintoapp-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_minintoapp-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_orientation", - "displayName": "Orientation", - "options": [ - { - "id": "com.apple.dock_orientation_0", - "displayName": "Bottom", - "description": null - }, - { - "id": "com.apple.dock_orientation_1", - "displayName": "Left", - "description": null - }, - { - "id": "com.apple.dock_orientation_2", - "displayName": "Right", - "description": null - } - ] - }, - { - "id": "com.apple.dock_persistent-apps", - "displayName": "Persistent Apps", - "options": null - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-data", - "displayName": "Tile Data", - "options": null - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-data_file-type", - "displayName": "File Type", - "options": [ - { - "id": "com.apple.dock_persistent-apps_item_tile-data_file-type_0", - "displayName": "URL", - "description": null - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-data_file-type_1", - "displayName": "File", - "description": null - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-data_file-type_2", - "displayName": "Directory", - "description": null - } - ] - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-data_label", - "displayName": "Label", - "options": null - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-data_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-type", - "displayName": "Tile Type", - "options": [ - { - "id": "com.apple.dock_persistent-apps_item_tile-type_0", - "displayName": "File", - "description": null - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-type_1", - "displayName": "Directory", - "description": null - }, - { - "id": "com.apple.dock_persistent-apps_item_tile-type_2", - "displayName": "URL", - "description": null - } - ] - }, - { - "id": "com.apple.dock_persistent-others", - "displayName": "Persistent Others", - "options": null - }, - { - "id": "com.apple.dock_persistent-others_item_tile-data", - "displayName": "Tile Data", - "options": null - }, - { - "id": "com.apple.dock_persistent-others_item_tile-data_file-type", - "displayName": "File Type", - "options": [ - { - "id": "com.apple.dock_persistent-others_item_tile-data_file-type_0", - "displayName": "URL", - "description": null - }, - { - "id": "com.apple.dock_persistent-others_item_tile-data_file-type_1", - "displayName": "File", - "description": null - }, - { - "id": "com.apple.dock_persistent-others_item_tile-data_file-type_2", - "displayName": "Directory", - "description": null - } - ] - }, - { - "id": "com.apple.dock_persistent-others_item_tile-data_label", - "displayName": "Label", - "options": null - }, - { - "id": "com.apple.dock_persistent-others_item_tile-data_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.dock_persistent-others_item_tile-type", - "displayName": "Tile Type", - "options": [ - { - "id": "com.apple.dock_persistent-others_item_tile-type_0", - "displayName": "File", - "description": null - }, - { - "id": "com.apple.dock_persistent-others_item_tile-type_1", - "displayName": "Directory", - "description": null - }, - { - "id": "com.apple.dock_persistent-others_item_tile-type_2", - "displayName": "URL", - "description": null - } - ] - }, - { - "id": "com.apple.dock_position-immutable", - "displayName": "Position Immutable", - "options": [ - { - "id": "com.apple.dock_position-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_position-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_show-process-indicators", - "displayName": "Show Process Indicators", - "options": [ - { - "id": "com.apple.dock_show-process-indicators_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_show-process-indicators_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_show-recents", - "displayName": "Show Recents", - "options": [ - { - "id": "com.apple.dock_show-recents_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_show-recents_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_showindicators-immutable", - "displayName": "Show Indicators Immutable", - "options": [ - { - "id": "com.apple.dock_showindicators-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_showindicators-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_showrecents-immutable", - "displayName": "Show Recents Immutable", - "options": [ - { - "id": "com.apple.dock_showrecents-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_showrecents-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_size-immutable", - "displayName": "Size Immutable", - "options": [ - { - "id": "com.apple.dock_size-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_size-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_static-apps", - "displayName": "Static Apps", - "options": null - }, - { - "id": "com.apple.dock_static-apps_item_tile-data", - "displayName": "Tile Data", - "options": null - }, - { - "id": "com.apple.dock_static-apps_item_tile-data_file-type", - "displayName": "File Type", - "options": [ - { - "id": "com.apple.dock_static-apps_item_tile-data_file-type_0", - "displayName": "URL", - "description": null - }, - { - "id": "com.apple.dock_static-apps_item_tile-data_file-type_1", - "displayName": "File", - "description": null - }, - { - "id": "com.apple.dock_static-apps_item_tile-data_file-type_2", - "displayName": "Directory", - "description": null - } - ] - }, - { - "id": "com.apple.dock_static-apps_item_tile-data_label", - "displayName": "Label", - "options": null - }, - { - "id": "com.apple.dock_static-apps_item_tile-data_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.dock_static-apps_item_tile-type", - "displayName": "Tile Type", - "options": [ - { - "id": "com.apple.dock_static-apps_item_tile-type_0", - "displayName": "File", - "description": null - }, - { - "id": "com.apple.dock_static-apps_item_tile-type_1", - "displayName": "Directory", - "description": null - }, - { - "id": "com.apple.dock_static-apps_item_tile-type_2", - "displayName": "URL", - "description": null - } - ] - }, - { - "id": "com.apple.dock_static-only", - "displayName": "Static Only", - "options": [ - { - "id": "com.apple.dock_static-only_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_static-only_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.dock_static-others", - "displayName": "Static Others", - "options": null - }, - { - "id": "com.apple.dock_static-others_item_tile-data", - "displayName": "Tile Data", - "options": null - }, - { - "id": "com.apple.dock_static-others_item_tile-data_file-type", - "displayName": "File Type", - "options": [ - { - "id": "com.apple.dock_static-others_item_tile-data_file-type_0", - "displayName": "URL", - "description": null - }, - { - "id": "com.apple.dock_static-others_item_tile-data_file-type_1", - "displayName": "File", - "description": null - }, - { - "id": "com.apple.dock_static-others_item_tile-data_file-type_2", - "displayName": "Directory", - "description": null - } - ] - }, - { - "id": "com.apple.dock_static-others_item_tile-data_label", - "displayName": "Label", - "options": null - }, - { - "id": "com.apple.dock_static-others_item_tile-data_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.dock_static-others_item_tile-type", - "displayName": "Tile Type", - "options": [ - { - "id": "com.apple.dock_static-others_item_tile-type_0", - "displayName": "File", - "description": null - }, - { - "id": "com.apple.dock_static-others_item_tile-type_1", - "displayName": "Directory", - "description": null - }, - { - "id": "com.apple.dock_static-others_item_tile-type_2", - "displayName": "URL", - "description": null - } - ] - }, - { - "id": "com.apple.dock_tilesize", - "displayName": "Tile Size", - "options": null - }, - { - "id": "com.apple.dock_windowtabbing", - "displayName": "Window Tabbing", - "options": [ - { - "id": "com.apple.dock_windowtabbing_0", - "displayName": "Manual", - "description": null - }, - { - "id": "com.apple.dock_windowtabbing_1", - "displayName": "Always", - "description": null - }, - { - "id": "com.apple.dock_windowtabbing_2", - "displayName": "Full Screen", - "description": null - } - ] - }, - { - "id": "com.apple.dock_windowtabbing-immutable", - "displayName": "Window Tabbing Immutable", - "options": [ - { - "id": "com.apple.dock_windowtabbing-immutable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.dock_windowtabbing-immutable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.domains_com.apple.domains", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.domains_crosssitetrackingpreventionrelaxedapps", - "displayName": "Cross Site Tracking Prevention Relaxed Apps", - "options": null - }, - { - "id": "com.apple.domains_crosssitetrackingpreventionrelaxeddomains", - "displayName": "Cross Site Tracking Prevention Relaxed Domains", - "options": null - }, - { - "id": "com.apple.domains_emaildomains", - "displayName": "Email Domains", - "options": null - }, - { - "id": "com.apple.domains_safaripasswordautofilldomains", - "displayName": "Safari Password Auto Fill Domains", - "options": null - }, - { - "id": "com.apple.domains_webdomains", - "displayName": "Web Domains", - "options": null - }, - { - "id": "com.apple.extensiblesso_authenticationmethod", - "displayName": "Authentication Method (Deprecated)", - "options": [ - { - "id": "com.apple.extensiblesso_authenticationmethod_0", - "displayName": "Password", - "description": null - }, - { - "id": "com.apple.extensiblesso_authenticationmethod_1", - "displayName": "UserSecureEnclaveKey", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_com.apple.extensiblesso", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.extensiblesso_com.apple.extensiblesso-kerberos_kerberos", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.extensiblesso_deniedbundleidentifiers", - "displayName": "Denied Bundle Identifiers", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata", - "displayName": "Extension Data", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowautomaticlogin_kerberos", - "displayName": "Allow Automatic Login", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_allowautomaticlogin_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowautomaticlogin_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowpassword_kerberos", - "displayName": "Allow Password", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_allowpassword_kerberos_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowpassword_kerberos_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowpasswordchange_kerberos", - "displayName": "Allow Password Change", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_allowpasswordchange_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowpasswordchange_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowplatformssoauthfallback_kerberos", - "displayName": "Allow Platform SSO OAuth Fallback", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_allowplatformssoauthfallback_kerberos_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowplatformssoauthfallback_kerberos_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowsmartcard_kerberos", - "displayName": "Allow Smart Card", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_allowsmartcard_kerberos_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_allowsmartcard_kerberos_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_credentialbundleidacl_kerberos", - "displayName": "Credential Bundle ID ACL", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_credentialusemode_kerberos", - "displayName": "Credential Use Mode", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_credentialusemode_kerberos_0", - "displayName": "Always", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_credentialusemode_kerberos_1", - "displayName": "When Not Specified", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_credentialusemode_kerberos_2", - "displayName": "Kerberos Default ", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_customusernamelabel_kerberos", - "displayName": "Custom Username Label", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_delayusersetup_kerberos", - "displayName": "Delay User Setup", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_delayusersetup_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_delayusersetup_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_domainrealmmapping_generickey_kerberos_keytobereplaced", - "displayName": "Realm", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_domainrealmmapping_generickey_kerberos_string", - "displayName": "Domain Realm Mapping", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_domainrealmmapping_kerberos", - "displayName": "Domain Realm Mapping", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_domainrealmmapping_realm_kerberos", - "displayName": "Realm (Deprecated)", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_generickey_boolean", - "displayName": "Value", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_generickey_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_generickey_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_generickey_integer", - "displayName": "Value", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_generickey_keytobereplaced", - "displayName": "Key", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_generickey_string", - "displayName": "Value", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_helptext_kerberos", - "displayName": "Help Text", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_identityissuerautoselectfilter_kerberos", - "displayName": "Identity Issuer Auto Select Filter", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_includekerberosappsinbundleidacl_kerberos", - "displayName": "Include Kerberos Apps In Bundle ID ACL", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_includekerberosappsinbundleidacl_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_includekerberosappsinbundleidacl_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_includemanagedappsinbundleidacl_kerberos", - "displayName": "Include Managed Apps In Bundle ID ACL", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_includemanagedappsinbundleidacl_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_includemanagedappsinbundleidacl_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_isdefaultrealm_kerberos", - "displayName": "Is Default Realm", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_isdefaultrealm_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_isdefaultrealm_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_kerberos", - "displayName": "Extension Data", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_monitorcredentialscache_kerberos", - "displayName": "Monitor Credentials Cache", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_monitorcredentialscache_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_monitorcredentialscache_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_performkerberosonly_kerberos", - "displayName": "Perform Kerberos Only", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_performkerberosonly_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_performkerberosonly_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_preferredkdcs_kerberos", - "displayName": "Preferred KDCs", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_principalname_kerberos", - "displayName": "Principal Name", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_pwchangeurl_kerberos", - "displayName": "Password Change URL", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_pwnotificationdays_kerberos", - "displayName": "Password Notification Days", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_pwreqcomplexity_kerberos", - "displayName": "Password Req Complexity", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_pwreqcomplexity_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_pwreqcomplexity_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_pwreqhistory_kerberos", - "displayName": "Password Req History", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_pwreqlength_kerberos", - "displayName": "Password Req Length", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_pwreqminage_kerberos", - "displayName": "Password Req Min Age", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_pwreqtext_kerberos", - "displayName": "Password Req Text", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_requiretlsforldap_kerberos", - "displayName": "Require TLS For LDAP", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_requiretlsforldap_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_requiretlsforldap_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_requireuserpresence_kerberos", - "displayName": "Require User Presence", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_requireuserpresence_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_requireuserpresence_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_sitecode_kerberos", - "displayName": "Site Code", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_startinsmartcardmode_kerberos", - "displayName": "Start In Smart Card Mode", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_startinsmartcardmode_kerberos_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_startinsmartcardmode_kerberos_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_synclocalpassword_kerberos", - "displayName": "Sync Local Password", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_synclocalpassword_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_synclocalpassword_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_useplatformssotgt_kerberos", - "displayName": "Use Platform SSOTGT", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_useplatformssotgt_kerberos_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_useplatformssotgt_kerberos_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensiondata_usesiteautodiscovery_kerberos", - "displayName": "Use Site Auto Discovery", - "options": [ - { - "id": "com.apple.extensiblesso_extensiondata_usesiteautodiscovery_kerberos_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.extensiblesso_extensiondata_usesiteautodiscovery_kerberos_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_extensionidentifier", - "displayName": "Extension Identifier", - "options": null - }, - { - "id": "com.apple.extensiblesso_extensionidentifier_kerberos", - "displayName": "Extension Identifier", - "options": { - "id": "com.apple.extensiblesso_extensionidentifier_kerberos_0", - "displayName": "com.apple.AppSSOKerberos.KerberosExtension", - "description": null - } - }, - { - "id": "com.apple.extensiblesso_hosts", - "displayName": "Hosts", - "options": null - }, - { - "id": "com.apple.extensiblesso_hosts_kerberos", - "displayName": "Hosts", - "options": null - }, - { - "id": "com.apple.extensiblesso_ignored_$typepicker", - "displayName": "Type", - "options": [ - { - "id": "com.apple.extensiblesso_ignored_0", - "displayName": "String", - "description": "String" - }, - { - "id": "com.apple.extensiblesso_ignored_1", - "displayName": "Integer", - "description": "Integer" - }, - { - "id": "com.apple.extensiblesso_ignored_2", - "displayName": "Boolean", - "description": "Boolean" - } - ] - }, - { - "id": "com.apple.extensiblesso_ignored_kerberos_$typepicker", - "displayName": "IGNORED", - "options": { - "id": "com.apple.extensiblesso_ignored_kerberos_0", - "displayName": "Array", - "description": null - } - }, - { - "id": "com.apple.extensiblesso_platformsso", - "displayName": "Platform SSO", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_accountdisplayname", - "displayName": "Account Display Name", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_additionalgroups", - "displayName": "Additional Groups", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_administratorgroups", - "displayName": "Administrator Groups", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_allowdeviceidentifiersinattestation", - "displayName": "Allow Device Identifiers In Attestation", - "options": [ - { - "id": "com.apple.extensiblesso_platformsso_allowdeviceidentifiersinattestation_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_allowdeviceidentifiersinattestation_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_platformsso_authenticationgraceperiod", - "displayName": "Authentication Grace Period", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_authenticationmethod", - "displayName": "Authentication Method", - "options": [ - { - "id": "com.apple.extensiblesso_platformsso_authenticationmethod_0", - "displayName": "Password", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_authenticationmethod_1", - "displayName": "UserSecureEnclaveKey", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_authenticationmethod_2", - "displayName": "SmartCard", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_platformsso_authorizationgroups", - "displayName": "Authorization Groups", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_authorizationgroups_authorization right", - "displayName": "Authorization Right (Deprecated)", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_authorizationgroups_generickey", - "displayName": "ANY", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_authorizationgroups_generickey_keytobereplaced", - "displayName": "Authorization Groups", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_authorizationgroups_group", - "displayName": "Group (Deprecated)", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_enableauthorization", - "displayName": "Enable Authorization", - "options": [ - { - "id": "com.apple.extensiblesso_platformsso_enableauthorization_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_enableauthorization_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_platformsso_enablecreateuseratlogin", - "displayName": "Enable Create User At Login", - "options": [ - { - "id": "com.apple.extensiblesso_platformsso_enablecreateuseratlogin_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_enablecreateuseratlogin_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_platformsso_filevaultpolicy", - "displayName": "FileVault Policy", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_loginfrequency", - "displayName": "Login Frequency", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_loginpolicy", - "displayName": "Login Policy", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_newuserauthorizationmode", - "displayName": "New User Authorization Mode", - "options": [ - { - "id": "com.apple.extensiblesso_platformsso_newuserauthorizationmode_0", - "displayName": "Standard", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_newuserauthorizationmode_1", - "displayName": "Admin", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_newuserauthorizationmode_2", - "displayName": "Groups", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_newuserauthorizationmode_3", - "displayName": "Temporary", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_platformsso_nonplatformssoaccounts", - "displayName": "Non Platform SSO Accounts", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_offlinegraceperiod", - "displayName": "Offline Grace Period", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_tokentousermapping", - "displayName": "Token To User Mapping", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_tokentousermapping_accountname", - "displayName": "Account Name", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_tokentousermapping_fullname", - "displayName": "Full Name", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_unlockpolicy", - "displayName": "Unlock Policy", - "options": null - }, - { - "id": "com.apple.extensiblesso_platformsso_userauthorizationmode", - "displayName": "User Authorization Mode", - "options": [ - { - "id": "com.apple.extensiblesso_platformsso_userauthorizationmode_0", - "displayName": "Standard", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_userauthorizationmode_1", - "displayName": "Admin", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_userauthorizationmode_2", - "displayName": "Groups", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_platformsso_useshareddevicekeys", - "displayName": "Use Shared Device Keys", - "options": [ - { - "id": "com.apple.extensiblesso_platformsso_useshareddevicekeys_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.extensiblesso_platformsso_useshareddevicekeys_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_realm", - "displayName": "Realm", - "options": null - }, - { - "id": "com.apple.extensiblesso_realm_kerberos", - "displayName": "Realm", - "options": null - }, - { - "id": "com.apple.extensiblesso_registrationtoken", - "displayName": "Registration Token", - "options": null - }, - { - "id": "com.apple.extensiblesso_screenlockedbehavior", - "displayName": "Screen Locked Behavior", - "options": { - "id": "com.apple.extensiblesso_screenlockedbehavior_0", - "displayName": "Do Not Handle", - "description": null - } - }, - { - "id": "com.apple.extensiblesso_teamidentifier", - "displayName": "Team Identifier", - "options": null - }, - { - "id": "com.apple.extensiblesso_teamidentifier_kerberos", - "displayName": "Team Identifier", - "options": { - "id": "com.apple.extensiblesso_teamidentifier_kerberos_0", - "displayName": "apple", - "description": null - } - }, - { - "id": "com.apple.extensiblesso_type", - "displayName": "Type", - "options": [ - { - "id": "com.apple.extensiblesso_type_0", - "displayName": "Credential", - "description": null - }, - { - "id": "com.apple.extensiblesso_type_1", - "displayName": "Redirect", - "description": null - } - ] - }, - { - "id": "com.apple.extensiblesso_type_kerberos", - "displayName": "Type", - "options": { - "id": "com.apple.extensiblesso_type_kerberos_0", - "displayName": "Credential", - "description": null - } - }, - { - "id": "com.apple.extensiblesso_urls", - "displayName": "URLs", - "options": null - }, - { - "id": "com.apple.familycontrols.contentfilter_com.apple.familycontrols.contentfilter", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.familycontrols.contentfilter_filterblacklist", - "displayName": "Filter Blocklist (Deprecated)", - "options": null - }, - { - "id": "com.apple.familycontrols.contentfilter_filterdenylist", - "displayName": "Filter Denylist", - "options": null - }, - { - "id": "com.apple.familycontrols.contentfilter_filterwhitelist", - "displayName": "Filter Allowlist", - "options": null - }, - { - "id": "com.apple.familycontrols.contentfilter_restrictweb", - "displayName": "Restrict Web", - "options": [ - { - "id": "com.apple.familycontrols.contentfilter_restrictweb_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.familycontrols.contentfilter_restrictweb_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.contentfilter_sitewhitelist", - "displayName": "Site Allowlist", - "options": null - }, - { - "id": "com.apple.familycontrols.contentfilter_sitewhitelist_item_address", - "displayName": "Address", - "options": null - }, - { - "id": "com.apple.familycontrols.contentfilter_sitewhitelist_item_pagetitle", - "displayName": "Page Title", - "options": null - }, - { - "id": "com.apple.familycontrols.contentfilter_usecontentfilter", - "displayName": "Use Content Filter", - "options": [ - { - "id": "com.apple.familycontrols.contentfilter_usecontentfilter_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.familycontrols.contentfilter_usecontentfilter_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.contentfilter_whitelistenabled", - "displayName": "Allowlist Enabled", - "options": [ - { - "id": "com.apple.familycontrols.contentfilter_whitelistenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.familycontrols.contentfilter_whitelistenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_com.apple.familycontrols.timelimits.v2", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_familycontrolsenabled", - "displayName": "Family Controls Enabled", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_familycontrolsenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_familycontrolsenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits", - "displayName": "Time Limits", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance", - "displayName": "Weekday Allowance", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_enabled", - "displayName": "Enabled", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_enabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_enabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_end", - "displayName": "End", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_rangetype", - "displayName": "Range Type", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_rangetype_0", - "displayName": "Weekday", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_rangetype_1", - "displayName": "Weekend", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_secondsperday", - "displayName": "Seconds Per Day", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-allowance_start", - "displayName": "Start", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew", - "displayName": "Weekday Curfew", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_enabled", - "displayName": "Enabled", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_enabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_enabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_end", - "displayName": "End", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_rangetype", - "displayName": "Range Type", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_rangetype_0", - "displayName": "Weekday", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_rangetype_1", - "displayName": "Weekend", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_secondsperday", - "displayName": "Seconds Per Day", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekday-curfew_start", - "displayName": "Start", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance", - "displayName": "Weekend Allowance", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_enabled", - "displayName": "Enabled", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_enabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_enabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_end", - "displayName": "End", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_rangetype", - "displayName": "Range Type", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_rangetype_0", - "displayName": "Weekday", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_rangetype_1", - "displayName": "Weekend", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_secondsperday", - "displayName": "Seconds Per Day", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-allowance_start", - "displayName": "Start", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew", - "displayName": "Weekend Curfew", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_enabled", - "displayName": "Enabled", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_enabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_enabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_end", - "displayName": "End", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_rangetype", - "displayName": "Range Type", - "options": [ - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_rangetype_0", - "displayName": "Weekday", - "description": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_rangetype_1", - "displayName": "Weekend", - "description": null - } - ] - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_secondsperday", - "displayName": "Seconds Per Day", - "options": null - }, - { - "id": "com.apple.familycontrols.timelimits.v2_time-limits_weekend-curfew_start", - "displayName": "Start", - "options": null - }, - { - "id": "com.apple.fileproviderd_allowmanagedfileproviderstorequestattribution", - "displayName": "Allow Managed File Providers To Request Attribution", - "options": [ - { - "id": "com.apple.fileproviderd_allowmanagedfileproviderstorequestattribution_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.fileproviderd_allowmanagedfileproviderstorequestattribution_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.fileproviderd_com.apple.fileproviderd", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.fileproviderd_managementallowsknownfoldersyncing", - "displayName": "Management Allows Known Folder Syncing", - "options": [ - { - "id": "com.apple.fileproviderd_managementallowsknownfoldersyncing_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.fileproviderd_managementallowsknownfoldersyncing_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.fileproviderd_managementknownfoldersyncingallowlist", - "displayName": "Management Known Folder Syncing Allow List", - "options": null - }, - { - "id": "com.apple.finder_com.apple.finder", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.finder_prohibitburn", - "displayName": "Prohibit Burn", - "options": [ - { - "id": "com.apple.finder_prohibitburn_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_prohibitburn_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.finder_prohibitconnectto", - "displayName": "Prohibit Connect To", - "options": [ - { - "id": "com.apple.finder_prohibitconnectto_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_prohibitconnectto_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.finder_prohibiteject", - "displayName": "Prohibit Eject", - "options": [ - { - "id": "com.apple.finder_prohibiteject_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_prohibiteject_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.finder_prohibitgotofolder", - "displayName": "Prohibit Go To Folder", - "options": [ - { - "id": "com.apple.finder_prohibitgotofolder_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_prohibitgotofolder_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.finder_showexternalharddrivesondesktop", - "displayName": "Show External Hard Drives On Desktop", - "options": [ - { - "id": "com.apple.finder_showexternalharddrivesondesktop_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_showexternalharddrivesondesktop_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.finder_showharddrivesondesktop", - "displayName": "Show Hard Drives On Desktop", - "options": [ - { - "id": "com.apple.finder_showharddrivesondesktop_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_showharddrivesondesktop_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.finder_showmountedserversondesktop", - "displayName": "Show Mounted Servers On Desktop", - "options": [ - { - "id": "com.apple.finder_showmountedserversondesktop_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_showmountedserversondesktop_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.finder_showremovablemediaondesktop", - "displayName": "Show Removable Media On Desktop", - "options": [ - { - "id": "com.apple.finder_showremovablemediaondesktop_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_showremovablemediaondesktop_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.finder_warnonemptytrash", - "displayName": "Warn On Empty Trash", - "options": [ - { - "id": "com.apple.finder_warnonemptytrash_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.finder_warnonemptytrash_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.font_com.apple.font", - "displayName": "com.apple.font", - "options": null - }, - { - "id": "com.apple.font_font", - "displayName": "Font", - "options": null - }, - { - "id": "com.apple.font_name", - "displayName": "Name", - "options": null - }, - { - "id": "com.apple.gamed_com.apple.gamed", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.gamed_gkfeatureaccountmodificationallowed", - "displayName": "GK Feature Account Modification Allowed", - "options": [ - { - "id": "com.apple.gamed_gkfeatureaccountmodificationallowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.gamed_gkfeatureaccountmodificationallowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.ldap.account_com.apple.ldap.account", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.ldap.account_ldapaccountdescription", - "displayName": "LDAP Account Description", - "options": null - }, - { - "id": "com.apple.ldap.account_ldapaccounthostname", - "displayName": "LDAP Account Host Name", - "options": null - }, - { - "id": "com.apple.ldap.account_ldapaccountpassword", - "displayName": "LDAP Account Password", - "options": null - }, - { - "id": "com.apple.ldap.account_ldapaccountusername", - "displayName": "LDAP Account User Name", - "options": null - }, - { - "id": "com.apple.ldap.account_ldapaccountusessl", - "displayName": "LDAP Account Use SSL", - "options": [ - { - "id": "com.apple.ldap.account_ldapaccountusessl_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.ldap.account_ldapaccountusessl_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.ldap.account_ldapsearchsettings", - "displayName": "LDAP Search Settings", - "options": null - }, - { - "id": "com.apple.ldap.account_ldapsearchsettings_item_ldapsearchsettingdescription", - "displayName": "LDAP Search Setting Description", - "options": null - }, - { - "id": "com.apple.ldap.account_ldapsearchsettings_item_ldapsearchsettingscope", - "displayName": "LDAP Search Setting Scope", - "options": [ - { - "id": "com.apple.ldap.account_ldapsearchsettings_item_ldapsearchsettingscope_0", - "displayName": "Base", - "description": null - }, - { - "id": "com.apple.ldap.account_ldapsearchsettings_item_ldapsearchsettingscope_1", - "displayName": "OneLevel", - "description": null - }, - { - "id": "com.apple.ldap.account_ldapsearchsettings_item_ldapsearchsettingscope_2", - "displayName": "Subtree", - "description": null - } - ] - }, - { - "id": "com.apple.ldap.account_ldapsearchsettings_item_ldapsearchsettingsearchbase", - "displayName": "LDAP Search Setting Search Base", - "options": null - }, - { - "id": "com.apple.loginitems.managed_autolaunchedapplicationdictionary-managed", - "displayName": "Auto Launch Items", - "options": null - }, - { - "id": "com.apple.loginitems.managed_autolaunchedapplicationdictionary-managed_item_hide", - "displayName": "Hide", - "options": [ - { - "id": "com.apple.loginitems.managed_autolaunchedapplicationdictionary-managed_item_hide_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginitems.managed_autolaunchedapplicationdictionary-managed_item_hide_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginitems.managed_autolaunchedapplicationdictionary-managed_item_path", - "displayName": "Path", - "options": null - }, - { - "id": "com.apple.loginitems.managed_com.apple.loginitems.managed", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.loginwindow_adminhostinfo", - "displayName": "Admin Host Info", - "options": null - }, - { - "id": "com.apple.loginwindow_allowlist", - "displayName": "Allow List", - "options": null - }, - { - "id": "com.apple.loginwindow_autologinpassword", - "displayName": "Autologin Password", - "options": null - }, - { - "id": "com.apple.loginwindow_autologinusername", - "displayName": "Autologin Username", - "options": null - }, - { - "id": "com.apple.loginwindow_com.apple.loginwindow", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.loginwindow_denylist", - "displayName": "Deny List", - "options": null - }, - { - "id": "com.apple.loginwindow_disableconsoleaccess", - "displayName": "Disable Console Access", - "options": [ - { - "id": "com.apple.loginwindow_disableconsoleaccess_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_disableconsoleaccess_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_disablescreenlockimmediate", - "displayName": "Disable Screen Lock Immediate", - "options": [ - { - "id": "com.apple.loginwindow_disablescreenlockimmediate_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_disablescreenlockimmediate_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_hideadminusers", - "displayName": "Hide Admin Users", - "options": [ - { - "id": "com.apple.loginwindow_hideadminusers_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_hideadminusers_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_hidelocalusers", - "displayName": "Hide Local Users", - "options": [ - { - "id": "com.apple.loginwindow_hidelocalusers_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_hidelocalusers_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_includenetworkuser", - "displayName": "Include Network User", - "options": [ - { - "id": "com.apple.loginwindow_includenetworkuser_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_includenetworkuser_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_loginwindowtext", - "displayName": "Login Window Text", - "options": null - }, - { - "id": "com.apple.loginwindow_logoutdisabledwhileloggedin", - "displayName": "Log Out Disabled While Logged In", - "options": [ - { - "id": "com.apple.loginwindow_logoutdisabledwhileloggedin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_logoutdisabledwhileloggedin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_poweroffdisabledwhileloggedin", - "displayName": "Power Off Disabled While Logged In", - "options": [ - { - "id": "com.apple.loginwindow_poweroffdisabledwhileloggedin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_poweroffdisabledwhileloggedin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_restartdisabled", - "displayName": "Restart Disabled", - "options": [ - { - "id": "com.apple.loginwindow_restartdisabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_restartdisabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_restartdisabledwhileloggedin", - "displayName": "Restart Disabled While Logged In", - "options": [ - { - "id": "com.apple.loginwindow_restartdisabledwhileloggedin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_restartdisabledwhileloggedin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_showfullname", - "displayName": "Show Full Name", - "options": [ - { - "id": "com.apple.loginwindow_showfullname_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_showfullname_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_showinputmenu", - "displayName": "Show Input Menu", - "options": [ - { - "id": "com.apple.loginwindow_showinputmenu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_showinputmenu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_showotherusers_managed", - "displayName": "Show Other Users Managed", - "options": [ - { - "id": "com.apple.loginwindow_showotherusers_managed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_showotherusers_managed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_shutdowndisabled", - "displayName": "Shut Down Disabled", - "options": [ - { - "id": "com.apple.loginwindow_shutdowndisabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_shutdowndisabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_shutdowndisabledwhileloggedin", - "displayName": "Shut Down Disabled While Logged In", - "options": [ - { - "id": "com.apple.loginwindow_shutdowndisabledwhileloggedin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_shutdowndisabledwhileloggedin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.loginwindow_sleepdisabled", - "displayName": "Sleep Disabled", - "options": [ - { - "id": "com.apple.loginwindow_sleepdisabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.loginwindow_sleepdisabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_accesscontrolallowmethodsincorspreflightspecconformant", - "displayName": "Make Access-Control-Allow-Methods matching in CORS preflight spec conformant", - "options": [ - { - "id": "com.apple.managedclient.preferences_accesscontrolallowmethodsincorspreflightspecconformant_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_accesscontrolallowmethodsincorspreflightspecconformant_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_accessibilityimagelabelsenabled", - "displayName": "Let screen reader users get image descriptions from Microsoft", - "options": [ - { - "id": "com.apple.managedclient.preferences_accessibilityimagelabelsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_accessibilityimagelabelsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_acknowledgeddatacollectionpolicy", - "displayName": "Automatically acknowledge data collection policy", - "options": [ - { - "id": "com.apple.managedclient.preferences_acknowledgeddatacollectionpolicy_0", - "displayName": "Acknowledge - send required data", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_acknowledgeddatacollectionpolicy_1", - "displayName": "Acknowledge - send required and optional data (Deprecated)", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_additionalsearchboxenabled", - "displayName": "Enable additional search box in browser", - "options": [ - { - "id": "com.apple.managedclient.preferences_additionalsearchboxenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_additionalsearchboxenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_addressbarmicrosoftsearchinbingproviderenabled", - "displayName": "Enable Microsoft Search in Bing suggestions in the address bar", - "options": [ - { - "id": "com.apple.managedclient.preferences_addressbarmicrosoftsearchinbingproviderenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_addressbarmicrosoftsearchinbingproviderenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_adssettingforintrusiveadssites", - "displayName": "Ads setting for sites with intrusive ads", - "options": [ - { - "id": "com.apple.managedclient.preferences_adssettingforintrusiveadssites_0", - "displayName": "Allow ads on all sites", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_adssettingforintrusiveadssites_1", - "displayName": "Block ads on sites with intrusive ads. (Default value)", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_adstransparencyenabled", - "displayName": "Configure if the ads transparency feature is enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_adstransparencyenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_adstransparencyenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_aigenthemesenabled", - "displayName": "Enables DALL-E themes generation", - "options": [ - { - "id": "com.apple.managedclient.preferences_aigenthemesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_aigenthemesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allhttpauthschemesallowedfororigins", - "displayName": "List of origins that allow all HTTP authentication", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_allowbackforwardcacheforcachecontrolnostorepageenabled", - "displayName": "Allow pages with Cache-Control: no-store header to enter back/forward cache", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowbackforwardcacheforcachecontrolnostorepageenabled_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowbackforwardcacheforcachecontrolnostorepageenabled_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allowcertswithoutmatchingemailaddress", - "displayName": "Allow S/MIME certificates without a matching email address", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowcertswithoutmatchingemailaddress_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowcertswithoutmatchingemailaddress_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allowcrossoriginauthprompt", - "displayName": "Allow cross-origin HTTP Basic Auth prompts", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowcrossoriginauthprompt_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowcrossoriginauthprompt_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allowdeletingbrowserhistory", - "displayName": "Enable deleting browser and download history", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowdeletingbrowserhistory_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowdeletingbrowserhistory_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_alloweddomainsforapps", - "displayName": "Define domains allowed to access Google Workspace", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_allowedemaildomains", - "displayName": "Allowed Email Domains", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_allowedthreats", - "displayName": "Allowed threats", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_allowfileselectiondialogs", - "displayName": "Allow file selection dialogs", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowfileselectiondialogs_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowfileselectiondialogs_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allowpopupsduringpageunload", - "displayName": "Allows a page to show popups during its unloading", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowpopupsduringpageunload_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowpopupsduringpageunload_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allowsurfgame", - "displayName": "Allow surf game", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowsurfgame_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowsurfgame_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allowsyncxhrinpagedismissal", - "displayName": "Allow pages to send synchronous XHR requests during page dismissal", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowsyncxhrinpagedismissal_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowsyncxhrinpagedismissal_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allowtrackingforurls", - "displayName": "Configure tracking prevention exceptions for specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_allowvisualbasictobindtosystem", - "displayName": "Allow Visual Basic macros to use system APIs", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowvisualbasictobindtosystem_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowvisualbasictobindtosystem_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_allowwebauthnwithbrokentlscerts", - "displayName": "Allow Web Authentication requests on sites with broken TLS certificates.", - "options": [ - { - "id": "com.apple.managedclient.preferences_allowwebauthnwithbrokentlscerts_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_allowwebauthnwithbrokentlscerts_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_alternateerrorpagesenabled", - "displayName": "Suggest similar pages when a webpage can’t be found", - "options": [ - { - "id": "com.apple.managedclient.preferences_alternateerrorpagesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_alternateerrorpagesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_alwaysopenpdfexternally", - "displayName": "Always open PDF files externally", - "options": [ - { - "id": "com.apple.managedclient.preferences_alwaysopenpdfexternally_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_alwaysopenpdfexternally_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled", - "displayName": "Enable Ambient Authentication for InPrivate and Guest profiles", - "options": [ - { - "id": "com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled_0", - "displayName": "Enable ambient authentication in regular sessions only.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled_1", - "displayName": "Enable ambient authentication in InPrivate and regular sessions", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled_2", - "displayName": "Enable ambient authentication in guest and regular sessions", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_ambientauthenticationinprivatemodesenabled_3", - "displayName": "Enable ambient authentication in regular, InPrivate and guest sessions", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_appcacheforceenabled", - "displayName": "Allows the AppCache feature to be re-enabled, even if it's turned off by default", - "options": [ - { - "id": "com.apple.managedclient.preferences_appcacheforceenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_appcacheforceenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem", - "displayName": "Applications", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app", - "displayName": "Company Portal", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_application id", - "displayName": "Company Portal Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_lcid", - "displayName": "Company Portal LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_company portal.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app", - "displayName": "Microsoft Defender ATP (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_application id", - "displayName": "Microsoft Defender ATP Application ID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_lcid", - "displayName": "Microsoft Defender ATP LCID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver", - "displayName": "Update channel override (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender atp.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app", - "displayName": "Microsoft Defender", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_application id", - "displayName": "Microsoft Defender Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_lcid", - "displayName": "Microsoft Defender LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft defender.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app", - "displayName": "Microsoft Edge Beta (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_application id", - "displayName": "Microsoft Edge Beta Application ID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_lcid", - "displayName": "Microsoft Edge Beta LCID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver", - "displayName": "Update channel override (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge beta.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app", - "displayName": "Microsoft Edge Canary (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_application id", - "displayName": "Microsoft Edge Canary Application ID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_lcid", - "displayName": "Microsoft Edge Canary LCID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver", - "displayName": "Update channel override (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge canary.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app", - "displayName": "Microsoft Edge Dev (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_application id", - "displayName": "Microsoft Edge Dev Application ID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_lcid", - "displayName": "Microsoft Edge Dev LCID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver", - "displayName": "Update channel override (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge dev.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app", - "displayName": "Microsoft Edge (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_application id", - "displayName": "Microsoft Edge Application ID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_lcid", - "displayName": "Microsoft Edge LCID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver", - "displayName": "Update channel override (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft edge.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app", - "displayName": "Microsoft Excel", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_application id", - "displayName": "Microsoft Excel Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_lcid", - "displayName": "Microsoft Excel LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft excel.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app", - "displayName": "Microsoft OneNote", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_application id", - "displayName": "Microsoft OneNote Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_lcid", - "displayName": "Microsoft OneNote LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft onenote.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app", - "displayName": "Microsoft Outlook", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_application id", - "displayName": "Microsoft Outlook Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_lcid", - "displayName": "Microsoft Outlook LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft outlook.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app", - "displayName": "Microsoft PowerPoint", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_application id", - "displayName": "Microsoft PowerPoint Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_lcid", - "displayName": "Microsoft PowerPoint LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft powerpoint.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app", - "displayName": "Microsoft Remote Desktop (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_application id", - "displayName": "Microsoft Remote Desktop Application ID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_lcid", - "displayName": "Microsoft Remote Desktop LCID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver", - "displayName": "Update channel override (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft remote desktop.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app", - "displayName": "Microsoft Teams (work or school).app", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_application id", - "displayName": "Microsoft Teams (work or school) Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_lcid", - "displayName": "Microsoft Teams (work or school) LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams (work or school).app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app", - "displayName": "Microsoft Teams classic", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_application id", - "displayName": "ApplicationsSystem//Applications/Microsoft Teams classic.app/Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_lcid", - "displayName": "Microsoft Teams classic LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams classic.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app", - "displayName": "Microsoft Teams (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_application id", - "displayName": "Microsoft Teams Application ID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_lcid", - "displayName": "Microsoft Teams LCID (Deprecated)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver", - "displayName": "Update channel override (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft teams.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app", - "displayName": "Microsoft Word", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_application id", - "displayName": "Microsoft Word Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_lcid", - "displayName": "Microsoft Word LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_microsoft word.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app", - "displayName": "OneDrive", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_application id", - "displayName": "OneDrive Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_lcid", - "displayName": "OneDrive LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_onedrive.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app", - "displayName": "Skype for Business", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_application id", - "displayName": "Skype for Business Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_lcid", - "displayName": "Skype for Business LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_skype for business.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app", - "displayName": "Windows App", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_application id", - "displayName": "Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_channelname", - "displayName": "Channel Name", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_lcid", - "displayName": "LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver", - "displayName": "Manifest Server", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_applications_windows app.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app", - "displayName": "Microsoft Auto Update", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_application id", - "displayName": "Microsoft AutoUpdate Application ID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_channelname", - "displayName": "Channel Name (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_channelname_2", - "displayName": "Beta Channel", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_lcid", - "displayName": "Microsoft AutoUpdate LCID", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver", - "displayName": "Update channel override", - "options": [ - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver_2", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_applicationssystem_library_application support_microsoft_mau2.0_microsoft autoupdate.app_manifestserver_3", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_askbeforecloseenabled", - "displayName": "Get user confirmation before closing a browser window with multiple tabs", - "options": [ - { - "id": "com.apple.managedclient.preferences_askbeforecloseenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_askbeforecloseenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_audiocaptureallowed", - "displayName": "Allow or block audio capture", - "options": [ - { - "id": "com.apple.managedclient.preferences_audiocaptureallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_audiocaptureallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_audiocaptureallowedurls", - "displayName": "Sites that can access audio capture devices without requesting permission", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_audiosandboxenabled", - "displayName": "Allow the audio sandbox to run", - "options": [ - { - "id": "com.apple.managedclient.preferences_audiosandboxenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_audiosandboxenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_authnegotiatedelegateallowlist", - "displayName": "Specifies a list of servers that Microsoft Edge can delegate user credentials to", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_authschemes", - "displayName": "Supported authentication schemes", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_authserverallowlist", - "displayName": "Configure list of allowed authentication servers", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_autodiscardsleepingtabsenabled", - "displayName": "Configure auto discard sleeping tabs", - "options": [ - { - "id": "com.apple.managedclient.preferences_autodiscardsleepingtabsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autodiscardsleepingtabsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_autofilladdressenabled", - "displayName": "Enable AutoFill for addresses", - "options": [ - { - "id": "com.apple.managedclient.preferences_autofilladdressenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autofilladdressenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_autofillcreditcardenabled", - "displayName": "Enable AutoFill for credit cards", - "options": [ - { - "id": "com.apple.managedclient.preferences_autofillcreditcardenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autofillcreditcardenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_autofillmembershipsenabled", - "displayName": "Save and fill memberships", - "options": [ - { - "id": "com.apple.managedclient.preferences_autofillmembershipsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autofillmembershipsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_autoimportatfirstrun", - "displayName": "Automatically import another browser's data and settings at first run", - "options": [ - { - "id": "com.apple.managedclient.preferences_autoimportatfirstrun_0", - "displayName": "Automatically imports all supported datatypes and settings from the default browser", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autoimportatfirstrun_1", - "displayName": "Automatically imports all supported datatypes and settings from Internet Explorer", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autoimportatfirstrun_2", - "displayName": "Automatically imports all supported datatypes and settings from Google Chrome", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autoimportatfirstrun_3", - "displayName": "Automatically imports all supported datatypes and settings from Safari", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autoimportatfirstrun_4", - "displayName": "Disables automatic import, and the import section of the first-run experience is skipped", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autoimportatfirstrun_5", - "displayName": "Automatically imports all supported datatypes and settings from Mozilla Firefox", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_autolaunchprotocolscomponentenabled", - "displayName": "AutoLaunch Protocols Component Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_autolaunchprotocolscomponentenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autolaunchprotocolscomponentenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_automaticallydownloadexternalcontent", - "displayName": "Download embedded images", - "options": [ - { - "id": "com.apple.managedclient.preferences_automaticallydownloadexternalcontent_0", - "displayName": "Never download images", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_automaticallydownloadexternalcontent_1", - "displayName": "Automatically download images from users in the address book", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_automaticallydownloadexternalcontent_2", - "displayName": "Always download images regardless of sender", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_automaticdefinitionupdateenabled", - "displayName": "Automatic security intelligence updates", - "options": [ - { - "id": "com.apple.managedclient.preferences_automaticdefinitionupdateenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_automaticdefinitionupdateenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_automaticdownloadsallowedforurls", - "displayName": "Allow multiple automatic downloads in quick succession on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_automaticdownloadsblockedforurls", - "displayName": "Block multiple automatic downloads in quick succession on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_automatichttpsdefault", - "displayName": "Configure Automatic HTTPS", - "options": [ - { - "id": "com.apple.managedclient.preferences_automatichttpsdefault_0", - "displayName": "Automatic HTTPS functionality is disabled.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_automatichttpsdefault_1", - "displayName": "(Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_automatichttpsdefault_2", - "displayName": "All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_automaticsamplesubmission", - "displayName": "Enable / disable automatic sample submissions", - "options": [ - { - "id": "com.apple.managedclient.preferences_automaticsamplesubmission_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_automaticsamplesubmission_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_automaticsamplesubmissionconsent", - "displayName": "Automatic sample submission Consent", - "options": [ - { - "id": "com.apple.managedclient.preferences_automaticsamplesubmissionconsent_0", - "displayName": "none", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_automaticsamplesubmissionconsent_1", - "displayName": "safe", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_automaticsamplesubmissionconsent_2", - "displayName": "all", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_automaticuploadbandwidthpercentage", - "displayName": "Automatic upload bandwidth percentage", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_autoopenallowedforurls", - "displayName": "URLs where AutoOpenFileTypes can apply", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_autoopenfiletypes", - "displayName": "List of file types that should be automatically opened on download", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_autoplayallowed", - "displayName": "Allow media autoplay for websites", - "options": [ - { - "id": "com.apple.managedclient.preferences_autoplayallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_autoplayallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_autoplayallowlist", - "displayName": "Allow media autoplay on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_autoselectcertificateforurls", - "displayName": "Automatically select client certificates for these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_backgroundtemplatelistupdatesenabled", - "displayName": "Enables background updates to the list of available templates for Collections and other features that use templates", - "options": [ - { - "id": "com.apple.managedclient.preferences_backgroundtemplatelistupdatesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_backgroundtemplatelistupdatesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_basicauthoverhttpenabled", - "displayName": "Allow Basic authentication for HTTP", - "options": [ - { - "id": "com.apple.managedclient.preferences_basicauthoverhttpenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_basicauthoverhttpenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_behaviormonitoring", - "displayName": "Behavior Monitoring", - "options": [ - { - "id": "com.apple.managedclient.preferences_behaviormonitoring_0", - "displayName": "enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_behaviormonitoring_1", - "displayName": "disabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_bingadssuppression", - "displayName": "Block all ads on Bing search results", - "options": [ - { - "id": "com.apple.managedclient.preferences_bingadssuppression_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_bingadssuppression_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_blockexternalextensions", - "displayName": "Blocks external extensions from being installed", - "options": [ - { - "id": "com.apple.managedclient.preferences_blockexternalextensions_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_blockexternalextensions_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_blockexternalsync", - "displayName": "Block external sync", - "options": [ - { - "id": "com.apple.managedclient.preferences_blockexternalsync_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_blockexternalsync_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_blockthirdpartycookies", - "displayName": "Block third party cookies", - "options": [ - { - "id": "com.apple.managedclient.preferences_blockthirdpartycookies_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_blockthirdpartycookies_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_blocktruncatedcookies", - "displayName": "Block truncated cookies", - "options": [ - { - "id": "com.apple.managedclient.preferences_blocktruncatedcookies_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_blocktruncatedcookies_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_browseraddprofileenabled", - "displayName": "Enable profile creation from the Identity flyout menu or the Settings page", - "options": [ - { - "id": "com.apple.managedclient.preferences_browseraddprofileenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_browseraddprofileenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_browserguestmodeenabled", - "displayName": "Enable guest mode", - "options": [ - { - "id": "com.apple.managedclient.preferences_browserguestmodeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_browserguestmodeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_browsernetworktimequeriesenabled", - "displayName": "Allow queries to a Browser Network Time service", - "options": [ - { - "id": "com.apple.managedclient.preferences_browsernetworktimequeriesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_browsernetworktimequeriesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_browsersignin", - "displayName": "Browser sign-in settings", - "options": [ - { - "id": "com.apple.managedclient.preferences_browsersignin_0", - "displayName": "Disable browser sign-in", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_browsersignin_1", - "displayName": "Enable browser sign-in", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_browsersignin_2", - "displayName": "Force users to sign-in to use the browser", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_builtincertificateverifierenabled", - "displayName": "Determines whether the built-in certificate verifier will be used to verify server certificates", - "options": [ - { - "id": "com.apple.managedclient.preferences_builtincertificateverifierenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_builtincertificateverifierenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_builtindnsclientenabled", - "displayName": "Use built-in DNS client", - "options": [ - { - "id": "com.apple.managedclient.preferences_builtindnsclientenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_builtindnsclientenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_calendarfirstdayofweek", - "displayName": "Specify first day of the week", - "options": [ - { - "id": "com.apple.managedclient.preferences_calendarfirstdayofweek_0", - "displayName": "Sunday", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_calendarfirstdayofweek_1", - "displayName": "Monday", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_calendarfirstdayofweek_2", - "displayName": "Tuesday", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_calendarfirstdayofweek_3", - "displayName": "Wednesday", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_calendarfirstdayofweek_4", - "displayName": "Thursday", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_calendarfirstdayofweek_5", - "displayName": "Friday", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_calendarfirstdayofweek_6", - "displayName": "Saturday", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_certificatetransparencyenforcementdisabledforcas", - "displayName": "Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_certificatetransparencyenforcementdisabledforlegacycas", - "displayName": "Disable Certificate Transparency enforcement for a list of legacy certificate authorities", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_certificatetransparencyenforcementdisabledforurls", - "displayName": "Disable Certificate Transparency enforcement for specific URLs", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_channelname", - "displayName": "Update channel", - "options": [ - { - "id": "com.apple.managedclient.preferences_channelname_0", - "displayName": "Current Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_channelname_1", - "displayName": "Current Channel (Preview)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_channelname_2", - "displayName": "Current Channel (Deferred)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_channelname_3", - "displayName": "Beta Channel", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_channelname_4", - "displayName": "Current Channel (Monthly)", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_checkfordefinitionsupdate", - "displayName": "Check for definitions update", - "options": [ - { - "id": "com.apple.managedclient.preferences_checkfordefinitionsupdate_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_checkfordefinitionsupdate_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_clearbrowsingdataonexit", - "displayName": "Clear browsing data when Microsoft Edge closes", - "options": [ - { - "id": "com.apple.managedclient.preferences_clearbrowsingdataonexit_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_clearbrowsingdataonexit_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_clearcachedimagesandfilesonexit", - "displayName": "Clear cached images and files when Microsoft Edge closes", - "options": [ - { - "id": "com.apple.managedclient.preferences_clearcachedimagesandfilesonexit_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_clearcachedimagesandfilesonexit_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_clipboardallowedforurls", - "displayName": "Allow clipboard use on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_clipboardblockedforurls", - "displayName": "Block clipboard use on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_cloudblocklevel", - "displayName": "Cloud Block Level", - "options": [ - { - "id": "com.apple.managedclient.preferences_cloudblocklevel_0", - "displayName": "normal", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_cloudblocklevel_1", - "displayName": "moderate", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_cloudblocklevel_2", - "displayName": "high", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_cloudblocklevel_3", - "displayName": "high_plus", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_cloudblocklevel_4", - "displayName": "zero_tolerance", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_collectionsservicesandexportsblocklist", - "displayName": "Block access to a specified list of services and export targets in Collections", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_commandlineflagsecuritywarningsenabled", - "displayName": "Enable security warnings for command-line flags", - "options": [ - { - "id": "com.apple.managedclient.preferences_commandlineflagsecuritywarningsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_commandlineflagsecuritywarningsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_componentupdatesenabled", - "displayName": "Enable component updates in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_componentupdatesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_componentupdatesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_composeinlineenabled", - "displayName": "Compose is enabled for writing on the web", - "options": [ - { - "id": "com.apple.managedclient.preferences_composeinlineenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_composeinlineenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_compressiondictionarytransportenabled", - "displayName": "Enable compression dictionary transport support", - "options": [ - { - "id": "com.apple.managedclient.preferences_compressiondictionarytransportenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_compressiondictionarytransportenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_configuredonottrack", - "displayName": "Configure Do Not Track", - "options": [ - { - "id": "com.apple.managedclient.preferences_configuredonottrack_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_configuredonottrack_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_configurefriendlyurlformat", - "displayName": "Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users", - "options": [ - { - "id": "com.apple.managedclient.preferences_configurefriendlyurlformat_0", - "displayName": "The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_configurefriendlyurlformat_1", - "displayName": "Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_configurefriendlyurlformat_2", - "displayName": "Coming soon. If set, behaves the same as 'Plain URL'.", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_configureonlinetexttospeech", - "displayName": "Configure Online Text To Speech", - "options": [ - { - "id": "com.apple.managedclient.preferences_configureonlinetexttospeech_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_configureonlinetexttospeech_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_configureshare", - "displayName": "Configure the Share experience", - "options": [ - { - "id": "com.apple.managedclient.preferences_configureshare_0", - "displayName": "Allow using the Share experience", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_configureshare_1", - "displayName": "Don't allow using the Share experience", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_consumerexperience", - "displayName": "Control sign-in to consumer version", - "options": [ - { - "id": "com.apple.managedclient.preferences_consumerexperience_0", - "displayName": "enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_consumerexperience_1", - "displayName": "disabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_controldefaultstateofallowextensionfromotherstoressettingenabled", - "displayName": "Configure default state of Allow extensions from other stores setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_controldefaultstateofallowextensionfromotherstoressettingenabled_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_controldefaultstateofallowextensionfromotherstoressettingenabled_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_cookiesallowedforurls", - "displayName": "Allow cookies on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_cookiesblockedforurls", - "displayName": "Block cookies on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_cookiessessiononlyforurls", - "displayName": "Limit cookies from specific websites to the current session", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_copilotpagecontext", - "displayName": "Control Copilot access to page context for Microsoft Entra ID profiles", - "options": [ - { - "id": "com.apple.managedclient.preferences_copilotpagecontext_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_copilotpagecontext_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_corsnonwildcardrequestheaderssupport", - "displayName": "CORS non-wildcard request header support enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_corsnonwildcardrequestheaderssupport_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_corsnonwildcardrequestheaderssupport_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_csscustomstatedeprecatedsyntaxenabled", - "displayName": "Controls whether the deprecated :--foo syntax for CSS custom state is enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_csscustomstatedeprecatedsyntaxenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_csscustomstatedeprecatedsyntaxenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_customhelplink", - "displayName": "Specify custom help link", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_dailyconfiguration", - "displayName": "Daily and Hourly quick scan configuration", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_dailyconfiguration_interval", - "displayName": "Start time", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_dailyconfiguration_timeofday", - "displayName": "Time of day", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_datalossprevention", - "displayName": "Use Data Loss Prevention", - "options": [ - { - "id": "com.apple.managedclient.preferences_datalossprevention_0", - "displayName": "enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_datalossprevention_1", - "displayName": "disabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_dataurlinsvguseenabled", - "displayName": "Data URL support for SVGUseElement", - "options": [ - { - "id": "com.apple.managedclient.preferences_dataurlinsvguseenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_dataurlinsvguseenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultautomaticdownloadssetting", - "displayName": "Default automatic downloads setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultautomaticdownloadssetting_0", - "displayName": "Allow all websites to perform automatic downloads", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultautomaticdownloadssetting_1", - "displayName": "Don't allow any website to perform automatic downloads", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultbrowsersettingenabled", - "displayName": "Set Microsoft Edge as default browser", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultbrowsersettingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultbrowsersettingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultclipboardsetting", - "displayName": "Default clipboard site permission", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultclipboardsetting_0", - "displayName": "Do not allow any site to use the clipboard site permission", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultclipboardsetting_1", - "displayName": "Allow sites to ask the user to grant the clipboard site permission", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultcookiessetting", - "displayName": "Configure cookies", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultcookiessetting_0", - "displayName": "Let all sites create cookies", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultcookiessetting_1", - "displayName": "Don't let any site create cookies", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultcookiessetting_2", - "displayName": "Keep cookies for the duration of the session", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultemailaddressordomain", - "displayName": "Default domain name", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultfilesystemreadguardsetting", - "displayName": "Control use of the File System API for reading", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultfilesystemreadguardsetting_0", - "displayName": "Don't allow any site to request read access to files and directories via the File System API", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultfilesystemreadguardsetting_1", - "displayName": "Allow sites to ask the user to grant read access to files and directories via the File System API", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultfilesystemwriteguardsetting", - "displayName": "Control use of the File System API for writing", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultfilesystemwriteguardsetting_0", - "displayName": "Don't allow any site to request write access to files and directories", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultfilesystemwriteguardsetting_1", - "displayName": "Allow sites to ask the user to grant write access to files and directories", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultgeolocationsetting", - "displayName": "Default geolocation setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultgeolocationsetting_0", - "displayName": "Allow sites to track users' physical location", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultgeolocationsetting_1", - "displayName": "Don't allow any site to track users' physical location", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultgeolocationsetting_2", - "displayName": "Ask whenever a site wants to track users' physical location", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultimagessetting", - "displayName": "Default images setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultimagessetting_0", - "displayName": "Allow all sites to show all images", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultimagessetting_1", - "displayName": "Don't allow any site to show images", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultinsecurecontentsetting", - "displayName": "Control use of insecure content exceptions", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultinsecurecontentsetting_0", - "displayName": "Do not allow any site to load mixed content", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultinsecurecontentsetting_1", - "displayName": "Allow users to add exceptions to allow mixed content", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultjavascriptjitsetting", - "displayName": "Control use of JavaScript JIT", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultjavascriptjitsetting_0", - "displayName": "Allow any site to run JavaScript JIT", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultjavascriptjitsetting_1", - "displayName": "Do not allow any site to run JavaScript JIT", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultjavascriptsetting", - "displayName": "Default JavaScript setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultjavascriptsetting_0", - "displayName": "Allow all sites to run JavaScript", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultjavascriptsetting_1", - "displayName": "Don't allow any site to run JavaScript", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultnotificationssetting", - "displayName": "Default notification setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultnotificationssetting_0", - "displayName": "Allow sites to show desktop notifications", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultnotificationssetting_1", - "displayName": "Don't allow any site to show desktop notifications", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultnotificationssetting_2", - "displayName": "Ask every time a site wants to show desktop notifications", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultpluginssetting", - "displayName": "Default Adobe Flash setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultpluginssetting_0", - "displayName": "Block the Adobe Flash plugin", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultpluginssetting_1", - "displayName": "Click to play", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultpopupssetting", - "displayName": "Default pop-up window setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultpopupssetting_0", - "displayName": "Allow all sites to show pop-ups", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultpopupssetting_1", - "displayName": "Do not allow any site to show popups", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultprinterselection", - "displayName": "Default printer selection rules", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchprovidercontextmenuaccessallowed", - "displayName": "Allow default search provider context menu search access", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultsearchprovidercontextmenuaccessallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchprovidercontextmenuaccessallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchproviderenabled", - "displayName": "Enable the default search provider", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultsearchproviderenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchproviderenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchproviderencodings", - "displayName": "Default search provider encodings", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchproviderimageurl", - "displayName": "Specifies the search-by-image feature for the default search provider", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchproviderimageurlpostparams", - "displayName": "Parameters for an image URL that uses POST", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchproviderkeyword", - "displayName": "Default search provider keyword", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchprovidername", - "displayName": "Default search provider name", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchprovidersearchurl", - "displayName": "Default search provider search URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsearchprovidersuggesturl", - "displayName": "Default search provider URL for suggestions", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsensorssetting", - "displayName": "Default sensors setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultsensorssetting_0", - "displayName": "Allow sites to access sensors", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultsensorssetting_1", - "displayName": "Do not allow any site to access sensors", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultserialguardsetting", - "displayName": "Control use of the Serial API", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultserialguardsetting_0", - "displayName": "Do not allow any site to request access to serial ports via the Serial API", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultserialguardsetting_1", - "displayName": "Allow sites to ask for user permission to access a serial port", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultshareadditionalosregionsetting", - "displayName": "Set the default \"share additional operating system region\" setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultshareadditionalosregionsetting_0", - "displayName": "Limited", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultshareadditionalosregionsetting_1", - "displayName": "Always share the OS Regional format", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultshareadditionalosregionsetting_2", - "displayName": "Never share the OS Regional format", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultstolocalopensave", - "displayName": "Default to local files for open/save", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultstolocalopensave_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultstolocalopensave_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultthirdpartystoragepartitioningsetting", - "displayName": "Default setting for third-party storage partitioning", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultthirdpartystoragepartitioningsetting_0", - "displayName": "Let third-party storage partitioning to be enabled.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultthirdpartystoragepartitioningsetting_1", - "displayName": "Block third-party storage partitioning from being enabled.", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultweatherlocation", - "displayName": "Default weather location", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_defaultwebbluetoothguardsetting", - "displayName": "Control use of the Web Bluetooth API", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultwebbluetoothguardsetting_0", - "displayName": "Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultwebbluetoothguardsetting_1", - "displayName": "Allow sites to ask the user to grant access to a nearby Bluetooth device", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultwebhidguardsetting", - "displayName": "Control use of the WebHID API", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultwebhidguardsetting_0", - "displayName": "Do not allow any site to request access to HID devices via the WebHID API", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultwebhidguardsetting_1", - "displayName": "Allow sites to ask the user to grant access to a HID device", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultwebusbguardsetting", - "displayName": "Control use of the WebUSB API", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultwebusbguardsetting_0", - "displayName": "Do not allow any site to request access to USB devices via the WebUSB API", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultwebusbguardsetting_1", - "displayName": "Allow sites to ask the user to grant access to a connected USB device", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_defaultwindowmanagementsetting", - "displayName": "Default Window Management permission setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_defaultwindowmanagementsetting_0", - "displayName": "Denies the Window Management permission on all sites by default", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_defaultwindowmanagementsetting_1", - "displayName": "Ask every time a site wants obtain the Window Management permission", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_definitionupdatedue", - "displayName": "Security intelligence update due (in days)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_definitionupdatesinterval", - "displayName": "Security intelligence update interval (in seconds)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_developertoolsavailability", - "displayName": "Control where developer tools can be used", - "options": [ - { - "id": "com.apple.managedclient.preferences_developertoolsavailability_0", - "displayName": "Block the developer tools on extensions installed by enterprise policy, allow in other contexts", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_developertoolsavailability_1", - "displayName": "Allow using the developer tools", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_developertoolsavailability_2", - "displayName": "Don't allow using the developer tools", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_diagnosticdata", - "displayName": "Send required and optional diagnostic data about browser usage", - "options": [ - { - "id": "com.apple.managedclient.preferences_diagnosticdata_0", - "displayName": "Off (Not recommended)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_diagnosticdata_1", - "displayName": "Required data", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_diagnosticdata_2", - "displayName": "Optional data", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_diagnosticdatatypepreference", - "displayName": "Diagnostic data level", - "options": [ - { - "id": "com.apple.managedclient.preferences_diagnosticdatatypepreference_0", - "displayName": "Required data only", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_diagnosticdatatypepreference_1", - "displayName": "Required and Optional data", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_diagnosticdatatypepreference_2", - "displayName": "Do not send data", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_diagnosticlevel", - "displayName": "Diagnostic collection level", - "options": [ - { - "id": "com.apple.managedclient.preferences_diagnosticlevel_0", - "displayName": "optional", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_diagnosticlevel_1", - "displayName": "required", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disable3dapis", - "displayName": "Disable support for 3D graphics APIs", - "options": [ - { - "id": "com.apple.managedclient.preferences_disable3dapis_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disable3dapis_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableauthnegotiatecnamelookup", - "displayName": "Disable CNAME lookup when negotiating Kerberos authentication", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableauthnegotiatecnamelookup_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableauthnegotiatecnamelookup_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableautoconfig", - "displayName": "Disable automatic sign in", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableautoconfig_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableautoconfig_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablecloudfonts", - "displayName": "Disable cloud fonts", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablecloudfonts_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablecloudfonts_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablednsovertcpparsing", - "displayName": "Disable DNS over TCP parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablednsovertcpparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablednsovertcpparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablednsparsing", - "displayName": "Disable DNS parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablednsparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablednsparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disabledonotforward", - "displayName": "Disable 'Do Not Forward' options", - "options": [ - { - "id": "com.apple.managedclient.preferences_disabledonotforward_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disabledonotforward_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableencryptonly", - "displayName": "Disable Microsoft 365 encryption options", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableencryptonly_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableencryptonly_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableexport", - "displayName": "Disable export to OLM files", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableexport_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableexport_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableftpparsing", - "displayName": "Disable FTP parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableftpparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableftpparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablehttpparsing", - "displayName": "Disable HTTP parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablehttpparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablehttpparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablehydrationtoast", - "displayName": "Disable download toasts", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablehydrationtoast_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablehydrationtoast_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableicmpparsing", - "displayName": "Disable ICMP parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableicmpparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableicmpparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableimport", - "displayName": "Disable import from OLM and PST files", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableimport_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableimport_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableinboundconnectionfiltering", - "displayName": "Disable inbound connection filtering", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableinboundconnectionfiltering_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableinboundconnectionfiltering_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableinsidercheckbox", - "displayName": "Disable Office Insider membership", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableinsidercheckbox_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableinsidercheckbox_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablepersonalsync", - "displayName": "Disable personal accounts", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablepersonalsync_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablepersonalsync_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablerdpparsing", - "displayName": "Disable RDP parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablerdpparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablerdpparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablerespondtomeetingwithoutresponse", - "displayName": "Disable 'Do not send response'", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablerespondtomeetingwithoutresponse_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablerespondtomeetingwithoutresponse_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablescreenshots", - "displayName": "Disable taking screenshots", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablescreenshots_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablescreenshots_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablesignatures", - "displayName": "Disable email signatures", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablesignatures_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablesignatures_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableskypemeeting", - "displayName": "Disable Skype for Business meeting support", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableskypemeeting_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableskypemeeting_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablesmimecompose", - "displayName": "Disable S/MIME", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablesmimecompose_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablesmimecompose_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablesmtpparsing", - "displayName": "Disable SMTP parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablesmtpparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablesmtpparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablesshparsing", - "displayName": "Disable SSH parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablesshparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablesshparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disableteamsmeeting", - "displayName": "Disable Microsoft Teams meeting support", - "options": [ - { - "id": "com.apple.managedclient.preferences_disableteamsmeeting_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disableteamsmeeting_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disabletlsparsing", - "displayName": "Disable TLS parsing", - "options": [ - { - "id": "com.apple.managedclient.preferences_disabletlsparsing_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disabletlsparsing_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disabletutorial", - "displayName": "Disable tutorial", - "options": [ - { - "id": "com.apple.managedclient.preferences_disabletutorial_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disabletutorial_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablevisualbasicexternaldylibs", - "displayName": "Prevent Visual Basic macros from using external dynamic libraries", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablevisualbasicexternaldylibs_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablevisualbasicexternaldylibs_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablevisualbasicmacscript", - "displayName": "Prevent Visual Basic macros from using legacy MacScript", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablevisualbasicmacscript_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablevisualbasicmacscript_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disablevisualbasictobindtopopen", - "displayName": "Prevent Visual Basic macros from using pipes to communicate", - "options": [ - { - "id": "com.apple.managedclient.preferences_disablevisualbasictobindtopopen_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_disablevisualbasictobindtopopen_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_disallowedthreatactions", - "displayName": "Disallowed threat actions", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_diskcachedir", - "displayName": "Set disk cache directory", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_diskcachesize", - "displayName": "Set disk cache size, in bytes", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_dnsinterceptionchecksenabled", - "displayName": "DNS interception checks enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_dnsinterceptionchecksenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_dnsinterceptionchecksenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_dnsoverhttpsmode", - "displayName": "Control the mode of DNS-over-HTTPS", - "options": [ - { - "id": "com.apple.managedclient.preferences_dnsoverhttpsmode_0", - "displayName": "Enable DNS-over-HTTPS with insecure fallback", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_dnsoverhttpsmode_1", - "displayName": "Disable DNS-over-HTTPS", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_dnsoverhttpsmode_2", - "displayName": "Enable DNS-over-HTTPS without insecure fallback", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_dnsoverhttpstemplates", - "displayName": "Specify URI template of desired DNS-over-HTTPS resolver", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_doubleclickclosetabenabled", - "displayName": "Double Click feature in Microsoft Edge enabled (only available in China)", - "options": [ - { - "id": "com.apple.managedclient.preferences_doubleclickclosetabenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_doubleclickclosetabenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_downloadbandwidthlimited", - "displayName": "Set maximum download throughput", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_downloaddirectory", - "displayName": "Set download directory", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_downloadrestrictions", - "displayName": "Allow download restrictions", - "options": [ - { - "id": "com.apple.managedclient.preferences_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_downloadrestrictions_1", - "displayName": "Block dangerous downloads", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_downloadrestrictions_2", - "displayName": "Block potentially dangerous downloads", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_downloadrestrictions_4", - "displayName": "Block malicious downloads", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_earlypreview", - "displayName": "Enable / disable early preview", - "options": [ - { - "id": "com.apple.managedclient.preferences_earlypreview_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_earlypreview_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgeassetdeliveryserviceenabled", - "displayName": "Allow features to download assets from the Asset Delivery Service", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgeassetdeliveryserviceenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgeassetdeliveryserviceenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgecollectionsenabled", - "displayName": "Enable the Collections feature", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgecollectionsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgecollectionsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgedisabledialprotocolforcastdiscovery", - "displayName": "Disable DIAL protocol for cast device discovery", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgedisabledialprotocolforcastdiscovery_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgedisabledialprotocolforcastdiscovery_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgeedropenabled", - "displayName": "Enable Drop feature in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgeedropenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgeedropenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgeentracopilotpagecontext", - "displayName": "Control access to page content for Entra ID Profiles accessing Microsoft Copilot with Enterprise Data Protection (EDP) from the Microsoft Edge sidebar", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgeentracopilotpagecontext_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgeentracopilotpagecontext_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgemanagementextensionsfeedbackenabled", - "displayName": "Microsoft Edge management extensions feedback enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgemanagementextensionsfeedbackenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgemanagementextensionsfeedbackenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgemanagementpolicyoverridesplatformpolicy", - "displayName": "Microsoft Edge management service policy overrides platform policy.", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgemanagementpolicyoverridesplatformpolicy_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgemanagementpolicyoverridesplatformpolicy_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgemanagementuserpolicyoverridescloudmachinepolicy", - "displayName": "Allow cloud-based Microsoft Edge management service user policies to override local user policies.", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgemanagementuserpolicyoverridescloudmachinepolicy_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgemanagementuserpolicyoverridescloudmachinepolicy_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgeshoppingassistantenabled", - "displayName": "Shopping in Microsoft Edge Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgeshoppingassistantenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgeshoppingassistantenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgesidebarappurlhostallowlist", - "displayName": "Allow specific apps to be opened in Microsoft Edge sidebar", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_edgesidebarappurlhostblocklist", - "displayName": "Control which apps cannot be opened in Microsoft Edge sidebar", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_edgesidebarcustomizeenabled", - "displayName": "Enable sidebar customize", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgesidebarcustomizeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgesidebarcustomizeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgewalletetreeenabled", - "displayName": "Edge Wallet E-Tree Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgewalletetreeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgewalletetreeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_edgeworkspacesenabled", - "displayName": "Enable Workspaces", - "options": [ - { - "id": "com.apple.managedclient.preferences_edgeworkspacesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_edgeworkspacesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_editfavoritesenabled", - "displayName": "Allows users to edit favorites", - "options": [ - { - "id": "com.apple.managedclient.preferences_editfavoritesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_editfavoritesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_efficiencymode", - "displayName": "Configure when efficiency mode should become active", - "options": [ - { - "id": "com.apple.managedclient.preferences_efficiencymode_0", - "displayName": "Efficiency mode is always active", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_efficiencymode_1", - "displayName": "Efficiency mode is never active", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_efficiencymode_2", - "displayName": "Efficiency mode is active when the device is unplugged", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_efficiencymode_3", - "displayName": "Efficiency mode is active when the device is unplugged and the battery is low", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_efficiencymode_4", - "displayName": "When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_efficiencymode_5", - "displayName": "When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_efficiencymodeenabled", - "displayName": "Efficiency mode enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_efficiencymodeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_efficiencymodeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_efficiencymodeonpowerenabled", - "displayName": "Enable efficiency mode when the device is connected to a power source", - "options": [ - { - "id": "com.apple.managedclient.preferences_efficiencymodeonpowerenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_efficiencymodeonpowerenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enableallocsiclients", - "displayName": "Enable simultaneous edits for Office apps", - "options": [ - { - "id": "com.apple.managedclient.preferences_enableallocsiclients_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enableallocsiclients_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enableauthnegotiateport", - "displayName": "Include non-standard port in Kerberos SPN", - "options": [ - { - "id": "com.apple.managedclient.preferences_enableauthnegotiateport_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enableauthnegotiateport_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enablebackgroundaccessibilitychecker", - "displayName": "Background accessibility checking", - "options": [ - { - "id": "com.apple.managedclient.preferences_enablebackgroundaccessibilitychecker_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablebackgroundaccessibilitychecker_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enablecheckforupdatesbutton", - "displayName": "Enable check for updates", - "options": [ - { - "id": "com.apple.managedclient.preferences_enablecheckforupdatesbutton_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablecheckforupdatesbutton_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enabled", - "displayName": "Enable / disable cloud delivered protection", - "options": [ - { - "id": "com.apple.managedclient.preferences_enabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enabledeprecatedwebplatformfeatures", - "displayName": "Re-enable deprecated web platform features for a limited time", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_enabledomainactionsdownload", - "displayName": "Enable Domain Actions Download from Microsoft", - "options": [ - { - "id": "com.apple.managedclient.preferences_enabledomainactionsdownload_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enabledomainactionsdownload_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enablefilehashcomputation", - "displayName": "Enable file hash computation", - "options": [ - { - "id": "com.apple.managedclient.preferences_enablefilehashcomputation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablefilehashcomputation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enablemediarouter", - "displayName": "Enable Google Cast", - "options": [ - { - "id": "com.apple.managedclient.preferences_enablemediarouter_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablemediarouter_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enablenewoutlook", - "displayName": "Enable New Outlook", - "options": [ - { - "id": "com.apple.managedclient.preferences_enablenewoutlook_0", - "displayName": "Classic Outlook only", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablenewoutlook_1", - "displayName": "Default to Classic Outlook. Users may switch to New Outlook", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablenewoutlook_2", - "displayName": "Default to New Outlook. Users may revert to Classic Outlook", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablenewoutlook_3", - "displayName": "New Outlook only", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enableodignore", - "displayName": "Ignore named files", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_enableonlinerevocationchecks", - "displayName": "Enable online OCSP/CRL checks", - "options": [ - { - "id": "com.apple.managedclient.preferences_enableonlinerevocationchecks_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enableonlinerevocationchecks_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enablerealtimeprotection", - "displayName": "Enable real-time protection (deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_enablerealtimeprotection_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablerealtimeprotection_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enablesetwarntoblock", - "displayName": "Enable set warn to block", - "options": [ - { - "id": "com.apple.managedclient.preferences_enablesetwarntoblock_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablesetwarntoblock_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enablesha1forlocalanchors", - "displayName": "Allow certificates signed using SHA-1 when issued by local trust anchors", - "options": [ - { - "id": "com.apple.managedclient.preferences_enablesha1forlocalanchors_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enablesha1forlocalanchors_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_encryptedclienthelloenabled", - "displayName": "TLS Encrypted ClientHello Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_encryptedclienthelloenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_encryptedclienthelloenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel", - "displayName": "Enforcement level", - "options": [ - { - "id": "com.apple.managedclient.preferences_enforcementlevel_0", - "displayName": "disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel_1", - "displayName": "audit", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel_2", - "displayName": "block", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel_antivirusengine", - "displayName": "Enforcement level", - "options": [ - { - "id": "com.apple.managedclient.preferences_enforcementlevel_antivirusengine_0", - "displayName": "passive", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel_antivirusengine_1", - "displayName": "on_demand", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel_antivirusengine_2", - "displayName": "real_time", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel_tamperprotection", - "displayName": "Enforcement level", - "options": [ - { - "id": "com.apple.managedclient.preferences_enforcementlevel_tamperprotection_0", - "displayName": "disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel_tamperprotection_1", - "displayName": "audit", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enforcementlevel_tamperprotection_2", - "displayName": "block", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymode", - "displayName": "Enhance the security state in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_enhancesecuritymode_0", - "displayName": "Standard mode", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymode_1", - "displayName": "Balanced mode", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymode_2", - "displayName": "Strict mode", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymode_3", - "displayName": "(Deprecated) Basic mode", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymodebypasslistdomains", - "displayName": "Configure the list of domains for which enhance security mode will not be enforced", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymodeenforcelistdomains", - "displayName": "Configure the list of domains for which enhance security mode will always be enforced", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymodeindicatoruienabled", - "displayName": "Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_enhancesecuritymodeindicatoruienabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymodeindicatoruienabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymodeoptoutuxenabled", - "displayName": "Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_enhancesecuritymodeoptoutuxenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enhancesecuritymodeoptoutuxenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_enterprisehardwareplatformapienabled", - "displayName": "Allow managed extensions to use the Enterprise Hardware Platform API", - "options": [ - { - "id": "com.apple.managedclient.preferences_enterprisehardwareplatformapienabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_enterprisehardwareplatformapienabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_exclusions", - "displayName": "Scan exclusions", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_$type", - "displayName": "Type", - "options": [ - { - "id": "com.apple.managedclient.preferences_exclusions_item_$type_0", - "displayName": "Path", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_$type_1", - "displayName": "File extension", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_$type_2", - "displayName": "File name", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_args_tamperprotection", - "displayName": "Process's arguments", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_extension", - "displayName": "File extension", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_isdirectory", - "displayName": "Directory (selected) or file (not selected)", - "options": [ - { - "id": "com.apple.managedclient.preferences_exclusions_item_isdirectory_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_isdirectory_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_name", - "displayName": "Name", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_path", - "displayName": "Path", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_path_tamperprotection", - "displayName": "Process path", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_signingid_tamperprotection", - "displayName": "Process's Signing Identifier", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_item_teamid_tamperprotection", - "displayName": "Process's TeamIdentifier", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusions_tamperprotection", - "displayName": "Process exclusions", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_exclusionsmergepolicy", - "displayName": "Exclusions merge", - "options": [ - { - "id": "com.apple.managedclient.preferences_exclusionsmergepolicy_0", - "displayName": "merge", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_exclusionsmergepolicy_1", - "displayName": "admin_only", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_exemptdomainfiletypepairsfromfiletypedownloadwarnings", - "displayName": "Disable download file type extension-based warnings for specified file types on domains", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service", - "options": [ - { - "id": "com.apple.managedclient.preferences_experimentationandconfigurationservicecontrol_0", - "displayName": "Retrieve configurations and experiments", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_experimentationandconfigurationservicecontrol_1", - "displayName": "Retrieve configurations only", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_experimentationandconfigurationservicecontrol_2", - "displayName": "Disable communication with the Experimentation and Configuration Service", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_explicitlyallowednetworkports", - "displayName": "Explicitly allowed network ports", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_extendedlogging", - "displayName": "Enable extended logging", - "options": [ - { - "id": "com.apple.managedclient.preferences_extendedlogging_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_extendedlogging_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_extensionallowedtypes", - "displayName": "Configure allowed extension types", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_extensiondevelopermodesettings", - "displayName": "Control the availability of developer mode on extensions page", - "options": [ - { - "id": "com.apple.managedclient.preferences_extensiondevelopermodesettings_0", - "displayName": "Allow the usage of developer mode on extensions page", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_extensiondevelopermodesettings_1", - "displayName": "Do not allow the usage of developer mode on extensions page", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_extensionextendedbackgroundlifetimeforportconnectionstourls", - "displayName": "Configure a list of origins that grant an extended background lifetime to connecting extensions.", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_extensioninstallallowlist", - "displayName": "Allow specific extensions to be installed", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_extensioninstallblocklist", - "displayName": "Control which extensions cannot be installed", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_extensioninstallforcelist", - "displayName": "Control which extensions are installed silently", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_extensioninstallsources", - "displayName": "Configure extension and user script install sources", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_extensioninstalltypeblocklist", - "displayName": "Blocklist for extension install types", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_extensionmanifestv2availability", - "displayName": "Control Manifest v2 extension availability", - "options": [ - { - "id": "com.apple.managedclient.preferences_extensionmanifestv2availability_0", - "displayName": "Default browser behavior", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_extensionmanifestv2availability_1", - "displayName": "Manifest v2 is disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_extensionmanifestv2availability_2", - "displayName": "Manifest v2 is enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_extensionmanifestv2availability_3", - "displayName": "Manifest v2 is enabled for forced extensions only", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_extensionsperformancedetectorenabled", - "displayName": "Extensions Performance Detector enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_extensionsperformancedetectorenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_extensionsperformancedetectorenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_externalprotocoldialogshowalwaysopencheckbox", - "displayName": "Show an \"Always open\" checkbox in external protocol dialog", - "options": [ - { - "id": "com.apple.managedclient.preferences_externalprotocoldialogshowalwaysopencheckbox_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_externalprotocoldialogshowalwaysopencheckbox_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_familysafetysettingsenabled", - "displayName": "Allow users to configure Family safety", - "options": [ - { - "id": "com.apple.managedclient.preferences_familysafetysettingsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_familysafetysettingsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_favoritesbarenabled", - "displayName": "Enable favorites bar", - "options": [ - { - "id": "com.apple.managedclient.preferences_favoritesbarenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_favoritesbarenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_featureflagoverridescontrol", - "displayName": "Configure users ability to override feature flags", - "options": [ - { - "id": "com.apple.managedclient.preferences_featureflagoverridescontrol_0", - "displayName": "Prevent users from overriding feature flags", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_featureflagoverridescontrol_1", - "displayName": "Allow users to override feature flags", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_featureflagoverridescontrol_2", - "displayName": "Allow users to override feature flags using command line arguments only", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_fetchkeepalivedurationsecondsonshutdown", - "displayName": "Fetch keepalive duration on shutdown", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_fileordirectorypickerwithoutgestureallowedfororigins", - "displayName": "Allow file or directory picker APIs to be called without prior user gesture", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_filesondemandenabled", - "displayName": "Enable Files On-Demand", - "options": [ - { - "id": "com.apple.managedclient.preferences_filesondemandenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_filesondemandenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_filesystemreadaskforurls", - "displayName": "Allow read access via the File System API on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_filesystemreadblockedforurls", - "displayName": "Block read access via the File System API on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_filesystemwriteaskforurls", - "displayName": "Allow write access to files and directories on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_filesystemwriteblockedforurls", - "displayName": "Block write access to files and directories on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_forcebingsafesearch", - "displayName": "Enforce Bing SafeSearch", - "options": [ - { - "id": "com.apple.managedclient.preferences_forcebingsafesearch_0", - "displayName": "Don't configure search restrictions in Bing", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forcebingsafesearch_1", - "displayName": "Configure moderate search restrictions in Bing", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forcebingsafesearch_2", - "displayName": "Configure strict search restrictions in Bing", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_forcecertificatepromptsonmultiplematches", - "displayName": "Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with \"AutoSelectCertificateForUrls\"", - "options": [ - { - "id": "com.apple.managedclient.preferences_forcecertificatepromptsonmultiplematches_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forcecertificatepromptsonmultiplematches_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_forceephemeralprofiles", - "displayName": "Enable use of ephemeral profiles", - "options": [ - { - "id": "com.apple.managedclient.preferences_forceephemeralprofiles_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forceephemeralprofiles_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_forcegooglesafesearch", - "displayName": "Enforce Google SafeSearch", - "options": [ - { - "id": "com.apple.managedclient.preferences_forcegooglesafesearch_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forcegooglesafesearch_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_forcelegacydefaultreferrerpolicy", - "displayName": "Use a default referrer policy of no-referrer-when-downgrade.", - "options": [ - { - "id": "com.apple.managedclient.preferences_forcelegacydefaultreferrerpolicy_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forcelegacydefaultreferrerpolicy_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_forcepermissionpolicyunloaddefaultenabled", - "displayName": "Controls whether unload event handlers can be disabled.", - "options": [ - { - "id": "com.apple.managedclient.preferences_forcepermissionpolicyunloaddefaultenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forcepermissionpolicyunloaddefaultenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_forcesync", - "displayName": "Force synchronization of browser data and do not show the sync consent prompt", - "options": [ - { - "id": "com.apple.managedclient.preferences_forcesync_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forcesync_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_forcesynctypes", - "displayName": "Configure the list of types that are included for synchronization", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_forceyoutuberestrict", - "displayName": "Force minimum YouTube Restricted Mode", - "options": [ - { - "id": "com.apple.managedclient.preferences_forceyoutuberestrict_0", - "displayName": "Do not enforce Restricted Mode on YouTube", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forceyoutuberestrict_1", - "displayName": "Enforce at least Moderate Restricted Mode on YouTube", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_forceyoutuberestrict_2", - "displayName": "Enforce Strict Restricted Mode for YouTube", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_globallyscopehttpauthcacheenabled", - "displayName": "Enable globally scoped HTTP auth cache", - "options": [ - { - "id": "com.apple.managedclient.preferences_globallyscopehttpauthcacheenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_globallyscopehttpauthcacheenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_gotointranetsiteforsinglewordentryinaddressbar", - "displayName": "Force direct intranet site navigation instead of searching on single word entries in the Address Bar", - "options": [ - { - "id": "com.apple.managedclient.preferences_gotointranetsiteforsinglewordentryinaddressbar_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_gotointranetsiteforsinglewordentryinaddressbar_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_groupids", - "displayName": "Group identifier", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_guardagainstappmodification", - "displayName": "Guard against app modification", - "options": [ - { - "id": "com.apple.managedclient.preferences_guardagainstappmodification_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_guardagainstappmodification_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_guidedswitchenabled", - "displayName": "Guided Switch Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_guidedswitchenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_guidedswitchenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_hardwareaccelerationmodeenabled", - "displayName": "Use hardware acceleration when available", - "options": [ - { - "id": "com.apple.managedclient.preferences_hardwareaccelerationmodeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_hardwareaccelerationmodeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_headlessmodeenabled", - "displayName": "Control use of the Headless Mode", - "options": [ - { - "id": "com.apple.managedclient.preferences_headlessmodeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_headlessmodeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_hidedockicon", - "displayName": "Hide dock icon", - "options": [ - { - "id": "com.apple.managedclient.preferences_hidedockicon_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_hidedockicon_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_hidefirstrunexperience", - "displayName": "Hide the First-run experience and splash screen", - "options": [ - { - "id": "com.apple.managedclient.preferences_hidefirstrunexperience_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_hidefirstrunexperience_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_hidefoldersonmycomputerrootinfolderlist", - "displayName": "Hide On My Computer folders", - "options": [ - { - "id": "com.apple.managedclient.preferences_hidefoldersonmycomputerrootinfolderlist_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_hidefoldersonmycomputerrootinfolderlist_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_hidestatusmenuicon", - "displayName": "Show / hide status menu icon", - "options": [ - { - "id": "com.apple.managedclient.preferences_hidestatusmenuicon_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_hidestatusmenuicon_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_homepageisnewtabpage", - "displayName": "Set the new tab page as the home page", - "options": [ - { - "id": "com.apple.managedclient.preferences_homepageisnewtabpage_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_homepageisnewtabpage_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_homepagelocation", - "displayName": "Configure the home page URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_howtocheck", - "displayName": "Enable AutoUpdate", - "options": [ - { - "id": "com.apple.managedclient.preferences_howtocheck_0", - "displayName": "True", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_howtocheck_1", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_howtocheck_2", - "displayName": "Manual Check", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_hstspolicybypasslist", - "displayName": "Configure the list of names that will bypass the HSTS policy check", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_httpallowlist", - "displayName": "HTTP Allowlist", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_hubssidebarenabled", - "displayName": "Show Hubs Sidebar", - "options": [ - { - "id": "com.apple.managedclient.preferences_hubssidebarenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_hubssidebarenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_ignoreexclusions", - "displayName": "Ignore exclusions", - "options": [ - { - "id": "com.apple.managedclient.preferences_ignoreexclusions_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_ignoreexclusions_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_imagesallowedforurls", - "displayName": "Allow images on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_imagesblockedforurls", - "displayName": "Block images on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_importautofillformdata", - "displayName": "Allow importing of autofill form data", - "options": [ - { - "id": "com.apple.managedclient.preferences_importautofillformdata_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importautofillformdata_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importbrowsersettings", - "displayName": "Allow importing of browser settings", - "options": [ - { - "id": "com.apple.managedclient.preferences_importbrowsersettings_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importbrowsersettings_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importcookies", - "displayName": "Allow importing of Cookies", - "options": [ - { - "id": "com.apple.managedclient.preferences_importcookies_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importcookies_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importextensions", - "displayName": "Allow importing of extensions", - "options": [ - { - "id": "com.apple.managedclient.preferences_importextensions_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importextensions_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importfavorites", - "displayName": "Allow importing of favorites", - "options": [ - { - "id": "com.apple.managedclient.preferences_importfavorites_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importfavorites_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importhistory", - "displayName": "Allow importing of browsing history", - "options": [ - { - "id": "com.apple.managedclient.preferences_importhistory_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importhistory_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importhomepage", - "displayName": "Allow importing of home page settings", - "options": [ - { - "id": "com.apple.managedclient.preferences_importhomepage_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importhomepage_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importopentabs", - "displayName": "Allow importing of open tabs", - "options": [ - { - "id": "com.apple.managedclient.preferences_importopentabs_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importopentabs_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importpaymentinfo", - "displayName": "Allow importing of payment info", - "options": [ - { - "id": "com.apple.managedclient.preferences_importpaymentinfo_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importpaymentinfo_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importsavedpasswords", - "displayName": "Allow importing of saved passwords", - "options": [ - { - "id": "com.apple.managedclient.preferences_importsavedpasswords_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importsavedpasswords_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importsearchengine", - "displayName": "Allow importing of search engine settings", - "options": [ - { - "id": "com.apple.managedclient.preferences_importsearchengine_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importsearchengine_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_importshortcuts", - "displayName": "Allow importing of shortcuts", - "options": [ - { - "id": "com.apple.managedclient.preferences_importshortcuts_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_importshortcuts_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_inappsupportenabled", - "displayName": "In-app support Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_inappsupportenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_inappsupportenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_inprivatemodeavailability", - "displayName": "Configure InPrivate mode availability", - "options": [ - { - "id": "com.apple.managedclient.preferences_inprivatemodeavailability_0", - "displayName": "InPrivate mode available", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_inprivatemodeavailability_1", - "displayName": "InPrivate mode disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_inprivatemodeavailability_2", - "displayName": "InPrivate mode forced", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_insecurecontentallowedforurls", - "displayName": "Allow insecure content on specified sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_insecurecontentblockedforurls", - "displayName": "Block insecure content on specified sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_insecureformswarningsenabled", - "displayName": "Enable warnings for insecure forms", - "options": [ - { - "id": "com.apple.managedclient.preferences_insecureformswarningsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_insecureformswarningsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_insecureprivatenetworkrequestsallowed", - "displayName": "Specifies whether to allow websites to make requests to any network endpoint in an insecure manner.", - "options": [ - { - "id": "com.apple.managedclient.preferences_insecureprivatenetworkrequestsallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_insecureprivatenetworkrequestsallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_insecureprivatenetworkrequestsallowedforurls", - "displayName": "Allow the listed sites to make requests to more-private network endpoints from in an insecure manner", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_intensivewakeupthrottlingenabled", - "displayName": "Control the IntensiveWakeUpThrottling feature", - "options": [ - { - "id": "com.apple.managedclient.preferences_intensivewakeupthrottlingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_intensivewakeupthrottlingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_intranetredirectbehavior", - "displayName": "Intranet Redirection Behavior", - "options": [ - { - "id": "com.apple.managedclient.preferences_intranetredirectbehavior_0", - "displayName": "Use default browser behavior.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_intranetredirectbehavior_1", - "displayName": "Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_intranetredirectbehavior_2", - "displayName": "Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_intranetredirectbehavior_3", - "displayName": "Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_isolateorigins", - "displayName": "Enable site isolation for specific origins", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_javascriptallowedforurls", - "displayName": "Allow JavaScript on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_javascriptblockedforurls", - "displayName": "Block JavaScript on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_javascriptjitallowedforsites", - "displayName": "Allow JavaScript to use JIT on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_javascriptjitblockedforsites", - "displayName": "Block JavaScript from using JIT on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_keyboardfocusablescrollersenabled", - "displayName": "Enable keyboard focusable scrollers", - "options": [ - { - "id": "com.apple.managedclient.preferences_keyboardfocusablescrollersenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_keyboardfocusablescrollersenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_kfmblockoptin", - "displayName": "Prevent users from using the Folder Backup feature (Known Folder Move)", - "options": [ - { - "id": "com.apple.managedclient.preferences_kfmblockoptin_0", - "displayName": "No prevention", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_kfmblockoptin_1", - "displayName": "Prevent Folder Backup", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_kfmblockoptin_2", - "displayName": "Prevent Folder Backup and Redirect to local device", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_kfmblockoptout", - "displayName": "Force users to use the Folder Backup feature (Known Folder Move)", - "options": [ - { - "id": "com.apple.managedclient.preferences_kfmblockoptout_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_kfmblockoptout_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_kfmoptinwithwizard", - "displayName": "Prompt users to enable the Folder Backup feature (Known Folder Move)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_kfmsilentoptin", - "displayName": "Automatically and silently enable the Folder Backup feature (Known Folder Move)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_kfmsilentoptindesktop", - "displayName": "Include ~/Desktop in Folder Backup (Known Folder Move)", - "options": [ - { - "id": "com.apple.managedclient.preferences_kfmsilentoptindesktop_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_kfmsilentoptindesktop_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_kfmsilentoptindocuments", - "displayName": "Include ~/Documents in Folder Backup (Known Folder Move)", - "options": [ - { - "id": "com.apple.managedclient.preferences_kfmsilentoptindocuments_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_kfmsilentoptindocuments_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_kfmsilentoptinwithnotification", - "displayName": "Display a notification to users once their folders have been redirected", - "options": [ - { - "id": "com.apple.managedclient.preferences_kfmsilentoptinwithnotification_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_kfmsilentoptinwithnotification_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_kioskaddressbareditingenabled", - "displayName": "Configure address bar editing for kiosk mode public browsing experience", - "options": [ - { - "id": "com.apple.managedclient.preferences_kioskaddressbareditingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_kioskaddressbareditingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_legacysamesitecookiebehaviorenabled", - "displayName": "Enable default legacy SameSite cookie behavior setting", - "options": [ - { - "id": "com.apple.managedclient.preferences_legacysamesitecookiebehaviorenabled_0", - "displayName": "Revert to legacy SameSite behavior for cookies on all sites", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_legacysamesitecookiebehaviorenabled_1", - "displayName": "Use SameSite-by-default behavior for cookies on all sites", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_legacysamesitecookiebehaviorenabledfordomainlist", - "displayName": "Revert to legacy SameSite behavior for cookies on specified sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_linkedaccountenabled", - "displayName": "Enable the linked account feature", - "options": [ - { - "id": "com.apple.managedclient.preferences_linkedaccountenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_linkedaccountenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_localprovidersenabled", - "displayName": "Allow suggestions from local providers", - "options": [ - { - "id": "com.apple.managedclient.preferences_localprovidersenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_localprovidersenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_lowpriorityscheduledscan", - "displayName": "Low priority scheduled scan", - "options": [ - { - "id": "com.apple.managedclient.preferences_lowpriorityscheduledscan_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_lowpriorityscheduledscan_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines", - "displayName": "Managed Search Engines", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_allow_search_engine_discovery", - "displayName": "Allow search engine discovery", - "options": [ - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_allow_search_engine_discovery_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_allow_search_engine_discovery_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_encoding", - "displayName": "Encoding", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_image_search_post_params", - "displayName": "Image search post params", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_image_search_url", - "displayName": "Image search URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_is_default", - "displayName": "Is default", - "options": [ - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_is_default_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_is_default_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_keyword", - "displayName": "Keyword", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_name", - "displayName": "Name", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_search_url", - "displayName": "Search URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_managedsearchengines_item_suggest_url", - "displayName": "Suggest URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver", - "displayName": "Deferred updates (Deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_manifestserver_0", - "displayName": "Defer 3 days", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_1", - "displayName": "Defer 7 days", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_2", - "displayName": "Defer 14 days", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_3", - "displayName": "Defer 21 days", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_4", - "displayName": "Defer 28 days", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_5", - "displayName": "Defer 45 days", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_6", - "displayName": "Pause at 16.64 (August 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_7", - "displayName": "Pause at 16.63 (July 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_8", - "displayName": "Pause at 16.62 (June 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_9", - "displayName": "Pause at 16.61 (May 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_10", - "displayName": "Pause at 16.60 (April 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_11", - "displayName": "Pause at 16.59 (March 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_12", - "displayName": "Pause at 16.58 (February 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_13", - "displayName": "Pause at 16.57 (January 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_14", - "displayName": "Pause at 16.56 (December 2021 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_15", - "displayName": "Pause at 16.55 (November 2021 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_16", - "displayName": "Pause at 16.54 (October 2021 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_17", - "displayName": "Pause at 16.53 (September 2021 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_18", - "displayName": "Pause at 16.52 (August 2021 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_19", - "displayName": "Pause at 16.51 (July 2021 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_20", - "displayName": "Pause at 16.80 (December 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_21", - "displayName": "Pause at 16.79 (November 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_22", - "displayName": "Pause at 16.78 (October 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_23", - "displayName": "Pause at 16.77 (September 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_24", - "displayName": "Pause at 16.76 (August 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_25", - "displayName": "Pause at 16.75 (July 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_26", - "displayName": "Pause at 16.74 (June 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_27", - "displayName": "Pause at 16.73 (May 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_28", - "displayName": "Pause at 16.72 (April 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_29", - "displayName": "Pause at 16.71 (March 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_30", - "displayName": "Pause at 16.70 (February 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_31", - "displayName": "Pause at 16.69 (January 2023 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_32", - "displayName": "Pause at 16.68 (December 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_33", - "displayName": "Pause at 16.67 (November 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_34", - "displayName": "Pause at 16.66 (October 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_35", - "displayName": "Pause at 16.65 (September 2022 Release)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_manifestserver_36", - "displayName": "Change Freeze", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_maxconnectionsperproxy", - "displayName": "Maximum number of concurrent connections to the proxy server", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_maximumondemandscanthreads", - "displayName": "Degree of parallelism for on-demand scans", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_mediaroutercastallowallips", - "displayName": "Allow Google Cast to connect to Cast devices on all IP addresses", - "options": [ - { - "id": "com.apple.managedclient.preferences_mediaroutercastallowallips_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_mediaroutercastallowallips_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_metricsreportingenabled", - "displayName": "Enable usage and crash-related data reporting", - "options": [ - { - "id": "com.apple.managedclient.preferences_metricsreportingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_metricsreportingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_microsoftedgeinsiderpromotionenabled", - "displayName": "Microsoft Edge Insider Promotion Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_microsoftedgeinsiderpromotionenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_microsoftedgeinsiderpromotionenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_microsofteditorproofingenabled", - "displayName": "Spell checking provided by Microsoft Editor", - "options": [ - { - "id": "com.apple.managedclient.preferences_microsofteditorproofingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_microsofteditorproofingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_microsofteditorsynonymsenabled", - "displayName": "Synonyms are provided when using Microsoft Editor spell checker", - "options": [ - { - "id": "com.apple.managedclient.preferences_microsofteditorsynonymsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_microsofteditorsynonymsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_msawebsitessousingthisprofileallowed", - "displayName": "Allow single sign-on for Microsoft personal sites using this profile", - "options": [ - { - "id": "com.apple.managedclient.preferences_msawebsitessousingthisprofileallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_msawebsitessousingthisprofileallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_mutationeventsenabled", - "displayName": "Enable deprecated/removed Mutation Events", - "options": [ - { - "id": "com.apple.managedclient.preferences_mutationeventsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_mutationeventsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_nativemessagingallowlist", - "displayName": "Control which native messaging hosts users can use", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_nativemessagingblocklist", - "displayName": "Configure native messaging block list", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_nativemessaginguserlevelhosts", - "displayName": "Allow user-level native messaging hosts (installed without admin permissions)", - "options": [ - { - "id": "com.apple.managedclient.preferences_nativemessaginguserlevelhosts_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_nativemessaginguserlevelhosts_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_networkpredictionoptions", - "displayName": "Enable network prediction", - "options": [ - { - "id": "com.apple.managedclient.preferences_networkpredictionoptions_0", - "displayName": "Predict network actions on any network connection", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_networkpredictionoptions_1", - "displayName": "Predict network actions on any network that is not cellular. (Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_networkpredictionoptions_2", - "displayName": "Don't predict network actions on any network connection", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newpdfreaderenabled", - "displayName": "Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_newpdfreaderenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newpdfreaderenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpageallowedbackgroundtypes", - "displayName": "Configure the background types allowed for the new tab page layout", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpageallowedbackgroundtypes_0", - "displayName": "Disable daily background image type", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpageallowedbackgroundtypes_1", - "displayName": "Disable custom background image type", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpageallowedbackgroundtypes_2", - "displayName": "Disable all background image types", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpageapplauncherenabled", - "displayName": "Hide App Launcher on Microsoft Edge new tab page", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpageapplauncherenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpageapplauncherenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpagebingchatenabled", - "displayName": "Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpagebingchatenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagebingchatenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogo", - "displayName": "New Tab Page Company Logo", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogo_default_logo", - "displayName": "Default logo", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogo_default_logo_hash", - "displayName": "Hash", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogo_default_logo_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogo_light_logo", - "displayName": "Light logo", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogo_light_logo_hash", - "displayName": "Hash", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogo_light_logo_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogoenabled", - "displayName": "Hide the company logo on the Microsoft Edge new tab page", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogoenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagecompanylogoenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpagehidedefaulttopsites", - "displayName": "Hide the default top sites from the new tab page", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpagehidedefaulttopsites_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagehidedefaulttopsites_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpagelocation", - "displayName": "Configure the new tab page URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagemanagedquicklinks", - "displayName": "New Tab Page Managed Quick Links", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_pinned", - "displayName": "Pinned", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_pinned_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_pinned_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_title", - "displayName": "Title", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagemanagedquicklinks_item_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpageprerenderenabled", - "displayName": "Enable preload of the new tab page for faster rendering", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpageprerenderenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpageprerenderenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpagequicklinksenabled", - "displayName": "Allow quick links on the new tab page", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpagequicklinksenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagequicklinksenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpagesearchbox", - "displayName": "Configure the new tab page search box experience", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpagesearchbox_0", - "displayName": "Search box (Recommended)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagesearchbox_1", - "displayName": "Address bar", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_newtabpagesetfeedtype", - "displayName": "Configure the Microsoft Edge new tab page experience", - "options": [ - { - "id": "com.apple.managedclient.preferences_newtabpagesetfeedtype_0", - "displayName": "Microsoft News feed experience", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_newtabpagesetfeedtype_1", - "displayName": "Office 365 feed experience", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_notificationsallowedforurls", - "displayName": "Allow notifications on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_notificationsblockedforurls", - "displayName": "Block notifications on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_npssurveydisabled", - "displayName": "Disable user surveys", - "options": [ - { - "id": "com.apple.managedclient.preferences_npssurveydisabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_npssurveydisabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_ntlmv2enabled", - "displayName": "Control whether NTLMv2 authentication is enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_ntlmv2enabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_ntlmv2enabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_officeactivationemailaddress", - "displayName": "Office Activation Email Address", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_officeautosignin", - "displayName": "Enable automatic sign-in", - "options": [ - { - "id": "com.apple.managedclient.preferences_officeautosignin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_officeautosignin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_officeexperiencesanalyzingcontentpreference", - "displayName": "Allow experiences and functionality that analyzes user content", - "options": [ - { - "id": "com.apple.managedclient.preferences_officeexperiencesanalyzingcontentpreference_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_officeexperiencesanalyzingcontentpreference_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_officeexperiencesdownloadingcontentpreference", - "displayName": "Allow experiences and functionality that downloads user content", - "options": [ - { - "id": "com.apple.managedclient.preferences_officeexperiencesdownloadingcontentpreference_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_officeexperiencesdownloadingcontentpreference_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_officewebaddindisableomexcatalog", - "displayName": "Disable third-party store add-in catalog", - "options": [ - { - "id": "com.apple.managedclient.preferences_officewebaddindisableomexcatalog_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_officewebaddindisableomexcatalog_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_offlinedefinitionupdate", - "displayName": "Enable offline security intelligence updates", - "options": [ - { - "id": "com.apple.managedclient.preferences_offlinedefinitionupdate_0", - "displayName": "enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_offlinedefinitionupdate_1", - "displayName": "disabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_offlinedefinitionupdateurl", - "displayName": "URL for a security intelligence updates mirror server", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_offlinedefinitionupdateverifysig", - "displayName": "offline security intelligence updates signature verification", - "options": [ - { - "id": "com.apple.managedclient.preferences_offlinedefinitionupdateverifysig_0", - "displayName": "enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_offlinedefinitionupdateverifysig_1", - "displayName": "disabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_oldisablejunkoptionsprefkey", - "displayName": "Disable Junk settings", - "options": [ - { - "id": "com.apple.managedclient.preferences_oldisablejunkoptionsprefkey_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_oldisablejunkoptionsprefkey_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_openatlogin", - "displayName": "Open at login", - "options": [ - { - "id": "com.apple.managedclient.preferences_openatlogin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_openatlogin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_optionalconnectedexperiencespreference", - "displayName": "Allow optional connected experiences", - "options": [ - { - "id": "com.apple.managedclient.preferences_optionalconnectedexperiencespreference_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_optionalconnectedexperiencespreference_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_organizationalbrandingonworkprofileuienabled", - "displayName": "Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work profile", - "options": [ - { - "id": "com.apple.managedclient.preferences_organizationalbrandingonworkprofileuienabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_organizationalbrandingonworkprofileuienabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_organizationlogooverlayonappiconenabled", - "displayName": "Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work profile", - "options": [ - { - "id": "com.apple.managedclient.preferences_organizationlogooverlayonappiconenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_organizationlogooverlayonappiconenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_originagentclusterdefaultenabled", - "displayName": "Origin-keyed agent clustering enabled by default", - "options": [ - { - "id": "com.apple.managedclient.preferences_originagentclusterdefaultenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_originagentclusterdefaultenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_overridesecurityrestrictionsoninsecureorigin", - "displayName": "Control where security restrictions on insecure origins apply", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_passivemode", - "displayName": "Enable passive mode (deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_passivemode_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_passivemode_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_passworddeleteonbrowsercloseenabled", - "displayName": "Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes", - "options": [ - { - "id": "com.apple.managedclient.preferences_passworddeleteonbrowsercloseenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_passworddeleteonbrowsercloseenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_passwordmanagerenabled", - "displayName": "Enable saving passwords to the password manager", - "options": [ - { - "id": "com.apple.managedclient.preferences_passwordmanagerenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_passwordmanagerenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_passwordmanagerrestrictlengthenabled", - "displayName": "Restrict the length of passwords that can be saved in the Password Manager", - "options": [ - { - "id": "com.apple.managedclient.preferences_passwordmanagerrestrictlengthenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_passwordmanagerrestrictlengthenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_passwordmonitorallowed", - "displayName": "Allow Microsoft Edge to monitor user passwords", - "options": [ - { - "id": "com.apple.managedclient.preferences_passwordmonitorallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_passwordmonitorallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_passwordprotectionchangepasswordurl", - "displayName": "Configure the change password URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_passwordprotectionloginurls", - "displayName": "Configure the list of enterprise login URLs where password protection service should capture fingerprint of password", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_passwordprotectionwarningtrigger", - "displayName": "Configure password protection warning trigger", - "options": [ - { - "id": "com.apple.managedclient.preferences_passwordprotectionwarningtrigger_0", - "displayName": "Password protection warning is off", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_passwordprotectionwarningtrigger_1", - "displayName": "Password protection warning is triggered by password reuse", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_passwordrevealenabled", - "displayName": "Enable Password reveal button", - "options": [ - { - "id": "com.apple.managedclient.preferences_passwordrevealenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_passwordrevealenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_paymentmethodqueryenabled", - "displayName": "Allow websites to query for available payment methods", - "options": [ - { - "id": "com.apple.managedclient.preferences_paymentmethodqueryenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_paymentmethodqueryenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_pdfsecuremode", - "displayName": "Secure mode and Certificate-based Digital Signature validation in native PDF reader", - "options": [ - { - "id": "com.apple.managedclient.preferences_pdfsecuremode_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_pdfsecuremode_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_pdfxfaenabled", - "displayName": "XFA support in native PDF reader enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_pdfxfaenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_pdfxfaenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_performancedetectorenabled", - "displayName": "Performance Detector Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_performancedetectorenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_performancedetectorenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_personalizationreportingenabled", - "displayName": "Allow personalization of ads, search and news by sending browsing history to Microsoft", - "options": [ - { - "id": "com.apple.managedclient.preferences_personalizationreportingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_personalizationreportingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_phoenixonboardingflowfrelaunched", - "displayName": "Hide the 'Personalize the new Outlook' dialog", - "options": [ - { - "id": "com.apple.managedclient.preferences_phoenixonboardingflowfrelaunched_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_phoenixonboardingflowfrelaunched_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_pictureinpictureoverlayenabled", - "displayName": "Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_pictureinpictureoverlayenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_pictureinpictureoverlayenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_pinbrowseressentialstoolbarbutton", - "displayName": "Pin browser essentials toolbar button", - "options": [ - { - "id": "com.apple.managedclient.preferences_pinbrowseressentialstoolbarbutton_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_pinbrowseressentialstoolbarbutton_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_pluginsallowedforurls", - "displayName": "Allow the Adobe Flash plug-in on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_pluginsblockedforurls", - "displayName": "Block the Adobe Flash plug-in on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_popupsallowedforurls", - "displayName": "Allow pop-up windows on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_popupsblockedforurls", - "displayName": "Block pop-up windows on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_postquantumkeyagreementenabled", - "displayName": "Enable post-quantum key agreement for TLS", - "options": [ - { - "id": "com.apple.managedclient.preferences_postquantumkeyagreementenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_postquantumkeyagreementenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_preventsmartscreenpromptoverride", - "displayName": "Prevent bypassing Microsoft Defender SmartScreen prompts for sites", - "options": [ - { - "id": "com.apple.managedclient.preferences_preventsmartscreenpromptoverride_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_preventsmartscreenpromptoverride_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_preventsmartscreenpromptoverrideforfiles", - "displayName": "Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads", - "options": [ - { - "id": "com.apple.managedclient.preferences_preventsmartscreenpromptoverrideforfiles_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_preventsmartscreenpromptoverrideforfiles_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_preventtyposquattingpromptoverride", - "displayName": "Prevent bypassing Edge Website Typo Protection prompts for sites", - "options": [ - { - "id": "com.apple.managedclient.preferences_preventtyposquattingpromptoverride_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_preventtyposquattingpromptoverride_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_primarypasswordsetting", - "displayName": "Configures a setting that asks users to enter their device password while using password autofill", - "options": [ - { - "id": "com.apple.managedclient.preferences_primarypasswordsetting_0", - "displayName": "Automatically", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_primarypasswordsetting_1", - "displayName": "With device password", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_primarypasswordsetting_2", - "displayName": "With custom primary password", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_primarypasswordsetting_3", - "displayName": "Autofill off", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_printertypedenylist", - "displayName": "Disable printer types on the deny list", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_printheaderfooter", - "displayName": "Print headers and footers", - "options": [ - { - "id": "com.apple.managedclient.preferences_printheaderfooter_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printheaderfooter_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_printingallowedbackgroundgraphicsmodes", - "displayName": "Restrict background graphics printing mode", - "options": [ - { - "id": "com.apple.managedclient.preferences_printingallowedbackgroundgraphicsmodes_0", - "displayName": "Allow printing with and without background graphics", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printingallowedbackgroundgraphicsmodes_1", - "displayName": "Allow printing only without background graphics", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printingallowedbackgroundgraphicsmodes_2", - "displayName": "Allow printing only with background graphics", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_printingbackgroundgraphicsdefault", - "displayName": "Default background graphics printing mode", - "options": [ - { - "id": "com.apple.managedclient.preferences_printingbackgroundgraphicsdefault_0", - "displayName": "Disable background graphics printing mode by default", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printingbackgroundgraphicsdefault_1", - "displayName": "Enable background graphics printing mode by default", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_printingenabled", - "displayName": "Enable printing", - "options": [ - { - "id": "com.apple.managedclient.preferences_printingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_printingwebpagelayout", - "displayName": "Sets layout for printing", - "options": [ - { - "id": "com.apple.managedclient.preferences_printingwebpagelayout_0", - "displayName": "Sets layout option as portrait", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printingwebpagelayout_1", - "displayName": "Sets layout option as landscape", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_printpdfasimagedefault", - "displayName": "Print PDF as Image Default", - "options": [ - { - "id": "com.apple.managedclient.preferences_printpdfasimagedefault_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printpdfasimagedefault_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_printpreviewusesystemdefaultprinter", - "displayName": "Set the system default printer as the default printer", - "options": [ - { - "id": "com.apple.managedclient.preferences_printpreviewusesystemdefaultprinter_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printpreviewusesystemdefaultprinter_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_printrasterizepdfdpi", - "displayName": "Print Rasterize PDF DPI", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_printstickysettings", - "displayName": "Print preview sticky settings", - "options": [ - { - "id": "com.apple.managedclient.preferences_printstickysettings_0", - "displayName": "Enable sticky settings for PDF and Webpages", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printstickysettings_1", - "displayName": "Disable sticky settings for PDF and Webpages", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printstickysettings_2", - "displayName": "Disable sticky settings for PDF", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_printstickysettings_3", - "displayName": "Disable sticky settings for Webpages", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_privatenetworkaccessrestrictionsenabled", - "displayName": "Specifies whether to apply restrictions to requests to more private network endpoints", - "options": [ - { - "id": "com.apple.managedclient.preferences_privatenetworkaccessrestrictionsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_privatenetworkaccessrestrictionsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_proactiveauthenabled", - "displayName": "Enable Proactive Authentication", - "options": [ - { - "id": "com.apple.managedclient.preferences_proactiveauthenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proactiveauthenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_proactiveauthworkflowenabled", - "displayName": "Enable proactive authentication", - "options": [ - { - "id": "com.apple.managedclient.preferences_proactiveauthworkflowenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proactiveauthworkflowenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_promotionaltabsenabled", - "displayName": "Enable full-tab promotional content", - "options": [ - { - "id": "com.apple.managedclient.preferences_promotionaltabsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_promotionaltabsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_promptfordownloadlocation", - "displayName": "Ask where to save downloaded files", - "options": [ - { - "id": "com.apple.managedclient.preferences_promptfordownloadlocation_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_promptfordownloadlocation_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_promptonmultiplematchingcertificates", - "displayName": "Prompt the user to select a certificate when multiple certificates match", - "options": [ - { - "id": "com.apple.managedclient.preferences_promptonmultiplematchingcertificates_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_promptonmultiplematchingcertificates_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_proxy", - "displayName": "Set proxy for MDE communication", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_proxybypasslist", - "displayName": "Configure proxy bypass rules", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_proxymode", - "displayName": "Configure proxy server settings", - "options": [ - { - "id": "com.apple.managedclient.preferences_proxymode_0", - "displayName": "Never use a proxy", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proxymode_1", - "displayName": "Auto detect proxy settings", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proxymode_2", - "displayName": "Use a .pac proxy script", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proxymode_3", - "displayName": "Use fixed proxy servers", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proxymode_4", - "displayName": "Use system proxy settings", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_proxypacurl", - "displayName": "Set the proxy .pac file URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_proxyserver", - "displayName": "Configure address or URL of proxy server", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_proxysettings", - "displayName": "Proxy Settings", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_proxysettings_proxybypasslist", - "displayName": "Proxy Bypass List", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_proxysettings_proxymode", - "displayName": "Proxy Mode", - "options": [ - { - "id": "com.apple.managedclient.preferences_proxysettings_proxymode_0", - "displayName": "direct", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proxysettings_proxymode_1", - "displayName": "auto_detect", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proxysettings_proxymode_2", - "displayName": "pac_script", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proxysettings_proxymode_3", - "displayName": "fixed_servers", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_proxysettings_proxymode_4", - "displayName": "system", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_proxysettings_proxypacurl", - "displayName": "Proxy PAC URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_proxysettings_proxyserver", - "displayName": "Proxy Server", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_qrcodegeneratorenabled", - "displayName": "Enable QR Code Generator", - "options": [ - { - "id": "com.apple.managedclient.preferences_qrcodegeneratorenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_qrcodegeneratorenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_quicallowed", - "displayName": "Allow QUIC protocol", - "options": [ - { - "id": "com.apple.managedclient.preferences_quicallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_quicallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_quicksearchshowminimenu", - "displayName": "Enables Microsoft Edge mini menu", - "options": [ - { - "id": "com.apple.managedclient.preferences_quicksearchshowminimenu_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_quicksearchshowminimenu_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_quickviewofficefilesenabled", - "displayName": "Manage QuickView Office files capability in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_quickviewofficefilesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_quickviewofficefilesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_randomizescanstarttime", - "displayName": "Randomize scheduled scan start time", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_readaloudenabled", - "displayName": "Enable Read Aloud feature in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_readaloudenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_readaloudenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_registeredprotocolhandlers", - "displayName": "Registered Protocol Handlers", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_registeredprotocolhandlers_item_default", - "displayName": "Default", - "options": [ - { - "id": "com.apple.managedclient.preferences_registeredprotocolhandlers_item_default_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_registeredprotocolhandlers_item_default_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_registeredprotocolhandlers_item_protocol", - "displayName": "Protocol", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_registeredprotocolhandlers_item_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_relatedmatchescloudserviceenabled", - "displayName": "Configure Related Matches in Find on Page", - "options": [ - { - "id": "com.apple.managedclient.preferences_relatedmatchescloudserviceenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_relatedmatchescloudserviceenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_relatedwebsitesetsenabled", - "displayName": "Enable Related Website Sets", - "options": [ - { - "id": "com.apple.managedclient.preferences_relatedwebsitesetsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_relatedwebsitesetsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_relaunchnotification", - "displayName": "Notify a user that a browser restart is recommended or required for pending updates", - "options": [ - { - "id": "com.apple.managedclient.preferences_relaunchnotification_0", - "displayName": "Recommended - Show a recurring prompt to the user indicating that a restart is recommended", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_relaunchnotification_1", - "displayName": "Required - Show a recurring prompt to the user indicating that a restart is required", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_relaunchnotificationperiod", - "displayName": "Set the time period for update notifications", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_remotedebuggingallowed", - "displayName": "Allow remote debugging", - "options": [ - { - "id": "com.apple.managedclient.preferences_remotedebuggingallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_remotedebuggingallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_resolvenavigationerrorsusewebservice", - "displayName": "Enable resolution of navigation errors using a web service", - "options": [ - { - "id": "com.apple.managedclient.preferences_resolvenavigationerrorsusewebservice_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_resolvenavigationerrorsusewebservice_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_restoreonstartup", - "displayName": "Action to take on startup", - "options": [ - { - "id": "com.apple.managedclient.preferences_restoreonstartup_0", - "displayName": "Restore the last session", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_restoreonstartup_1", - "displayName": "Open a list of URLs", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_restoreonstartup_2", - "displayName": "Open a new tab", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_restoreonstartup_3", - "displayName": "Open a list of URLs and restore the last session", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_restoreonstartupurls", - "displayName": "Sites to open when the browser starts", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_restoreonstartupuserurlsenabled", - "displayName": "Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured", - "options": [ - { - "id": "com.apple.managedclient.preferences_restoreonstartupuserurlsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_restoreonstartupuserurlsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_restorepdfview", - "displayName": "Restore PDF view", - "options": [ - { - "id": "com.apple.managedclient.preferences_restorepdfview_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_restorepdfview_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_restrictsignintopattern", - "displayName": "Restrict which accounts can be used as Microsoft Edge primary accounts", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_runallflashinallowmode", - "displayName": "Extend Adobe Flash content setting to all content", - "options": [ - { - "id": "com.apple.managedclient.preferences_runallflashinallowmode_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_runallflashinallowmode_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_runscanwhenidle", - "displayName": "Run scheduled scan when idle", - "options": [ - { - "id": "com.apple.managedclient.preferences_runscanwhenidle_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_runscanwhenidle_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sameorigintabcaptureallowedbyorigins", - "displayName": "Allow Same Origin Tab capture by these origins", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_sandboxexternalprotocolblocked", - "displayName": "Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe", - "options": [ - { - "id": "com.apple.managedclient.preferences_sandboxexternalprotocolblocked_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sandboxexternalprotocolblocked_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_savecookiesonexit", - "displayName": "Save cookies when Microsoft Edge closes", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_savingbrowserhistorydisabled", - "displayName": "Disable saving browser history", - "options": [ - { - "id": "com.apple.managedclient.preferences_savingbrowserhistorydisabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_savingbrowserhistorydisabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_scanafterdefinitionupdate", - "displayName": "Run a scan after definitions are updated", - "options": [ - { - "id": "com.apple.managedclient.preferences_scanafterdefinitionupdate_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_scanafterdefinitionupdate_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_scanarchives", - "displayName": "Scanning inside archive files", - "options": [ - { - "id": "com.apple.managedclient.preferences_scanarchives_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_scanarchives_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_scanhistorymaximumitems", - "displayName": "Scan history size", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_scanresultsretentiondays", - "displayName": "Scan results retention", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_scheduledscan", - "displayName": "Scheduled Scan", - "options": [ - { - "id": "com.apple.managedclient.preferences_scheduledscan_0", - "displayName": "enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_scheduledscan_1", - "displayName": "disabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_screencaptureallowed", - "displayName": "Allow or deny screen capture", - "options": [ - { - "id": "com.apple.managedclient.preferences_screencaptureallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_screencaptureallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_screencaptureallowedbyorigins", - "displayName": "Allow Desktop, Window, and Tab capture by these origins", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_screencapturewithoutgestureallowedfororigins", - "displayName": "Allow screen capture without prior user gesture", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_scrolltotextfragmentenabled", - "displayName": "Enable scrolling to text specified in URL fragments", - "options": [ - { - "id": "com.apple.managedclient.preferences_scrolltotextfragmentenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_scrolltotextfragmentenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_searchfiltersenabled", - "displayName": "Search Filters Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_searchfiltersenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_searchfiltersenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_searchforimageenabled", - "displayName": "Search for image enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_searchforimageenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_searchforimageenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_searchinsidebarenabled", - "displayName": "Search in Sidebar enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_searchinsidebarenabled_0", - "displayName": "Enable search in sidebar", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_searchinsidebarenabled_1", - "displayName": "Disable search in sidebar for Kids Mode", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_searchinsidebarenabled_2", - "displayName": "Disable search in sidebar", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_searchsuggestenabled", - "displayName": "Enable search suggestions", - "options": [ - { - "id": "com.apple.managedclient.preferences_searchsuggestenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_searchsuggestenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_securitykeypermitattestation", - "displayName": "Websites or domains that don't need permission to use direct Security Key attestation", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_sendsiteinfotoimproveservices", - "displayName": "Send site information to improve Microsoft services", - "options": [ - { - "id": "com.apple.managedclient.preferences_sendsiteinfotoimproveservices_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sendsiteinfotoimproveservices_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sensorsallowedforurls", - "displayName": "Allow access to sensors on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_sensorsblockedforurls", - "displayName": "Block access to sensors on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_serialallowallportsforurls", - "displayName": "Automatically grant sites permission to connect all serial ports", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_serialaskforurls", - "displayName": "Allow the Serial API on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_serialblockedforurls", - "displayName": "Block the Serial API on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_sharedarraybufferunrestrictedaccessallowed", - "displayName": "Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context", - "options": [ - { - "id": "com.apple.managedclient.preferences_sharedarraybufferunrestrictedaccessallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sharedarraybufferunrestrictedaccessallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sharedlinksenabled", - "displayName": "Show links shared from Microsoft 365 apps in History", - "options": [ - { - "id": "com.apple.managedclient.preferences_sharedlinksenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sharedlinksenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sharepointonpremfrontdoorurl", - "displayName": "SharePoint Server Front Door URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_sharepointonpremprioritizationpolicy", - "displayName": "SharePoint Prioritization", - "options": [ - { - "id": "com.apple.managedclient.preferences_sharepointonpremprioritizationpolicy_0", - "displayName": "Prioritize SharePoint Online", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sharepointonpremprioritizationpolicy_1", - "displayName": "Prioritize SharePoint Server", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sharepointonpremtenantname", - "displayName": "SharePoint Server Tenant Name", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_showacrobatsubscriptionbutton", - "displayName": "Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription", - "options": [ - { - "id": "com.apple.managedclient.preferences_showacrobatsubscriptionbutton_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showacrobatsubscriptionbutton_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showcasticonintoolbar", - "displayName": "Show the cast icon in the toolbar", - "options": [ - { - "id": "com.apple.managedclient.preferences_showcasticonintoolbar_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showcasticonintoolbar_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showdocstageonlaunch", - "displayName": "Show Template Gallery on app launch", - "options": [ - { - "id": "com.apple.managedclient.preferences_showdocstageonlaunch_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showdocstageonlaunch_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showdownloadsinsecurewarningsenabled", - "displayName": "Enable insecure download warnings", - "options": [ - { - "id": "com.apple.managedclient.preferences_showdownloadsinsecurewarningsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showdownloadsinsecurewarningsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showdownloadstoolbarbutton", - "displayName": "Show Downloads button on the toolbar", - "options": [ - { - "id": "com.apple.managedclient.preferences_showdownloadstoolbarbutton_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showdownloadstoolbarbutton_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showhistorythumbnails", - "displayName": "Show thumbnail images for browsing history", - "options": [ - { - "id": "com.apple.managedclient.preferences_showhistorythumbnails_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showhistorythumbnails_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showhomebutton", - "displayName": "Show Home button on toolbar", - "options": [ - { - "id": "com.apple.managedclient.preferences_showhomebutton_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showhomebutton_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showmicrosoftrewards", - "displayName": "Show Microsoft Rewards experiences", - "options": [ - { - "id": "com.apple.managedclient.preferences_showmicrosoftrewards_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showmicrosoftrewards_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showofficeshortcutinfavoritesbar", - "displayName": "Show Microsoft Office shortcut in favorites bar", - "options": [ - { - "id": "com.apple.managedclient.preferences_showofficeshortcutinfavoritesbar_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showofficeshortcutinfavoritesbar_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showpdfdefaultrecommendationsenabled", - "displayName": "Allow notifications to set Microsoft Edge as default PDF reader", - "options": [ - { - "id": "com.apple.managedclient.preferences_showpdfdefaultrecommendationsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showpdfdefaultrecommendationsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showrecommendationsenabled", - "displayName": "Allow feature recommendations and browser assistance notifications from Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_showrecommendationsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showrecommendationsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_showwhatsnewonlaunch", - "displayName": "Show Whats New dialog", - "options": [ - { - "id": "com.apple.managedclient.preferences_showwhatsnewonlaunch_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_showwhatsnewonlaunch_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_signedhttpexchangeenabled", - "displayName": "Enable Signed HTTP Exchange (SXG) support", - "options": [ - { - "id": "com.apple.managedclient.preferences_signedhttpexchangeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_signedhttpexchangeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_siteperprocess", - "displayName": "Enable site isolation for every site", - "options": [ - { - "id": "com.apple.managedclient.preferences_siteperprocess_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_siteperprocess_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabsblockedforurls", - "displayName": "Block Sleeping Tabs on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabsenabled", - "displayName": "Configure Sleeping Tabs", - "options": [ - { - "id": "com.apple.managedclient.preferences_sleepingtabsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout", - "displayName": "Set the background tab inactivity timeout for Sleeping Tabs", - "options": [ - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_0", - "displayName": "5 minutes of inactivity", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_1", - "displayName": "15 minutes of inactivity", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_2", - "displayName": "30 minutes of inactivity", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_3", - "displayName": "1 hour of inactivity", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_4", - "displayName": "2 hours of inactivity", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_5", - "displayName": "3 hours of inactivity", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_6", - "displayName": "6 hours of inactivity", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_7", - "displayName": "12 hours of inactivity", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sleepingtabstimeout_8", - "displayName": "12 hours of inactivity", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_smartactionsblocklist", - "displayName": "Block smart actions for a list of services", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_smartscreenallowlistdomains", - "displayName": "Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_smartscreendnsrequestsenabled", - "displayName": "Enable Microsoft Defender SmartScreen DNS requests", - "options": [ - { - "id": "com.apple.managedclient.preferences_smartscreendnsrequestsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_smartscreendnsrequestsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_smartscreenenabled", - "displayName": "Configure Microsoft Defender SmartScreen", - "options": [ - { - "id": "com.apple.managedclient.preferences_smartscreenenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_smartscreenenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_smartscreenpuaenabled", - "displayName": "Configure Microsoft Defender SmartScreen to block potentially unwanted apps", - "options": [ - { - "id": "com.apple.managedclient.preferences_smartscreenpuaenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_smartscreenpuaenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_smimecertificateslookuporder", - "displayName": "Set the order in which S/MIME certificates are considered", - "options": [ - { - "id": "com.apple.managedclient.preferences_smimecertificateslookuporder_0", - "displayName": "Contacts", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_smimecertificateslookuporder_1", - "displayName": "Global Address List", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_smimecertificateslookuporder_2", - "displayName": "Device", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_smimecertificateslookuporder_3", - "displayName": "LDAP", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_speechrecognitionenabled", - "displayName": "Configure Speech Recognition", - "options": [ - { - "id": "com.apple.managedclient.preferences_speechrecognitionenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_speechrecognitionenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_spellcheckenabled", - "displayName": "Enable spellcheck", - "options": [ - { - "id": "com.apple.managedclient.preferences_spellcheckenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_spellcheckenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_splitscreenenabled", - "displayName": "Enable split screen feature in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_splitscreenenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_splitscreenenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sslerroroverrideallowed", - "displayName": "Allow users to proceed from the HTTPS warning page", - "options": [ - { - "id": "com.apple.managedclient.preferences_sslerroroverrideallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sslerroroverrideallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_sslerroroverrideallowedfororigins", - "displayName": "Allow users to proceed from the HTTPS warning page for specific origins", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_sslversionmin", - "displayName": "Minimum TLS version enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_sslversionmin_0", - "displayName": "TLS 1.0", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sslversionmin_1", - "displayName": "TLS 1.1", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_sslversionmin_2", - "displayName": "TLS 1.2", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_startdaemononapplaunch", - "displayName": "Register app on launch", - "options": [ - { - "id": "com.apple.managedclient.preferences_startdaemononapplaunch_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_startdaemononapplaunch_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_strictermixedcontenttreatmentenabled", - "displayName": "Enable stricter treatment for mixed content", - "options": [ - { - "id": "com.apple.managedclient.preferences_strictermixedcontenttreatmentenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_strictermixedcontenttreatmentenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_suppresso365autodiscoveroverride", - "displayName": "Use domain-based autodiscover instead of Office 365", - "options": [ - { - "id": "com.apple.managedclient.preferences_suppresso365autodiscoveroverride_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_suppresso365autodiscoveroverride_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_suppressunsupportedoswarning", - "displayName": "Suppress the unsupported OS warning", - "options": [ - { - "id": "com.apple.managedclient.preferences_suppressunsupportedoswarning_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_suppressunsupportedoswarning_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_switchintranetsitestoworkprofile", - "displayName": "Switch intranet sites to a work profile", - "options": [ - { - "id": "com.apple.managedclient.preferences_switchintranetsitestoworkprofile_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_switchintranetsitestoworkprofile_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_syncdisabled", - "displayName": "Disable synchronization of data using Microsoft sync services", - "options": [ - { - "id": "com.apple.managedclient.preferences_syncdisabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_syncdisabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_synctypeslistdisabled", - "displayName": "Configure the list of types that are excluded from synchronization", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_systemextensions", - "displayName": "Use System Extensions", - "options": [ - { - "id": "com.apple.managedclient.preferences_systemextensions_0", - "displayName": "enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_systemextensions_1", - "displayName": "disabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_tabcaptureallowedbyorigins", - "displayName": "Allow Tab capture by these origins", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_tabfreezingenabled", - "displayName": "Allow freezing of background tabs", - "options": [ - { - "id": "com.apple.managedclient.preferences_tabfreezingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_tabfreezingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_tabservicesenabled", - "displayName": "Enable tab organization suggestions", - "options": [ - { - "id": "com.apple.managedclient.preferences_tabservicesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_tabservicesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_tags", - "displayName": "Device tags", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_tags_item_key", - "displayName": "Type of tag", - "options": { - "id": "com.apple.managedclient.preferences_tags_item_key_0", - "displayName": "GROUP", - "description": null - } - }, - { - "id": "com.apple.managedclient.preferences_tags_item_value", - "displayName": "Value of tag", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_targetblankimpliesnoopener", - "displayName": "Do not set window.opener for links targeting _blank", - "options": [ - { - "id": "com.apple.managedclient.preferences_targetblankimpliesnoopener_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_targetblankimpliesnoopener_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_taskmanagerendprocessenabled", - "displayName": "Enable ending processes in the Browser task manager", - "options": [ - { - "id": "com.apple.managedclient.preferences_taskmanagerendprocessenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_taskmanagerendprocessenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_textpredictionenabled", - "displayName": "Text prediction enabled by default", - "options": [ - { - "id": "com.apple.managedclient.preferences_textpredictionenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_textpredictionenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_thirdpartystoragepartitioningblockedfororigins", - "displayName": "Block third-party storage partitioning for these origins", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_threattypesettings", - "displayName": "Threat type settings", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_threattypesettings_item_key", - "displayName": "Threat type", - "options": [ - { - "id": "com.apple.managedclient.preferences_threattypesettings_item_key_0", - "displayName": "potentially_unwanted_application", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_threattypesettings_item_key_1", - "displayName": "archive_bomb", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_threattypesettings_item_value", - "displayName": "Action to take", - "options": [ - { - "id": "com.apple.managedclient.preferences_threattypesettings_item_value_0", - "displayName": "audit", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_threattypesettings_item_value_1", - "displayName": "block", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_threattypesettings_item_value_2", - "displayName": "off", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_threattypesettingsmergepolicy", - "displayName": "Threat type settings merge", - "options": [ - { - "id": "com.apple.managedclient.preferences_threattypesettingsmergepolicy_0", - "displayName": "merge", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_threattypesettingsmergepolicy_1", - "displayName": "admin_only", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_tls13hardeningforlocalanchorsenabled", - "displayName": "Enable a TLS 1.3 security feature for local trust anchors.", - "options": [ - { - "id": "com.apple.managedclient.preferences_tls13hardeningforlocalanchorsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_tls13hardeningforlocalanchorsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_tlsciphersuitedenylist", - "displayName": "Specify the TLS cipher suites to disable", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_totalmemorylimitmb", - "displayName": "Set limit on megabytes of memory a single Microsoft Edge instance can use.", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_trackingprevention", - "displayName": "Block tracking of users' web-browsing activity", - "options": [ - { - "id": "com.apple.managedclient.preferences_trackingprevention_0", - "displayName": "Off (no tracking prevention)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_trackingprevention_1", - "displayName": "Basic (blocks harmful trackers, content and ads will be personalized)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_trackingprevention_2", - "displayName": "Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_trackingprevention_3", - "displayName": "Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_translateenabled", - "displayName": "Enable Translate", - "options": [ - { - "id": "com.apple.managedclient.preferences_translateenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_translateenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_trusto365autodiscoverredirect", - "displayName": "Trust Office 365 autodiscover redirects", - "options": [ - { - "id": "com.apple.managedclient.preferences_trusto365autodiscoverredirect_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_trusto365autodiscoverredirect_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_typosquattingallowlistdomains", - "displayName": "Configure the list of domains for which Edge Website Typo Protection won't trigger warnings", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_typosquattingcheckerenabled", - "displayName": "Configure Edge Website Typo Protection", - "options": [ - { - "id": "com.apple.managedclient.preferences_typosquattingcheckerenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_typosquattingcheckerenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_unthrottlednestedtimeoutenabled", - "displayName": "JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated)", - "options": [ - { - "id": "com.apple.managedclient.preferences_unthrottlednestedtimeoutenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_unthrottlednestedtimeoutenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_updatecache", - "displayName": "Update cache server", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_updatecheckfrequency", - "displayName": "Update check frequency (mins)", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_updatedeadline.daysbeforeforcedquit", - "displayName": "Days before forced updates", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_updatedeadline.finalcountdown", - "displayName": "Number of minutes for the final countdown timer", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_updatepolicyoverride", - "displayName": "Specifies how Microsoft Edge Update handles available updates from Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_updatepolicyoverride_0", - "displayName": "silent-only - Updates are applied only when they're found by the periodic update check.", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_updatepolicyoverride_1", - "displayName": "only - Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_updateroptimization", - "displayName": "Updater optimization technique", - "options": [ - { - "id": "com.apple.managedclient.preferences_updateroptimization_0", - "displayName": "Lower network overhead", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_updateroptimization_1", - "displayName": "Lower processor overhead", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_updateroptimization_2", - "displayName": "Always use full updates", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_uploadbandwidthlimited", - "displayName": "Set maximum upload throughput", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_uploadfromphoneenabled", - "displayName": "Enable upload files from mobile in Microsoft Edge desktop", - "options": [ - { - "id": "com.apple.managedclient.preferences_uploadfromphoneenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_uploadfromphoneenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_urlallowlist", - "displayName": "Define a list of allowed URLs", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_urlblocklist", - "displayName": "Block access to a list of URLs", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_useragentclienthintsenabled", - "displayName": "Enable the User-Agent Client Hints feature", - "options": [ - { - "id": "com.apple.managedclient.preferences_useragentclienthintsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_useragentclienthintsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_useragentreduction", - "displayName": "Enable or disable the User-Agent Reduction", - "options": [ - { - "id": "com.apple.managedclient.preferences_useragentreduction_0", - "displayName": "User-Agent reduction will be controllable via Experimentation", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_useragentreduction_1", - "displayName": "User-Agent reduction diabled, and not enabled by Experimentation", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_useragentreduction_2", - "displayName": "User-Agent reduction will be enabled for all origins", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_userdatadir", - "displayName": "Set the user data directory", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_userfeedbackallowed", - "displayName": "Allow user feedback", - "options": [ - { - "id": "com.apple.managedclient.preferences_userfeedbackallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_userfeedbackallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_userinitiatedfeedback", - "displayName": "User initiated feedback", - "options": [ - { - "id": "com.apple.managedclient.preferences_userinitiatedfeedback_0", - "displayName": "enabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_userinitiatedfeedback_1", - "displayName": "disabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_userpreference_apptheming", - "displayName": "Set theme", - "options": [ - { - "id": "com.apple.managedclient.preferences_userpreference_apptheming_0", - "displayName": "Blue", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_userpreference_apptheming_1", - "displayName": "Purple", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_userpreference_apptheming_2", - "displayName": "Pink", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_userpreference_apptheming_3", - "displayName": "Orange", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_userpreference_apptheming_4", - "displayName": "Red", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_userpreference_apptheming_5", - "displayName": "Green", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_userpreference_maxchecklistdisplaydurationmet", - "displayName": "Hide the 'Get started with Outlook' control in the task pane", - "options": [ - { - "id": "com.apple.managedclient.preferences_userpreference_maxchecklistdisplaydurationmet_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_userpreference_maxchecklistdisplaydurationmet_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_usesystemprintdialog", - "displayName": "Print using system print dialog", - "options": [ - { - "id": "com.apple.managedclient.preferences_usesystemprintdialog_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_usesystemprintdialog_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_vbaobjectmodelistrusted", - "displayName": "Allow macros to modify Visual Basic projects", - "options": [ - { - "id": "com.apple.managedclient.preferences_vbaobjectmodelistrusted_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_vbaobjectmodelistrusted_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_verticaltabsallowed", - "displayName": "Configures availability of a vertical layout for tabs on the side of the browser", - "options": [ - { - "id": "com.apple.managedclient.preferences_verticaltabsallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_verticaltabsallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_videocaptureallowed", - "displayName": "Allow or block video capture", - "options": [ - { - "id": "com.apple.managedclient.preferences_videocaptureallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_videocaptureallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_videocaptureallowedurls", - "displayName": "Sites that can access video capture devices without requesting permission", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_visualbasicentirelydisabled", - "displayName": "Prevent all Visual Basic macros from executing", - "options": [ - { - "id": "com.apple.managedclient.preferences_visualbasicentirelydisabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_visualbasicentirelydisabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_visualbasicmacroexecutionstate", - "displayName": "Visual Basic macro policy", - "options": [ - { - "id": "com.apple.managedclient.preferences_visualbasicmacroexecutionstate_0", - "displayName": "Macros disabled by default, with warning to enable", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_visualbasicmacroexecutionstate_1", - "displayName": "Disable all macros", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_visualbasicmacroexecutionstate_2", - "displayName": "Always allow macros to run (potentially dangerous)", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_visualsearchenabled", - "displayName": "Visual search enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_visualsearchenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_visualsearchenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_walletdonationenabled", - "displayName": "Wallet Donation Enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_walletdonationenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_walletdonationenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_weather_update_automatically", - "displayName": "Disable automatic updating of weather location", - "options": [ - { - "id": "com.apple.managedclient.preferences_weather_update_automatically_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_weather_update_automatically_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_webappinstallforcelist", - "displayName": "Web App Install Force List", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_webappinstallforcelist_item_create_desktop_shortcut", - "displayName": "Create desktop shortcut", - "options": [ - { - "id": "com.apple.managedclient.preferences_webappinstallforcelist_item_create_desktop_shortcut_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webappinstallforcelist_item_create_desktop_shortcut_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_webappinstallforcelist_item_default_launch_container", - "displayName": "Default launch container", - "options": [ - { - "id": "com.apple.managedclient.preferences_webappinstallforcelist_item_default_launch_container_0", - "displayName": "tab", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webappinstallforcelist_item_default_launch_container_1", - "displayName": "window", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_webappinstallforcelist_item_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_webcaptureenabled", - "displayName": "Enable web capture feature in Microsoft Edge", - "options": [ - { - "id": "com.apple.managedclient.preferences_webcaptureenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webcaptureenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_webcomponentsv0enabled", - "displayName": "Re-enable Web Components v0 API until M84.", - "options": [ - { - "id": "com.apple.managedclient.preferences_webcomponentsv0enabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webcomponentsv0enabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_webdriveroverridesincompatiblepolicies", - "displayName": "Allow WebDriver to Override Incompatible Policies", - "options": [ - { - "id": "com.apple.managedclient.preferences_webdriveroverridesincompatiblepolicies_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webdriveroverridesincompatiblepolicies_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_webhidallowalldevicesforurls", - "displayName": "Allow listed sites to connect to any HID device", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_webhidaskforurls", - "displayName": "Allow the WebHID API on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_webhidblockedforurls", - "displayName": "Block the WebHID API on these sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_webrtcallowlegacytlsprotocols", - "displayName": "Allow legacy TLS/DTLS downgrade in WebRTC", - "options": [ - { - "id": "com.apple.managedclient.preferences_webrtcallowlegacytlsprotocols_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webrtcallowlegacytlsprotocols_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_webrtclocalhostiphandling", - "displayName": "Restrict exposure of local IP address by WebRTC", - "options": [ - { - "id": "com.apple.managedclient.preferences_webrtclocalhostiphandling_0", - "displayName": "Allow all interfaces. This exposes the local IP address", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webrtclocalhostiphandling_1", - "displayName": "Allow public and private interfaces over http default route. This exposes the local IP address", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webrtclocalhostiphandling_2", - "displayName": "Allow public interface over http default route. This doesn't expose the local IP address", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_webrtclocalhostiphandling_3", - "displayName": "Use TCP unless proxy server supports UDP. This doesn't expose the local IP address", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_webrtclocalipsallowedurls", - "displayName": "Manage exposure of local IP addressess by WebRTC", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_webrtcudpportrange", - "displayName": "Restrict the range of local UDP ports used by WebRTC", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_webusbaskforurls", - "displayName": "Allow WebUSB on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_webusbblockedforurls", - "displayName": "Block WebUSB on specific sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_weeklyconfiguration", - "displayName": "Weekly scheduled scan configuration", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_weeklyconfiguration_dayofweek", - "displayName": "Day of week", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_weeklyconfiguration_scantype", - "displayName": "Scan type", - "options": [ - { - "id": "com.apple.managedclient.preferences_weeklyconfiguration_scantype_0", - "displayName": "quick", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_weeklyconfiguration_scantype_1", - "displayName": "full", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_weeklyconfiguration_timeofday", - "displayName": "Time of day", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_windowcaptureallowedbyorigins", - "displayName": "Allow Window and Tab capture by these origins", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_windowmanagementallowedforurls", - "displayName": "Allow Window Management permission on specified sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_windowmanagementblockedforurls", - "displayName": "Block Window Management permission on specified sites", - "options": null - }, - { - "id": "com.apple.managedclient.preferences_wpadquickcheckenabled", - "displayName": "Set WPAD optimization", - "options": [ - { - "id": "com.apple.managedclient.preferences_wpadquickcheckenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_wpadquickcheckenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_zstdcontentencodingenabled", - "displayName": "Enable zstd content encoding support", - "options": [ - { - "id": "com.apple.managedclient.preferences_zstdcontentencodingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_zstdcontentencodingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.managedclient.preferences_aadwebsitessousingthisprofileenabled", - "displayName": "Single sign-on for work or school sites using this profile enabled", - "options": [ - { - "id": "com.apple.managedclient.preferences_aadwebsitessousingthisprofileenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.managedclient.preferences_aadwebsitessousingthisprofileenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_cachedaccounts.askforsecuretokenauthbypass", - "displayName": "Ask For Secure Token Auth Bypass", - "options": [ - { - "id": "com.apple.mcx_cachedaccounts.askforsecuretokenauthbypass_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_cachedaccounts.askforsecuretokenauthbypass_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_cachedaccounts.expiry.delete.disusedseconds", - "displayName": "Expiry Delete Disused Seconds", - "options": null - }, - { - "id": "com.apple.mcx_cachedaccounts.warnoncreate.allownever", - "displayName": "Warn On Create Allow Never", - "options": [ - { - "id": "com.apple.mcx_cachedaccounts.warnoncreate.allownever_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_cachedaccounts.warnoncreate.allownever_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.cachedaccounts.createatlogin", - "displayName": "Create At Login", - "options": [ - { - "id": "com.apple.mcx_com.apple.cachedaccounts.createatlogin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.cachedaccounts.createatlogin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.cachedaccounts.warnoncreate", - "displayName": "Warn On Create", - "options": [ - { - "id": "com.apple.mcx_com.apple.cachedaccounts.warnoncreate_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.cachedaccounts.warnoncreate_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower", - "displayName": "Desktop Power", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_automatic restart on power loss", - "displayName": "Automatic Restart On Power Loss", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_automatic restart on power loss_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_automatic restart on power loss_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_disk sleep timer", - "displayName": "Disk Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_display sleep timer", - "displayName": "Display Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_dynamic power step", - "displayName": "Dynamic Power Step", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_dynamic power step_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_dynamic power step_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_reduce processor speed", - "displayName": "Reduce Processor Speed", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_reduce processor speed_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_reduce processor speed_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_system sleep timer", - "displayName": "System Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on lan", - "displayName": "Wake on LAN", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on lan_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on lan_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on modem ring", - "displayName": "Wake On Modem Ring", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on modem ring_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.acpower_wake on modem ring_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule", - "displayName": "Desktop Schedule", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff", - "displayName": "Repeating Power Off", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype", - "displayName": "Event Type", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_0", - "displayName": "Wake", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_1", - "displayName": "Power On", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_2", - "displayName": "Wake Power On", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_3", - "displayName": "Sleep", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_4", - "displayName": "Shutdown", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_eventtype_5", - "displayName": "Restart", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_time", - "displayName": "Time", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays", - "displayName": "Weekdays", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_0", - "displayName": "Mon", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_1", - "displayName": "Tue", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_2", - "displayName": "Wed", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_3", - "displayName": "Thu", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_4", - "displayName": "Fri", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_5", - "displayName": "Sat", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweroff_weekdays_6", - "displayName": "Sun", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron", - "displayName": "Repeating Power On", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype", - "displayName": "Event Type", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_0", - "displayName": "Wake", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_1", - "displayName": "Power On", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_2", - "displayName": "Wake Power On", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_3", - "displayName": "Sleep", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_4", - "displayName": "Shutdown", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_eventtype_5", - "displayName": "Restart", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_time", - "displayName": "Time", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays", - "displayName": "Weekdays", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_0", - "displayName": "Mon", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_1", - "displayName": "Tue", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_2", - "displayName": "Wed", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_3", - "displayName": "Thu", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_4", - "displayName": "Fri", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_5", - "displayName": "Sat", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.desktop.schedule_repeatingpoweron_weekdays_6", - "displayName": "Sun", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower", - "displayName": "Laptop Power", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_automatic restart on power loss", - "displayName": "Automatic Restart On Power Loss", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_automatic restart on power loss_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_automatic restart on power loss_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_disk sleep timer", - "displayName": "Disk Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_display sleep timer", - "displayName": "Display Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_dynamic power step", - "displayName": "Dynamic Power Step", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_dynamic power step_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_dynamic power step_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_reduce processor speed", - "displayName": "Reduce Processor Speed", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_reduce processor speed_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_reduce processor speed_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_system sleep timer", - "displayName": "System Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_wake on lan", - "displayName": "Wake on LAN", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_wake on lan_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_wake on lan_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_wake on modem ring", - "displayName": "Wake On Modem Ring", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_wake on modem ring_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.acpower_wake on modem ring_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower", - "displayName": "Laptop Battery Power", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_automatic restart on power loss", - "displayName": "Automatic Restart On Power Loss", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_automatic restart on power loss_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_automatic restart on power loss_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_disk sleep timer", - "displayName": "Disk Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_display sleep timer", - "displayName": "Display Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_dynamic power step", - "displayName": "Dynamic Power Step", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_dynamic power step_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_dynamic power step_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_reduce processor speed", - "displayName": "Reduce Processor Speed", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_reduce processor speed_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_reduce processor speed_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_system sleep timer", - "displayName": "System Sleep Timer", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on lan", - "displayName": "Wake on LAN", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on lan_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on lan_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on modem ring", - "displayName": "Wake On Modem Ring", - "options": [ - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on modem ring_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_com.apple.energysaver.portable.batterypower_wake on modem ring_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_com.apple.mcx-accounts", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.mcx-energysaver", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.mcx-fdefilevaultoptions", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.mcx-mobileaccounts", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcx_com.apple.mcx-timeserver", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcx_destroyfvkeyonstandby", - "displayName": "Destroy FV Key On Standby", - "options": [ - { - "id": "com.apple.mcx_destroyfvkeyonstandby_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_destroyfvkeyonstandby_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_disableguestaccount", - "displayName": "Disable Guest Account", - "options": [ - { - "id": "com.apple.mcx_disableguestaccount_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_disableguestaccount_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_dontallowfdedisable", - "displayName": "Prevent FileVault From Being Disabled", - "options": [ - { - "id": "com.apple.mcx_dontallowfdedisable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_dontallowfdedisable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_dontallowfdeenable", - "displayName": "Prevent FileVault From Being Enabled", - "options": [ - { - "id": "com.apple.mcx_dontallowfdeenable_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_dontallowfdeenable_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_enableguestaccount", - "displayName": "Enable Guest Account", - "options": [ - { - "id": "com.apple.mcx_enableguestaccount_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_enableguestaccount_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_sleepdisabled", - "displayName": "Sleep Disabled", - "options": [ - { - "id": "com.apple.mcx_sleepdisabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx_sleepdisabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx_timeserver", - "displayName": "Time Server", - "options": null - }, - { - "id": "com.apple.mcx_timezone", - "displayName": "Time Zone", - "options": null - }, - { - "id": "com.apple.mcx.filevault2_com.apple.mcx.filevault2", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcx.filevault2_defer", - "displayName": "Defer", - "options": { - "id": "com.apple.mcx.filevault2_defer_true", - "displayName": "Enabled", - "description": null - } - }, - { - "id": "com.apple.mcx.filevault2_deferdontaskatuserlogout", - "displayName": "Defer Dont Ask At User Logout", - "options": [ - { - "id": "com.apple.mcx.filevault2_deferdontaskatuserlogout_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_deferdontaskatuserlogout_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.filevault2_deferforceatuserloginmaxbypassattempts", - "displayName": "Defer Force At User Login Max Bypass Attempts", - "options": null - }, - { - "id": "com.apple.mcx.filevault2_enable", - "displayName": "Enable", - "options": [ - { - "id": "com.apple.mcx.filevault2_enable_0", - "displayName": "On", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_enable_1", - "displayName": "Off", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.filevault2_forceenableinsetupassistant", - "displayName": "Force Enable In Setup Assistant", - "options": [ - { - "id": "com.apple.mcx.filevault2_forceenableinsetupassistant_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_forceenableinsetupassistant_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.filevault2_outputpath", - "displayName": "Output Path", - "options": null - }, - { - "id": "com.apple.mcx.filevault2_password", - "displayName": "Password", - "options": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths", - "displayName": "Recovery Key Rotation In Months", - "options": [ - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_0", - "displayName": "Not configured", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_1", - "displayName": "1 month", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_2", - "displayName": "2 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_3", - "displayName": "3 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_4", - "displayName": "4 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_5", - "displayName": "5 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_6", - "displayName": "6 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_7", - "displayName": "7 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_8", - "displayName": "8 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_9", - "displayName": "9 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_10", - "displayName": "10 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_11", - "displayName": "11 months", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_recoverykeyrotationinmonths_12", - "displayName": "12 months", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.filevault2_showrecoverykey", - "displayName": "Show Recovery Key", - "options": [ - { - "id": "com.apple.mcx.filevault2_showrecoverykey_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_showrecoverykey_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.filevault2_usekeychain", - "displayName": "Use Keychain", - "options": [ - { - "id": "com.apple.mcx.filevault2_usekeychain_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_usekeychain_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.filevault2_userecoverykey", - "displayName": "Use Recovery Key", - "options": { - "id": "com.apple.mcx.filevault2_userecoverykey_true", - "displayName": "Enabled", - "description": null - } - }, - { - "id": "com.apple.mcx.filevault2_userentersmissinginfo", - "displayName": "User Enters Missing Info", - "options": [ - { - "id": "com.apple.mcx.filevault2_userentersmissinginfo_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx.filevault2_userentersmissinginfo_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.filevault2_username", - "displayName": "Username", - "options": null - }, - { - "id": "com.apple.mcx.timemachine_autobackup", - "displayName": "Auto Backup", - "options": [ - { - "id": "com.apple.mcx.timemachine_autobackup_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx.timemachine_autobackup_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.timemachine_backupallvolumes", - "displayName": "Backup All Volumes", - "options": [ - { - "id": "com.apple.mcx.timemachine_backupallvolumes_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx.timemachine_backupallvolumes_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.timemachine_backupdesturl", - "displayName": "Backup Destination URL", - "options": null - }, - { - "id": "com.apple.mcx.timemachine_backupsizemb", - "displayName": "Backup Size MB", - "options": null - }, - { - "id": "com.apple.mcx.timemachine_backupskipsys", - "displayName": "Backup Skip System", - "options": [ - { - "id": "com.apple.mcx.timemachine_backupskipsys_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx.timemachine_backupskipsys_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.timemachine_basepaths", - "displayName": "Base Paths", - "options": null - }, - { - "id": "com.apple.mcx.timemachine_com.apple.mcx.timemachine", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcx.timemachine_mobilebackups", - "displayName": "Mobile Backups", - "options": [ - { - "id": "com.apple.mcx.timemachine_mobilebackups_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcx.timemachine_mobilebackups_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcx.timemachine_skippaths", - "displayName": "Skip Paths", - "options": null - }, - { - "id": "com.apple.mcxmenuextras_airport.menu", - "displayName": "AirPort", - "options": [ - { - "id": "com.apple.mcxmenuextras_airport.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_airport.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_battery.menu", - "displayName": "Battery", - "options": [ - { - "id": "com.apple.mcxmenuextras_battery.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_battery.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_bluetooth.menu", - "displayName": "Bluetooth", - "options": [ - { - "id": "com.apple.mcxmenuextras_bluetooth.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_bluetooth.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_clock.menu", - "displayName": "Clock", - "options": [ - { - "id": "com.apple.mcxmenuextras_clock.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_clock.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_com.apple.mcxmenuextras", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcxmenuextras_cpu.menu", - "displayName": "CPU", - "options": [ - { - "id": "com.apple.mcxmenuextras_cpu.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_cpu.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_delayseconds", - "displayName": "Delay Seconds", - "options": null - }, - { - "id": "com.apple.mcxmenuextras_displays.menu", - "displayName": "Displays", - "options": [ - { - "id": "com.apple.mcxmenuextras_displays.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_displays.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_eject.menu", - "displayName": "Eject", - "options": [ - { - "id": "com.apple.mcxmenuextras_eject.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_eject.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_fax.menu", - "displayName": "Fax", - "options": [ - { - "id": "com.apple.mcxmenuextras_fax.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_fax.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_homesync.menu", - "displayName": "HomeSync", - "options": [ - { - "id": "com.apple.mcxmenuextras_homesync.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_homesync.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_ichat.menu", - "displayName": "iChat", - "options": [ - { - "id": "com.apple.mcxmenuextras_ichat.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_ichat.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_ink.menu", - "displayName": "Ink", - "options": [ - { - "id": "com.apple.mcxmenuextras_ink.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_ink.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_irda.menu", - "displayName": "IrDA", - "options": [ - { - "id": "com.apple.mcxmenuextras_irda.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_irda.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_maxwaitseconds", - "displayName": "Max Wait Seconds", - "options": null - }, - { - "id": "com.apple.mcxmenuextras_pccard.menu", - "displayName": "PCCard", - "options": [ - { - "id": "com.apple.mcxmenuextras_pccard.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_pccard.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_ppp.menu", - "displayName": "PPP", - "options": [ - { - "id": "com.apple.mcxmenuextras_ppp.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_ppp.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_pppoe.menu", - "displayName": "PPPoE", - "options": [ - { - "id": "com.apple.mcxmenuextras_pppoe.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_pppoe.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_remotedesktop.menu", - "displayName": "Remote Desktop", - "options": [ - { - "id": "com.apple.mcxmenuextras_remotedesktop.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_remotedesktop.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_script menu.menu", - "displayName": "Script Menu", - "options": [ - { - "id": "com.apple.mcxmenuextras_script menu.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_script menu.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_spaces.menu", - "displayName": "Spaces", - "options": [ - { - "id": "com.apple.mcxmenuextras_spaces.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_spaces.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_sync.menu", - "displayName": "Sync", - "options": [ - { - "id": "com.apple.mcxmenuextras_sync.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_sync.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_textinput.menu", - "displayName": "Text Input", - "options": [ - { - "id": "com.apple.mcxmenuextras_textinput.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_textinput.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_timemachine.menu", - "displayName": "TimeMachine", - "options": [ - { - "id": "com.apple.mcxmenuextras_timemachine.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_timemachine.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_universalaccess.menu", - "displayName": "Universal Access", - "options": [ - { - "id": "com.apple.mcxmenuextras_universalaccess.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_universalaccess.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_user.menu", - "displayName": "User", - "options": [ - { - "id": "com.apple.mcxmenuextras_user.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_user.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_volume.menu", - "displayName": "Volume", - "options": [ - { - "id": "com.apple.mcxmenuextras_volume.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_volume.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_vpn.menu", - "displayName": "VPN", - "options": [ - { - "id": "com.apple.mcxmenuextras_vpn.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_vpn.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxmenuextras_wwan.menu", - "displayName": "WWAN", - "options": [ - { - "id": "com.apple.mcxmenuextras_wwan.menu_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxmenuextras_wwan.menu_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxprinting_allowlocalprinters", - "displayName": "Allow Local Printers", - "options": [ - { - "id": "com.apple.mcxprinting_allowlocalprinters_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxprinting_allowlocalprinters_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxprinting_com.apple.mcxprinting", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mcxprinting_defaultprinter", - "displayName": "Default Printer", - "options": null - }, - { - "id": "com.apple.mcxprinting_defaultprinter_deviceuri", - "displayName": "Device URI", - "options": null - }, - { - "id": "com.apple.mcxprinting_defaultprinter_displayname", - "displayName": "Display Name", - "options": null - }, - { - "id": "com.apple.mcxprinting_footerfontname", - "displayName": "Footer Font Name", - "options": null - }, - { - "id": "com.apple.mcxprinting_footerfontsize", - "displayName": "Footer Font Size", - "options": null - }, - { - "id": "com.apple.mcxprinting_printfooter", - "displayName": "Print Footer", - "options": [ - { - "id": "com.apple.mcxprinting_printfooter_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxprinting_printfooter_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxprinting_printmacaddress", - "displayName": "Print MAC Address", - "options": [ - { - "id": "com.apple.mcxprinting_printmacaddress_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxprinting_printmacaddress_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxprinting_requireadmintoaddprinters", - "displayName": "Require Admin To Add Printers", - "options": [ - { - "id": "com.apple.mcxprinting_requireadmintoaddprinters_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxprinting_requireadmintoaddprinters_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxprinting_requireadmintoprintlocally", - "displayName": "Require Admin To Print Locally", - "options": [ - { - "id": "com.apple.mcxprinting_requireadmintoprintlocally_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxprinting_requireadmintoprintlocally_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxprinting_showonlymanagedprinters", - "displayName": "Show Only Managed Printers", - "options": [ - { - "id": "com.apple.mcxprinting_showonlymanagedprinters_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxprinting_showonlymanagedprinters_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mcxprinting_userprinterlist", - "displayName": "User Printer List", - "options": null - }, - { - "id": "com.apple.mcxprinting_userprinterlist_printer", - "displayName": "Printer", - "options": null - }, - { - "id": "com.apple.mcxprinting_userprinterlist_printer_deviceuri", - "displayName": "Device URI", - "options": null - }, - { - "id": "com.apple.mcxprinting_userprinterlist_printer_displayname", - "displayName": "Display Name", - "options": null - }, - { - "id": "com.apple.mcxprinting_userprinterlist_printer_location", - "displayName": "Location", - "options": null - }, - { - "id": "com.apple.mcxprinting_userprinterlist_printer_model", - "displayName": "Model", - "options": null - }, - { - "id": "com.apple.mcxprinting_userprinterlist_printer_ppdurl", - "displayName": "PPD URL", - "options": null - }, - { - "id": "com.apple.mcxprinting_userprinterlist_printer_printerlocked", - "displayName": "Printer Locked", - "options": [ - { - "id": "com.apple.mcxprinting_userprinterlist_printer_printerlocked_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mcxprinting_userprinterlist_printer_printerlocked_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_allowsimple", - "displayName": "Allow Simple Passcode", - "options": [ - { - "id": "com.apple.mobiledevice.passwordpolicy_allowsimple_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_allowsimple_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_changeatnextauth", - "displayName": "Change At Next Auth", - "options": [ - { - "id": "com.apple.mobiledevice.passwordpolicy_changeatnextauth_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_changeatnextauth_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_com.apple.mobiledevice.passwordpolicy", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_customregex", - "displayName": "Custom Regex", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_customregex_passwordcontentdescription", - "displayName": "Password Content Description", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_customregex_passwordcontentdescription_generickey", - "displayName": "Description", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_customregex_passwordcontentdescription_generickey_keytobereplaced", - "displayName": "Password Content Description", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_customregex_passwordcontentregex", - "displayName": "Password Content Regex", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_forcepin", - "displayName": "Force PIN", - "options": [ - { - "id": "com.apple.mobiledevice.passwordpolicy_forcepin_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_forcepin_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_maxfailedattempts", - "displayName": "Max Failed Attempts", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_maxgraceperiod", - "displayName": "Max Grace Period", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_maxinactivity", - "displayName": "Max Inactivity", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_maxpinageindays", - "displayName": "Max PIN Age In Days", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_mincomplexchars", - "displayName": "Min Complex Characters", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_minlength", - "displayName": "Min Length", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_minutesuntilfailedloginreset", - "displayName": "Minutes Until Failed Login Reset", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_pinhistory", - "displayName": "PIN History", - "options": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_requirealphanumeric", - "displayName": "Require Alphanumeric Passcode", - "options": [ - { - "id": "com.apple.mobiledevice.passwordpolicy_requirealphanumeric_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.mobiledevice.passwordpolicy_requirealphanumeric_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.networkusagerules_applicationrules", - "displayName": "Application Rules", - "options": null - }, - { - "id": "com.apple.networkusagerules_applicationrules_item_allowcellulardata", - "displayName": "Allow Cellular Data", - "options": [ - { - "id": "com.apple.networkusagerules_applicationrules_item_allowcellulardata_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.networkusagerules_applicationrules_item_allowcellulardata_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.networkusagerules_applicationrules_item_allowroamingcellulardata", - "displayName": "Allow Roaming Cellular Data", - "options": [ - { - "id": "com.apple.networkusagerules_applicationrules_item_allowroamingcellulardata_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.networkusagerules_applicationrules_item_allowroamingcellulardata_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.networkusagerules_applicationrules_item_appidentifiermatches", - "displayName": "App Identifier Matches", - "options": null - }, - { - "id": "com.apple.networkusagerules_com.apple.networkusagerules", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.networkusagerules_simrules", - "displayName": "SIM Rules", - "options": null - }, - { - "id": "com.apple.networkusagerules_simrules_item_iccids", - "displayName": "ICCI Ds", - "options": null - }, - { - "id": "com.apple.networkusagerules_simrules_item_wifiassistpolicy", - "displayName": "Wi Fi Assist Policy", - "options": [ - { - "id": "com.apple.networkusagerules_simrules_item_wifiassistpolicy_0", - "displayName": "2", - "description": null - }, - { - "id": "com.apple.networkusagerules_simrules_item_wifiassistpolicy_1", - "displayName": "3", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_com.apple.notificationsettings", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings", - "displayName": "Notification Settings", - "options": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_alerttype", - "displayName": "Alert Type", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_alerttype_0", - "displayName": "None", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_alerttype_1", - "displayName": "Temporary Banner", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_alerttype_2", - "displayName": "Persistent Banner", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_badgesenabled", - "displayName": "Badges Enabled", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_badgesenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_badgesenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_bundleidentifier", - "displayName": "Bundle Identifier", - "options": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_criticalalertenabled", - "displayName": "Critical Alert Enabled", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_criticalalertenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_criticalalertenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_groupingtype", - "displayName": "Grouping Type", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_groupingtype_0", - "displayName": "Automatic: Group notifications into app-specified groups", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_groupingtype_1", - "displayName": "By app: Group notifications into one group", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_groupingtype_2", - "displayName": "Off: Don't group notifications", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_notificationsenabled", - "displayName": "Notifications Enabled", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_notificationsenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_notificationsenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_previewtype", - "displayName": "Preview Type", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_previewtype_0", - "displayName": "Always: Previews will be shown when the device is locked and unlocked", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_previewtype_1", - "displayName": "When Unlocked: Previews will only be shown when the device is unlocked", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_previewtype_2", - "displayName": "Never: Previews will never be shown", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_showincarplay", - "displayName": "Show In Car Play", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_showincarplay_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_showincarplay_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_showinlockscreen", - "displayName": "Show In Lock Screen", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_showinlockscreen_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_showinlockscreen_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_showinnotificationcenter", - "displayName": "Show In Notification Center", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_showinnotificationcenter_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_showinnotificationcenter_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_soundsenabled", - "displayName": "Sounds Enabled", - "options": [ - { - "id": "com.apple.notificationsettings_notificationsettings_item_soundsenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.notificationsettings_notificationsettings_item_soundsenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.nsextension_allowedextensions", - "displayName": "Allowed Extensions", - "options": null - }, - { - "id": "com.apple.nsextension_com.apple.nsextension", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.nsextension_deniedextensionpoints", - "displayName": "Denied Extension Points", - "options": null - }, - { - "id": "com.apple.nsextension_deniedextensions", - "displayName": "Denied Extensions", - "options": null - }, - { - "id": "com.apple.preference.security_com.apple.preference.security", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.preference.security_dontallowfirewallui", - "displayName": "Do Not Allow Firewall UI", - "options": [ - { - "id": "com.apple.preference.security_dontallowfirewallui_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.preference.security_dontallowfirewallui_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.preference.security_dontallowlockmessageui", - "displayName": "Do Not Allow Lock Message UI", - "options": [ - { - "id": "com.apple.preference.security_dontallowlockmessageui_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.preference.security_dontallowlockmessageui_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.preference.security_dontallowpasswordresetui", - "displayName": "Do Not Allow Password Reset UI", - "options": [ - { - "id": "com.apple.preference.security_dontallowpasswordresetui_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.preference.security_dontallowpasswordresetui_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.preference.users_com.apple.preference.users", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.preference.users_disableusingicloudpassword", - "displayName": "Disable Using iCloud Password", - "options": [ - { - "id": "com.apple.preference.users_disableusingicloudpassword_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.preference.users_disableusingicloudpassword_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.profileremovalpassword_com.apple.profileremovalpassword", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.profileremovalpassword_removalpassword", - "displayName": "Removal Password", - "options": null - }, - { - "id": "com.apple.proxy.http.global_com.apple.proxy.http.global", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.proxy.http.global_proxycaptiveloginallowed", - "displayName": "Proxy Captive Login Allowed", - "options": [ - { - "id": "com.apple.proxy.http.global_proxycaptiveloginallowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.proxy.http.global_proxycaptiveloginallowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.proxy.http.global_proxypacfallbackallowed", - "displayName": "Proxy PAC Fallback Allowed", - "options": [ - { - "id": "com.apple.proxy.http.global_proxypacfallbackallowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.proxy.http.global_proxypacfallbackallowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.proxy.http.global_proxypacurl", - "displayName": "Proxy PAC URL", - "options": null - }, - { - "id": "com.apple.proxy.http.global_proxypassword", - "displayName": "Proxy Password", - "options": null - }, - { - "id": "com.apple.proxy.http.global_proxyserver", - "displayName": "Proxy Server", - "options": null - }, - { - "id": "com.apple.proxy.http.global_proxyserverport", - "displayName": "Proxy Server Port", - "options": null - }, - { - "id": "com.apple.proxy.http.global_proxytype", - "displayName": "Proxy Type", - "options": [ - { - "id": "com.apple.proxy.http.global_proxytype_0", - "displayName": "Manual", - "description": null - }, - { - "id": "com.apple.proxy.http.global_proxytype_1", - "displayName": "Auto", - "description": null - } - ] - }, - { - "id": "com.apple.proxy.http.global_proxyusername", - "displayName": "Proxy Username", - "options": null - }, - { - "id": "com.apple.screensaver_askforpassword", - "displayName": "Ask For Password", - "options": [ - { - "id": "com.apple.screensaver_askforpassword_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.screensaver_askforpassword_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.screensaver_askforpassworddelay", - "displayName": "Ask For Password Delay", - "options": null - }, - { - "id": "com.apple.screensaver_com.apple.screensaver", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.screensaver_loginwindowidletime", - "displayName": "Login Window Idle Time", - "options": null - }, - { - "id": "com.apple.screensaver_loginwindowmodulepath", - "displayName": "Login Window Module Path", - "options": null - }, - { - "id": "com.apple.screensaver_modulename", - "displayName": "Module Name", - "options": null - }, - { - "id": "com.apple.screensaver.user_com.apple.screensaver.user", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.screensaver.user_idletime", - "displayName": "Idle Time", - "options": null - }, - { - "id": "com.apple.screensaver.user_modulename", - "displayName": "Module Name", - "options": null - }, - { - "id": "com.apple.screensaver.user_modulepath", - "displayName": "Module Path", - "options": null - }, - { - "id": "com.apple.security.fderecoverykeyescrow_com.apple.security.fderecoverykeyescrow", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.security.fderecoverykeyescrow_devicekey", - "displayName": "Device Key", - "options": null - }, - { - "id": "com.apple.security.fderecoverykeyescrow_location", - "displayName": "Location", - "options": null - }, - { - "id": "com.apple.security.firewall_allowsigned", - "displayName": "Allow Signed", - "options": [ - { - "id": "com.apple.security.firewall_allowsigned_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.firewall_allowsigned_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.firewall_allowsignedapp", - "displayName": "Allow Signed App", - "options": [ - { - "id": "com.apple.security.firewall_allowsignedapp_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.firewall_allowsignedapp_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.firewall_applications", - "displayName": "Applications", - "options": null - }, - { - "id": "com.apple.security.firewall_applications_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.security.firewall_applications_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.firewall_applications_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.firewall_applications_item_bundleid", - "displayName": "Bundle ID", - "options": null - }, - { - "id": "com.apple.security.firewall_blockallincoming", - "displayName": "Block All Incoming", - "options": [ - { - "id": "com.apple.security.firewall_blockallincoming_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.firewall_blockallincoming_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.firewall_com.apple.security.firewall", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.security.firewall_enablefirewall", - "displayName": "Enable Firewall", - "options": [ - { - "id": "com.apple.security.firewall_enablefirewall_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.firewall_enablefirewall_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.firewall_enablelogging", - "displayName": "Enable Logging (Deprecated)", - "options": [ - { - "id": "com.apple.security.firewall_enablelogging_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.firewall_enablelogging_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.firewall_enablestealthmode", - "displayName": "Enable Stealth Mode", - "options": [ - { - "id": "com.apple.security.firewall_enablestealthmode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.firewall_enablestealthmode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.firewall_loggingoption", - "displayName": "Logging Option (Deprecated)", - "options": [ - { - "id": "com.apple.security.firewall_loggingoption_0", - "displayName": "throttled", - "description": null - }, - { - "id": "com.apple.security.firewall_loggingoption_1", - "displayName": "brief", - "description": null - }, - { - "id": "com.apple.security.firewall_loggingoption_2", - "displayName": "detail", - "description": null - } - ] - }, - { - "id": "com.apple.security.smartcard_allowsmartcard", - "displayName": "Allow Smart Card", - "options": [ - { - "id": "com.apple.security.smartcard_allowsmartcard_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.smartcard_allowsmartcard_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.smartcard_checkcertificatetrust", - "displayName": "Check Certificate Trust", - "options": [ - { - "id": "com.apple.security.smartcard_checkcertificatetrust_0", - "displayName": "Disable certificate trust check", - "description": null - }, - { - "id": "com.apple.security.smartcard_checkcertificatetrust_1", - "displayName": "Enable certificate trust check and standard validity check", - "description": null - }, - { - "id": "com.apple.security.smartcard_checkcertificatetrust_2", - "displayName": "Enable certificate trust check and soft revocation check", - "description": null - }, - { - "id": "com.apple.security.smartcard_checkcertificatetrust_3", - "displayName": "Enable certificate trust check and hard revocation check", - "description": null - } - ] - }, - { - "id": "com.apple.security.smartcard_com.apple.security.smartcard", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.security.smartcard_enforcesmartcard", - "displayName": "Enforce Smart Card", - "options": [ - { - "id": "com.apple.security.smartcard_enforcesmartcard_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.smartcard_enforcesmartcard_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.smartcard_onecardperuser", - "displayName": "One Card Per User", - "options": [ - { - "id": "com.apple.security.smartcard_onecardperuser_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.smartcard_onecardperuser_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.security.smartcard_tokenremovalaction", - "displayName": "Token Removal Action", - "options": [ - { - "id": "com.apple.security.smartcard_tokenremovalaction_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.security.smartcard_tokenremovalaction_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.security.smartcard_userpairing", - "displayName": "User Pairing", - "options": [ - { - "id": "com.apple.security.smartcard_userpairing_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.security.smartcard_userpairing_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.servicemanagement_com.apple.servicemanagement", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.servicemanagement_rules", - "displayName": "Rules", - "options": null - }, - { - "id": "com.apple.servicemanagement_rules_item_comment", - "displayName": "Comment", - "options": null - }, - { - "id": "com.apple.servicemanagement_rules_item_ruletype", - "displayName": "Rule Type", - "options": [ - { - "id": "com.apple.servicemanagement_rules_item_ruletype_0", - "displayName": "Bundle Identifier", - "description": null - }, - { - "id": "com.apple.servicemanagement_rules_item_ruletype_1", - "displayName": "Bundle Identifier Prefix", - "description": null - }, - { - "id": "com.apple.servicemanagement_rules_item_ruletype_2", - "displayName": "Label", - "description": null - }, - { - "id": "com.apple.servicemanagement_rules_item_ruletype_3", - "displayName": "Label Prefix", - "description": null - }, - { - "id": "com.apple.servicemanagement_rules_item_ruletype_4", - "displayName": "Team Identifier", - "description": null - } - ] - }, - { - "id": "com.apple.servicemanagement_rules_item_rulevalue", - "displayName": "Rule Value", - "options": null - }, - { - "id": "com.apple.servicemanagement_rules_item_teamidentifier", - "displayName": "Team Identifier", - "options": null - }, - { - "id": "com.apple.shareddeviceconfiguration_assettaginformation", - "displayName": "Asset Tag Information", - "options": null - }, - { - "id": "com.apple.shareddeviceconfiguration_com.apple.shareddeviceconfiguration", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.shareddeviceconfiguration_lockscreenfootnote", - "displayName": "Lock Screen Footnote", - "options": null - }, - { - "id": "com.apple.softwareupdate_allowprereleaseinstallation", - "displayName": "Allow Pre Release Installation (Deprecated)", - "options": [ - { - "id": "com.apple.softwareupdate_allowprereleaseinstallation_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.softwareupdate_allowprereleaseinstallation_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.softwareupdate_automaticallyinstallappupdates", - "displayName": "Automatically Install App Updates (Deprecated)", - "options": [ - { - "id": "com.apple.softwareupdate_automaticallyinstallappupdates_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.softwareupdate_automaticallyinstallappupdates_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.softwareupdate_automaticallyinstallmacosupdates", - "displayName": "Automatically Install Mac OS Updates (Deprecated)", - "options": [ - { - "id": "com.apple.softwareupdate_automaticallyinstallmacosupdates_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.softwareupdate_automaticallyinstallmacosupdates_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.softwareupdate_automaticcheckenabled", - "displayName": "Automatic Check Enabled (Deprecated)", - "options": [ - { - "id": "com.apple.softwareupdate_automaticcheckenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.softwareupdate_automaticcheckenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.softwareupdate_automaticdownload", - "displayName": "Automatic Download (Deprecated)", - "options": [ - { - "id": "com.apple.softwareupdate_automaticdownload_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.softwareupdate_automaticdownload_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.softwareupdate_com.apple.softwareupdate", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.softwareupdate_configdatainstall", - "displayName": "Config Data Install (Deprecated)", - "options": [ - { - "id": "com.apple.softwareupdate_configdatainstall_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.softwareupdate_configdatainstall_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.softwareupdate_criticalupdateinstall", - "displayName": "Critical Update Install (Deprecated)", - "options": [ - { - "id": "com.apple.softwareupdate_criticalupdateinstall_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.softwareupdate_criticalupdateinstall_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.softwareupdate_restrict-software-update-require-admin-to-install", - "displayName": "Restrict Software Update Require Admin To Install (Deprecated)", - "options": [ - { - "id": "com.apple.softwareupdate_restrict-software-update-require-admin-to-install_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.softwareupdate_restrict-software-update-require-admin-to-install_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.subscribedcalendar.account_com.apple.subscribedcalendar.account", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.subscribedcalendar.account_subcalaccountdescription", - "displayName": "Account Description", - "options": null - }, - { - "id": "com.apple.subscribedcalendar.account_subcalaccounthostname", - "displayName": "Account Host Name", - "options": null - }, - { - "id": "com.apple.subscribedcalendar.account_subcalaccountpassword", - "displayName": "Account Password", - "options": null - }, - { - "id": "com.apple.subscribedcalendar.account_subcalaccountusername", - "displayName": "Account Username", - "options": null - }, - { - "id": "com.apple.subscribedcalendar.account_subcalaccountusessl", - "displayName": "Account Use SSL", - "options": [ - { - "id": "com.apple.subscribedcalendar.account_subcalaccountusessl_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.subscribedcalendar.account_subcalaccountusessl_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.system-extension-policy_allowedsystemextensions", - "displayName": "Allowed System Extensions", - "options": null - }, - { - "id": "com.apple.system-extension-policy_allowedsystemextensions_generickey", - "displayName": "Allowed System Extensions", - "options": null - }, - { - "id": "com.apple.system-extension-policy_allowedsystemextensions_generickey_keytobereplaced", - "displayName": "Team Identifier", - "options": null - }, - { - "id": "com.apple.system-extension-policy_allowedsystemextensiontypes", - "displayName": "Allowed System Extension Types", - "options": null - }, - { - "id": "com.apple.system-extension-policy_allowedsystemextensiontypes_generickey", - "displayName": "Allowed System Extension Types", - "options": null - }, - { - "id": "com.apple.system-extension-policy_allowedsystemextensiontypes_generickey_keytobereplaced", - "displayName": "Team Identifier", - "options": null - }, - { - "id": "com.apple.system-extension-policy_allowedteamidentifiers", - "displayName": "Allowed Team Identifiers", - "options": null - }, - { - "id": "com.apple.system-extension-policy_allowuseroverrides", - "displayName": "Allow User Overrides", - "options": [ - { - "id": "com.apple.system-extension-policy_allowuseroverrides_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.system-extension-policy_allowuseroverrides_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.system-extension-policy_com.apple.system-extension-policy", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.system-extension-policy_nonremovablefromuisystemextensions", - "displayName": "Non Removable From UI System Extensions", - "options": null - }, - { - "id": "com.apple.system-extension-policy_nonremovablefromuisystemextensions_generickey", - "displayName": "ANY", - "options": null - }, - { - "id": "com.apple.system-extension-policy_nonremovablefromuisystemextensions_generickey_keytobereplaced", - "displayName": "Non Removable From UI System Extensions", - "options": null - }, - { - "id": "com.apple.system-extension-policy_nonremovablesystemextensions", - "displayName": "Non Removable System Extensions", - "options": null - }, - { - "id": "com.apple.system-extension-policy_nonremovablesystemextensions_generickey", - "displayName": "ANY", - "options": null - }, - { - "id": "com.apple.system-extension-policy_nonremovablesystemextensions_generickey_keytobereplaced", - "displayName": "Non Removable System Extensions", - "options": null - }, - { - "id": "com.apple.system-extension-policy_removablesystemextensions", - "displayName": "Removable System Extensions", - "options": null - }, - { - "id": "com.apple.system-extension-policy_removablesystemextensions_generickey", - "displayName": "Removable System Extensions", - "options": null - }, - { - "id": "com.apple.system-extension-policy_removablesystemextensions_generickey_keytobereplaced", - "displayName": "Team Identifier", - "options": null - }, - { - "id": "com.apple.system.logging_com.apple.system.logging", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.system.logging_system", - "displayName": "System", - "options": null - }, - { - "id": "com.apple.system.logging_system_enable-private-data", - "displayName": "Enable Private Data", - "options": [ - { - "id": "com.apple.system.logging_system_enable-private-data_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.system.logging_system_enable-private-data_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_com.apple.systemconfiguration", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies", - "displayName": "Proxies", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_exceptionslist", - "displayName": "Exceptions List", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_fallbackallowed", - "displayName": "Fall Back Allowed", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_fallbackallowed_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_fallbackallowed_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_ftpenable", - "displayName": "FTP Enable", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_ftpenable_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_ftpenable_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_ftppassive", - "displayName": "FTP Passive", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_ftppassive_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_ftppassive_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_ftpport", - "displayName": "FTP Port", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_ftpproxy", - "displayName": "FTP Proxy", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_gopherenable", - "displayName": "Gopher Enable", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_gopherenable_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_gopherenable_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_gopherport", - "displayName": "Gopher Port", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_gopherproxy", - "displayName": "Gopher Proxy", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_httpenable", - "displayName": "HTTP Enable", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_httpenable_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_httpenable_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_httpport", - "displayName": "HTTP Port", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_httpproxy", - "displayName": "HTTP Proxy", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_httpsenable", - "displayName": "HTTPS Enable", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_httpsenable_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_httpsenable_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_httpsport", - "displayName": "HTTPS Port", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_httpsproxy", - "displayName": "HTTPS Proxy", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_proxyautoconfigenable", - "displayName": "Proxy Auto Config Enable", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_proxyautoconfigenable_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_proxyautoconfigenable_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_proxyautoconfigurlstring", - "displayName": "Proxy Auto Config URL String", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_proxycaptiveloginallowed", - "displayName": "Proxy Captive Login Allowed", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_proxycaptiveloginallowed_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_proxycaptiveloginallowed_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_rtspenable", - "displayName": "RTSP Enable", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_rtspenable_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_rtspenable_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_rtspport", - "displayName": "RTSP Port", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_rtspproxy", - "displayName": "RTSP Proxy", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_socksenable", - "displayName": "SOCKS Enable", - "options": [ - { - "id": "com.apple.systemconfiguration_proxies_socksenable_0", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systemconfiguration_proxies_socksenable_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systemconfiguration_proxies_socksportinteger", - "displayName": "SOCKS Port Integer", - "options": null - }, - { - "id": "com.apple.systemconfiguration_proxies_socksproxy", - "displayName": "SOCKS Proxy", - "options": null - }, - { - "id": "com.apple.systempolicy.control_allowidentifieddevelopers", - "displayName": "Allow Identified Developers", - "options": [ - { - "id": "com.apple.systempolicy.control_allowidentifieddevelopers_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systempolicy.control_allowidentifieddevelopers_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systempolicy.control_com.apple.systempolicy.control", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.systempolicy.control_enableassessment", - "displayName": "Enable Assessment", - "options": [ - { - "id": "com.apple.systempolicy.control_enableassessment_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systempolicy.control_enableassessment_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systempolicy.control_enablexprotectmalwareupload", - "displayName": "Enable XProtect Malware Upload", - "options": [ - { - "id": "com.apple.systempolicy.control_enablexprotectmalwareupload_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.systempolicy.control_enablexprotectmalwareupload_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.systempolicy.managed_com.apple.systempolicy.managed", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.systempolicy.managed_disableoverride", - "displayName": "Disable Override", - "options": [ - { - "id": "com.apple.systempolicy.managed_disableoverride_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.systempolicy.managed_disableoverride_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.systempreferences_com.apple.systempreferences", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.systempreferences_disabledpreferencepanes", - "displayName": "Disabled Preference Panes", - "options": null - }, - { - "id": "com.apple.systempreferences_enabledpreferencepanes", - "displayName": "Enabled Preference Panes", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_com.apple.tcc.configuration-profile-policy", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services", - "displayName": "Services", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility", - "displayName": "Accessibility", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_accessibility_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook", - "displayName": "Address Book", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_addressbook_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents", - "displayName": "Apple Events", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceivercoderequirement", - "displayName": "AE Receiver Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceiveridentifier", - "displayName": "AE Receiver Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceiveridentifiertype", - "displayName": "AE Receiver Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceiveridentifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_aereceiveridentifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_appleevents_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways", - "displayName": "Bluetooth Always", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceivercoderequirement", - "displayName": "AE Receiver Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceiveridentifier", - "displayName": "AE Receiver Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceiveridentifiertype", - "displayName": "AE Receiver Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceiveridentifiertype_0", - "displayName": "bundleID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_aereceiveridentifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_allowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_allowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_authorization_2", - "displayName": "AllowStandardUserToSetSystemService", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_comment", - "displayName": "Comment", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_identifiertype_0", - "displayName": "bundleID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_staticcode_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_bluetoothalways_item_staticcode_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar", - "displayName": "Calendar", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_calendar_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera", - "displayName": "Camera", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_camera_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence", - "displayName": "File Provider Presence", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_fileproviderpresence_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent", - "displayName": "Listen Event", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_allowed", - "displayName": "Allowed (Deprecated)", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_listenevent_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary", - "displayName": "Media Library", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_medialibrary_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone", - "displayName": "Microphone", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_microphone_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos", - "displayName": "Photos", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_photos_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent", - "displayName": "Post Event", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_postevent_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders", - "displayName": "Reminders", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_reminders_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture", - "displayName": "Screen Capture", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_allowed", - "displayName": "Allowed (Deprecated)", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_screencapture_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition", - "displayName": "Speech Recognition", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_speechrecognition_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles", - "displayName": "System Policy All Files", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyallfiles_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles", - "displayName": "System Policy App Bundles", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappbundles_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata", - "displayName": "System Policy App Data", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_allowed_false", - "displayName": "Blocked", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_allowed_true", - "displayName": "Allowed", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_authorization_2", - "displayName": "AllowStandardUserToSetSystemService", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_identifiertype_0", - "displayName": "bundleID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_staticcode_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyappdata_item_staticcode_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder", - "displayName": "System Policy Desktop Folder", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydesktopfolder_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder", - "displayName": "System Policy Documents Folder", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydocumentsfolder_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder", - "displayName": "System Policy Downloads Folder", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicydownloadsfolder_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes", - "displayName": "System Policy Network Volumes", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicynetworkvolumes_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes", - "displayName": "System Policy Removable Volumes", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicyremovablevolumes_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles", - "displayName": "System Policy Sys Admin Files", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_allowed", - "displayName": "Allowed", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_allowed_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_allowed_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_authorization", - "displayName": "Authorization", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_authorization_0", - "displayName": "Allow", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_authorization_1", - "displayName": "Deny", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_authorization_2", - "displayName": "Allow Standard User To Set System Service", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_coderequirement", - "displayName": "Code Requirement", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_identifier", - "displayName": "Identifier", - "options": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_identifiertype", - "displayName": "Identifier Type", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_identifiertype_0", - "displayName": "bundle ID", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_identifiertype_1", - "displayName": "path", - "description": null - } - ] - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_staticcode", - "displayName": "Static Code", - "options": [ - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_staticcode_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.tcc.configuration-profile-policy_services_systempolicysysadminfiles_item_staticcode_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_closeviewfarpoint", - "displayName": "Close View Far Point", - "options": null - }, - { - "id": "com.apple.universalaccess_closeviewhotkeysenabled", - "displayName": "Close View Hotkeys Enabled", - "options": [ - { - "id": "com.apple.universalaccess_closeviewhotkeysenabled_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_closeviewhotkeysenabled_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_closeviewnearpoint", - "displayName": "Close View Near Point", - "options": null - }, - { - "id": "com.apple.universalaccess_closeviewscrollwheeltoggle", - "displayName": "Close View Scroll Wheel Toggle", - "options": [ - { - "id": "com.apple.universalaccess_closeviewscrollwheeltoggle_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_closeviewscrollwheeltoggle_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_closeviewsmoothimages", - "displayName": "Close View Smooth Images", - "options": [ - { - "id": "com.apple.universalaccess_closeviewsmoothimages_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_closeviewsmoothimages_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_com.apple.universalaccess", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.universalaccess_contrast", - "displayName": "Contrast", - "options": null - }, - { - "id": "com.apple.universalaccess_flashscreen", - "displayName": "Flash Screen", - "options": [ - { - "id": "com.apple.universalaccess_flashscreen_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_flashscreen_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_mousedriver", - "displayName": "Mouse Driver", - "options": [ - { - "id": "com.apple.universalaccess_mousedriver_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_mousedriver_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_mousedrivercursorsize", - "displayName": "Mouse Driver Cursor Size", - "options": null - }, - { - "id": "com.apple.universalaccess_mousedriverignoretrackpad", - "displayName": "Mouse Driver Ignore Trackpad", - "options": [ - { - "id": "com.apple.universalaccess_mousedriverignoretrackpad_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_mousedriverignoretrackpad_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_mousedriverinitialdelay", - "displayName": "Mouse Driver Initial Delay", - "options": null - }, - { - "id": "com.apple.universalaccess_mousedrivermaxspeed", - "displayName": "Mouse Driver Max Speed", - "options": null - }, - { - "id": "com.apple.universalaccess_slowkey", - "displayName": "Slow Key", - "options": [ - { - "id": "com.apple.universalaccess_slowkey_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_slowkey_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_slowkeybeepon", - "displayName": "Slow Key Beep On", - "options": [ - { - "id": "com.apple.universalaccess_slowkeybeepon_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_slowkeybeepon_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_slowkeydelay", - "displayName": "Slow Key Delay", - "options": null - }, - { - "id": "com.apple.universalaccess_stereoasmono", - "displayName": "Stereo as Mono", - "options": [ - { - "id": "com.apple.universalaccess_stereoasmono_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_stereoasmono_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_stickykey", - "displayName": "Sticky Key", - "options": [ - { - "id": "com.apple.universalaccess_stickykey_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_stickykey_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_stickykeybeeponmodifier", - "displayName": "Sticky Key Beep On Modifier", - "options": [ - { - "id": "com.apple.universalaccess_stickykeybeeponmodifier_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_stickykeybeeponmodifier_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_stickykeyshowwindow", - "displayName": "Sticky Key Show Window", - "options": [ - { - "id": "com.apple.universalaccess_stickykeyshowwindow_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_stickykeyshowwindow_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_voiceoveronoffkey", - "displayName": "Voice Over On Off Key", - "options": [ - { - "id": "com.apple.universalaccess_voiceoveronoffkey_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_voiceoveronoffkey_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.universalaccess_whiteonblack", - "displayName": "White On Black", - "options": [ - { - "id": "com.apple.universalaccess_whiteonblack_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.universalaccess_whiteonblack_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_allowlistbookmarks", - "displayName": "Allow List Bookmarks", - "options": null - }, - { - "id": "com.apple.webcontent-filter_allowlistbookmarks_item_title", - "displayName": "Title", - "options": null - }, - { - "id": "com.apple.webcontent-filter_allowlistbookmarks_item_url", - "displayName": "URL", - "options": null - }, - { - "id": "com.apple.webcontent-filter_autofilterenabled", - "displayName": "Auto Filter Enabled", - "options": [ - { - "id": "com.apple.webcontent-filter_autofilterenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.webcontent-filter_autofilterenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_com.apple.webcontent-filter", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.webcontent-filter_denylisturls", - "displayName": "Deny List URLs", - "options": null - }, - { - "id": "com.apple.webcontent-filter_filterbrowsers", - "displayName": "Filter Browsers", - "options": [ - { - "id": "com.apple.webcontent-filter_filterbrowsers_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.webcontent-filter_filterbrowsers_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_filterdataproviderbundleidentifier", - "displayName": "Filter Data Provider Bundle Identifier", - "options": null - }, - { - "id": "com.apple.webcontent-filter_filterdataproviderdesignatedrequirement", - "displayName": "Filter Data Provider Designated Requirement", - "options": null - }, - { - "id": "com.apple.webcontent-filter_filtergrade", - "displayName": "Filter Grade", - "options": [ - { - "id": "com.apple.webcontent-filter_filtergrade_0", - "displayName": "firewall", - "description": null - }, - { - "id": "com.apple.webcontent-filter_filtergrade_1", - "displayName": "inspector", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_filterpacketproviderbundleidentifier", - "displayName": "Filter Packet Provider Bundle Identifier", - "options": null - }, - { - "id": "com.apple.webcontent-filter_filterpacketproviderdesignatedrequirement", - "displayName": "Filter Packet Provider Designated Requirement", - "options": null - }, - { - "id": "com.apple.webcontent-filter_filterpackets", - "displayName": "Filter Packets", - "options": [ - { - "id": "com.apple.webcontent-filter_filterpackets_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.webcontent-filter_filterpackets_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_filtersockets", - "displayName": "Filter Sockets", - "options": [ - { - "id": "com.apple.webcontent-filter_filtersockets_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.webcontent-filter_filtersockets_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_filtertype", - "displayName": "Filter Type", - "options": [ - { - "id": "com.apple.webcontent-filter_filtertype_0", - "displayName": "Built-in", - "description": null - }, - { - "id": "com.apple.webcontent-filter_filtertype_1", - "displayName": "Plug-in", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_hidedenylisturls", - "displayName": "Hide Deny List UR Ls", - "options": [ - { - "id": "com.apple.webcontent-filter_hidedenylisturls_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.webcontent-filter_hidedenylisturls_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_organization", - "displayName": "Organization", - "options": null - }, - { - "id": "com.apple.webcontent-filter_password", - "displayName": "Password", - "options": null - }, - { - "id": "com.apple.webcontent-filter_permittedurls", - "displayName": "Permitted URLs", - "options": null - }, - { - "id": "com.apple.webcontent-filter_pluginbundleid", - "displayName": "Plugin Bundle ID", - "options": null - }, - { - "id": "com.apple.webcontent-filter_safarihistoryretentionenabled", - "displayName": "Safari History Retention Enabled", - "options": [ - { - "id": "com.apple.webcontent-filter_safarihistoryretentionenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.apple.webcontent-filter_safarihistoryretentionenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.apple.webcontent-filter_serveraddress", - "displayName": "Server Address", - "options": null - }, - { - "id": "com.apple.webcontent-filter_userdefinedname", - "displayName": "User Defined Name", - "options": null - }, - { - "id": "com.apple.webcontent-filter_username", - "displayName": "User Name", - "options": null - }, - { - "id": "com.apple.xsan_com.apple.xsan", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.xsan_fsnameservers", - "displayName": "FS Name Servers", - "options": null - }, - { - "id": "com.apple.xsan_sanauthmethod", - "displayName": "San Auth Method", - "options": { - "id": "com.apple.xsan_sanauthmethod_0", - "displayName": "auth_secret", - "description": null - } - }, - { - "id": "com.apple.xsan_sanconfigurls", - "displayName": "San Config URLs", - "options": null - }, - { - "id": "com.apple.xsan_sanname", - "displayName": "San Name", - "options": null - }, - { - "id": "com.apple.xsan_sharedsecret", - "displayName": "Shared Secret", - "options": null - }, - { - "id": "com.apple.xsan.preferences_com.apple.xsan.preferences", - "displayName": "Top Level Setting Group Collection", - "options": null - }, - { - "id": "com.apple.xsan.preferences_denydlc", - "displayName": "Deny DLC", - "options": null - }, - { - "id": "com.apple.xsan.preferences_denymount", - "displayName": "Deny Mount", - "options": null - }, - { - "id": "com.apple.xsan.preferences_onlymount", - "displayName": "Only Mount", - "options": null - }, - { - "id": "com.apple.xsan.preferences_preferdlc", - "displayName": "Prefer DLC", - "options": null - }, - { - "id": "com.apple.xsan.preferences_usedlc", - "displayName": "Use DLC", - "options": [ - { - "id": "com.apple.xsan.preferences_usedlc_false", - "displayName": "False", - "description": null - }, - { - "id": "com.apple.xsan.preferences_usedlc_true", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.accesscontrolallowmethodsincorspreflightspecconformant", - "displayName": "Make Access-Control-Allow-Methods matching in CORS preflight spec conformant", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.accesscontrolallowmethodsincorspreflightspecconformant_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.accesscontrolallowmethodsincorspreflightspecconformant_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.accessibilityimagelabelsenabled", - "displayName": "Let screen reader users get image descriptions from Microsoft", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.accessibilityimagelabelsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.accessibilityimagelabelsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.additionalsearchboxenabled", - "displayName": "Enable additional search box in browser", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.additionalsearchboxenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.additionalsearchboxenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbareditingenabled", - "displayName": "Configure address bar editing", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbareditingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbareditingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbarmicrosoftsearchinbingproviderenabled", - "displayName": "Enable Microsoft Search in Bing suggestions in the address bar (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbarmicrosoftsearchinbingproviderenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbarmicrosoftsearchinbingproviderenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbartrendingsuggestenabled", - "displayName": "Enable Microsoft Bing trending suggestions in the address bar", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbartrendingsuggestenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbartrendingsuggestenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbarworksearchresultsenabled", - "displayName": "Enable Work Search suggestions in the address bar", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbarworksearchresultsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.addressbarworksearchresultsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.adssettingforintrusiveadssites", - "displayName": "Ads setting for sites with intrusive ads", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.adssettingforintrusiveadssites_allowads", - "displayName": "Allow ads on all sites", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.adssettingforintrusiveadssites_blockads", - "displayName": "Block ads on sites with intrusive ads. (Default value)", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.adstransparencyenabled", - "displayName": "Configure if the ads transparency feature is enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.adstransparencyenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.adstransparencyenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.aigenthemesenabled", - "displayName": "Enables DALL-E themes generation", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.aigenthemesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.aigenthemesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowbackforwardcacheforcachecontrolnostorepageenabled", - "displayName": "Allow pages with Cache-Control: no-store header to enter back/forward cache", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowbackforwardcacheforcachecontrolnostorepageenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowbackforwardcacheforcachecontrolnostorepageenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowdeletingbrowserhistory", - "displayName": "Enable deleting browser and download history", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowdeletingbrowserhistory_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowdeletingbrowserhistory_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alloweddomainsforapps", - "displayName": "Define domains allowed to access Google Workspace", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowgamesmenu", - "displayName": "Allow users to access the games menu (Deprecated)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowgamesmenu_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowgamesmenu_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowpopupsduringpageunload", - "displayName": "Allows a page to show popups during its unloading (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowpopupsduringpageunload_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowpopupsduringpageunload_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsurfgame", - "displayName": "Allow surf game", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsurfgame_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsurfgame_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsyncxhrinpagedismissal", - "displayName": "Allow pages to send synchronous XHR requests during page dismissal (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsyncxhrinpagedismissal_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsyncxhrinpagedismissal_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsystemnotifications", - "displayName": "Allows system notifications", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsystemnotifications_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowsystemnotifications_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowtrackingforurls", - "displayName": "Configure tracking prevention exceptions for specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowwebauthnwithbrokentlscerts", - "displayName": "Allow Web Authentication requests on sites with broken TLS certificates.", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowwebauthnwithbrokentlscerts_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.allowwebauthnwithbrokentlscerts_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled", - "displayName": "Suggest similar pages when a webpage can't be found", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_recommended", - "displayName": "Suggest similar pages when a webpage can't be found (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alternateerrorpagesenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alwaysopenpdfexternally", - "displayName": "Always open PDF files externally", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alwaysopenpdfexternally_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.alwaysopenpdfexternally_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled", - "displayName": "Get user confirmation before closing a browser window with multiple tabs", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled_recommended", - "displayName": "Get user confirmation before closing a browser window with multiple tabs (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.askbeforecloseenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.audiocaptureallowedurls", - "displayName": "Sites that can access audio capture devices without requesting permission", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled", - "displayName": "Configure auto discard sleeping tabs", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_recommended", - "displayName": "Configure auto discard sleeping tabs (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autodiscardsleepingtabsenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled", - "displayName": "Enable AutoFill for addresses", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_recommended", - "displayName": "Enable AutoFill for addresses (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofilladdressenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled", - "displayName": "Enable AutoFill for payment instruments", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_recommended", - "displayName": "Enable AutoFill for payment instruments (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillcreditcardenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled", - "displayName": "Save and fill memberships", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_recommended", - "displayName": "Save and fill memberships (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autofillmembershipsenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autolaunchprotocolscomponentenabled", - "displayName": "AutoLaunch Protocols Component Enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autolaunchprotocolscomponentenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autolaunchprotocolscomponentenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autolaunchprotocolsfromorigins", - "displayName": "Define a list of protocols that can launch an external application from listed origins without prompting the user", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automaticdownloadsallowedforurls", - "displayName": "Allow multiple automatic downloads in quick succession on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automaticdownloadsblockedforurls", - "displayName": "Block multiple automatic downloads in quick succession on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automaticfullscreenallowedforurls", - "displayName": "Allow automatic full screen on specified sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automaticfullscreenblockedforurls", - "displayName": "Block automatic full screen on specified sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault", - "displayName": "Configure Automatic HTTPS (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_disableautomatichttps", - "displayName": "Automatic HTTPS functionality is disabled.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_upgradecapabledomains", - "displayName": "(Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_alwaysupgrade", - "displayName": "All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_recommended", - "displayName": "Configure Automatic HTTPS (Obsolete) (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_recommended_disableautomatichttps", - "displayName": "Automatic HTTPS functionality is disabled.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_recommended_upgradecapabledomains", - "displayName": "(Deprecated) Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.automatichttpsdefault_recommended_alwaysupgrade", - "displayName": "All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autoopenallowedforurls", - "displayName": "URLs where AutoOpenFileTypes can apply", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autoopenfiletypes", - "displayName": "List of file types that should be automatically opened on download", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autoplayallowed", - "displayName": "Allow media autoplay for websites", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autoplayallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autoplayallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autoplayallowlist", - "displayName": "Allow media autoplay on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.autoselectcertificateforurls", - "displayName": "Automatically select client certificates for these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.backgroundtemplatelistupdatesenabled", - "displayName": "Enables background updates to the list of available templates for Collections and other features that use templates (Deprecated)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.backgroundtemplatelistupdatesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.backgroundtemplatelistupdatesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.beforeunloadeventcancelbypreventdefaultenabled", - "displayName": "Control the behavior for the cancel dialog produced by the beforeunload event (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.beforeunloadeventcancelbypreventdefaultenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.beforeunloadeventcancelbypreventdefaultenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockexternalextensions", - "displayName": "Blocks external extensions from being installed", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockexternalextensions_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockexternalextensions_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies", - "displayName": "Block third party cookies", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_recommended", - "displayName": "Block third party cookies (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blockthirdpartycookies_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blocktruncatedcookies", - "displayName": "Block truncated cookies (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blocktruncatedcookies_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.blocktruncatedcookies_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.browsernetworktimequeriesenabled", - "displayName": "Allow queries to a Browser Network Time service", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.browsernetworktimequeriesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.browsernetworktimequeriesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.browsingdatalifetime", - "displayName": "Browsing Data Lifetime Settings", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.builtinaiapisenabled", - "displayName": "Allow pages to use the built-in AI APIs.", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.builtinaiapisenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.builtinaiapisenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cacertificatemanagementallowed", - "displayName": "Allow users to manage installed CA certificates.", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cacertificatemanagementallowed_all", - "displayName": "Allow users to manage all certificates", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cacertificatemanagementallowed_useronly", - "displayName": "Allow users to manage user certificates", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cacertificatemanagementallowed_none", - "displayName": "Disallow users from managing certificates", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cacertificates", - "displayName": "TLS server certificates that should be trusted by Microsoft Edge", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cacertificateswithconstraints", - "displayName": "TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cadistrustedcertificates", - "displayName": "TLS certificates that should be distrusted by Microsoft Edge for server authentication", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cahintcertificates", - "displayName": "TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.caplatformintegrationenabled", - "displayName": "Use user-added TLS certificates from platform trust stores for server authentication", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.caplatformintegrationenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.caplatformintegrationenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.certificatetransparencyenforcementdisabledforcas", - "displayName": "Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.certificatetransparencyenforcementdisabledforlegacycas", - "displayName": "Disable Certificate Transparency enforcement for a list of legacy certificate authorities (Obsolete)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit", - "displayName": "Clear browsing data when Microsoft Edge closes", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_recommended", - "displayName": "Clear browsing data when Microsoft Edge closes (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearbrowsingdataonexit_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit", - "displayName": "Clear cached images and files when Microsoft Edge closes", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_recommended", - "displayName": "Clear cached images and files when Microsoft Edge closes (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clearcachedimagesandfilesonexit_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clipboardallowedforurls", - "displayName": "Allow clipboard use on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.clipboardblockedforurls", - "displayName": "Block clipboard use on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist", - "displayName": "Block access to a specified list of services and export targets in Collections", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_pinterest_suggestions", - "displayName": "Pinterest suggestions", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_collections_share", - "displayName": "Sharing of Collections", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_local_pdf", - "displayName": "Save local PDFs in Collections to OneDrive", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_send_word", - "displayName": "Send collection to Microsoft Word", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_send_excel", - "displayName": "Send collection to Microsoft Excel", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_send_onenote", - "displayName": "Send collection to Microsoft OneNote", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.collectionsservicesandexportsblocklist_send_pinterest", - "displayName": "Send collection to Pinterest", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.composeinlineenabled", - "displayName": "Control access to Microsoft 365 Copilot writing assistance in Microsoft Edge for Business", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.composeinlineenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.composeinlineenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.compressiondictionarytransportenabled", - "displayName": "Enable compression dictionary transport support", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.compressiondictionarytransportenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.compressiondictionarytransportenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configuredonottrack", - "displayName": "Configure Do Not Track", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configuredonottrack_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configuredonottrack_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat", - "displayName": "Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_plaintext", - "displayName": "The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_titledhyperlink", - "displayName": "Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_webpreview", - "displayName": "Coming soon. If set, behaves the same as 'Plain URL'.", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_recommended", - "displayName": "Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_recommended_plaintext", - "displayName": "The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_recommended_titledhyperlink", - "displayName": "Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurefriendlyurlformat_recommended_webpreview", - "displayName": "Coming soon. If set, behaves the same as 'Plain URL'.", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configurekeyboardshortcuts", - "displayName": "Configure the list of commands for which to disable keyboard shortcuts", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configureonlinetexttospeech", - "displayName": "Configure Online Text To Speech", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configureonlinetexttospeech_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configureonlinetexttospeech_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configureshare", - "displayName": "Configure the Share experience", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configureshare_shareallowed", - "displayName": "Allow using the Share experience", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.configureshare_sharedisallowed", - "displayName": "Don't allow using the Share experience", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled", - "displayName": "Configure default state of Allow extensions from other stores setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_recommended", - "displayName": "Configure default state of Allow extensions from other stores setting (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cookiesallowedforurls", - "displayName": "Allow cookies on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cookiesblockedforurls", - "displayName": "Block cookies on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cookiessessiononlyforurls", - "displayName": "Limit cookies from specific websites to the current session", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.copilotcdppagecontext", - "displayName": "Control Copilot with Commercial Data Protection access to page context for Microsoft Entra ID profiles (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.copilotcdppagecontext_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.copilotcdppagecontext_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.copilotpagecontext", - "displayName": "Control Copilot access to page context for Microsoft Entra ID profiles", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.copilotpagecontext_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.copilotpagecontext_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.corsnonwildcardrequestheaderssupport", - "displayName": "CORS non-wildcard request header support enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.corsnonwildcardrequestheaderssupport_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.corsnonwildcardrequestheaderssupport_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.createpasskeysinicloudkeychain", - "displayName": "Control whether passkey creation will default to iCloud Keychain.", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.createpasskeysinicloudkeychain_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.createpasskeysinicloudkeychain_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.crossoriginwebassemblymodulesharingenabled", - "displayName": "Specifies whether WebAssembly modules can be sent cross-origin (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.crossoriginwebassemblymodulesharingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.crossoriginwebassemblymodulesharingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cryptowalletenabled", - "displayName": "Enable CryptoWallet feature (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cryptowalletenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.cryptowalletenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.csscustomstatedeprecatedsyntaxenabled", - "displayName": "Controls whether the deprecated :--foo syntax for CSS custom state is enabled (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.csscustomstatedeprecatedsyntaxenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.csscustomstatedeprecatedsyntaxenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.customhelplink", - "displayName": "Specify custom help link", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.dataurlinsvguseenabled", - "displayName": "Data URL support for SVGUseElement", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.dataurlinsvguseenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.dataurlinsvguseenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultautomaticdownloadssetting", - "displayName": "Default automatic downloads setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultautomaticdownloadssetting_allowautomaticdownloads", - "displayName": "Allow all websites to perform multiple downloads without requiring a user gesture between each download.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultautomaticdownloadssetting_blockautomaticdownloads", - "displayName": "Prevent all websites from performing multiple downloads, even after a user gesture.", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultclipboardsetting", - "displayName": "Default clipboard site permission", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultclipboardsetting_blockclipboard", - "displayName": "Do not allow any site to use the clipboard site permission", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultclipboardsetting_askclipboard", - "displayName": "Allow sites to ask the user to grant the clipboard site permission", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultcookiessetting", - "displayName": "Configure cookies", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultcookiessetting_allowcookies", - "displayName": "Let all sites create cookies", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultcookiessetting_blockcookies", - "displayName": "Don't let any site create cookies", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultcookiessetting_sessiononly", - "displayName": "Keep cookies for the duration of the session, except ones listed in \"SaveCookiesOnExit\"", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemreadguardsetting", - "displayName": "Control use of the File System API for reading", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemreadguardsetting_blockfilesystemread", - "displayName": "Don't allow any site to request read access to files and directories via the File System API", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemreadguardsetting_askfilesystemread", - "displayName": "Allow sites to ask the user to grant read access to files and directories via the File System API", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemwriteguardsetting", - "displayName": "Control use of the File System API for writing", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemwriteguardsetting_blockfilesystemwrite", - "displayName": "Don't allow any site to request write access to files and directories", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultfilesystemwriteguardsetting_askfilesystemwrite", - "displayName": "Allow sites to ask the user to grant write access to files and directories", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultgeolocationsetting", - "displayName": "Default geolocation setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultgeolocationsetting_allowgeolocation", - "displayName": "Allow sites to track users' physical location", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultgeolocationsetting_blockgeolocation", - "displayName": "Don't allow any site to track users' physical location", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultgeolocationsetting_askgeolocation", - "displayName": "Ask whenever a site wants to track users' physical location", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultimagessetting", - "displayName": "Default images setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultimagessetting_allowimages", - "displayName": "Allow all sites to show all images", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultimagessetting_blockimages", - "displayName": "Don't allow any site to show images", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultinsecurecontentsetting", - "displayName": "Control use of insecure content exceptions", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultinsecurecontentsetting_blockinsecurecontent", - "displayName": "Do not allow any site to load mixed content", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultinsecurecontentsetting_allowexceptionsinsecurecontent", - "displayName": "Allow users to add exceptions to allow mixed content", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptjitsetting", - "displayName": "Control use of JavaScript JIT", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptjitsetting_allowjavascriptjit", - "displayName": "Allow any site to run JavaScript JIT", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptjitsetting_blockjavascriptjit", - "displayName": "Do not allow any site to run JavaScript JIT", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptoptimizersetting", - "displayName": "Control use of JavaScript optimizers", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptoptimizersetting_allowjavascriptoptimizer", - "displayName": "Enable advanced JavaScript optimizations on all sites", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptoptimizersetting_blockjavascriptoptimizer", - "displayName": "Disable advanced JavaScript optimizations on all sites", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptsetting", - "displayName": "Default JavaScript setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptsetting_allowjavascript", - "displayName": "Allow all sites to run JavaScript", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultjavascriptsetting_blockjavascript", - "displayName": "Don't allow any site to run JavaScript", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultnotificationssetting", - "displayName": "Default notification setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultnotificationssetting_allownotifications", - "displayName": "Allow sites to show desktop notifications", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultnotificationssetting_blocknotifications", - "displayName": "Don't allow any site to show desktop notifications", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultnotificationssetting_asknotifications", - "displayName": "Ask every time a site wants to show desktop notifications", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultpluginssetting", - "displayName": "Default Adobe Flash setting (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultpluginssetting_blockplugins", - "displayName": "Block the Adobe Flash plugin", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultpluginssetting_clicktoplay", - "displayName": "Click to play", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultpopupssetting", - "displayName": "Default pop-up window setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultpopupssetting_allowpopups", - "displayName": "Allow all sites to show pop-ups", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultpopupssetting_blockpopups", - "displayName": "Do not allow any site to show popups", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultprinterselection", - "displayName": "Default printer selection rules", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidercontextmenuaccessallowed", - "displayName": "Allow default search provider context menu search access", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidercontextmenuaccessallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidercontextmenuaccessallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled", - "displayName": "Enable the default search provider", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled_recommended", - "displayName": "Enable the default search provider (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderencodings", - "displayName": "Default search provider encodings", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderencodings_recommended", - "displayName": "Default search provider encodings (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderimageurl", - "displayName": "Specifies the search-by-image feature for the default search provider", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderimageurl_recommended", - "displayName": "Specifies the search-by-image feature for the default search provider (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderimageurlpostparams", - "displayName": "Parameters for an image URL that uses POST", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderimageurlpostparams_recommended", - "displayName": "Parameters for an image URL that uses POST (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderkeyword", - "displayName": "Default search provider keyword", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchproviderkeyword_recommended", - "displayName": "Default search provider keyword (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidername", - "displayName": "Default search provider name", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidername_recommended", - "displayName": "Default search provider name (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidersearchurl", - "displayName": "Default search provider search URL", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidersearchurl_recommended", - "displayName": "Default search provider search URL (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidersuggesturl", - "displayName": "Default search provider URL for suggestions", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsearchprovidersuggesturl_recommended", - "displayName": "Default search provider URL for suggestions (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsensorssetting", - "displayName": "Default sensors setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsensorssetting_allowsensors", - "displayName": "Allow sites to access sensors", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultsensorssetting_blocksensors", - "displayName": "Do not allow any site to access sensors", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultserialguardsetting", - "displayName": "Control use of the Serial API", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultserialguardsetting_blockserial", - "displayName": "Do not allow any site to request access to serial ports via the Serial API", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultserialguardsetting_askserial", - "displayName": "Allow sites to ask for user permission to access a serial port", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting", - "displayName": "Set the default \"share additional operating system region\" setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_limited", - "displayName": "Limited", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_always", - "displayName": "Always share the OS Regional format", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_never", - "displayName": "Never share the OS Regional format", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_recommended", - "displayName": "Set the default \"share additional operating system region\" setting (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_recommended_limited", - "displayName": "Limited", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_recommended_always", - "displayName": "Always share the OS Regional format", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultshareadditionalosregionsetting_recommended_never", - "displayName": "Never share the OS Regional format", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultthirdpartystoragepartitioningsetting", - "displayName": "Default setting for third-party storage partitioning (Deprecated)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultthirdpartystoragepartitioningsetting_allowpartitioning", - "displayName": "Allow third-party storage partitioning by default.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultthirdpartystoragepartitioningsetting_blockpartitioning", - "displayName": "Disable third-party storage partitioning.", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebbluetoothguardsetting", - "displayName": "Control use of the Web Bluetooth API", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebbluetoothguardsetting_blockwebbluetooth", - "displayName": "Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebbluetoothguardsetting_askwebbluetooth", - "displayName": "Allow sites to ask the user to grant access to a nearby Bluetooth device", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebhidguardsetting", - "displayName": "Control use of the WebHID API", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebhidguardsetting_blockwebhid", - "displayName": "Do not allow any site to request access to HID devices via the WebHID API", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebhidguardsetting_askwebhid", - "displayName": "Allow sites to ask the user to grant access to a HID device", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebusbguardsetting", - "displayName": "Control use of the WebUSB API", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebusbguardsetting_blockwebusb", - "displayName": "Do not allow any site to request access to USB devices via the WebUSB API", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwebusbguardsetting_askwebusb", - "displayName": "Allow sites to ask the user to grant access to a connected USB device", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwindowmanagementsetting", - "displayName": "Default Window Management permission setting", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwindowmanagementsetting_blockwindowmanagement", - "displayName": "Denies the Window Management permission on all sites by default", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.defaultwindowmanagementsetting_askwindowmanagement", - "displayName": "Ask every time a site wants obtain the Window Management permission", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.definepreferredlanguages", - "displayName": "Define an ordered list of preferred languages that websites should display in if the site supports the language", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.delaynavigationsforinitialsitelistdownload", - "displayName": "Require that the Enterprise Mode Site List is available before tab navigation", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.delaynavigationsforinitialsitelistdownload_none", - "displayName": "None", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.delaynavigationsforinitialsitelistdownload_all", - "displayName": "All eligible navigations", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.deletingundecryptablepasswordsenabled", - "displayName": "Enable deleting undecryptable passwords", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.deletingundecryptablepasswordsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.deletingundecryptablepasswordsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailability", - "displayName": "Control where developer tools can be used", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailability_developertoolsdisallowedforforceinstalledextensions", - "displayName": "Block the developer tools on extensions installed by enterprise policy, allow in other contexts", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailability_developertoolsallowed", - "displayName": "Allow using the developer tools", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.developertoolsavailability_developertoolsdisallowed", - "displayName": "Don't allow using the developer tools", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.disable3dapis", - "displayName": "Disable support for 3D graphics APIs", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.disable3dapis_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.disable3dapis_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.discoverpagecontextenabled", - "displayName": "Enable Discover access to page contents for AAD profiles (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.discoverpagecontextenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.discoverpagecontextenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.displaycapturepermissionspolicyenabled", - "displayName": "Specifies whether the display-capture permissions-policy is checked or skipped (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.displaycapturepermissionspolicyenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.displaycapturepermissionspolicyenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.donotsilentlyblockprotocolsfromorigins", - "displayName": "Define a list of protocols that can not be silently blocked by anti-flood protection", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.doubleclickclosetabenabled", - "displayName": "Double Click feature in Microsoft Edge enabled (only available in China)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.doubleclickclosetabenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.doubleclickclosetabenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloaddirectory", - "displayName": "Set download directory", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloaddirectory_recommended", - "displayName": "Set download directory (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions", - "displayName": "Allow download restrictions", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_defaultdownloadsecurity", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_blockdangerousdownloads", - "displayName": "Block malicious downloads and dangerous file types", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_blockpotentiallydangerousdownloads", - "displayName": "Block potentially dangerous or unwanted downloads and dangerous file types", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_blockalldownloads", - "displayName": "Block all downloads", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_blockmaliciousdownloads", - "displayName": "Block malicious downloads", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended", - "displayName": "Allow download restrictions (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_defaultdownloadsecurity", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_blockdangerousdownloads", - "displayName": "Block malicious downloads and dangerous file types", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_blockpotentiallydangerousdownloads", - "displayName": "Block potentially dangerous or unwanted downloads and dangerous file types", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_blockalldownloads", - "displayName": "Block all downloads", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.downloadrestrictions_recommended_blockmaliciousdownloads", - "displayName": "Block malicious downloads", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled", - "displayName": "Allow features to download assets from the Asset Delivery Service", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_recommended", - "displayName": "Allow features to download assets from the Asset Delivery Service (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeassetdeliveryserviceenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled", - "displayName": "Machine learning powered autofill suggestions", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_recommended", - "displayName": "Machine learning powered autofill suggestions (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeautofillmlenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgecollectionsenabled", - "displayName": "Enable the Collections feature", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgecollectionsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgecollectionsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled", - "displayName": "Discover feature In Microsoft Edge (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_recommended", - "displayName": "Discover feature In Microsoft Edge (Obsolete) (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgediscoverenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeedropenabled", - "displayName": "Enable Drop feature in Microsoft Edge", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeedropenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeedropenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeenhanceimagesenabled", - "displayName": "Enhance images enabled (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeenhanceimagesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeenhanceimagesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeentracopilotpagecontext", - "displayName": "Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeentracopilotpagecontext_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeentracopilotpagecontext_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgefollowenabled", - "displayName": "Enable Follow service in Microsoft Edge (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgefollowenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgefollowenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgehistoryaisearchenabled", - "displayName": "Control access to AI-enhanced search in History", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgehistoryaisearchenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgehistoryaisearchenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgemanagementextensionsfeedbackenabled", - "displayName": "Microsoft Edge management extensions feedback enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgemanagementextensionsfeedbackenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgemanagementextensionsfeedbackenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled", - "displayName": "Shopping in Microsoft Edge Enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_recommended", - "displayName": "Shopping in Microsoft Edge Enabled (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeshoppingassistantenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgesidebarappurlhostallowlist", - "displayName": "Allow specific apps to be opened in Microsoft Edge sidebar", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgesidebarappurlhostblocklist", - "displayName": "Control which apps cannot be opened in Microsoft Edge sidebar", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgesidebarappurlhostforcelist", - "displayName": "Control which apps are forced to be shown in Microsoft Edge sidebar", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled", - "displayName": "Enable Wallet Checkout feature", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_recommended", - "displayName": "Enable Wallet Checkout feature (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletcheckoutenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled", - "displayName": "Edge Wallet E-Tree Enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled_recommended", - "displayName": "Edge Wallet E-Tree Enabled (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgewalletetreeenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeworkspacesenabled", - "displayName": "Enable Workspaces", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeworkspacesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.edgeworkspacesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.editfavoritesenabled", - "displayName": "Allows users to edit favorites", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.editfavoritesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.editfavoritesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enabledeprecatedwebplatformfeatures", - "displayName": "Re-enable deprecated web platform features for a limited time (Obsolete)", - "options": { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enabledeprecatedwebplatformfeatures_exampledeprecatedfeature", - "displayName": "Enable ExampleDeprecatedFeature API through 2008/09/02", - "description": null - } - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enablemediarouter", - "displayName": "Enable Google Cast", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enablemediarouter_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enablemediarouter_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode", - "displayName": "Enhance the security state in Microsoft Edge", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode_standardmode", - "displayName": "Standard mode", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode_balancedmode", - "displayName": "Balanced mode", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode_strictmode", - "displayName": "Strict mode", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymode_basicmode", - "displayName": "(Deprecated) Basic mode", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeallowuserbypass", - "displayName": "Allow users to bypass Enhanced Security Mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeallowuserbypass_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeallowuserbypass_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodebypassintranet", - "displayName": "Enhanced Security Mode configuration for Intranet zone sites", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodebypassintranet_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodebypassintranet_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodebypasslistdomains", - "displayName": "Configure the list of domains for which enhance security mode will not be enforced", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeenforcelistdomains", - "displayName": "Configure the list of domains for which enhance security mode will always be enforced", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeindicatoruienabled", - "displayName": "Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeindicatoruienabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeindicatoruienabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeoptoutuxenabled", - "displayName": "Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeoptoutuxenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enhancesecuritymodeoptoutuxenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enterprisehardwareplatformapienabled", - "displayName": "Allow managed extensions to use the Enterprise Hardware Platform API", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enterprisehardwareplatformapienabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enterprisehardwareplatformapienabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enterprisemodesitelistmanagerallowed", - "displayName": "Allow access to the Enterprise Mode Site List Manager tool", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enterprisemodesitelistmanagerallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.enterprisemodesitelistmanagerallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.eventpathenabled", - "displayName": "Re-enable the Event.path API until Microsoft Edge version 115 (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.eventpathenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.eventpathenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.exemptdomainfiletypepairsfromfiletypedownloadwarnings", - "displayName": "Disable download file type extension-based warnings for specified file types on domains (Obsolete)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.exemptfiletypedownloadwarnings", - "displayName": "Disable download file type extension-based warnings for specified file types on domains", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.exemptsmartscreendownloadwarnings", - "displayName": "Disable SmartScreen AppRep based warnings for specified file types on specified domains", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes", - "displayName": "Configure allowed extension types", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_extension", - "displayName": "Extension", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_theme", - "displayName": "Theme", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_user_script", - "displayName": "User script", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_hosted_app", - "displayName": "Hosted app", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_legacy_packaged_app", - "displayName": "Legacy packaged app", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionallowedtypes_platform_app", - "displayName": "Platform app", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensiondevelopermodesettings", - "displayName": "Control the availability of developer mode on extensions page", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensiondevelopermodesettings_allow", - "displayName": "Allow the usage of developer mode on extensions page", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensiondevelopermodesettings_disallow", - "displayName": "Do not allow the usage of developer mode on extensions page", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionextendedbackgroundlifetimeforportconnectionstourls", - "displayName": "Configure a list of origins that grant an extended background lifetime to connecting extensions.", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensioninstallallowlist", - "displayName": "Allow specific extensions to be installed", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensioninstallblocklist", - "displayName": "Control which extensions cannot be installed", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensioninstallforcelist", - "displayName": "Control which extensions are installed silently", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensioninstallsources", - "displayName": "Configure extension and user script install sources", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensioninstalltypeblocklist", - "displayName": "Blocklist for extension install types", - "options": { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensioninstalltypeblocklist_command_line", - "displayName": "Blocks extensions from being loaded from command line", - "description": null - } - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability", - "displayName": "Control Manifest v2 extension availability", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability_default", - "displayName": "Default browser behavior", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability_disable", - "displayName": "Manifest v2 is disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability_enable", - "displayName": "Manifest v2 is enabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionmanifestv2availability_enableforforcedextensions", - "displayName": "Manifest v2 is enabled for forced extensions only", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionsettings", - "displayName": "Configure extension management settings", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled", - "displayName": "Extensions Performance Detector enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_recommended", - "displayName": "Extensions Performance Detector enabled (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.extensionsperformancedetectorenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.externalprotocoldialogshowalwaysopencheckbox", - "displayName": "Show an \"Always open\" checkbox in external protocol dialog", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.externalprotocoldialogshowalwaysopencheckbox_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.externalprotocoldialogshowalwaysopencheckbox_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.familysafetysettingsenabled", - "displayName": "Allow users to configure Family safety and Kids Mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.familysafetysettingsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.familysafetysettingsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled", - "displayName": "Enable favorites bar", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled_recommended", - "displayName": "Enable favorites bar (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.favoritesbarenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.fetchkeepalivedurationsecondsonshutdown", - "displayName": "Fetch keepalive duration on shutdown", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.fileordirectorypickerwithoutgestureallowedfororigins", - "displayName": "Allow file or directory picker APIs to be called without prior user gesture", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.filesystemreadaskforurls", - "displayName": "Allow read access via the File System API on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.filesystemreadblockedforurls", - "displayName": "Block read access via the File System API on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.filesystemwriteaskforurls", - "displayName": "Allow write access to files and directories on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.filesystemwriteblockedforurls", - "displayName": "Block write access to files and directories on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcebingsafesearch", - "displayName": "Enforce Bing SafeSearch", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcebingsafesearch_bingsafesearchnorestrictionsmode", - "displayName": "Don't configure search restrictions in Bing", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcebingsafesearch_bingsafesearchmoderatemode", - "displayName": "Configure moderate search restrictions in Bing", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcebingsafesearch_bingsafesearchstrictmode", - "displayName": "Configure strict search restrictions in Bing", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forceephemeralprofiles", - "displayName": "Enable use of ephemeral profiles", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forceephemeralprofiles_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forceephemeralprofiles_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcegooglesafesearch", - "displayName": "Enforce Google SafeSearch", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcegooglesafesearch_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcegooglesafesearch_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcemajorversiontominorpositioninuseragent", - "displayName": "Enable or disable freezing the User-Agent string at major version 99 (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcemajorversiontominorpositioninuseragent_default", - "displayName": "Default to browser settings for User-Agent string version.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcemajorversiontominorpositioninuseragent_forcedisabled", - "displayName": "The User-Agent string will not freeze the major version.", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcemajorversiontominorpositioninuseragent_forceenabled", - "displayName": "The User-Agent string will freeze the major version as 99 and include the browser's major version in the minor position.", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcesync", - "displayName": "Force synchronization of browser data and do not show the sync consent prompt", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcesync_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcesync_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forcesynctypes", - "displayName": "Configure the list of types that are included for synchronization", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forceyoutuberestrict", - "displayName": "Force minimum YouTube Restricted Mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forceyoutuberestrict_off", - "displayName": "Do not enforce Restricted Mode on YouTube", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forceyoutuberestrict_moderate", - "displayName": "Enforce at least Moderate Restricted Mode on YouTube", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.forceyoutuberestrict_strict", - "displayName": "Enforce Strict Restricted Mode for YouTube", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.fullscreenallowed", - "displayName": "Allow full screen mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.fullscreenallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.fullscreenallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled", - "displayName": "Enable Gamer Mode (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_recommended", - "displayName": "Enable Gamer Mode (Obsolete) (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.gamermodeenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.geolocationblockedforurls", - "displayName": "Block geolocation on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.globallyscopehttpauthcacheenabled", - "displayName": "Enable globally scoped HTTP auth cache", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.globallyscopehttpauthcacheenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.globallyscopehttpauthcacheenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.guidedswitchenabled", - "displayName": "Guided Switch Enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.guidedswitchenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.guidedswitchenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage", - "displayName": "Set the new tab page as the home page", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_recommended", - "displayName": "Set the new tab page as the home page (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.homepageisnewtabpage_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.homepagelocation", - "displayName": "Configure the home page URL", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.homepagelocation_recommended", - "displayName": "Configure the home page URL (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.hstspolicybypasslist", - "displayName": "Configure the list of names that will bypass the HSTS policy check", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpallowlist", - "displayName": "HTTP Allowlist", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode", - "displayName": "Allow HTTPS-Only Mode to be enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_allowed", - "displayName": "Don't restrict users' HTTPS-Only Mode setting", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_disallowed", - "displayName": "Don't allow users to enable any HTTPS-Only Mode", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_force_enabled", - "displayName": "Force enable HTTPS-Only Mode in Strict mode", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpsonlymode_force_balanced_enabled", - "displayName": "Force enable HTTPS-Only Mode in Balanced Mode", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpsupgradesenabled", - "displayName": "Enable automatic HTTPS upgrades", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpsupgradesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.httpsupgradesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled", - "displayName": "Show Hubs Sidebar", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_recommended", - "displayName": "Show Hubs Sidebar (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.hubssidebarenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeout", - "displayName": "Delay before running idle actions", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions", - "displayName": "Actions to run when the computer is idle", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_close_browsers", - "displayName": "Close Browsers", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_browsing_history", - "displayName": "Clear Browsing History", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_download_history", - "displayName": "Clear Download History", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_cookies_and_other_site_data", - "displayName": "Clear Cookies and Other Site Data", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_cached_images_and_files", - "displayName": "Clear Cached Images and Files", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_password_signin", - "displayName": "Clear Password sign in", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_autofill", - "displayName": "Clear Autofill", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_clear_site_settings", - "displayName": "Clear Site Settings", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_reload_pages", - "displayName": "Reload Pages", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_sign_out", - "displayName": "Sign Out", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.idletimeoutactions_close_tabs", - "displayName": "Close Tabs", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.imagesallowedforurls", - "displayName": "Allow images on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.imagesblockedforurls", - "displayName": "Block images on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.immersivereadergrammartoolsenabled", - "displayName": "Enable Grammar Tools feature within Immersive Reader in Microsoft Edge (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.immersivereadergrammartoolsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.immersivereadergrammartoolsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.immersivereaderpicturedictionaryenabled", - "displayName": "Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.immersivereaderpicturedictionaryenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.immersivereaderpicturedictionaryenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata", - "displayName": "Allow importing of autofill form data", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata_recommended", - "displayName": "Allow importing of autofill form data (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importautofillformdata_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings", - "displayName": "Allow importing of browser settings", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_recommended", - "displayName": "Allow importing of browser settings (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importbrowsersettings_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importcookies", - "displayName": "Allow importing of Cookies", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importcookies_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importcookies_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importcookies_recommended", - "displayName": "Allow importing of Cookies (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importcookies_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importcookies_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importextensions", - "displayName": "Allow importing of extensions", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importextensions_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importextensions_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importextensions_recommended", - "displayName": "Allow importing of extensions (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importextensions_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importextensions_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importfavorites", - "displayName": "Allow importing of favorites", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importfavorites_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importfavorites_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importfavorites_recommended", - "displayName": "Allow importing of favorites (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importfavorites_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importfavorites_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhistory", - "displayName": "Allow importing of browsing history", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhistory_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhistory_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhistory_recommended", - "displayName": "Allow importing of browsing history (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhistory_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhistory_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhomepage", - "displayName": "Allow importing of home page settings", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhomepage_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importhomepage_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importoneachlaunch", - "displayName": "Allow import of data from other browsers on each Microsoft Edge launch", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importoneachlaunch_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importoneachlaunch_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importopentabs", - "displayName": "Allow importing of open tabs", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importopentabs_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importopentabs_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importopentabs_recommended", - "displayName": "Allow importing of open tabs (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importopentabs_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importopentabs_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo", - "displayName": "Allow importing of payment info", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_recommended", - "displayName": "Allow importing of payment info (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importpaymentinfo_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords", - "displayName": "Allow importing of saved passwords", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_recommended", - "displayName": "Allow importing of saved passwords (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsavedpasswords_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsearchengine", - "displayName": "Allow importing of search engine settings", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_recommended", - "displayName": "Allow importing of search engine settings (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importsearchengine_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importshortcuts", - "displayName": "Allow importing of shortcuts", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_recommended", - "displayName": "Allow importing of shortcuts (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importshortcuts_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings", - "displayName": "Allow importing of startup page settings", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings_recommended", - "displayName": "Allow importing of startup page settings (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.importstartuppagesettings_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeavailability", - "displayName": "Configure InPrivate mode availability", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeavailability_enabled", - "displayName": "InPrivate mode available", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeavailability_disabled", - "displayName": "InPrivate mode disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.inprivatemodeavailability_forced", - "displayName": "InPrivate mode forced", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecurecontentallowedforurls", - "displayName": "Allow insecure content on specified sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecurecontentblockedforurls", - "displayName": "Block insecure content on specified sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecureformswarningsenabled", - "displayName": "Enable warnings for insecure forms (Deprecated)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecureformswarningsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecureformswarningsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecureprivatenetworkrequestsallowed", - "displayName": "Specifies whether to allow websites to make requests to any network endpoint in an insecure manner. (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecureprivatenetworkrequestsallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecureprivatenetworkrequestsallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.insecureprivatenetworkrequestsallowedforurls", - "displayName": "Allow the listed sites to make requests to more-private network endpoints from in an insecure manner (Obsolete)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwaysuseoscapture", - "displayName": "Always use the OS capture engine to avoid issues with capturing Internet Explorer mode tabs", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwaysuseoscapture_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwaysuseoscapture_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwayswaitforunload", - "displayName": "Wait for Internet Explorer mode tabs to completely unload before ending the browser session", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwayswaitforunload_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationalwayswaitforunload_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcloudneutralsitesreporting", - "displayName": "Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcloudsitelist", - "displayName": "Configure the Enterprise Mode Cloud Site List", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcloudusersitesreporting", - "displayName": "Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes", - "displayName": "Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes_includenone", - "displayName": "Do not send form data or headers", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes_includeformdataonly", - "displayName": "Send form data only", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes_includeheadersonly", - "displayName": "Send additional headers only", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationcomplexnavdatatypes_includeformdataandheaders", - "displayName": "Send form data and additional headers", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationenhancedhangdetection", - "displayName": "Configure enhanced hang detection for Internet Explorer mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationenhancedhangdetection_disabled", - "displayName": "Enhanced hang detection disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationenhancedhangdetection_enabled", - "displayName": "Enhanced hang detection enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlevel", - "displayName": "Configure Internet Explorer integration", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlevel_none", - "displayName": "None", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlevel_iemode", - "displayName": "Internet Explorer mode", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlevel_needie", - "displayName": "Internet Explorer 11", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileallowed", - "displayName": "Allow launching of local files in Internet Explorer mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileextensionallowlist", - "displayName": "Open local files in Internet Explorer mode file extension allow list", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileshowcontextmenu", - "displayName": "Show context menu to open a file:// link in Internet Explorer mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileshowcontextmenu_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalfileshowcontextmenu_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalmhtfileallowed", - "displayName": "Allow local MHTML files to open automatically in Internet Explorer mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalmhtfileallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationlocalmhtfileallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed", - "displayName": "Allow unconfigured sites to be reloaded in Internet Explorer mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_recommended", - "displayName": "Allow unconfigured sites to be reloaded in Internet Explorer mode (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationreloadiniemodeallowed_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsitelist", - "displayName": "Configure the Enterprise Mode Site List", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsitelistrefreshinterval", - "displayName": "Configure how frequently the Enterprise Mode Site List is refreshed", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsiteredirect", - "displayName": "Specify how \"in-page\" navigations to unconfigured sites behave when started from Internet Explorer mode pages", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsiteredirect_default", - "displayName": "Default", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsiteredirect_automaticnavigationsonly", - "displayName": "Keep only automatic navigations in Internet Explorer mode", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationsiteredirect_allinpagenavigations", - "displayName": "Keep all in-page navigations in Internet Explorer mode", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationtestingallowed", - "displayName": "Allow Internet Explorer mode testing (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationtestingallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationtestingallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationwindowopenheightadjustment", - "displayName": "Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationwindowopenwidthadjustment", - "displayName": "Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationzoneidentifiermhtfileallowed", - "displayName": "Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationzoneidentifiermhtfileallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerintegrationzoneidentifiermhtfileallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodecleardataonexitenabled", - "displayName": "Clear history for IE and IE mode every time you exit", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodecleardataonexitenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodecleardataonexitenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodeenablesavepageas", - "displayName": "Allow Save page as in Internet Explorer mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodeenablesavepageas_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodeenablesavepageas_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetabinedgemodeallowed", - "displayName": "Allow sites configured for Internet Explorer mode to open in Microsoft Edge", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetabinedgemodeallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetabinedgemodeallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled", - "displayName": "Show the Reload in Internet Explorer mode button in the toolbar", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_recommended", - "displayName": "Show the Reload in Internet Explorer mode button in the toolbar (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorermodetoolbarbuttonenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorersetforegroundwhenactive", - "displayName": "Keep the active Microsoft Edge window with an Internet Explorer mode tab always in the foreground.", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorersetforegroundwhenactive_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorersetforegroundwhenactive_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerzoomdisplay", - "displayName": "Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerzoomdisplay_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.internetexplorerzoomdisplay_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.intranetfilelinksenabled", - "displayName": "Allow intranet zone file URL links from Microsoft Edge to open in Windows File Explorer", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.intranetfilelinksenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.intranetfilelinksenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.javascriptallowedforurls", - "displayName": "Allow JavaScript on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.javascriptblockedforurls", - "displayName": "Block JavaScript on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.javascriptjitallowedforsites", - "displayName": "Allow JavaScript to use JIT on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.javascriptjitblockedforsites", - "displayName": "Block JavaScript from using JIT on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.javascriptoptimizerallowedforsites", - "displayName": "Allow JavaScript optimization on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.javascriptoptimizerblockedforsites", - "displayName": "Block JavaScript optimizations on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.keyboardfocusablescrollersenabled", - "displayName": "Enable keyboard focusable scrollers (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.keyboardfocusablescrollersenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.keyboardfocusablescrollersenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.legacysamesitecookiebehaviorenabled", - "displayName": "Enable default legacy SameSite cookie behavior setting (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.legacysamesitecookiebehaviorenabled_defaulttolegacysamesitecookiebehavior", - "displayName": "Revert to legacy SameSite behavior for cookies on all sites", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.legacysamesitecookiebehaviorenabled_defaulttosamesitebydefaultcookiebehavior", - "displayName": "Use SameSite-by-default behavior for cookies on all sites", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.legacysamesitecookiebehaviorenabledfordomainlist", - "displayName": "Revert to legacy SameSite behavior for cookies on specified sites (Obsolete)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.linkedaccountenabled", - "displayName": "Enable the linked account feature (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.linkedaccountenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.linkedaccountenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.livecaptionsallowed", - "displayName": "Live captions allowed", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.livecaptionsallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.livecaptionsallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.livevideotranslationenabled", - "displayName": "Allows users to translate videos to different languages.", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.livevideotranslationenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.livevideotranslationenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled", - "displayName": "Enable Windows to search local Microsoft Edge browsing data", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_recommended", - "displayName": "Enable Windows to search local Microsoft Edge browsing data (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localbrowserdatashareenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessallowedforurls", - "displayName": "Allow sites to make requests to local network endpoints.", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessblockedforurls", - "displayName": "Block sites from making requests to local network endpoints.", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionsenabled", - "displayName": "Specifies whether to block requests from public websites to devices on a user's local network. (Deprecated)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionstemporaryoptout", - "displayName": "Specifies whether to opt out of Local Network Access restrictions", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionstemporaryoptout_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localnetworkaccessrestrictionstemporaryoptout_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled", - "displayName": "Allow suggestions from local providers", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled_recommended", - "displayName": "Allow suggestions from local providers (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.localprovidersenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.managedconfigurationperorigin", - "displayName": "Sets managed configuration values for websites to specific origins", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.managedfavorites", - "displayName": "Configure favorites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.managedsearchengines", - "displayName": "Manage Search Engines", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.managedsearchengines_recommended", - "displayName": "Manage Search Engines (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.mandatoryextensionsforinprivatenavigation", - "displayName": "Specify extensions users must allow in order to navigate using InPrivate mode", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled", - "displayName": "Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_recommended", - "displayName": "Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoft365copilotchaticonenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoftedgeinsiderpromotionenabled", - "displayName": "Microsoft Edge Insider Promotion Enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoftedgeinsiderpromotionenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoftedgeinsiderpromotionenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsofteditorproofingenabled", - "displayName": "Spell checking provided by Microsoft Editor", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsofteditorproofingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsofteditorproofingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsofteditorsynonymsenabled", - "displayName": "Synonyms are provided when using Microsoft Editor spell checker", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsofteditorsynonymsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsofteditorsynonymsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoftofficemenuenabled", - "displayName": "Allow users to access the Microsoft Office menu (Deprecated)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoftofficemenuenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.microsoftofficemenuenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.mousegestureenabled", - "displayName": "Mouse Gesture Enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.mousegestureenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.mousegestureenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.mutationeventsenabled", - "displayName": "Enable deprecated/removed Mutation Events (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.mutationeventsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.mutationeventsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.nativehostsexecutableslaunchdirectly", - "displayName": "Force Windows executable Native Messaging hosts to launch directly", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.nativehostsexecutableslaunchdirectly_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.nativehostsexecutableslaunchdirectly_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.nativemessagingallowlist", - "displayName": "Control which native messaging hosts users can use", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.nativemessagingblocklist", - "displayName": "Configure native messaging block list", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.nativemessaginguserlevelhosts", - "displayName": "Allow user-level native messaging hosts (installed without admin permissions)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.nativemessaginguserlevelhosts_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.nativemessaginguserlevelhosts_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.navigationdelayforinitialsitelistdownloadtimeout", - "displayName": "Set a timeout for delay of tab navigation for the Enterprise Mode Site List", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions", - "displayName": "Enable network prediction", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_networkpredictionalways", - "displayName": "Predict network actions on any network connection", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_networkpredictionwifionly", - "displayName": "Not supported, if this value is used it will be treated as if 'Predict network actions on any network connection' (0) was set", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_networkpredictionnever", - "displayName": "Don't predict network actions on any network connection", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_recommended", - "displayName": "Enable network prediction (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_recommended_networkpredictionalways", - "displayName": "Predict network actions on any network connection", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_recommended_networkpredictionwifionly", - "displayName": "Not supported, if this value is used it will be treated as if 'Predict network actions on any network connection' (0) was set", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.networkpredictionoptions_recommended_networkpredictionnever", - "displayName": "Don't predict network actions on any network connection", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled", - "displayName": "Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_recommended", - "displayName": "Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newpdfreaderenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageallowedbackgroundtypes", - "displayName": "Configure the background types allowed for the new tab page layout", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageallowedbackgroundtypes_disableimageoftheday", - "displayName": "Disable daily background image type", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageallowedbackgroundtypes_disablecustomimage", - "displayName": "Disable custom background image type", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageallowedbackgroundtypes_disableall", - "displayName": "Disable all background image types", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageapplauncherenabled", - "displayName": "Hide App Launcher on Microsoft Edge new tab page", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageapplauncherenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageapplauncherenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagebingchatenabled", - "displayName": "Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagebingchatenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagebingchatenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogo", - "displayName": "Set new tab page company logo (Obsolete)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogobackplatecolor", - "displayName": "Set the company logo backplate color on the new tab page.", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogoenabled", - "displayName": "Hide the company logo on the Microsoft Edge new tab page", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogoenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagecompanylogoenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagecontentenabled", - "displayName": "Allow Microsoft content on the new tab page", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagecontentenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagecontentenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagehidedefaulttopsites", - "displayName": "Hide the default top sites from the new tab page", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagehidedefaulttopsites_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagehidedefaulttopsites_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagelocation", - "displayName": "Configure the new tab page URL", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagelocation_recommended", - "displayName": "Configure the new tab page URL (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagemanagedquicklinks", - "displayName": "Set new tab page quick links", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagemanagedquicklinks_recommended", - "displayName": "Set new tab page quick links (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled", - "displayName": "Enable preload of the new tab page for faster rendering", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled_recommended", - "displayName": "Enable preload of the new tab page for faster rendering (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpageprerenderenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagequicklinksenabled", - "displayName": "Allow quick links on the new tab page", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagequicklinksenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagequicklinksenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox", - "displayName": "Configure the new tab page search box experience", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_bing", - "displayName": "Search box (Recommended)", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_redirect", - "displayName": "Address bar", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_recommended", - "displayName": "Configure the new tab page search box experience (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_recommended_bing", - "displayName": "Search box (Recommended)", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesearchbox_recommended_redirect", - "displayName": "Address bar", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype", - "displayName": "Configure the Microsoft Edge new tab page experience (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_news", - "displayName": "Microsoft News feed experience", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_office", - "displayName": "Office 365 feed experience", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_recommended", - "displayName": "Configure the Microsoft Edge new tab page experience (Obsolete) (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_recommended_news", - "displayName": "Microsoft News feed experience", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.newtabpagesetfeedtype_recommended_office", - "displayName": "Office 365 feed experience", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.notificationsallowedforurls", - "displayName": "Allow notifications on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.notificationsblockedforurls", - "displayName": "Block notifications on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.onbulkdataentryenterpriseconnector", - "displayName": "Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.onfileattachedenterpriseconnector", - "displayName": "Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.onprintenterpriseconnector", - "displayName": "Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.onsecurityevententerpriseconnector", - "displayName": "Configuration policy for Microsoft Edge for Business Reporting Connectors", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.organizationalbrandingonworkprofileuienabled_recommended", - "displayName": "Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work or school profile (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.organizationalbrandingonworkprofileuienabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.organizationalbrandingonworkprofileuienabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.organizationlogooverlayonappiconenabled_recommended", - "displayName": "Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work or school profile (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.organizationlogooverlayonappiconenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.organizationlogooverlayonappiconenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.originagentclusterdefaultenabled", - "displayName": "Origin-keyed agent clustering enabled by default", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.originagentclusterdefaultenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.originagentclusterdefaultenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled", - "displayName": "Allow users to access the Outlook menu (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_recommended", - "displayName": "Allow users to access the Outlook menu (Obsolete) (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.outlookhubmenuenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.partitionedbloburlusage", - "displayName": "Manage Blob URL Partitioning During Fetching and Navigation", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.partitionedbloburlusage_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.partitionedbloburlusage_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled", - "displayName": "Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_recommended", - "displayName": "Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passworddeleteonbrowsercloseenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordexportenabled", - "displayName": "Enable exporting saved passwords from Password Manager", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordexportenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordexportenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordgeneratorenabled", - "displayName": "Allow users to get a strong password suggestion whenever they are creating an account online", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordgeneratorenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordgeneratorenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerblocklist", - "displayName": "Configure the list of domains for which the password manager UI (Save and Fill) will be disabled", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled", - "displayName": "Enable saving passwords to the password manager", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_recommended", - "displayName": "Enable saving passwords to the password manager (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerrestrictlengthenabled", - "displayName": "Restrict the length of passwords that can be saved in the Password Manager", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerrestrictlengthenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmanagerrestrictlengthenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed", - "displayName": "Allow users to be alerted if their passwords are found to be unsafe", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed_recommended", - "displayName": "Allow users to be alerted if their passwords are found to be unsafe (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordmonitorallowed_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionchangepasswordurl", - "displayName": "Configure the change password URL", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionloginurls", - "displayName": "Configure the list of enterprise login URLs where the password protection service should capture salted hashes of a password", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionwarningtrigger", - "displayName": "Configure password protection warning trigger", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionwarningtrigger_passwordprotectionwarningoff", - "displayName": "Password protection warning is off", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordprotectionwarningtrigger_passwordprotectionwarningonpasswordreuse", - "displayName": "Password protection warning is triggered by password reuse", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled", - "displayName": "Enable Password reveal button", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_recommended", - "displayName": "Enable Password reveal button (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.passwordrevealenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.paymentmethodqueryenabled", - "displayName": "Allow websites to query for available payment methods", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.paymentmethodqueryenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.paymentmethodqueryenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfsecuremode", - "displayName": "Secure mode and Certificate-based Digital Signature validation in native PDF reader", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfsecuremode_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfsecuremode_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfvieweroutofprocessiframeenabled", - "displayName": "Use out-of-process iframe PDF Viewer", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfvieweroutofprocessiframeenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfvieweroutofprocessiframeenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfxfaenabled", - "displayName": "XFA support in native PDF reader enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfxfaenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pdfxfaenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled", - "displayName": "Performance Detector Enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled_recommended", - "displayName": "Performance Detector Enabled (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.performancedetectorenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.personalizationreportingenabled", - "displayName": "Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.personalizationreportingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.personalizationreportingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.personalizetopsitesincustomizesidebarenabled", - "displayName": "Personalize my top sites in Customize Sidebar enabled by default", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.personalizetopsitesincustomizesidebarenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.personalizetopsitesincustomizesidebarenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pictureinpictureoverlayenabled", - "displayName": "Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pictureinpictureoverlayenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pictureinpictureoverlayenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton", - "displayName": "Pin browser essentials toolbar button", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_recommended", - "displayName": "Pin browser essentials toolbar button (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pinbrowseressentialstoolbarbutton_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pluginsallowedforurls", - "displayName": "Allow the Adobe Flash plug-in on specific sites (Obsolete)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.pluginsblockedforurls", - "displayName": "Block the Adobe Flash plug-in on specific sites (Obsolete)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.popupsallowedforurls", - "displayName": "Allow pop-up windows on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.popupsblockedforurls", - "displayName": "Block pop-up windows on specific sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.precisegeolocationallowedforurls", - "displayName": "Allow precise geolocation on these sites", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.prefetchwithserviceworkerenabled", - "displayName": "Allow SpeculationRules prefetch for ServiceWorker-controlled URLs", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.prefetchwithserviceworkerenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.prefetchwithserviceworkerenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverride", - "displayName": "Prevent bypassing Microsoft Defender SmartScreen prompts for sites", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverride_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverride_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverrideforfiles", - "displayName": "Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverrideforfiles_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventsmartscreenpromptoverrideforfiles_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventtyposquattingpromptoverride", - "displayName": "Prevent bypassing Edge Website Typo Protection prompts for sites", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventtyposquattingpromptoverride_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.preventtyposquattingpromptoverride_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting", - "displayName": "Configures a setting that asks users to enter their device password while using password autofill", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting_automatically", - "displayName": "Automatically", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting_withdevicepassword", - "displayName": "With device password", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting_withcustomprimarypassword", - "displayName": "With custom primary password", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.primarypasswordsetting_autofilloff", - "displayName": "Autofill off", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist", - "displayName": "Disable printer types on the deny list", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_privet", - "displayName": "Zeroconf-based (mDNS + DNS-SD) protocol destinations", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_extension", - "displayName": "Extension-based destinations", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_pdf", - "displayName": "The 'Save as PDF' destination. (93 or later, also disables from context menu)", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_local", - "displayName": "Local printer destinations", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printertypedenylist_onedrive", - "displayName": "Save as PDF (OneDrive) printer destinations. (103 or later)", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingallowedbackgroundgraphicsmodes", - "displayName": "Restrict background graphics printing mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingallowedbackgroundgraphicsmodes_any", - "displayName": "Allow printing with and without background graphics", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingallowedbackgroundgraphicsmodes_enabled", - "displayName": "Allow printing only with background graphics", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingallowedbackgroundgraphicsmodes_disabled", - "displayName": "Allow printing only without background graphics", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingbackgroundgraphicsdefault", - "displayName": "Default background graphics printing mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingbackgroundgraphicsdefault_enabled", - "displayName": "Enable background graphics printing mode by default", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingbackgroundgraphicsdefault_disabled", - "displayName": "Disable background graphics printing mode by default", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingenabled", - "displayName": "Enable printing", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingpapersizedefault", - "displayName": "Default printing page size", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout", - "displayName": "Sets layout for printing", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_portrait", - "displayName": "Sets layout option as portrait", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_landscape", - "displayName": "Sets layout option as landscape", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_recommended", - "displayName": "Sets layout for printing (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_recommended_portrait", - "displayName": "Sets layout option as portrait", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printingwebpagelayout_recommended_landscape", - "displayName": "Sets layout option as landscape", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpdfasimagedefault", - "displayName": "Print PDF as Image Default", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpdfasimagedefault_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpdfasimagedefault_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpostscriptmode", - "displayName": "Print PostScript Mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpostscriptmode_default", - "displayName": "Default", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpostscriptmode_type42", - "displayName": "Type42", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpreviewstickysettings", - "displayName": "Configure the sticky print preview settings", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpreviewstickysettings_recommended", - "displayName": "Configure the sticky print preview settings (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter", - "displayName": "Set the system default printer as the default printer", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_recommended", - "displayName": "Set the system default printer as the default printer (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printpreviewusesystemdefaultprinter_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printrasterizationmode", - "displayName": "Print Rasterization Mode", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printrasterizationmode_full", - "displayName": "Full page rasterization", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printrasterizationmode_fast", - "displayName": "Avoid rasterization if possible", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printrasterizepdfdpi", - "displayName": "Print Rasterize PDF DPI", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printstickysettings", - "displayName": "Print preview sticky settings", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printstickysettings_enableall", - "displayName": "Enable sticky settings for PDF and Webpages", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printstickysettings_disableall", - "displayName": "Disable sticky settings for PDF and Webpages", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printstickysettings_disablepdf", - "displayName": "Disable sticky settings for PDF", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.printstickysettings_disablewebpage", - "displayName": "Disable sticky settings for Webpages", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proactiveauthenabled", - "displayName": "Enable Proactive Authentication (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proactiveauthenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proactiveauthenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proactiveauthworkflowenabled", - "displayName": "Enable proactive authentication", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proactiveauthworkflowenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proactiveauthworkflowenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.promptfordownloadlocation", - "displayName": "Ask where to save downloaded files", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.promptfordownloadlocation_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.promptfordownloadlocation_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.promptonmultiplematchingcertificates", - "displayName": "Prompt the user to select a certificate when multiple certificates match", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.promptonmultiplematchingcertificates_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.promptonmultiplematchingcertificates_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxybypasslist", - "displayName": "Configure proxy bypass rules (Deprecated)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxymode", - "displayName": "Configure proxy server settings (Deprecated)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxydisabled", - "displayName": "Never use a proxy", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxyautodetect", - "displayName": "Auto detect proxy settings", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxypacscript", - "displayName": "Use a .pac proxy script", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxyfixedservers", - "displayName": "Use fixed proxy servers", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxymode_proxyusesystem", - "displayName": "Use system proxy settings", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxypacurl", - "displayName": "Set the proxy .pac file URL (Deprecated)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxyserver", - "displayName": "Configure address or URL of proxy server (Deprecated)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.proxysettings", - "displayName": "Proxy settings", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu", - "displayName": "Enables Microsoft Edge mini menu", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu_recommended", - "displayName": "Enables Microsoft Edge mini menu (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quicksearchshowminimenu_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quickviewofficefilesenabled", - "displayName": "Manage QuickView Office files capability in Microsoft Edge", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quickviewofficefilesenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.quickviewofficefilesenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.readaloudenabled", - "displayName": "Enable Read Aloud feature in Microsoft Edge", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.readaloudenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.readaloudenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.registeredprotocolhandlers", - "displayName": "Register protocol handlers", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.registeredprotocolhandlers_recommended", - "displayName": "Register protocol handlers (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.relatedmatchescloudserviceenabled", - "displayName": "Configure Related Matches in Find on Page (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.relatedmatchescloudserviceenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.relatedmatchescloudserviceenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.relatedwebsitesetsenabled", - "displayName": "Enable Related Website Sets (Deprecated)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.relatedwebsitesetsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.relatedwebsitesetsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.relatedwebsitesetsoverrides", - "displayName": "Override Related Website Sets. (Deprecated)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice", - "displayName": "Enable resolution of navigation errors using a web service", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice_recommended", - "displayName": "Enable resolution of navigation errors using a web service (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.resolvenavigationerrorsusewebservice_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup", - "displayName": "Action to take on Microsoft Edge startup", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_restoreonstartupisnewtabpage", - "displayName": "Open a new tab", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_restoreonstartupislastsession", - "displayName": "Restore the last session", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_restoreonstartupisurls", - "displayName": "Open a list of URLs", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_restoreonstartupislastsessionandurls", - "displayName": "Open a list of URLs and restore the last session", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended", - "displayName": "Action to take on Microsoft Edge startup (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended_restoreonstartupisnewtabpage", - "displayName": "Open a new tab", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended_restoreonstartupislastsession", - "displayName": "Restore the last session", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended_restoreonstartupisurls", - "displayName": "Open a list of URLs", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartup_recommended_restoreonstartupislastsessionandurls", - "displayName": "Open a list of URLs and restore the last session", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupurls", - "displayName": "Sites to open when the browser starts", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupurls_recommended", - "displayName": "Sites to open when the browser starts (users can override)", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupuserurlsenabled", - "displayName": "Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupuserurlsenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restoreonstartupuserurlsenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restorepdfview", - "displayName": "Restore PDF view", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restorepdfview_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.restorepdfview_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.runallflashinallowmode", - "displayName": "Extend Adobe Flash content setting to all content (Obsolete)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.runallflashinallowmode_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.runallflashinallowmode_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.sameorigintabcaptureallowedbyorigins", - "displayName": "Allow Same Origin Tab capture by these origins", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.sandboxexternalprotocolblocked", - "displayName": "Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.sandboxexternalprotocolblocked_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.sandboxexternalprotocolblocked_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.savecookiesonexit", - "displayName": "Save cookies when Microsoft Edge closes", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.savingbrowserhistorydisabled", - "displayName": "Disable saving browser history", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.savingbrowserhistorydisabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.savingbrowserhistorydisabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.scarewareblockerallowlistdomains", - "displayName": "Configure the list of domains where Microsoft Edge Scareware blockers don't run", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.screencaptureallowed", - "displayName": "Allow or deny screen capture", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.screencaptureallowed_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.screencaptureallowed_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.screencaptureallowedbyorigins", - "displayName": "Allow Desktop, Window, and Tab capture by these origins", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.screencapturewithoutgestureallowedfororigins", - "displayName": "Allow screen capture without prior user gesture", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.scrolltotextfragmentenabled", - "displayName": "Enable scrolling to text specified in URL fragments", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.scrolltotextfragmentenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.scrolltotextfragmentenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled", - "displayName": "Search Filters Enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_recommended", - "displayName": "Search Filters Enabled (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchfiltersenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchforimageenabled", - "displayName": "Search for image enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchforimageenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchforimageenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchinsidebarenabled", - "displayName": "Search in Sidebar enabled", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchinsidebarenabled_enablesearchinsidebar", - "displayName": "Enable search in sidebar", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchinsidebarenabled_disablesearchinsidebarforkidsmode", - "displayName": "Disable search in sidebar for Kids Mode", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchinsidebarenabled_disablesearchinsidebar", - "displayName": "Disable search in sidebar", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled", - "displayName": "Enable search suggestions", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled_recommended", - "displayName": "Enable search suggestions (users can override)", - "options": [ - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled_recommended_false", - "displayName": "Disabled", - "description": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.searchsuggestenabled_recommended_true", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.securitykeypermitattestation", - "displayName": "Websites or domains that don't need permission to use direct Security Key attestation", - "options": null - }, - { - "id": "com.microsoft.edge.mamedgeappconfigsettings.selectparserrelaxationenabled", - "displayName": "Controls whether the new HTML parser behavior for the element is enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled", - "displayName": "Control the new behavior for event dispatching on disabled form controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled", - "displayName": "Control Javascript setTimeout() function minimum timeout.", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings", - "displayName": "Settings for Tab Organizer", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings", - "displayName": "Settings for Tab Organizer (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_0", - "displayName": "Allow Tab Organizer and improve AI models.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_1", - "displayName": "Allow Tab Organizer without improving AI models.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_2", - "displayName": "Do not allow Tab Organizer.", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed", - "displayName": "Allows enabling throttling of non-visible, cross-origin iframes", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings", - "displayName": "Managed toolbar avatar label setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings", - "displayName": "Managed toolbar avatar label setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_0", - "displayName": "Always display management label", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_1", - "displayName": "Display management labels for 30s", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled", - "displayName": "Control the nesting threshold before which Javascript setTimeout() function start being clamped", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled", - "displayName": "Control the URL parameter filter feature", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed", - "displayName": "Allow Pepper to use a new decoder for hardware accelerated video decoding.", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled", - "displayName": "Control the User-Agent Client Hints GREASE Update feature.", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess", - "displayName": "Force WebSQL to be enabled.", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled", - "displayName": "Force WebSQL in non-secure contexts to be enabled.", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled", - "displayName": "Enable zstd content-encoding support", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled", - "displayName": "Allow download deep scanning for Safe Browsing-enabled users", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed", - "displayName": "Allow Safe Browsing Proxied Real Time Checks", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled", - "displayName": "Allow Safe Browsing Surveys", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled", - "displayName": "Bind Google credentials to a device", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist", - "displayName": "Enterprise profile separation secondary domain allowlist", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_profileseparationdomainexceptionlistdesc", - "displayName": "Enterprise profile separation secondary domain allowlist (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl", - "displayName": "WebRTC per URL IP Handling", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_webrtciphandlingurl", - "displayName": "WebRTC per URL IP Handling (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement", - "displayName": "Enable post-quantum key agreement for WebRTC", - "options": [ - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_boottocloudmode", - "displayName": "Boot To Cloud Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_clouddesktop_boottocloudmode_0", - "displayName": "Not Configured", - "description": "Not Configured" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_boottocloudmode_1", - "displayName": "Enable Boot to Cloud Desktop", - "description": "Enable Boot to Cloud Desktop" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout", - "displayName": "Set Max Connection Timeout", - "options": [ - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_5", - "displayName": "5 min", - "description": "5 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_6", - "displayName": "6 min", - "description": "6 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_7", - "displayName": "7 min", - "description": "7 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_8", - "displayName": "8 min", - "description": "8 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_9", - "displayName": "9 min", - "description": "9 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_10", - "displayName": "10 min", - "description": "10 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_11", - "displayName": "11 min", - "description": "11 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_12", - "displayName": "12 min", - "description": "12 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_13", - "displayName": "13 min", - "description": "13 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_14", - "displayName": "14 min", - "description": "14 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_15", - "displayName": "15 min", - "description": "15 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_16", - "displayName": "16 min", - "description": "16 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_17", - "displayName": "17 min", - "description": "17 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_18", - "displayName": "18 min", - "description": "18 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_19", - "displayName": "19 min", - "description": "19 min" - }, - { - "id": "device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_20", - "displayName": "20 min", - "description": "20 min" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowbluetooth", - "displayName": "Allow Bluetooth", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_allowbluetooth_0", - "displayName": "Disallow Bluetooth. The radio in the Bluetooth control panel will be grayed out and the user will not be able to turn Bluetooth on.", - "description": "Disallow Bluetooth. If this is set to 0, the radio in the Bluetooth control panel will be grayed out and the user will not be able to turn Bluetooth on." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowbluetooth_1", - "displayName": "Reserved. The radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.", - "description": "Reserved. If this is set to 1, the radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowbluetooth_2", - "displayName": "Allow Bluetooth. The radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.", - "description": "Allow Bluetooth. If this is set to 2, the radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowcellulardata", - "displayName": "Allow Cellular Data", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_allowcellulardata_0", - "displayName": "Do not allow the cellular data channel. The user cannot turn it on. This value is not supported in Windows 10, version 1511.", - "description": "Do not allow the cellular data channel. The user cannot turn it on. This value is not supported in Windows 10, version 1511." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowcellulardata_1", - "displayName": "Allow the cellular data channel. The user can turn it off.", - "description": "Allow the cellular data channel. The user can turn it off." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowcellulardata_2", - "displayName": "Allow the cellular data channel. The user cannot turn it off.", - "description": "Allow the cellular data channel. The user cannot turn it off." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowcellulardataroaming", - "displayName": "Allow Cellular Data Roaming", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_0", - "displayName": "Do not allow cellular data roaming. The user cannot turn it on. This value is not supported in Windows 10, version 1511.", - "description": "Do not allow cellular data roaming. The user cannot turn it on. This value is not supported in Windows 10, version 1511." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_1", - "displayName": "Allow cellular data roaming.", - "description": "Allow cellular data roaming." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_2", - "displayName": "Allow cellular data roaming on. The user cannot turn it off.", - "description": "Allow cellular data roaming on. The user cannot turn it off." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowconnecteddevices", - "displayName": "Allow Connected Devices", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_allowconnecteddevices_0", - "displayName": "Block", - "description": "Disable (CDP service not available)." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowconnecteddevices_1", - "displayName": "Allow", - "description": "Allow (CDP service available)." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowphonepclinking", - "displayName": "Allow Phone PC Linking", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_allowphonepclinking_0", - "displayName": "Block", - "description": "Do not link." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowphonepclinking_1", - "displayName": "Allow", - "description": "Allow phone-PC linking." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowusbconnection", - "displayName": "Allow USB Connection", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_allowusbconnection_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowusbconnection_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowvpnovercellular", - "displayName": "Allow VPN Over Cellular", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_allowvpnovercellular_0", - "displayName": "Block", - "description": "VPN is not allowed over cellular." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowvpnovercellular_1", - "displayName": "Allow", - "description": "VPN can use any connection, including cellular." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular", - "displayName": "Allow VPN Roaming Over Cellular", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_diableprintingoverhttp", - "displayName": "Turn off printing over HTTP", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_diableprintingoverhttp_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_connectivity_diableprintingoverhttp_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage", - "displayName": "Disable Cellular Operator Settings Page (Windows Insiders only)", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disablecellularsettingspage", - "displayName": "Disable Cellular Settings Page (Windows Insiders only)", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_disablecellularsettingspage_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disablecellularsettingspage_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp", - "displayName": "Turn off downloading of print drivers over HTTP", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards", - "displayName": "Turn off Internet download for Web publishing and online ordering wizards", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests", - "displayName": "Disallow Network Connectivity Active Tests", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests_1", - "displayName": "Allow", - "description": "Allow" - }, - { - "id": "device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests_0", - "displayName": "Block", - "description": "Block" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_hardeneduncpaths", - "displayName": "Hardened UNC Paths", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_hardeneduncpaths_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_connectivity_hardeneduncpaths_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_hardeneduncpaths_pol_hardenedpaths", - "displayName": "Hardened UNC Paths: (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_connectivity_hardeneduncpaths_pol_hardenedpaths_key", - "displayName": "Name", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_connectivity_hardeneduncpaths_pol_hardenedpaths_value", - "displayName": "Value", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge", - "displayName": "Prohibit installation and configuration of Network Bridge on your DNS domain network", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor", - "displayName": "Use Cellular When Wi Fi Poor (Windows Insiders only)", - "options": [ - { - "id": "device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp", - "displayName": "MDM Wins Over GP", - "options": [ - { - "id": "device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp_0", - "displayName": "", - "description": "" - }, - { - "id": "device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp_1", - "displayName": "The MDM policy is used and the GP policy is blocked.", - "description": "The MDM policy is used and the GP policy is blocked." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_credentialproviders_allowpinlogon", - "displayName": "Turn on convenience PIN sign-in", - "options": [ - { - "id": "device_vendor_msft_policy_config_credentialproviders_allowpinlogon_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_credentialproviders_allowpinlogon_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_credentialproviders_blockpicturepassword", - "displayName": "Turn off picture password sign-in", - "options": [ - { - "id": "device_vendor_msft_policy_config_credentialproviders_blockpicturepassword_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_credentialproviders_blockpicturepassword_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_credentialproviders_disableautomaticredeploymentcredentials", - "displayName": "Disable Automatic Re Deployment Credentials", - "options": [ - { - "id": "device_vendor_msft_policy_config_credentialproviders_disableautomaticredeploymentcredentials_0", - "displayName": "Disabled", - "description": "Enable the visibility of the credentials for Autopilot Reset." - }, - { - "id": "device_vendor_msft_policy_config_credentialproviders_disableautomaticredeploymentcredentials_1", - "displayName": "Enabled", - "description": "Disable visibility of the credentials for Autopilot Reset." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials", - "displayName": "Remote host allows delegation of non-exportable credentials", - "options": [ - { - "id": "device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_credentialsui_disablepasswordreveal", - "displayName": "Do not display the password reveal button", - "options": [ - { - "id": "device_vendor_msft_policy_config_credentialsui_disablepasswordreveal_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_credentialsui_disablepasswordreveal_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_credentialsui_enumerateadministrators", - "displayName": "Enumerate administrator accounts on elevation", - "options": [ - { - "id": "device_vendor_msft_policy_config_credentialsui_enumerateadministrators_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_credentialsui_enumerateadministrators_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy", - "displayName": "Allow Fips Algorithm Policy", - "options": [ - { - "id": "device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy_1", - "displayName": "Allow", - "description": "Allow" - }, - { - "id": "device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy_0", - "displayName": "Block", - "description": "Block" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_cryptography_tlsciphersuites", - "displayName": "TLS Cipher Suites", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess", - "displayName": "Allow Direct Memory Access", - "options": [ - { - "id": "device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_dataprotection_legacyselectivewipeid", - "displayName": "Legacy Selective Wipe ID", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost3g", - "displayName": "Set 3G Cost", - "options": [ - { - "id": "device_vendor_msft_policy_config_datausage_setcost3g_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost3g_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist", - "displayName": "Please select a 3G connection cost value to set: (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_1", - "displayName": "Unrestricted", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_2", - "displayName": "Fixed", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_3", - "displayName": "Variable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost4g", - "displayName": "Set 4G Cost", - "options": [ - { - "id": "device_vendor_msft_policy_config_datausage_setcost4g_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost4g_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist", - "displayName": "Please select a 4G connection cost value to set: (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_1", - "displayName": "Unrestricted", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_2", - "displayName": "Fixed", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_3", - "displayName": "Variable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowarchivescanning", - "displayName": "Allow Archive Scanning", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowarchivescanning_0", - "displayName": "Not allowed. Turns off scanning on archived files.", - "description": "Not allowed. Turns off scanning on archived files." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowarchivescanning_1", - "displayName": "Allowed. Scans the archive files.", - "description": "Allowed. Scans the archive files." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowbehaviormonitoring", - "displayName": "Allow Behavior Monitoring", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowbehaviormonitoring_0", - "displayName": "Not allowed. Turns off behavior monitoring.", - "description": "Not allowed. Turns off behavior monitoring." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowbehaviormonitoring_1", - "displayName": "Allowed. Turns on real-time behavior monitoring.", - "description": "Allowed. Turns on real-time behavior monitoring." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowcloudprotection", - "displayName": "Allow Cloud Protection", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowcloudprotection_0", - "displayName": "Not allowed. Turns off Cloud Protection.", - "description": "Not allowed. Turns off Cloud Protection." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowcloudprotection_1", - "displayName": "Allowed. Turns on Cloud Protection.", - "description": "Allowed. Turns on Cloud Protection." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowemailscanning", - "displayName": "Allow Email Scanning", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowemailscanning_0", - "displayName": "Not allowed. Turns off email scanning.", - "description": "Not allowed. Turns off email scanning." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowemailscanning_1", - "displayName": "Allowed. Turns on email scanning.", - "description": "Allowed. Turns on email scanning." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives", - "displayName": "Allow Full Scan On Mapped Network Drives", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives_0", - "displayName": "Not allowed. Disables scanning on mapped network drives.", - "description": "Not allowed. Disables scanning on mapped network drives." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives_1", - "displayName": "Allowed. Scans mapped network drives.", - "description": "Allowed. Scans mapped network drives." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning", - "displayName": "Allow Full Scan Removable Drive Scanning", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning_0", - "displayName": "Not allowed. Turns off scanning on removable drives.", - "description": "Not allowed. Turns off scanning on removable drives." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning_1", - "displayName": "Allowed. Scans removable drives.", - "description": "Allowed. Scans removable drives." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem", - "displayName": "[Deprecated] Allow Intrusion Prevention System", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowioavprotection", - "displayName": "Allow scanning of all downloaded files and attachments", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowioavprotection_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowioavprotection_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowonaccessprotection", - "displayName": "Allow On Access Protection", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowonaccessprotection_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowonaccessprotection_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowrealtimemonitoring", - "displayName": "Allow Realtime Monitoring", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowrealtimemonitoring_0", - "displayName": "Not allowed. Turns off the real-time monitoring service.", - "description": "Not allowed. Turns off the real-time monitoring service." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowrealtimemonitoring_1", - "displayName": "Allowed. Turns on and runs the real-time monitoring service.", - "description": "Allowed. Turns on and runs the real-time monitoring service." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowscanningnetworkfiles", - "displayName": "Allow Scanning Network Files", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowscanningnetworkfiles_0", - "displayName": "Not allowed. Turns off scanning of network files.", - "description": "Not allowed. Turns off scanning of network files." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowscanningnetworkfiles_1", - "displayName": "Allowed. Scans network files.", - "description": "Allowed. Scans network files." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowscriptscanning", - "displayName": "Allow Script Scanning", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowscriptscanning_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowscriptscanning_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_allowuseruiaccess", - "displayName": "Allow User UI Access", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_allowuseruiaccess_0", - "displayName": "Not allowed. Prevents users from accessing UI.", - "description": "Not allowed. Prevents users from accessing UI." - }, - { - "id": "device_vendor_msft_policy_config_defender_allowuseruiaccess_1", - "displayName": "Allowed. Lets users access UI.", - "description": "Allowed. Lets users access UI." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductiononlyexclusions", - "displayName": "Attack Surface Reduction Only Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules", - "displayName": "Attack Surface Reduction Rules", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers", - "displayName": "Block abuse of exploited vulnerable signed drivers (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses", - "displayName": "Block Adobe Reader from creating child processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses", - "displayName": "Block all Office applications from creating child processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem", - "displayName": "Block credential stealing from the Windows local security authority subsystem", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail", - "displayName": "Block executable content from email client and webmail", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion", - "displayName": "Block executable files from running unless they meet a prevalence, age, or trusted list criterion", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts", - "displayName": "Block execution of potentially obfuscated scripts", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent", - "displayName": "Block JavaScript or VBScript from launching downloaded executable content", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent", - "displayName": "Block Office applications from creating executable content", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses", - "displayName": "Block Office applications from injecting code into other processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses", - "displayName": "Block Office communication application from creating child processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription", - "displayName": "Block persistence through WMI event subscription", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands", - "displayName": "Block process creations originating from PSExec and WMI commands", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode", - "displayName": "Block rebooting machine in Safe Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb", - "displayName": "Block untrusted and unsigned processes that run from USB", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools", - "displayName": "Block use of copied or impersonated system tools", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers", - "displayName": "Block Webshell creation for Servers", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros", - "displayName": "Block Win32 API calls from Office macros", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware", - "displayName": "Use advanced protection against ransomware", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_off", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_block", - "displayName": "Block", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_audit", - "displayName": "Audit", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_warn", - "displayName": "Warn", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_perruleexclusions", - "displayName": "ASR Only Per Rule Exclusions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_avgcpuloadfactor", - "displayName": "Avg CPU Load Factor", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan", - "displayName": "Check For Signatures Before Running Scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_cloudblocklevel", - "displayName": "Cloud Block Level", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_cloudblocklevel_0", - "displayName": "Default State", - "description": "Default State" - }, - { - "id": "device_vendor_msft_policy_config_defender_cloudblocklevel_2", - "displayName": "High", - "description": "High" - }, - { - "id": "device_vendor_msft_policy_config_defender_cloudblocklevel_4", - "displayName": "High Plus", - "description": "HighPlus" - }, - { - "id": "device_vendor_msft_policy_config_defender_cloudblocklevel_6", - "displayName": "Zero Tolerance", - "description": "ZeroTolerance" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_cloudextendedtimeout", - "displayName": "Cloud Extended Timeout", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_controlledfolderaccessallowedapplications", - "displayName": "Controlled Folder Access Allowed Applications", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_controlledfolderaccessprotectedfolders", - "displayName": "Controlled Folder Access Protected Folders", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_daystoretaincleanedmalware", - "displayName": "Days To Retain Cleaned Malware", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_disablecatchupfullscan", - "displayName": "Disable Catchup Full Scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_disablecatchupfullscan_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_defender_disablecatchupfullscan_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_disablecatchupquickscan", - "displayName": "Disable Catchup Quick Scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_disablecatchupquickscan_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_defender_disablecatchupquickscan_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess", - "displayName": "Enable Controlled Folder Access", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_1", - "displayName": "Enabled", - "description": "Enabled" - }, - { - "id": "device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_2", - "displayName": "Audit Mode", - "description": "Audit Mode" - }, - { - "id": "device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_3", - "displayName": "Block disk modification only", - "description": "Block disk modification only" - }, - { - "id": "device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_4", - "displayName": "Audit disk modification only", - "description": "Audit disk modification only" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_enablelowcpupriority", - "displayName": "Enable Low CPU Priority", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_enablelowcpupriority_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_defender_enablelowcpupriority_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_enablenetworkprotection", - "displayName": "Enable Network Protection", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_enablenetworkprotection_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_defender_enablenetworkprotection_1", - "displayName": "Enabled (block mode)", - "description": "Enabled (block mode)" - }, - { - "id": "device_vendor_msft_policy_config_defender_enablenetworkprotection_2", - "displayName": "Enabled (audit mode)", - "description": "Enabled (audit mode)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_excludedextensions", - "displayName": "Excluded Extensions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_excludedpaths", - "displayName": "Excluded Paths", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_excludedprocesses", - "displayName": "Excluded Processes", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_puaprotection", - "displayName": "PUA Protection", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_puaprotection_0", - "displayName": "PUA Protection off. Windows Defender will not protect against potentially unwanted applications.", - "description": "PUA Protection off. Windows Defender will not protect against potentially unwanted applications." - }, - { - "id": "device_vendor_msft_policy_config_defender_puaprotection_1", - "displayName": "PUA Protection on. Detected items are blocked. They will show in history along with other threats.", - "description": "PUA Protection on. Detected items are blocked. They will show in history along with other threats." - }, - { - "id": "device_vendor_msft_policy_config_defender_puaprotection_2", - "displayName": "Audit mode. Windows Defender will detect potentially unwanted applications, but take no action. You can review information about the applications Windows Defender would have taken action against by searching for events created by Windows Defender in the Event Viewer.", - "description": "Audit mode. Windows Defender will detect potentially unwanted applications, but take no action. You can review information about the applications Windows Defender would have taken action against by searching for events created by Windows Defender in the Event Viewer." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_realtimescandirection", - "displayName": "Real Time Scan Direction", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_realtimescandirection_0", - "displayName": "Monitor all files (bi-directional).", - "description": "Monitor all files (bi-directional)." - }, - { - "id": "device_vendor_msft_policy_config_defender_realtimescandirection_1", - "displayName": "Monitor incoming files.", - "description": "Monitor incoming files." - }, - { - "id": "device_vendor_msft_policy_config_defender_realtimescandirection_2", - "displayName": "Monitor outgoing files.", - "description": "Monitor outgoing files." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_scanparameter", - "displayName": "Scan Parameter", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_scanparameter_1", - "displayName": "Quick scan", - "description": "Quick scan" - }, - { - "id": "device_vendor_msft_policy_config_defender_scanparameter_2", - "displayName": "Full scan", - "description": "Full scan" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulequickscantime", - "displayName": "Schedule Quick Scan Time", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday", - "displayName": "Schedule Scan Day", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_0", - "displayName": "Every day", - "description": "Every day" - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_1", - "displayName": "Sunday", - "description": "Sunday" - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_2", - "displayName": "Monday", - "description": "Monday" - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_3", - "displayName": "Tuesday", - "description": "Tuesday" - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_4", - "displayName": "Wednesday", - "description": "Wednesday" - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_5", - "displayName": "Thursday", - "description": "Thursday" - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_6", - "displayName": "Friday", - "description": "Friday" - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_7", - "displayName": "Saturday", - "description": "Saturday" - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescanday_8", - "displayName": "No scheduled scan", - "description": "No scheduled scan" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_schedulescantime", - "displayName": "Schedule Scan Time", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_securityintelligencelocation", - "displayName": "Security Intelligence Location", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_signatureupdatefallbackorder", - "displayName": "Signature Update Fallback Order", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_signatureupdatefilesharessources", - "displayName": "Signature Update File Shares Sources", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_signatureupdateinterval", - "displayName": "Signature Update Interval", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_submitsamplesconsent", - "displayName": "Submit Samples Consent", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_submitsamplesconsent_0", - "displayName": "Always prompt.", - "description": "Always prompt." - }, - { - "id": "device_vendor_msft_policy_config_defender_submitsamplesconsent_1", - "displayName": "Send safe samples automatically.", - "description": "Send safe samples automatically." - }, - { - "id": "device_vendor_msft_policy_config_defender_submitsamplesconsent_2", - "displayName": "Never send.", - "description": "Never send." - }, - { - "id": "device_vendor_msft_policy_config_defender_submitsamplesconsent_3", - "displayName": "Send all samples automatically.", - "description": "Send all samples automatically." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction", - "displayName": "Threat Severity Default Action", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats", - "displayName": "Remediation action for High severity threats", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_clean", - "displayName": "Clean. Service tries to recover files and try to disinfect.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_quarantine", - "displayName": "Quarantine. Moves files to quarantine.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_remove", - "displayName": "Remove. Removes files from system.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_allow", - "displayName": "Allow. Allows file/does none of the above actions.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_userdefined", - "displayName": "User defined. Requires user to make a decision on which action to take.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_block", - "displayName": "Block. Blocks file execution.", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats", - "displayName": "Remediation action for Low severity threats", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_clean", - "displayName": "Clean. Service tries to recover files and try to disinfect.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_quarantine", - "displayName": "Quarantine. Moves files to quarantine.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_remove", - "displayName": "Remove. Removes files from system.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_allow", - "displayName": "Allow. Allows file/does none of the above actions.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_userdefined", - "displayName": "User defined. Requires user to make a decision on which action to take.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_block", - "displayName": "Block. Blocks file execution.", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats", - "displayName": "Remediation action for Moderate severity threats", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_clean", - "displayName": "Clean. Service tries to recover files and try to disinfect.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_quarantine", - "displayName": "Quarantine. Moves files to quarantine.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_remove", - "displayName": "Remove. Removes files from system.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_allow", - "displayName": "Allow. Allows file/does none of the above actions.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_userdefined", - "displayName": "User defined. Requires user to make a decision on which action to take.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_block", - "displayName": "Block. Blocks file execution.", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats", - "displayName": "Remediation action for Severe threats", - "options": [ - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_clean", - "displayName": "Clean. Service tries to recover files and try to disinfect.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_quarantine", - "displayName": "Quarantine. Moves files to quarantine.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_remove", - "displayName": "Remove. Removes files from system.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_allow", - "displayName": "Allow. Allows file/does none of the above actions.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_userdefined", - "displayName": "User defined. Requires user to make a decision on which action to take.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_block", - "displayName": "Block. Blocks file execution.", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_doabsolutemaxcachesize", - "displayName": "DO Absolute Max Cache Size", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching", - "displayName": "DO Allow VPN Peer Caching", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching_0", - "displayName": "Not allowed", - "description": "Not allowed" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching_1", - "displayName": "Allowed", - "description": "Allowed" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_docachehost", - "displayName": "DO Cache Host", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_docachehostsource", - "displayName": "DO Cache Host Source", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodelaybackgrounddownloadfromhttp", - "displayName": "DO Delay Background Download From Http", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodelaycacheserverfallbackbackground", - "displayName": "DO Delay Cache Server Fallback Background", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodelaycacheserverfallbackforeground", - "displayName": "DO Delay Cache Server Fallback Foreground", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodelayforegrounddownloadfromhttp", - "displayName": "DO Delay Foreground Download From Http", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn", - "displayName": "DO Disallow Cache Server Downloads On VPN", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn_0", - "displayName": "Not Set", - "description": "Not Set" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode", - "displayName": "DO Download Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_0", - "displayName": "HTTP only, no peering", - "description": "HTTP only, no peering" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_1", - "displayName": "HTTP blended with peering behind the same NAT", - "description": "HTTP blended with peering behind the same NAT" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_2", - "displayName": "HTTP blended with peering across a private group", - "description": "HTTP blended with peering across a private group" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_3", - "displayName": "HTTP blended with Internet peering", - "description": "HTTP blended with Internet peering" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_99", - "displayName": "HTTP only, no peering, no use of DO cloud service", - "description": "HTTP only, no peering, no use of DO cloud service" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_100", - "displayName": "Bypass mode, deprecated in Windows 11", - "description": "Bypass mode, deprecated in Windows 11" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dogroupid", - "displayName": "DO Group Id", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource", - "displayName": "DO Group Id Source", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_0", - "displayName": "Not Set", - "description": "Not Set" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_1", - "displayName": "AD site", - "description": "AD site" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_2", - "displayName": "Authenticated domain SID", - "description": "Authenticated domain SID" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_3", - "displayName": "DHCP Option ID", - "description": "DHCP Option ID" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_4", - "displayName": "DNS Suffix", - "description": "DNS Suffix" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_5", - "displayName": "Entra ID Tenant ID", - "description": "Entra ID Tenant ID" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domaxbackgrounddownloadbandwidth", - "displayName": "DO Max Background Download Bandwidth", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domaxcacheage", - "displayName": "DO Max Cache Age", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domaxcachesize", - "displayName": "DO Max Cache Size", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domaxdownloadbandwidth", - "displayName": "DO Max Download Bandwidth", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domaxforegrounddownloadbandwidth", - "displayName": "DO Max Foreground Download Bandwidth", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domaxuploadbandwidth", - "displayName": "DO Max Upload Bandwidth", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dominbackgroundqos", - "displayName": "DO Min Background Qos", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dominbatterypercentageallowedtoupload", - "displayName": "DO Min Battery Percentage Allowed To Upload", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domindisksizeallowedtopeer", - "displayName": "DO Min Disk Size Allowed To Peer", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dominfilesizetocache", - "displayName": "DO Min File Size To Cache", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dominramallowedtopeer", - "displayName": "DO Min RAM Allowed To Peer", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domodifycachedrive", - "displayName": "DO Modify Cache Drive", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_domonthlyuploaddatacap", - "displayName": "DO Monthly Upload Data Cap", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dopercentagemaxbackgroundbandwidth", - "displayName": "DO Percentage Max Background Bandwidth", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dopercentagemaxforegroundbandwidth", - "displayName": "DO Percentage Max Foreground Bandwidth", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby", - "displayName": "DO Restrict Peer Selection By", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_0", - "displayName": "None", - "description": "None" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_1", - "displayName": "Subnet mask", - "description": "Subnet mask" - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_2", - "displayName": "Local discovery (DNS-SD)", - "description": "Local discovery (DNS-SD)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth", - "displayName": "Set Business Hours to Limit Background Download Bandwidth", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom", - "displayName": "From: (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_0", - "displayName": "12 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_1", - "displayName": "1 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_2", - "displayName": "2 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_3", - "displayName": "3 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_4", - "displayName": "4 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_5", - "displayName": "5 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_6", - "displayName": "6 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_7", - "displayName": "7 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_8", - "displayName": "8 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_9", - "displayName": "9 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_10", - "displayName": "10 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_11", - "displayName": "11 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_12", - "displayName": "12 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_13", - "displayName": "1 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_14", - "displayName": "2 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_15", - "displayName": "3 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_16", - "displayName": "4 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_17", - "displayName": "5 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_18", - "displayName": "6 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_19", - "displayName": "7 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_20", - "displayName": "8 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_21", - "displayName": "9 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_22", - "displayName": "10 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_23", - "displayName": "11 PM", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthin", - "displayName": "\r\nMaximum Background Download Bandwidth (percentage) during Business Hours:\r\n", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthout", - "displayName": "\r\nMaximum Background Download Bandwidth (percentage) outside of Business Hours:\r\n", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto", - "displayName": "To: (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_0", - "displayName": "12 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_1", - "displayName": "1 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_2", - "displayName": "2 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_3", - "displayName": "3 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_4", - "displayName": "4 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_5", - "displayName": "5 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_6", - "displayName": "6 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_7", - "displayName": "7 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_8", - "displayName": "8 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_9", - "displayName": "9 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_10", - "displayName": "10 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_11", - "displayName": "11 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_12", - "displayName": "12 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_13", - "displayName": "1 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_14", - "displayName": "2 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_15", - "displayName": "3 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_16", - "displayName": "4 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_17", - "displayName": "5 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_18", - "displayName": "6 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_19", - "displayName": "7 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_20", - "displayName": "8 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_21", - "displayName": "9 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_22", - "displayName": "10 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_23", - "displayName": "11 PM", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth", - "displayName": "Set Business Hours to Limit Foreground Download Bandwidth", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom", - "displayName": "From: (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_0", - "displayName": "12 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_1", - "displayName": "1 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_2", - "displayName": "2 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_3", - "displayName": "3 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_4", - "displayName": "4 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_5", - "displayName": "5 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_6", - "displayName": "6 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_7", - "displayName": "7 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_8", - "displayName": "8 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_9", - "displayName": "9 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_10", - "displayName": "10 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_11", - "displayName": "11 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_12", - "displayName": "12 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_13", - "displayName": "1 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_14", - "displayName": "2 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_15", - "displayName": "3 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_16", - "displayName": "4 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_17", - "displayName": "5 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_18", - "displayName": "6 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_19", - "displayName": "7 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_20", - "displayName": "8 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_21", - "displayName": "9 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_22", - "displayName": "10 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_23", - "displayName": "11 PM", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthin", - "displayName": "\r\nMaximum Foreground Download Bandwidth (percentage) during Business Hours:\r\n", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthout", - "displayName": "\r\nMaximum Foreground Download Bandwidth (percentage) outside of Business Hours:\r\n", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto", - "displayName": "To: (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_0", - "displayName": "12 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_1", - "displayName": "1 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_2", - "displayName": "2 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_3", - "displayName": "3 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_4", - "displayName": "4 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_5", - "displayName": "5 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_6", - "displayName": "6 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_7", - "displayName": "7 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_8", - "displayName": "8 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_9", - "displayName": "9 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_10", - "displayName": "10 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_11", - "displayName": "11 AM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_12", - "displayName": "12 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_13", - "displayName": "1 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_14", - "displayName": "2 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_15", - "displayName": "3 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_16", - "displayName": "4 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_17", - "displayName": "5 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_18", - "displayName": "6 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_19", - "displayName": "7 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_20", - "displayName": "8 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_21", - "displayName": "9 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_22", - "displayName": "10 PM", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_23", - "displayName": "11 PM", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deliveryoptimization_dovpnkeywords", - "displayName": "DO Vpn Keywords", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources", - "displayName": "Enable App Installer Additional Sources", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_additionalsources", - "displayName": "Additional Sources: (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources", - "displayName": "Enable App Installer Allowed Sources", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources_allowedsources", - "displayName": "Allowed Sources: (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller", - "displayName": "Enable App Installer", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore", - "displayName": "Enable App Installer Microsoft Store Source Certificate Validation Bypass", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource", - "displayName": "Enable App Installer Default Source", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures", - "displayName": "Enable App Installer Experimental Features", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride", - "displayName": "Enable App Installer Hash Override", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride", - "displayName": "Enable App Installer Local Archive Malware Scan Override", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablelocalmanifestfiles", - "displayName": "Enable App Installer Local Manifest Files", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablelocalmanifestfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablelocalmanifestfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource", - "displayName": "Enable App Installer Microsoft Store Source", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol", - "displayName": "Enable App Installer ms-appinstaller protocol", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablesettings", - "displayName": "Enable App Installer Settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablesettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablesettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces", - "displayName": "Enable Windows Package Manager command line interfaces", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagerconfiguration", - "displayName": "Enable Windows Package Manager Configuration", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagerconfiguration_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagerconfiguration_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval", - "displayName": "Set App Installer Source Auto Update Interval In Minutes", - "options": [ - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_sourceautoupdateinterval", - "displayName": "Source Auto Update Interval In Minutes (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch", - "displayName": "Configure System Guard Launch", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_0", - "displayName": "Unmanaged Configurable by Administrative user", - "description": "Unmanaged Configurable by Administrative user" - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_1", - "displayName": "Unmanaged Enables Secure Launch if supported by hardware", - "description": "Unmanaged Enables Secure Launch if supported by hardware" - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_2", - "displayName": "Unmanaged Disables Secure Launch", - "description": "Unmanaged Disables Secure Launch" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity", - "displayName": "Enable Virtualization Based Security", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity_0", - "displayName": "disable virtualization based security.", - "description": "disable virtualization based security." - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity_1", - "displayName": "enable virtualization based security.", - "description": "enable virtualization based security." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_lsacfgflags", - "displayName": "Credential Guard", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceguard_lsacfgflags_0", - "displayName": "(Disabled) Turns off Credential Guard remotely if configured previously without UEFI Lock.", - "description": "(Disabled) Turns off Credential Guard remotely if configured previously without UEFI Lock." - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_lsacfgflags_1", - "displayName": "(Enabled with UEFI lock) Turns on Credential Guard with UEFI lock.", - "description": "(Enabled with UEFI lock) Turns on Credential Guard with UEFI lock." - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_lsacfgflags_2", - "displayName": "(Enabled without lock) Turns on Credential Guard without UEFI lock.", - "description": "(Enabled without lock) Turns on Credential Guard without UEFI lock." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_machineidentityisolation", - "displayName": "Machine Identity Isolation", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceguard_machineidentityisolation_0", - "displayName": "(Disabled) Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key.", - "description": "(Disabled) Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key." - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_machineidentityisolation_1", - "displayName": "(Enabled in audit mode) Machine password both LSASS-bound and IUM-bound. It is stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys.", - "description": "(Enabled in audit mode) Machine password both LSASS-bound and IUM-bound. It is stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys." - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_machineidentityisolation_2", - "displayName": "(Enabled in enforcement mode) Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key.", - "description": "(Enabled in enforcement mode) Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_requiremicrosoftsignedbootchain", - "displayName": "Require Microsoft Signed Boot Chain", - "options": { - "id": "device_vendor_msft_policy_config_deviceguard_requiremicrosoftsignedbootchain_1", - "displayName": "Require Microsoft Signed Boot Chain.", - "description": "Require Microsoft Signed Boot Chain." - } - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures", - "displayName": "Require Platform Security Features", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures_1", - "displayName": "Turns on VBS with Secure Boot.", - "description": "Turns on VBS with Secure Boot." - }, - { - "id": "device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures_3", - "displayName": "Turns on VBS with Secure Boot and direct memory access (DMA). DMA requires hardware support.", - "description": "Turns on VBS with Secure Boot and direct memory access (DMA). DMA requires hardware support." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_allowdevicehealthmonitoring", - "displayName": "Allow Device Health Monitoring", - "options": [ - { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_allowdevicehealthmonitoring_1", - "displayName": "The DeviceHealthMonitoring connection is enabled.", - "description": "The DeviceHealthMonitoring connection is enabled." - }, - { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_allowdevicehealthmonitoring_0", - "displayName": "The DeviceHealthMonitoring connection is disabled.", - "description": "The DeviceHealthMonitoring connection is disabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope", - "displayName": "[Deprecated] Config Device Health Monitoring Scope", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope_v2_epm", - "displayName": "Config Device Health Monitoring Scope", - "options": { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope_v2_epm_privilegemanagement", - "displayName": "Privilege Management", - "description": null - } - }, - { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringserviceinstance", - "displayName": "[Deprecated] Config Device Health Monitoring Service Instance", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringuploaddestination", - "displayName": "[Deprecated] Config Device Health Monitoring Upload Destination", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringuploaddestination_v2", - "displayName": "Config Device Health Monitoring Upload Destination", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids", - "displayName": "Allow installation of devices that match any of these device IDs", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids_deviceinstall_ids_allow_list", - "displayName": "Allowed device IDs", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids", - "displayName": "Allow installation of devices that match any of these device instance IDs", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_allow_list", - "displayName": "Allowed Instance IDs", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses", - "displayName": "Allow installation of devices using drivers that match these device setup classes", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses_deviceinstall_classes_allow_list", - "displayName": "Allowed classes", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_enableinstallationpolicylayering", - "displayName": "Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_enableinstallationpolicylayering_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_enableinstallationpolicylayering_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork", - "displayName": "Prevent automatic download of applications associated with device metadata", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings", - "displayName": "Prevent installation of devices not described by other policy settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids", - "displayName": "Prevent installation of devices that match any of these device IDs", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_list", - "displayName": "Prevented device IDs", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive", - "displayName": "Also apply to matching devices that are already installed.", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive_0", - "displayName": "False", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids", - "displayName": "Prevent installation of devices that match any of these device instance IDs", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_list", - "displayName": "Prevented Instance IDs", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_retroactive", - "displayName": "Also apply to matching devices that are already installed. (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_retroactive_0", - "displayName": "False", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_retroactive_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses", - "displayName": "Prevent installation of devices using drivers that match these device setup classes", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_list", - "displayName": "Prevented Classes", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive", - "displayName": "Also apply to matching devices that are already installed.", - "options": [ - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive_0", - "displayName": "False", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_devicelock_accountlockoutpolicy", - "displayName": "Account Lockout Policy", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword", - "displayName": "Allow Simple Device Password", - "options": [ - { - "id": "device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_devicelock_alphanumericdevicepasswordrequired", - "displayName": "Alphanumeric Device Password Required", - "options": [ - { - "id": "device_vendor_msft_policy_config_devicelock_alphanumericdevicepasswordrequired_0", - "displayName": "Password or Alphanumeric PIN required.", - "description": "Password or Alphanumeric PIN required." - }, - { - "id": "device_vendor_msft_policy_config_devicelock_alphanumericdevicepasswordrequired_1", - "displayName": "Password or Numeric PIN required.", - "description": "Password or Numeric PIN required." - }, - { - "id": "device_vendor_msft_policy_config_devicelock_alphanumericdevicepasswordrequired_2", - "displayName": "Password, Numeric PIN, or Alphanumeric PIN required.", - "description": "Password, Numeric PIN, or Alphanumeric PIN required." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_devicelock_devicepasswordenabled", - "displayName": "Device Password Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_devicelock_devicepasswordenabled_0", - "displayName": "Enabled", - "description": "Enabled" - }, - { - "id": "device_vendor_msft_policy_config_devicelock_devicepasswordenabled_1", - "displayName": "Disabled", - "description": "Disabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_devicelock_devicepasswordexpiration", - "displayName": "Device Password Expiration", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_devicepasswordhistory", - "displayName": "Device Password History", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_enforcelockscreenandlogonimage", - "displayName": "Enforce Lock Screen And Logon Image", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_enforcelockscreenprovider", - "displayName": "Enforce Lock Screen Provider", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_maxdevicepasswordfailedattempts", - "displayName": "Max Device Password Failed Attempts", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_maxinactivitytimedevicelock", - "displayName": "Max Inactivity Time Device Lock", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_maxinactivitytimedevicelockwithexternaldisplay", - "displayName": "[Deprecated] Max Inactivity Time Device Lock With External Display", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters", - "displayName": "Min Device Password Complex Characters", - "options": [ - { - "id": "device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_1", - "displayName": "Digits only", - "description": "Digits only" - }, - { - "id": "device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_2", - "displayName": "Digits and lowercase letters are required", - "description": "Digits and lowercase letters are required" - }, - { - "id": "device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_3", - "displayName": "Digits lowercase letters and uppercase letters are required. Not supported in desktop Microsoft accounts and domain accounts", - "description": "Digits lowercase letters and uppercase letters are required. Not supported in desktop Microsoft accounts and domain accounts" - }, - { - "id": "device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_4", - "displayName": "Digits lowercase letters uppercase letters and special characters are required. Not supported in desktop", - "description": "Digits lowercase letters uppercase letters and special characters are required. Not supported in desktop" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_devicelock_mindevicepasswordlength", - "displayName": "Min Device Password Length", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_minimumpasswordage", - "displayName": "Minimum Password Age", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera", - "displayName": "Prevent enabling lock screen camera", - "options": [ - { - "id": "device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow", - "displayName": "Prevent enabling lock screen slide show", - "options": [ - { - "id": "device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_display_configuremultipledisplaymode", - "displayName": "Configure Multiple Display Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_display_configuremultipledisplaymode_0", - "displayName": "Default.", - "description": "Default." - }, - { - "id": "device_vendor_msft_policy_config_display_configuremultipledisplaymode_1", - "displayName": "Internal Only.", - "description": "Internal Only." - }, - { - "id": "device_vendor_msft_policy_config_display_configuremultipledisplaymode_2", - "displayName": "External Only.", - "description": "External Only." - }, - { - "id": "device_vendor_msft_policy_config_display_configuremultipledisplaymode_3", - "displayName": "Clone.", - "description": "Clone." - }, - { - "id": "device_vendor_msft_policy_config_display_configuremultipledisplaymode_4", - "displayName": "Extend.", - "description": "Extend." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_display_disableperprocessdpiforapps", - "displayName": "Disable Per Process Dpi For Apps", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_display_enableperprocessdpi", - "displayName": "Enable Per Process Dpi", - "options": [ - { - "id": "device_vendor_msft_policy_config_display_enableperprocessdpi_0", - "displayName": "Disabled", - "description": "Disable." - }, - { - "id": "device_vendor_msft_policy_config_display_enableperprocessdpi_1", - "displayName": "Enabled", - "description": "Enable." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_display_enableperprocessdpiforapps", - "displayName": "Enable Per Process Dpi For Apps", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_display_turnoffgdidpiscalingforapps", - "displayName": "Turn Off Gdi DPI Scaling For Apps", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_display_turnongdidpiscalingforapps", - "displayName": "Turn On Gdi DPI Scaling For Apps", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy", - "displayName": "Device Enumeration Policy", - "options": [ - { - "id": "device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_0", - "displayName": "Block all (Most restrictive)", - "description": "Block all (Most restrictive)" - }, - { - "id": "device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_1", - "displayName": "Only after log in/screen unlock", - "description": "Only after log in/screen unlock" - }, - { - "id": "device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_2", - "displayName": "Allow all (Least restrictive)", - "description": "Allow all (Least restrictive)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_eap_allowtls1_3", - "displayName": "Allow TLS13", - "options": [ - { - "id": "device_vendor_msft_policy_config_eap_allowtls1_3_0", - "displayName": "Use of TLS version 1.3 is not allowed for authentication.", - "description": "Use of TLS version 1.3 is not allowed for authentication." - }, - { - "id": "device_vendor_msft_policy_config_eap_allowtls1_3_1", - "displayName": "Use of TLS version 1.3 is allowed for authentication.", - "description": "Use of TLS version 1.3 is allowed for authentication." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_education_enableeduthemes", - "displayName": "Enable Edu Themes", - "options": [ - { - "id": "device_vendor_msft_policy_config_education_enableeduthemes_0", - "displayName": "Disabled.", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_education_enableeduthemes_1", - "displayName": "Enabled.", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_education_iseducationenvironment", - "displayName": "Is Education Environment", - "options": [ - { - "id": "device_vendor_msft_policy_config_education_iseducationenvironment_0", - "displayName": "Disabled.", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_education_iseducationenvironment_1", - "displayName": "Enabled.", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_customizeconsentsettings", - "displayName": "Customize consent settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_werconsentcustomize", - "displayName": "Customize consent settings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_werconsentcustomize_key", - "displayName": "Name", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_werconsentcustomize_value", - "displayName": "Value", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting", - "displayName": "Disable Windows Error Reporting", - "options": [ - { - "id": "device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_displayerrornotification", - "displayName": "Display Error Notification", - "options": [ - { - "id": "device_vendor_msft_policy_config_errorreporting_displayerrornotification_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_displayerrornotification_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata", - "displayName": "Do not send additional data", - "options": [ - { - "id": "device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay", - "displayName": "Prevent display of the user interface for critical errors", - "options": [ - { - "id": "device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior", - "displayName": "Control Event Log behavior when the log file reaches its maximum size", - "options": [ - { - "id": "device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog", - "displayName": "Specify the maximum log file size (KB)", - "options": [ - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_channel_logmaxsize", - "displayName": "Maximum Log Size (KB)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog", - "displayName": "Specify the maximum log file size (KB)", - "options": [ - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_channel_logmaxsize", - "displayName": "Maximum Log Size (KB)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog", - "displayName": "Specify the maximum log file size (KB)", - "options": [ - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_channel_logmaxsize", - "displayName": "Maximum Log Size (KB)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_experience_allowclipboardhistory", - "displayName": "Allow Clipboard History", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowclipboardhistory_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowclipboardhistory_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowcortana", - "displayName": "Allow Cortana", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowcortana_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowcortana_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowdevicediscovery", - "displayName": "Allow Device Discovery", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowdevicediscovery_0", - "displayName": "Block", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowdevicediscovery_1", - "displayName": "Allow", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowfindmydevice", - "displayName": "Allow Find My Device", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowfindmydevice_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowfindmydevice_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment", - "displayName": "Allow Manual MDM Unenrollment", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowsaveasofofficefiles", - "displayName": "Allow Save As Of Office Files", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowsaveasofofficefiles_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowsaveasofofficefiles_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowscreencapture", - "displayName": "Allow Screen Capture", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowscreencapture_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowscreencapture_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim", - "displayName": "Allow SIM Error Dialog Prompt When No SIM", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowsyncmysettings", - "displayName": "Allow Sync My Settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowsyncmysettings_0", - "displayName": "Block", - "description": "Sync settings are not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowsyncmysettings_1", - "displayName": "Allow", - "description": "Sync settings allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures", - "displayName": "Allow Windows Consumer Features", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_allowwindowstips", - "displayName": "Allow Windows Tips", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_allowwindowstips_0", - "displayName": "Block", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_experience_allowwindowstips_1", - "displayName": "Allow", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_configurechaticon", - "displayName": "Configure Chat Icon", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_configurechaticon_0", - "displayName": "Windows default", - "description": "Not configured" - }, - { - "id": "device_vendor_msft_policy_config_experience_configurechaticon_1", - "displayName": "Show", - "description": "Show" - }, - { - "id": "device_vendor_msft_policy_config_experience_configurechaticon_2", - "displayName": "Hide", - "description": "Hide" - }, - { - "id": "device_vendor_msft_policy_config_experience_configurechaticon_3", - "displayName": "Disabled", - "description": "Disabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent", - "displayName": "Disable Cloud Optimized Content", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent_0", - "displayName": "Disabled", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent_1", - "displayName": "Enabled", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent", - "displayName": "Disable Consumer Account State Content", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent_0", - "displayName": "Disabled.", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent_1", - "displayName": "Enabled.", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_disableshareapppromotions", - "displayName": "Disable Share App Promotions", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_disableshareapppromotions_0", - "displayName": "Promotional Apps on ShareSheet are Enabled.", - "description": "Promotional Apps on ShareSheet are Enabled." - }, - { - "id": "device_vendor_msft_policy_config_experience_disableshareapppromotions_1", - "displayName": "Promotional Apps on ShareSheet are Disabled.", - "description": "Promotional Apps on ShareSheet are Disabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications", - "displayName": "Do Not Show Feedback Notifications", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications_0", - "displayName": "Feedback notifications are not disabled. The actual state of feedback notifications on the device will then depend on what GP has configured or what the user has configured locally.", - "description": "Feedback notifications are not disabled. The actual state of feedback notifications on the device will then depend on what GP has configured or what the user has configured locally." - }, - { - "id": "device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications_1", - "displayName": "Feedback notifications are disabled.", - "description": "Feedback notifications are disabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_donotsyncbrowsersettings", - "displayName": "Do Not Sync Browser Settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_donotsyncbrowsersettings_2", - "displayName": "Disable Syncing", - "description": "Disable Syncing" - }, - { - "id": "device_vendor_msft_policy_config_experience_donotsyncbrowsersettings_0", - "displayName": "Allow syncing", - "description": "Allow syncing" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing", - "displayName": "Prevent Users From Turning On Browser Syncing", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing_0", - "displayName": "Disabled", - "description": "Allowed/turned on. Users can sync the browser settings." - }, - { - "id": "device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing_1", - "displayName": "Enabled", - "description": "Prevented/turned off." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_experience_showlockonusertile", - "displayName": "Show Lock On User Tile", - "options": [ - { - "id": "device_vendor_msft_policy_config_experience_showlockonusertile_0", - "displayName": "Disabled", - "description": "The lock option is not displayed in the User Tile menu." - }, - { - "id": "device_vendor_msft_policy_config_experience_showlockonusertile_1", - "displayName": "Enabled", - "description": "The lock option is displayed in the User Tile menu." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_exploitguard_exploitprotectionsettings", - "displayName": "Exploit Protection Settings", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_federatedauthentication_enablewebsigninforprimaryuser", - "displayName": "Enable Web Sign In For Primary User", - "options": [ - { - "id": "device_vendor_msft_policy_config_federatedauthentication_enablewebsigninforprimaryuser_0", - "displayName": "Feature defaults as appropriate for edition and device capabilities. As of now, all editions/devices exhibit Disabled behavior by default. However, this may change for future editions/devices.", - "description": "Feature defaults as appropriate for edition and device capabilities. As of now, all editions/devices exhibit Disabled behavior by default. However, this may change for future editions/devices." - }, - { - "id": "device_vendor_msft_policy_config_federatedauthentication_enablewebsigninforprimaryuser_1", - "displayName": "Enabled. Web Sign-in Credential Provider will be enabled for device sign-in.", - "description": "Enabled. Web Sign-in Credential Provider will be enabled for device sign-in." - }, - { - "id": "device_vendor_msft_policy_config_federatedauthentication_enablewebsigninforprimaryuser_2", - "displayName": "Disabled. Web Sign-in Credential Provider will be not be enabled for device sign-in.", - "description": "Disabled. Web Sign-in Credential Provider will be not be enabled for device sign-in." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_feeds_feedsenabled", - "displayName": "Enable News and interests", - "options": [ - { - "id": "device_vendor_msft_policy_config_feeds_feedsenabled_0", - "displayName": "Not allowed.", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_feeds_feedsenabled_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork", - "displayName": "Allow Option To Show Network", - "options": [ - { - "id": "device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_0", - "displayName": "Not Allowed.", - "description": "Not Allowed." - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc", - "displayName": "Allow Option To Show This PC", - "options": [ - { - "id": "device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_0", - "displayName": "Not Allowed.", - "description": "Not Allowed." - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems", - "displayName": "Disable Graph Recent Items", - "options": [ - { - "id": "device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems_0", - "displayName": "File Explorer will request cloud file metadata and display it in the Quick access view.", - "description": "File Explorer will request cloud file metadata and display it in the Quick access view." - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems_1", - "displayName": "File Explorer will not request cloud file metadata or display it in the Quick access view.", - "description": "File Explorer will not request cloud file metadata or display it in the Quick access view." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations", - "displayName": "Set Allowed Folder Locations", - "options": [ - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_0", - "displayName": "Access to all folder locations.", - "description": "Access to all folder locations." - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_13", - "displayName": "Documents, Pictures, Downloads", - "description": "Documents, Pictures, Downloads" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_15", - "displayName": "Desktop, Documents, Pictures, Downloads", - "description": "Desktop, Documents, Pictures, Downloads" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_31", - "displayName": "Desktop, Documents, Pictures, Downloads, Network", - "description": "Desktop, Documents, Pictures, Downloads, Network" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_47", - "displayName": "This PC, Desktop, Documents, Pictures, Downloads", - "description": "This PC, Desktop, Documents, Pictures, Downloads" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_63", - "displayName": "This PC, Desktop, Documents, Pictures, Downloads, Network", - "description": "This PC, Desktop, Documents, Pictures, Downloads, Network" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations", - "displayName": "Set Allowed Storage Locations", - "options": [ - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_0", - "displayName": "Access to all storage locations.", - "description": "Access to all storage locations." - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_1", - "displayName": "Removable Drives", - "description": "Removable Drives" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_2", - "displayName": "Sync roots", - "description": "Sync roots" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_3", - "displayName": "Removable Drives, Sync roots", - "description": "Removable Drives, Sync roots" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_4", - "displayName": "Local Drives", - "description": "Local Drives" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_5", - "displayName": "Removable Drives, Local Drives", - "description": "Removable Drives, Local Drives" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_6", - "displayName": "Sync Roots, Local Drives", - "description": "Sync Roots, Local Drives" - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_7", - "displayName": "Removable Drives, Sync Roots, Local Drives", - "description": "Removable Drives, Sync Roots, Local Drives" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_turnoffdataexecutionpreventionforexplorer", - "displayName": "Turn off Data Execution Prevention for Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_fileexplorer_turnoffdataexecutionpreventionforexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_turnoffdataexecutionpreventionforexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption", - "displayName": "Turn off heap termination on corruption", - "options": [ - { - "id": "device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_filesystem_devdriveattachpolicy", - "displayName": "Dev drive filter attach policy", - "options": [ - { - "id": "device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_devdriveattachpolicy", - "displayName": "Filter list (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_filesystem_enabledevdrive", - "displayName": "Enable dev drive", - "options": [ - { - "id": "device_vendor_msft_policy_config_filesystem_enabledevdrive_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_filesystem_enabledevdrive_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter", - "displayName": "Let antivirus filter protect dev drives (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter_0", - "displayName": "False", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions", - "displayName": "Clean-up Invalid Sessions", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_roamrecyclebin", - "displayName": "Roam Recycle Bin", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_roamrecyclebin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_roamrecyclebin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk", - "displayName": "VHD Compact Disk", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory", - "displayName": "Cache Directory", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_ccdcachedirectory", - "displayName": "Cache Directory (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory", - "displayName": "Proxy Directory", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory_ccdproxydirectory", - "displayName": "Proxy Directory (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory", - "displayName": "Write Cache Directory", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_ccdwritecachedirectory", - "displayName": "Write Cache Directory (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess", - "displayName": "AD Computer Group Process", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface", - "displayName": "Driver Interface", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled", - "displayName": "Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_0", - "displayName": "Logging Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_1", - "displayName": "Specific Logs Only", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_2", - "displayName": "Enable All Logs", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility", - "displayName": "Font Visibility", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfrxlauncher", - "displayName": "FrxLauncher", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfrxlauncher_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfrxlauncher_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin", - "displayName": "IE plugin", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingjavaruleeditor", - "displayName": "Java rule editor", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingjavaruleeditor_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingjavaruleeditor_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory", - "displayName": "Log Directory", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_logginglogdirectory", - "displayName": "Log Directory (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod", - "displayName": "Log Keeping Period", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_logginglogkeepingperiod", - "displayName": "Log Keeping Period (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork", - "displayName": "Network", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer", - "displayName": "ODFC Container", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility", - "displayName": "Printer Visibility", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart", - "displayName": "Process Start", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool", - "displayName": "Profile Configuration Tool", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer", - "displayName": "Profile Container", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation", - "displayName": "Rule Compilation", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor", - "displayName": "Rule Editor", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin", - "displayName": "Search Plugin", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming", - "displayName": "Search Roaming", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices", - "displayName": "Services", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer", - "displayName": "Access Network as Computer Object", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl", - "displayName": "Attached VHD SDDL", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_odfcattachedvhdsddl", - "displayName": "Attached VHD SDDL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation", - "displayName": "Include Office Activation", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive", - "displayName": "Include OneDrive", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote", - "displayName": "Include OneNote", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenoteuwp", - "displayName": "Include OneNote UWP", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenoteuwp_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenoteuwp_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook", - "displayName": "Include Outlook", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization", - "displayName": "Include Outlook Personalization", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint", - "displayName": "Include Sharepoint", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype", - "displayName": "Include Skype", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams", - "displayName": "Include Teams", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd", - "displayName": "Is Dynamic (VHD)", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount", - "displayName": "Locked Retry Count", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_odfclockedretrycount", - "displayName": "Locked Retry Count (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval", - "displayName": "Locked Retry Interval", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_odfclockedretryinterval", - "displayName": "Locked Retry Interval (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd", - "displayName": "Mirror Local OST To VHD", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_0", - "displayName": "Do not mirror OST to VHD", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_1", - "displayName": "Copy OST to VHD", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_2", - "displayName": "Move OST to VHD", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep", - "displayName": "Number Session VHD(s) To Keep", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_odfcnumbersessionvhdstokeep", - "displayName": "Number Session VHD(s) To Keep (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled", - "displayName": "Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode", - "displayName": "Outlook Cached Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath", - "displayName": "Outlook Folder Path", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_odfcoutlookfolderpath", - "displayName": "Outlook Folder Path (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure", - "displayName": "Prevent Login With Failure", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile", - "displayName": "Prevent Login With Temp Profile", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount", - "displayName": "Reattach Count", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_odfcreattachcount", - "displayName": "Reattach Count (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval", - "displayName": "Reattach Interval", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_odfcreattachinterval", - "displayName": "Reattach Interval (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype", - "displayName": "Redirect Type", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype_1", - "displayName": "Legacy Redirection", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype_2", - "displayName": "FSLogix Redirection", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy", - "displayName": "Refresh User Policy", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff", - "displayName": "Remove Orphaned OST Files On Logoff", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch", - "displayName": "Roam Search", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_1", - "displayName": "Single-user Search", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_2", - "displayName": "Multi-user Search", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs", - "displayName": "Size In MBs", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_odfcsizeinmbs", - "displayName": "Size In MBs (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode", - "displayName": "VHD Access Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_0", - "displayName": "Direct Access", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_1", - "displayName": "DiffDisk On Network", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_2", - "displayName": "Local DiffDisk", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_3", - "displayName": "Unique Disk per Session", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations", - "displayName": "VHD Locations", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_odfcvhdlocations", - "displayName": "VHD Locations (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize", - "displayName": "VHDX Sector Size", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize_512", - "displayName": "512 bytes", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize_4096", - "displayName": "4 KB", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx", - "displayName": "Volume Type (VHD or VHDX)", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx_vhd", - "displayName": "VHD", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx_vhdx", - "displayName": "VHDX", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds", - "displayName": "Volume Wait Time (milliseconds)", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_odfcvolumewaittimemilliseconds", - "displayName": "Volume Wait Time (milliseconds) (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations", - "displayName": "CCD Locations", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_odfcccdlocations", - "displayName": "CCD Locations (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs", - "displayName": "CCD Max Cache Size in MBs", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_odfcccdmaxcachesizeinmbs", - "displayName": "CCD Max Cache Size in MBs (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout", - "displayName": "CCD Unregister Timeout", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_odfcccdunregistertimeout", - "displayName": "CCD Unregister Timeout (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister", - "displayName": "Clear Cache On Forced Unregister", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff", - "displayName": "Clear Cache On Logoff", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister", - "displayName": "Healthy Providers Required For Register", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_odfchealthyprovidersrequiredforregister", - "displayName": "Healthy Providers Required For Register (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister", - "displayName": "Healthy Providers Required For Unregister", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_odfchealthyprovidersrequiredforunregister", - "displayName": "Healthy Providers Required For Unregister (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath", - "displayName": "Diff Disk Parent Folder Path", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_odfcdiffdiskparentfolderpath", - "displayName": "Diff Disk Parent Folder Path (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcflipflopprofiledirectoryname", - "displayName": "Flip Flop Profile Directory Name", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcflipflopprofiledirectoryname_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcflipflopprofiledirectoryname_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder", - "displayName": "No Profile Containing Folder", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch", - "displayName": "SID Directory Name Match", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_odfcsiddirectorynamematch", - "displayName": "SID Directory Name Match (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern", - "displayName": "SID Directory Name Pattern", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_odfcsiddirectorynamepattern", - "displayName": "SID Directory Name Pattern (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch", - "displayName": "VHD Name Match", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_odfcvhdnamematch", - "displayName": "VHD Name Match (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern", - "displayName": "VHD Name Pattern", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_odfcvhdnamepattern", - "displayName": "VHD Name Pattern (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer", - "displayName": "Access Network as Computer Object", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl", - "displayName": "Attached VHD SDDL", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_profilesattachedvhdsddl", - "displayName": "Attached VHD SDDL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications", - "displayName": "Clean Out Notifications", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply", - "displayName": "Delete Local Profile When VHD Should Apply", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled", - "displayName": "Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages", - "displayName": "Install Appx Packages", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd", - "displayName": "Is Dynamic (VHD)", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff", - "displayName": "Keep Local Directory (after logoff)", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount", - "displayName": "Locked Retry Count", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_profileslockedretrycount", - "displayName": "Locked Retry Count (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval", - "displayName": "Locked Retry Interval", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval_profileslockedretryinterval", - "displayName": "Locked Retry Interval (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode", - "displayName": "Outlook Cached Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure", - "displayName": "Prevent Login With Failure", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile", - "displayName": "Prevent Login With Temp Profile", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl", - "displayName": "Profile Directory SDDL", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_profilesprofiledirectorysddl", - "displayName": "Profile Directory SDDL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype", - "displayName": "Profile Type", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_0", - "displayName": "Normal Profile", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_1", - "displayName": "Read / Write Profile", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_2", - "displayName": "Read Only Profile", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_3", - "displayName": "Read / Write profile - fallback to Read Only", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount", - "displayName": "Reattach Count", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_profilesreattachcount", - "displayName": "Reattach Count (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval", - "displayName": "Reattach Interval", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_profilesreattachinterval", - "displayName": "Reattach Interval (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff", - "displayName": "Reboot On User Logoff", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_profilesrebootonuserlogoff", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_profilesrebootonuserlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_profilesrebootonuserlogoff_1", - "displayName": "Reboot on any logoff", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_profilesrebootonuserlogoff_2", - "displayName": "Reboot only on any FSLogix Profile logoff", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder", - "displayName": "Redirection XML Source Folder", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_profilesredirectionxmlsourcefolder", - "displayName": "Redirection XML Source Folder (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype", - "displayName": "Redirect Type", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype_1", - "displayName": "Legacy Redirection", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype_2", - "displayName": "FSLogix Redirection", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff", - "displayName": "Remove Orphaned OST Files On Logoff", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity", - "displayName": "Roam Identity", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch", - "displayName": "Roam Search", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_1", - "displayName": "Single-user Search", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_2", - "displayName": "Multi-user Search", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath", - "displayName": "Set Temp Folders to Local Path", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_0", - "displayName": "Take no action", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_1", - "displayName": "Redirect TEMP and TMP to local drive", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_2", - "displayName": "Redirect INetCache to local drive", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_3", - "displayName": "Redirect TEMP, TMP and INetCache to local drive", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff", - "displayName": "Shutdown On User Logoff", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_1", - "displayName": "Shutdown on any logoff", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_2", - "displayName": "Shutdown on any FSLogix Profile logoff", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl", - "displayName": "SID Directory SDDL", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_profilessiddirectorysddl", - "displayName": "SID Directory SDDL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs", - "displayName": "Size In MBs", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_profilessizeinmbs", - "displayName": "Size In MBs (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations", - "displayName": "VHD Locations", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_profilesvhdlocations", - "displayName": "VHD Locations (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize", - "displayName": "VHDX Sector Size", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize_512", - "displayName": "512 bytes", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize_4096", - "displayName": "4 KB", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds", - "displayName": "Volume Wait Time (milliseconds)", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds_profilesvolumewaittimemilliseconds", - "displayName": "Volume Wait Time (milliseconds) (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations", - "displayName": "CCD Locations", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_profilesccdlocations", - "displayName": "CCD Locations (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs", - "displayName": "CCD Max Cache Size in MBs", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_profilesccdmaxcachesizeinmbs", - "displayName": "CCD Max Cache Size in MBs (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout", - "displayName": "CCD Unregister Timeout", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_profilesccdunregistertimeout", - "displayName": "CCD Unregister Timeout (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister", - "displayName": "Clear Cache on Forced Unregister", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff", - "displayName": "Clear Cache on Logoff", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister", - "displayName": "Healthy Providers Required For Register", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_profileshealthyprovidersrequiredforregister", - "displayName": "Healthy Providers Required For Register (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister", - "displayName": "Healthy Providers Required For Unregister", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_profileshealthyprovidersrequiredforunregister", - "displayName": "Healthy Providers Required For Unregister (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath", - "displayName": "Diff Disk Parent Folder Path", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_profilesdiffdiskparentfolderpath", - "displayName": "Diff Disk Parent Folder Path (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname", - "displayName": "Flip Flop Profile Directory Name", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder", - "displayName": "No Profile Containing Folder", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch", - "displayName": "SID Directory Name Match", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_profilessiddirectorynamematch", - "displayName": "SID Directory Name Match (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern", - "displayName": "SID Directory Name Pattern", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern_profilessiddirectorynamepattern", - "displayName": "SID Directory Name Pattern (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch", - "displayName": "VHD Name Match", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch_profilesvhdnamematch", - "displayName": "VHD Name Match (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern", - "displayName": "VHD Name Pattern", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_profilesvhdnamepattern", - "displayName": "VHD Name Pattern (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx", - "displayName": "Volume Type (VHD or VHDX)", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx", - "displayName": "", - "options": [ - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx_vhd", - "displayName": "VHD", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx_vhdx", - "displayName": "VHDX", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_games_allowadvancedgamingservices", - "displayName": "Allow Advanced Gaming Services", - "options": [ - { - "id": "device_vendor_msft_policy_config_games_allowadvancedgamingservices_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "device_vendor_msft_policy_config_games_allowadvancedgamingservices_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked", - "displayName": "Panel Default Mode Docked", - "options": [ - { - "id": "device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked_0", - "displayName": "Disabled", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked_1", - "displayName": "Enabled", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceinstantlock", - "displayName": "Force Instant Lock", - "options": [ - { - "id": "device_vendor_msft_policy_config_humanpresence_forceinstantlock_2", - "displayName": "Forced Off.", - "description": "ForcedOff." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceinstantlock_1", - "displayName": "Forced On.", - "description": "ForcedOn." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceinstantlock_0", - "displayName": "Default To User Choice.", - "description": "DefaultToUserChoice." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceinstantwake", - "displayName": "Force Instant Wake", - "options": [ - { - "id": "device_vendor_msft_policy_config_humanpresence_forceinstantwake_2", - "displayName": "Forced Off.", - "description": "ForcedOff." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceinstantwake_1", - "displayName": "Forced On.", - "description": "ForcedOn." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceinstantwake_0", - "displayName": "Default To User Choice.", - "description": "DefaultToUserChoice." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forcelocktimeout", - "displayName": "Force Lock Timeout", - "options": [ - { - "id": "device_vendor_msft_policy_config_humanpresence_forcelocktimeout_120", - "displayName": "Two Minutes", - "description": "TwoMinutes" - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forcelocktimeout_30", - "displayName": "Thirty Seconds.", - "description": "ThirtySeconds." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forcelocktimeout_10", - "displayName": "Ten Seconds.", - "description": "TenSeconds." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forcelocktimeout_1", - "displayName": "Immediate.", - "description": "Immediate." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forcelocktimeout_0", - "displayName": "Default To User Choice.", - "description": "DefaultToUserChoice." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceonlookerdetection", - "displayName": "Force Onlooker Detection", - "options": [ - { - "id": "device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_2", - "displayName": "Forced Off.", - "description": "ForcedOff." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_1", - "displayName": "Forced On.", - "description": "ForcedOn." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_0", - "displayName": "Default To User Choice.", - "description": "DefaultToUserChoice." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction", - "displayName": "Force Onlooker Detection Action", - "options": [ - { - "id": "device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_3", - "displayName": "Forced Dim And Notify.", - "description": "ForcedDimAndNotify." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_2", - "displayName": "Forced Notify.", - "description": "ForcedNotify." - }, - { - "id": "device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_0", - "displayName": "Default To User Choice.", - "description": "DefaultToUserChoice." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_addsearchprovider", - "displayName": "Add a specific list of search providers to the user's list of search providers", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_addsearchprovider_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_addsearchprovider_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering", - "displayName": "Turn on ActiveX Filtering", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowaddonlist", - "displayName": "Add-on List", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowaddonlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowaddonlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist", - "displayName": "Add-on List (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_key", - "displayName": "Name", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_value", - "displayName": "Value", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning", - "displayName": "Turn on certificate address mismatch warning", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit", - "displayName": "Allow deleting browsing history on exit", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode", - "displayName": "Turn on Enhanced Protected Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar", - "displayName": "Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu", - "displayName": "Let users turn on and use Enterprise Mode from the Tools menu", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_enterreportbackprompt", - "displayName": "Type the location (URL) of where to receive reports about the websites for which users turn on and use Enterprise Mode", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist", - "displayName": "Use the Enterprise Mode IE website list", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_entersitelistprompt", - "displayName": "Type the location (URL) of your Enterprise Mode IE website list", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3", - "displayName": "Allow fallback to SSL 3.0 (Internet Explorer)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions", - "displayName": "Allow insecure fallback for:", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_0", - "displayName": "No Sites", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_1", - "displayName": "Non-Protected Mode Sites", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_3", - "displayName": "All Sites", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist", - "displayName": "Use Policy List of Internet Explorer 7 sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_compatview_sitelist", - "displayName": "List of sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode", - "displayName": "Turn on Internet Explorer Standards Mode for local intranet", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate", - "displayName": "Internet Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate", - "displayName": "Internet", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate", - "displayName": "Intranet Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate", - "displayName": "Intranet", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate", - "displayName": "Local Machine Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate", - "displayName": "Local Machine Zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate", - "displayName": "Locked-Down Internet Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate", - "displayName": "Locked-Down Internet", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate", - "displayName": "Locked-Down Intranet Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate", - "displayName": "Locked-Down Intranet", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate", - "displayName": "Locked-Down Local Machine Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate", - "displayName": "Locked-Down Local Machine Zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate", - "displayName": "Locked-Down Restricted Sites Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate", - "displayName": "Locked-Down Restricted Sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowonewordentry", - "displayName": "Go to an intranet site for a one-word entry in the Address bar", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowonewordentry_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowonewordentry_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode", - "displayName": "Allow \"Save Target As\" in Internet Explorer mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist", - "displayName": "Site to Zone Assignment List", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt", - "displayName": "Enter the zone assignments here. (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_key", - "displayName": "Name", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_value", - "displayName": "Value", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate", - "displayName": "Locked-Down Trusted Sites Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate", - "displayName": "Locked-Down Trusted Sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid", - "displayName": "Allow software to run or install even if the signature is invalid", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate", - "displayName": "Restricted Sites Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate", - "displayName": "Restricted Sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites", - "displayName": "Turn on Suggested Sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate", - "displayName": "Trusted Sites Zone Template", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate", - "displayName": "Trusted Sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_autodetectintranet", - "displayName": "Turn on automatic detection of intranet", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_autodetectintranet_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_autodetectintranet_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation", - "displayName": "Check for server certificate revocation", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms", - "displayName": "Check for signatures on downloaded programs", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel", - "displayName": "Configure which channel of Microsoft Edge to use for opening redirected sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser", - "displayName": "First choice (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_", - "displayName": "", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_1", - "displayName": "Microsoft Edge Stable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_2", - "displayName": "Microsoft Edge Beta version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_3", - "displayName": "Microsoft Edge Dev version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_4", - "displayName": "Microsoft Edge Canary version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_0", - "displayName": "Microsoft Edge version 45 or earlier", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2", - "displayName": "Second choice (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_", - "displayName": "", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_1", - "displayName": "Microsoft Edge Stable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_2", - "displayName": "Microsoft Edge Beta version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_3", - "displayName": "Microsoft Edge Dev version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_4", - "displayName": "Microsoft Edge Canary version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_0", - "displayName": "Microsoft Edge version 45 or earlier", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3", - "displayName": "Third choice (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_", - "displayName": "", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_1", - "displayName": "Microsoft Edge Stable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_2", - "displayName": "Microsoft Edge Beta version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_3", - "displayName": "Microsoft Edge Dev version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_4", - "displayName": "Microsoft Edge Canary version 77 or later", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_0", - "displayName": "Microsoft Edge version 45 or earlier", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses", - "displayName": "Internet Explorer Processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableadobeflash", - "displayName": "Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableadobeflash_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableadobeflash_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings", - "displayName": "Prevent bypassing SmartScreen Filter warnings", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles", - "displayName": "Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecompatview", - "displayName": "Turn off Compatibility View", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecompatview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecompatview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory", - "displayName": "Disable \"Configuring History\"", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_daystokeep_prompt", - "displayName": "Days to keep pages in History", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecrashdetection", - "displayName": "Turn off Crash Detection", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecrashdetection_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecrashdetection_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation", - "displayName": "Prevent participation in the Customer Experience Improvement Program", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites", - "displayName": "Prevent deleting websites that the user has visited", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading", - "displayName": "Prevent downloading of enclosures", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport", - "displayName": "Turn off encryption support", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions", - "displayName": "Secure Protocol combinations", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_0", - "displayName": "Use no secure protocols", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_8", - "displayName": "Only use SSL 2.0", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_32", - "displayName": "Only use SSL 3.0", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_40", - "displayName": "Use SSL 2.0 and SSL 3.0", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_128", - "displayName": "Only use TLS 1.0", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_136", - "displayName": "Use SSL 2.0 and TLS 1.0", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_160", - "displayName": "Use SSL 3.0 and TLS 1.0", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_168", - "displayName": "Use SSL 2.0, SSL 3.0, and TLS 1.0", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_512", - "displayName": "Only use TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_520", - "displayName": "Use SSL 2.0 and TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_544", - "displayName": "Use SSL 3.0 and TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_552", - "displayName": "Use SSL 2.0, SSL 3.0, and TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_640", - "displayName": "Use TLS 1.0 and TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_648", - "displayName": "Use SSL 2.0, TLS 1.0, and TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_672", - "displayName": "Use SSL 3.0, TLS 1.0, and TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_680", - "displayName": "Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2048", - "displayName": "Only use TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2056", - "displayName": "Use SSL 2.0 and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2080", - "displayName": "Use SSL 3.0 and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2088", - "displayName": "Use SSL 2.0, SSL 3.0, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2176", - "displayName": "Use TLS 1.0 and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2184", - "displayName": "Use SSL 2.0, TLS 1.0, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2208", - "displayName": "Use SSL 3.0, TLS 1.0, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2216", - "displayName": "Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2560", - "displayName": "Use TLS 1.1 and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2568", - "displayName": "Use SSL 2.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2592", - "displayName": "Use SSL 3.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2600", - "displayName": "Use SSL 2.0, SSL 3.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2688", - "displayName": "Use TLS 1.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2696", - "displayName": "Use SSL 2.0, TLS 1.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2720", - "displayName": "Use SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2728", - "displayName": "Use SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_8192", - "displayName": "Only use TLS 1.3", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10240", - "displayName": "Use TLS 1.2 and TLS 1.3", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10752", - "displayName": "Use TLS 1.1, TLS 1.2, and TLS 1.3", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10880", - "displayName": "Use TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10912", - "displayName": "Use SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync", - "displayName": "Turn off background synchronization for feeds and Web Slices", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard", - "displayName": "Prevent running First Run wizard", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions", - "displayName": "Select your choice", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions_1", - "displayName": "Go directly to home page", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions_2", - "displayName": "Go directly to \"Welcome To IE\" page", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature", - "displayName": "Turn off the flip ahead with page prediction feature", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablegeolocation", - "displayName": "Turn off browser geolocation", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablegeolocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablegeolocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication", - "displayName": "Disable HTML Application", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors", - "displayName": "Prevent ignoring certificate errors", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing", - "displayName": "Turn off InPrivate Browsing", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp", - "displayName": "[Deprecated] Disable Internet Explorer 11 as a standalone browser", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2", - "displayName": "Disable Internet Explorer 11 as a standalone browser", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions", - "displayName": "Notify that Internet Explorer 11 browser is disabled (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_0", - "displayName": "Never", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_1", - "displayName": "Always", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_2", - "displayName": "Once per user", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom", - "displayName": "Disable Internet Explorer 11 Launch Via COM Automation", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode", - "displayName": "Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableproxychange", - "displayName": "Prevent changing proxy settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableproxychange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableproxychange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange", - "displayName": "Prevent changing the default search provider", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange", - "displayName": "Disable changing secondary home page settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_secondaryhomepageslist", - "displayName": "Secondary home pages (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck", - "displayName": "Turn off the Security Settings Check feature", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableupdatecheck", - "displayName": "Disable Periodic Check for Internet Explorer software updates", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableupdatecheck_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disableupdatecheck_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete", - "displayName": "Turn off the auto-complete feature for web addresses", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode", - "displayName": "Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites", - "displayName": "Security Zones: Do not allow users to add/delete sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies", - "displayName": "Security Zones: Do not allow users to change policies", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols", - "displayName": "Turn off blocking of outdated ActiveX controls for Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains", - "displayName": "Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_domainlist", - "displayName": "Domain allow list (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys", - "displayName": "Enable extended hot keys in Internet Explorer mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode", - "displayName": "Enable global window list in Internet Explorer mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_includealllocalsites", - "displayName": "Intranet Sites: Include all local (intranet) sites not listed in other zones", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_includealllocalsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_includealllocalsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths", - "displayName": "Intranet Sites: Include all network paths (UNCs)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites", - "displayName": "Intranet Sites: Include all sites that bypass the proxy server", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript", - "displayName": "Allow cut, copy or paste operations from the clipboard via script", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407", - "displayName": "Allow paste operations via script", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles", - "displayName": "Allow drag and drop or copy and paste files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802", - "displayName": "Allow drag and drop or copy and paste files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles", - "displayName": "Allow loading of XAML files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402", - "displayName": "XAML Files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols", - "displayName": "Allow only approved domains to use ActiveX controls without prompt", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b", - "displayName": "Only allow approved domains to use ActiveX controls without prompt", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol", - "displayName": "Allow only approved domains to use the TDC ActiveX control", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c", - "displayName": "Only allow approved domains to use the TDC ActiveX control", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols", - "displayName": "Allow scripting of Internet Explorer WebBrowser controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206", - "displayName": "Internet Explorer web browser control", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows", - "displayName": "Allow script-initiated windows without size or position constraints", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102", - "displayName": "Allow script-initiated windows without size or position constraints", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript", - "displayName": "Allow updates to status bar via script", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103", - "displayName": "Status bar updates via script", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer", - "displayName": "Allow VBScript to run in Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c", - "displayName": "Allow VBScript to run in Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols", - "displayName": "Download signed ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001", - "displayName": "Download signed ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols", - "displayName": "Download unsigned ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004", - "displayName": "Download unsigned ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter", - "displayName": "Turn on Cross-Site Scripting Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409", - "displayName": "Turn on Cross-Site Scripting (XSS) Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows", - "displayName": "Enable dragging of content from different domains across windows", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709", - "displayName": "Enable dragging of content from different domains across windows", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows", - "displayName": "Enable dragging of content from different domains within a window", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708", - "displayName": "Enable dragging of content from different domains within a window", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing", - "displayName": "Enable MIME Sniffing", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100", - "displayName": "Enable MIME Sniffing", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode", - "displayName": "Turn on Protected Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500", - "displayName": "Protected Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver", - "displayName": "Include local path when user is uploading files to a server", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a", - "displayName": "Include local directory path when uploading files to a server", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe", - "displayName": "Launching applications and files in an IFRAME", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804", - "displayName": "Launching applications and files in an IFRAME", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions", - "displayName": "Logon options", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00", - "displayName": "Logon options", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode", - "displayName": "Run .NET Framework-reliant components signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001", - "displayName": "Run .NET Framework-reliant components signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles", - "displayName": "Show security warning for potentially unsafe files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806", - "displayName": "Launching programs and unsafe files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker", - "displayName": "Use Pop-up Blocker", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809", - "displayName": "Use Pop-up Blocker", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions", - "displayName": "Logon options", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00", - "displayName": "Logon options (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_jscriptreplacement", - "displayName": "Replace JScript by loading JScript9Legacy in place of JScript.", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_jscriptreplacement_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_jscriptreplacement_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer", - "displayName": "Keep all intranet sites in Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions", - "displayName": "Logon options", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00", - "displayName": "Logon options (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses", - "displayName": "Internet Explorer Processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses", - "displayName": "Internet Explorer Processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage", - "displayName": "Specify default behavior for a new tab", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions", - "displayName": "New tab behavior", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_3", - "displayName": "New tab page with my news feed", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_0", - "displayName": "about:blank", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_2", - "displayName": "New tab page", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_1", - "displayName": "Home page", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses", - "displayName": "Internet Explorer Processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter", - "displayName": "Prevent managing SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions", - "displayName": "Select SmartScreen Filter mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_0", - "displayName": "Off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_1", - "displayName": "On", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols", - "displayName": "Prevent per-user installation of ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses", - "displayName": "Internet Explorer Processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols", - "displayName": "Remove \"Run this time\" button for outdated ActiveX controls in Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode", - "displayName": "Reset zoom to default for HTML dialogs in Internet Explorer mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses", - "displayName": "Internet Explorer Processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting", - "displayName": "Allow active scripting", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400", - "displayName": "Allow active scripting", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors", - "displayName": "Allow binary and script behaviors", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000", - "displayName": "Allow Binary and Script Behaviors", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_65536", - "displayName": "Administrator approved", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript", - "displayName": "Allow cut, copy or paste operations from the clipboard via script", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407", - "displayName": "Allow paste operations via script", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles", - "displayName": "Allow drag and drop or copy and paste files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802", - "displayName": "Allow drag and drop or copy and paste files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads", - "displayName": "Allow file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803", - "displayName": "Allow file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles", - "displayName": "Allow loading of XAML files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402", - "displayName": "XAML Files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh", - "displayName": "Allow META REFRESH", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608", - "displayName": "Allow META REFRESH", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols", - "displayName": "Allow only approved domains to use ActiveX controls without prompt", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b", - "displayName": "Only allow approved domains to use ActiveX controls without prompt", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol", - "displayName": "Allow only approved domains to use the TDC ActiveX control", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c", - "displayName": "Only allow approved domains to use the TDC ActiveX control", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols", - "displayName": "Allow scripting of Internet Explorer WebBrowser controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206", - "displayName": "Internet Explorer web browser control", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows", - "displayName": "Allow script-initiated windows without size or position constraints", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102", - "displayName": "Allow script-initiated windows without size or position constraints", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript", - "displayName": "Allow updates to status bar via script", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103", - "displayName": "Status bar updates via script", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer", - "displayName": "Allow VBScript to run in Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c", - "displayName": "Allow VBScript to run in Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols", - "displayName": "Download signed ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001", - "displayName": "Download signed ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols", - "displayName": "Download unsigned ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004", - "displayName": "Download unsigned ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter", - "displayName": "Turn on Cross-Site Scripting Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409", - "displayName": "Turn on Cross-Site Scripting (XSS) Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows", - "displayName": "Enable dragging of content from different domains across windows", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709", - "displayName": "Enable dragging of content from different domains across windows", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows", - "displayName": "Enable dragging of content from different domains within a window", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708", - "displayName": "Enable dragging of content from different domains within a window", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing", - "displayName": "Enable MIME Sniffing", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100", - "displayName": "Enable MIME Sniffing", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver", - "displayName": "Include local path when user is uploading files to a server", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a", - "displayName": "Include local directory path when uploading files to a server", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe", - "displayName": "Launching applications and files in an IFRAME", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804", - "displayName": "Launching applications and files in an IFRAME", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions", - "displayName": "Logon options", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00", - "displayName": "Logon options", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins", - "displayName": "Run ActiveX controls and plugins", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200", - "displayName": "Run ActiveX controls and plugins", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_65536", - "displayName": "Administrator approved", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode", - "displayName": "Run .NET Framework-reliant components signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001", - "displayName": "Run .NET Framework-reliant components signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting", - "displayName": "Script ActiveX controls marked safe for scripting", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405", - "displayName": "Script ActiveX controls marked safe for scripting", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets", - "displayName": "Scripting of Java applets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402", - "displayName": "Scripting of Java applets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles", - "displayName": "Show security warning for potentially unsafe files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806", - "displayName": "Launching programs and unsafe files", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode", - "displayName": "Turn on Protected Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500", - "displayName": "Protected Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker", - "displayName": "Use Pop-up Blocker", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809", - "displayName": "Use Pop-up Blocker", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses", - "displayName": "Internet Explorer Processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses", - "displayName": "Internet Explorer Processes", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_searchproviderlist", - "displayName": "Restrict search providers to a specific list", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_searchproviderlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_searchproviderlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings", - "displayName": "Security Zones: Use only machine settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge", - "displayName": "Send all sites not included in the Enterprise Mode Site List to Microsoft Edge.", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice", - "displayName": "Specify use of ActiveX Installer Service for installation of ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets", - "displayName": "Allow scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00", - "displayName": "Java permissions", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions", - "displayName": "Logon options", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00", - "displayName": "Logon options (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_allowforestsearchorder", - "displayName": "Use forest search order", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_allowforestsearchorder_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_kerberos_allowforestsearchorder_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_allowforestsearchorder_forestsearchlist", - "displayName": "Forests to Search (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled", - "displayName": "Cloud Kerberos Ticket Retrieval Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled_0", - "displayName": "Disabled", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled_1", - "displayName": "Enabled", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor", - "displayName": "Kerberos client support for claims, compound authentication and Kerberos armoring", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration", - "displayName": "PK Init Hash Algorithm Configuration", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration_0", - "displayName": "Disabled / Not Configured", - "description": "Disabled / Not Configured" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1", - "displayName": "PK Init Hash Algorithm SHA1", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_0", - "displayName": "Not Supported", - "description": "Not Supported" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_1", - "displayName": "Default", - "description": "Default" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_2", - "displayName": "Audited", - "description": "Audited" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_3", - "displayName": "Supported", - "description": "Supported" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256", - "displayName": "PK Init Hash Algorithm SHA256", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_0", - "displayName": "Not Supported", - "description": "Not Supported" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_1", - "displayName": "Default", - "description": "Default" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_2", - "displayName": "Audited", - "description": "Audited" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_3", - "displayName": "Supported", - "description": "Supported" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384", - "displayName": "PK Init Hash Algorithm SHA384", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_0", - "displayName": "Not Supported", - "description": "Not Supported" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_1", - "displayName": "Default", - "description": "Default" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_2", - "displayName": "Audited", - "description": "Audited" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_3", - "displayName": "Supported", - "description": "Supported" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512", - "displayName": "PK Init Hash Algorithm SHA512", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_0", - "displayName": "Not Supported", - "description": "Not Supported" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_1", - "displayName": "Default", - "description": "Default" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_2", - "displayName": "Audited", - "description": "Audited" - }, - { - "id": "device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_3", - "displayName": "Supported", - "description": "Supported" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_requirekerberosarmoring", - "displayName": "Fail authentication requests when Kerberos armoring is not available", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_requirekerberosarmoring_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_kerberos_requirekerberosarmoring_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation", - "displayName": "Require strict KDC validation", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize", - "displayName": "Set maximum Kerberos SSPI context token buffer size", - "options": [ - { - "id": "device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_maxtokensize", - "displayName": "Maximum size (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_kerberos_upnnamehints", - "displayName": "UPN Name Hints", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_blockedurlexceptions", - "displayName": "Blocked Url Exceptions", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_blockedurls", - "displayName": "Blocked Urls", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_defaulturl", - "displayName": "Default URL", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton", - "displayName": "Enable End Session Button", - "options": [ - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enablehomebutton", - "displayName": "Enable Home Button", - "options": [ - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enablehomebutton_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enablehomebutton_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons", - "displayName": "Enable Navigation Buttons", - "options": [ - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_kioskbrowser_restartonidletime", - "displayName": "Restart On Idle Time", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption", - "displayName": "Audit Client Does Not Support Encryption", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning", - "displayName": "Audit Client Does Not Support Signing", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon", - "displayName": "Audit Insecure Guest Logon", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_authratelimiterdelayinms", - "displayName": "Auth Rate Limiter Delay In Ms", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter", - "displayName": "Enable Auth Rate Limiter", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_enablemailslots", - "displayName": "Enable Mailslots", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanserver_enablemailslots_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_enablemailslots_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect", - "displayName": "Max Smb2 Dialect", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_514", - "displayName": "SMB 2.0.2", - "description": "SMB 2.0.2" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_528", - "displayName": "SMB 2.1.0", - "description": "SMB 2.1.0" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_768", - "displayName": "SMB 3.0.0", - "description": "SMB 3.0.0" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_770", - "displayName": "SMB 3.0.2", - "description": "SMB 3.0.2" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_785", - "displayName": "SMB 3.1.1", - "description": "SMB 3.1.1" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_minsmb2dialect", - "displayName": "Min Smb2 Dialect", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_514", - "displayName": "SMB 2.0.2", - "description": "SMB 2.0.2" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_528", - "displayName": "SMB 2.1.0", - "description": "SMB 2.1.0" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_768", - "displayName": "SMB 3.0.0", - "description": "SMB 3.0.0" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_770", - "displayName": "SMB 3.0.2", - "description": "SMB 3.0.2" - }, - { - "id": "device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_785", - "displayName": "SMB 3.1.1", - "description": "SMB 3.1.1" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon", - "displayName": "Audit Insecure Guest Logon", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportencryption", - "displayName": "Audit Server Does Not Support Encryption", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportencryption_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportencryption_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning", - "displayName": "Audit Server Does Not Support Signing", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons", - "displayName": "Enable Insecure Guest Logons", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_enablemailslots", - "displayName": "Enable Mailslots", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_enablemailslots_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_enablemailslots_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect", - "displayName": "Max Smb2 Dialect", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_514", - "displayName": "SMB 2.0.2", - "description": "SMB 2.0.2" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_528", - "displayName": "SMB 2.1.0", - "description": "SMB 2.1.0" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_768", - "displayName": "SMB 3.0.0", - "description": "SMB 3.0.0" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_770", - "displayName": "SMB 3.0.2", - "description": "SMB 3.0.2" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_785", - "displayName": "SMB 3.1.1", - "description": "SMB 3.1.1" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect", - "displayName": "Min Smb2 Dialect", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_514", - "displayName": "SMB 2.0.2", - "description": "SMB 2.0.2" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_528", - "displayName": "SMB 2.1.0", - "description": "SMB 2.1.0" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_768", - "displayName": "SMB 3.0.0", - "description": "SMB 3.0.0" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_770", - "displayName": "SMB 3.0.2", - "description": "SMB 3.0.2" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_785", - "displayName": "SMB 3.1.1", - "description": "SMB 3.1.1" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_requireencryption", - "displayName": "Require Encryption", - "options": [ - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_requireencryption_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_lanmanworkstation_requireencryption_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation", - "displayName": "Allow Windows Entitlement Reactivation", - "options": [ - { - "id": "device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation_0", - "displayName": "Block", - "description": "Disable Windows license reactivation on managed devices." - }, - { - "id": "device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation_1", - "displayName": "Allow", - "description": "Enable Windows license reactivation on managed devices." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_licensing_disallowkmsclientonlineavsvalidation", - "displayName": "Disallow KMS Client Online AVS Validation", - "options": [ - { - "id": "device_vendor_msft_policy_config_licensing_disallowkmsclientonlineavsvalidation_0", - "displayName": "Block", - "description": "Disabled." - }, - { - "id": "device_vendor_msft_policy_config_licensing_disallowkmsclientonlineavsvalidation_1", - "displayName": "Allow", - "description": "Enabled." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts", - "displayName": "Accounts Block Microsoft Accounts", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_0", - "displayName": "Disabled (users will be able to use Microsoft accounts with Windows).", - "description": "Disabled (users will be able to use Microsoft accounts with Windows)." - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_1", - "displayName": "Enabled (users can't add Microsoft accounts).", - "description": "Enabled (users can't add Microsoft accounts)." - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_3", - "displayName": "Users can't add or log on with Microsoft accounts", - "description": "Users can't add or log on with Microsoft accounts" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus", - "displayName": "Accounts Enable Administrator Account Status", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus", - "displayName": "Accounts Enable Guest Account Status", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly", - "displayName": "Accounts Limit Local Account Use Of Blank Passwords To Console Logon Only", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_renameadministratoraccount", - "displayName": "Accounts Rename Administrator Account", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_renameguestaccount", - "displayName": "Accounts Rename Guest Account", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege", - "displayName": "Audit The Use Of Backup And Restoreprivilege", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege_aq==", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege_aa==", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_forceauditpolicysubcategorysettingstooverrideauditpolicycategorysettings", - "displayName": "Audit Force Audit Policy Subcategory Settings To Override Audit Policy Category Settings", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_shutdownsystemimmediatelyifunabletologsecurityaudits", - "displayName": "Audit Shutdown System Immediately If Unable To Log Security Audits", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowedtoformatandejectremovablemedia", - "displayName": "Devices Allowed To Format And Eject Removable Media", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon", - "displayName": "Devices Allow Undock Without Having To Logon", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon_1", - "displayName": "Allow", - "description": "Allow" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon_0", - "displayName": "Block", - "description": "Block" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_preventusersfrominstallingprinterdriverswhenconnectingtosharedprinters", - "displayName": "Devices Prevent Users From Installing Printer Drivers When Connecting To Shared Printers", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_preventusersfrominstallingprinterdriverswhenconnectingtosharedprinters_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_preventusersfrominstallingprinterdriverswhenconnectingtosharedprinters_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_restrictcdromaccesstolocallyloggedonuseronly", - "displayName": "Devices Restrict CDROM Access To Locally Logged On User Only", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_restrictfloppyaccesstolocallyloggedonuseronly", - "displayName": "Devices Restrict Floppy Access To Locally Logged On User Only", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallyencryptorsignsecurechanneldataalways", - "displayName": "Domain Member Digitally Encrypt Or Sign Secure Channel Data Always", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallyencryptsecurechanneldatawhenpossible", - "displayName": "Domain Member Digitally Encrypt Secure Channel Data When Possible", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallysignsecurechanneldatawhenpossible", - "displayName": "Domain Member Digitally Sign Secure Channel Data When Possible", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_disablemachineaccountpasswordchanges", - "displayName": "Domain Member Disable Machine Account Password Changes", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_maximummachineaccountpasswordage", - "displayName": "Domain Member Maximum Machine Account Password Age", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_requirestrongsessionkey", - "displayName": "Domain Member Require Strong Session Key", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked", - "displayName": "Interactive Logon Display User Information When The Session Is Locked", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_1", - "displayName": "User display name, domain and user names", - "description": "User display name, domain and user names" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_2", - "displayName": "User display name only", - "description": "User display name only" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_3", - "displayName": "Do not display user information", - "description": "Do not display user information" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_4", - "displayName": "Domain and user names only", - "description": "Domain and user names only" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin", - "displayName": "Interactive Logon Do Not Display Last Signed In", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin_0", - "displayName": "Disabled (username will be shown)", - "description": "Disabled (username will be shown)" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin_1", - "displayName": "Enabled (username will not be shown)", - "description": "Enabled (username will not be shown)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin", - "displayName": "Interactive Logon Do Not Display Username At Sign In", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin_0", - "displayName": "Disabled (username will be shown)", - "description": "Disabled (username will be shown)" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin_1", - "displayName": "Enabled (username will not be shown)", - "description": "Enabled (username will not be shown)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel", - "displayName": "Interactive Logon Do Not Require CTRLALTDEL", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel_1", - "displayName": "Enabled (a user is not required to press CTRL+ALT+DEL to log on)", - "description": "Enabled (a user is not required to press CTRL+ALT+DEL to log on)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineaccountlockoutthreshold", - "displayName": "Interactive Logon Machine Account Lockout Threshold", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit", - "displayName": "[Deprecated] Interactive Logon Machine Inactivity Limit (Deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_1", - "displayName": "Enabled (session will lock after amount of inactive time exceeds the inactivity limit)", - "description": "Enabled (session will lock after amount of inactive time exceeds the inactivity limit)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_v2", - "displayName": "Interactive Logon Machine Inactivity Limit", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_messagetextforusersattemptingtologon", - "displayName": "Interactive Logon Message Text For Users Attempting To Log On", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_messagetitleforusersattemptingtologon", - "displayName": "Interactive Logon Message Title For Users Attempting To Log On", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_numberofpreviouslogonstocache", - "displayName": "Interactive Logon Number Of Previous Logons To Cache", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_promptusertochangepasswordbeforeexpiration", - "displayName": "Interactive Logon Prompt User To Change Password Before Expiration", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior", - "displayName": "Interactive Logon Smart Card Removal Behavior", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_0", - "displayName": "No Action", - "description": "No Action" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_1", - "displayName": "Lock Workstation", - "description": "Lock Workstation" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_2", - "displayName": "Force Logoff", - "description": "Force Logoff" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_3", - "displayName": "Disconnect Remote Desktop Session", - "description": "Disconnect Remote Desktop Session" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways", - "displayName": "Microsoft Network Client Digitally Sign Communications Always", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees", - "displayName": "Microsoft Network Client Digitally Sign Communications If Server Agrees", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers", - "displayName": "Microsoft Network Client Send Unencrypted Password To Third Party SMB Servers", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_amountofidletimerequiredbeforesuspendingsession", - "displayName": "Microsoft Network Server Amount Of Idle Time Required Before Suspending Session", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways", - "displayName": "Microsoft Network Server Digitally Sign Communications Always", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees", - "displayName": "Microsoft Network Server Digitally Sign Communications If Client Agrees", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_disconnectclientswhenlogonhoursexpire", - "displayName": "Microsoft Network Server Disconnect Clients When Logon Hours Expire", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_serverspntargetnamevalidationlevel", - "displayName": "Microsoft Network Server Server SPN Target Name Validation Level", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation", - "displayName": "Network Access Allow Anonymous SID Or Name Translation", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts", - "displayName": "Network Access Do Not Allow Anonymous Enumeration Of SAM Accounts", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts_1", - "displayName": "Enabled", - "description": "Enabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts_0", - "displayName": "Disabled", - "description": "Disabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares", - "displayName": "Network Access Do Not Allow Anonymous Enumeration Of Sam Accounts And Shares", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_1", - "displayName": "Enabled", - "description": "Enabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_0", - "displayName": "Disabled", - "description": "Disabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowstorageofpasswordsandcredentialsfornetworkauthentication", - "displayName": "Network Access Do Not Allow Storage Of Passwords And Credentials For Network Authentication", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_leteveryonepermissionsapplytoanonymoususers", - "displayName": "Network Access Let Everyone Permissions Apply To Anonymous Users", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_namedpipesthatcanbeaccessedanonymously", - "displayName": "Network Access Named Pipes That Can Be Accessed Anonymously", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_remotelyaccessibleregistrypaths", - "displayName": "Network Access Remotely Accessible Registry Paths", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_remotelyaccessibleregistrypathsandsubpaths", - "displayName": "Network Access Remotely Accessible Registry Paths And Subpaths", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares", - "displayName": "Network Access Restrict Anonymous Access To Named Pipes And Shares", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictclientsallowedtomakeremotecallstosam", - "displayName": "Network Access Restrict Clients Allowed To Make Remote Calls To SAM", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_sharesthatcanbeaccessedanonymously", - "displayName": "Network Access Shares That Can Be Accessed Anonymously", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_sharingandsecuritymodelforlocalaccounts", - "displayName": "Network Access Sharing And Security Model For Local Accounts", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemnullsessionfallback", - "displayName": "Network Security Allow Local System NULL Session Fallback", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm", - "displayName": "Network Security Allow Local System To Use Computer Identity For NTLM", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm_1", - "displayName": "Allow", - "description": "Allow" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm_0", - "displayName": "Block", - "description": "Block" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests", - "displayName": "Network Security Allow PKU2U Authentication Requests", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests_0", - "displayName": "Block", - "description": "Block" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests_1", - "displayName": "Allow", - "description": "Allow" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange", - "displayName": "Network Security Do Not Store LAN Manager Hash Value On Next Password Change", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire", - "displayName": "Network Security Force Logoff When Logon Hours Expire", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel", - "displayName": "Network Security LAN Manager Authentication Level", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_0", - "displayName": "Send LM and NTLM responses", - "description": "Send LM and NTLM responses" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_1", - "displayName": "Send LM and NTLM-use NTLMv2 session security if negotiated", - "description": "Send LM and NTLM-use NTLMv2 session security if negotiated" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_2", - "displayName": "Send LM and NTLM responses only", - "description": "Send LM and NTLM responses only" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_3", - "displayName": "Send NTLMv2 responses only", - "description": "Send NTLMv2 responses only" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_4", - "displayName": "Send NTLMv2 responses only. Refuse LM", - "description": "Send NTLMv2 responses only. Refuse LM" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_5", - "displayName": "Send NTLMv2 responses only. Refuse LM and NTLM", - "description": "Send NTLMv2 responses only. Refuse LM and NTLM" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_ldapclientsigningrequirements", - "displayName": "Network Security LDAP Client Signing Requirements", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients", - "displayName": "Network Security Minimum Session Security For NTLMSSP Based Clients", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_0", - "displayName": "None", - "description": "None" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_524288", - "displayName": "Require NTLMv2 session security", - "description": "Require NTLMv2 session security" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_536870912", - "displayName": "Require 128-bit encryption", - "description": "Require 128-bit encryption" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_537395200", - "displayName": "Require NTLM and 128-bit encryption", - "description": "Require NTLM and 128-bit encryption" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers", - "displayName": "Network Security Minimum Session Security For NTLMSSP Based Servers", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_0", - "displayName": "None", - "description": "None" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_524288", - "displayName": "Require NTLMv2 session security", - "description": "Require NTLMv2 session security" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_536870912", - "displayName": "Require 128-bit encryption", - "description": "Require 128-bit encryption" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_537395200", - "displayName": "Require NTLM and 128-bit encryption", - "description": "Require NTLM and 128-bit encryption" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_addremoteserverexceptionsforntlmauthentication", - "displayName": "Network Security Restrict NTLM Add Remote Server Exceptions For NTLM Authentication", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic", - "displayName": "Network Security Restrict NTLM Audit Incoming NTLM Traffic", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_0", - "displayName": "Disable", - "description": "Disable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_1", - "displayName": "Enable auditing for domain accounts", - "description": "Enable auditing for domain accounts" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_2", - "displayName": "Enable auditing for all accounts", - "description": "Enable auditing for all accounts" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic", - "displayName": "Network Security Restrict NTLM Incoming NTLM Traffic", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_0", - "displayName": "Allow all", - "description": "Allow all" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_1", - "displayName": "Deny all domain accounts", - "description": "Deny all domain accounts" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_2", - "displayName": "Deny all accounts", - "description": "Deny all accounts" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers", - "displayName": "Network Security Restrict NTLM Outgoing NTLM Traffic To Remote Servers", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_0", - "displayName": "Allow all", - "description": "Allow all" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_1", - "displayName": "Deny all domain accounts", - "description": "Deny all domain accounts" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_2", - "displayName": "Deny all accounts", - "description": "Deny all accounts" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_recoveryconsole_allowautomaticadministrativelogon", - "displayName": "Recovery Console Allow Automatic Administrative Logon", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_recoveryconsole_allowfloppycopyandaccesstoalldrivesandallfolders", - "displayName": "Recovery Console Allow Floppy Copy And Access To All Drives And All Folders", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon", - "displayName": "Shutdown Allow System To Be Shut Down Without Having To Log On", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon_1", - "displayName": "Enabled (Allow system to be shut down without having to log on)", - "description": "Enabled (Allow system to be shut down without having to log on)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile", - "displayName": "Shutdown Clear Virtual Memory Page File", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_systemcryptography_forcestrongkeyprotection", - "displayName": "System Cryptography Force Strong Key Protection", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_systemobjects_requirecaseinsensitivityfornonwindowssubsystems", - "displayName": "System Objects Require Case Insensitivity For Non Windows Subsystems", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_systemobjects_strengthendefaultpermissionsofinternalsystemobjects", - "displayName": "System Objects Strengthen Default Permissions Of Internal System Objects", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation", - "displayName": "User Account Control Allow UI Access Applications To Prompt For Elevation", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation_0", - "displayName": "disabled", - "description": "disabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation_1", - "displayName": "enabled (allow UIAccess applications to prompt for elevation without using the secure desktop)", - "description": "enabled (allow UIAccess applications to prompt for elevation without using the secure desktop)" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection", - "displayName": "User Account Control Behavior Of The Elevation Prompt For Administrator Protection (Windows Insiders only)", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection_1", - "displayName": "Prompt for credentials on the secure desktop", - "description": "Prompt for credentials on the secure desktop" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection_2", - "displayName": "Prompt for consent on the secure desktop", - "description": "Prompt for consent on the secure desktop" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators", - "displayName": "User Account Control Behavior Of The Elevation Prompt For Administrators", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_0", - "displayName": "Elevate without prompting", - "description": "Elevate without prompting" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_1", - "displayName": "Prompt for credentials on the secure desktop", - "description": "Prompt for credentials on the secure desktop" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_2", - "displayName": "Prompt for consent on the secure desktop", - "description": "Prompt for consent on the secure desktop" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_3", - "displayName": "Prompt for credentials", - "description": "Prompt for credentials" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_4", - "displayName": "Prompt for consent", - "description": "Prompt for consent" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_5", - "displayName": "Prompt for consent for non-Windows binaries", - "description": "Prompt for consent for non-Windows binaries" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers", - "displayName": "User Account Control Behavior Of The Elevation Prompt For Standard Users", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_0", - "displayName": "Automatically deny elevation requests", - "description": "Automatically deny elevation requests" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_1", - "displayName": "Prompt for credentials on the secure desktop", - "description": "Prompt for credentials on the secure desktop" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_3", - "displayName": "Prompt for credentials", - "description": "Prompt for credentials" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation", - "displayName": "User Account Control Detect Application Installations And Prompt For Elevation", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated", - "displayName": "User Account Control Only Elevate Executable Files That Are Signed And Validated", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated_0", - "displayName": "Disabled: Does not enforce validation.", - "description": "Disabled: Does not enforce validation." - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated_1", - "displayName": "Enabled: Enforces validation.", - "description": "Enabled: Enforces validation." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations", - "displayName": "User Account Control Only Elevate UI Access Applications That Are Installed In Secure Locations", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations_0", - "displayName": "Disabled: Application runs with UIAccess integrity even if it does not reside in a secure location.", - "description": "Disabled: Application runs with UIAccess integrity even if it does not reside in a secure location." - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations_1", - "displayName": "Enabled: Application runs with UIAccess integrity only if it resides in secure location.", - "description": "Enabled: Application runs with UIAccess integrity only if it resides in secure location." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode", - "displayName": "User Account Control Run All Administrators In Admin Approval Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation", - "displayName": "User Account Control Switch To The Secure Desktop When Prompting For Elevation", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode", - "displayName": "User Account Control Type Of Admin Approval Mode (Windows Insiders only)", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode_1", - "displayName": "Legacy Admin Approval Mode", - "description": "Legacy Admin Approval Mode" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode_2", - "displayName": "Admin Approval Mode with Administrator protection", - "description": "Admin Approval Mode with Administrator protection" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode", - "displayName": "User Account Control Use Admin Approval Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations", - "displayName": "User Account Control Virtualize File And Registry Write Failures To Per User Locations", - "options": [ - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps", - "displayName": "Allow Custom SSPs and APs to be loaded into LSASS", - "options": [ - { - "id": "device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess", - "displayName": "Configure Lsa Protected Process", - "options": [ - { - "id": "device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_0", - "displayName": "Disabled. Default value. LSA will not run as protected process.", - "description": "Disabled. Default value. LSA will not run as protected process." - }, - { - "id": "device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_1", - "displayName": "Enabled with UEFI lock. LSA will run as protected process and this configuration is UEFI locked.", - "description": "Enabled with UEFI lock. LSA will run as protected process and this configuration is UEFI locked." - }, - { - "id": "device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_2", - "displayName": "Enabled without UEFI lock. LSA will run as protected process and this configuration is not UEFI locked.", - "description": "Enabled without UEFI lock. LSA will run as protected process and this configuration is not UEFI locked." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure", - "displayName": "Group Configuration", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup", - "displayName": "access group", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action", - "displayName": "Group and user action", - "options": [ - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_add_update", - "displayName": "Add (Update)", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_remove_update", - "displayName": "Remove (Update)", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_add_restrict", - "displayName": "Add (Replace)", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc", - "displayName": "Local group", - "options": [ - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_administrators", - "displayName": "Administrators", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_users", - "displayName": "Users", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_guests", - "displayName": "Guests", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_powerusers", - "displayName": "Power Users", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_remotedesktopusers", - "displayName": "Remote Desktop Users", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_remotemanagementusers", - "displayName": "Remote Management Users", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_users", - "displayName": "Selected user(s)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype", - "displayName": "User selection type", - "options": [ - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype_users", - "displayName": "Users/Groups", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype_manual", - "displayName": "Manual", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lockdown_allowedgeswipe", - "displayName": "Allow Edge Swipe", - "options": [ - { - "id": "device_vendor_msft_policy_config_lockdown_allowedgeswipe_0", - "displayName": "Block", - "description": "Disallow edge swipe." - }, - { - "id": "device_vendor_msft_policy_config_lockdown_allowedgeswipe_1", - "displayName": "Allow", - "description": "Allow edge swipe." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode", - "displayName": "Specify server", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_l_serveraddressexternal_value", - "displayName": "DNS name of the external server (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_l_serveraddressinternal_value", - "displayName": "DNS name of the internal server (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues", - "displayName": "Additional server versions supported", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_l_configuredservercheckvalues_value", - "displayName": "Server version names (semicolon separated list): (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing", - "displayName": "Disable automatic upload of sign-in failure logs", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect", - "displayName": "Disable HTTP fallback for SIP connection", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials", - "displayName": "Require logon credentials", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck", - "displayName": "Disable server version check", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload", - "displayName": "Enable using BITS to download Address Book Service files", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode", - "displayName": "Configure SIP security mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay", - "displayName": "Global Address Book Download Initial Delay", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_l_galdownloadinitialdelay_value", - "displayName": "Maximum possible number of minutes to delay download: (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun", - "displayName": "Prevent users from running Microsoft Lync", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword", - "displayName": "Allow storage of user passwords", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression", - "displayName": "Configure SIP compression mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression", - "displayName": "Configure SIP compression mode (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_0", - "displayName": "Always disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_1", - "displayName": "Always enabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_2", - "displayName": "Based on adaptor speed (default)", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_3", - "displayName": "Based on ping round-trip time", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata", - "displayName": "Trusted Domain List", - "options": [ - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_l_trustmodeldata_value", - "displayName": "Trusted Domains (comma separated list): (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection", - "displayName": "Allow Offline Maps Download Over Metered Connection", - "options": [ - { - "id": "device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_0", - "displayName": "Disabled. Force disable auto-update over metered connection.", - "description": "Disabled. Force disable auto-update over metered connection." - }, - { - "id": "device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_1", - "displayName": "Enabled. Force enable auto-update over metered connection.", - "description": "Enabled. Force enable auto-update over metered connection." - }, - { - "id": "device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_65535", - "displayName": "Not configured. User's choice.", - "description": "Not configured. User's choice." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate", - "displayName": "Enable Offline Maps Auto Update", - "options": [ - { - "id": "device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_0", - "displayName": "Disabled. Force off auto-update.", - "description": "Disabled. Force off auto-update." - }, - { - "id": "device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_1", - "displayName": "Enabled. Force on auto-update.", - "description": "Enabled. Force on auto-update." - }, - { - "id": "device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_65535", - "displayName": "Not configured. User's choice.", - "description": "Not configured. User's choice." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_memorydump_allowcrashdump", - "displayName": "Allow Crash Dump", - "options": [ - { - "id": "device_vendor_msft_policy_config_memorydump_allowcrashdump_0", - "displayName": "Block", - "description": "Disable crash dump collection." - }, - { - "id": "device_vendor_msft_policy_config_memorydump_allowcrashdump_1", - "displayName": "Allow", - "description": "Allow crash dump collection." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_memorydump_allowlivedump", - "displayName": "Allow Live Dump", - "options": [ - { - "id": "device_vendor_msft_policy_config_memorydump_allowlivedump_0", - "displayName": "Block", - "description": "Disable live dump collection." - }, - { - "id": "device_vendor_msft_policy_config_memorydump_allowlivedump_1", - "displayName": "Allow", - "description": "Allow live dump collection." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_messaging_allowmessagesync", - "displayName": "Allow Message Sync", - "options": [ - { - "id": "device_vendor_msft_policy_config_messaging_allowmessagesync_0", - "displayName": "message sync is not allowed and cannot be changed by the user.", - "description": "message sync is not allowed and cannot be changed by the user." - }, - { - "id": "device_vendor_msft_policy_config_messaging_allowmessagesync_1", - "displayName": "message sync is allowed. The user can change this setting.", - "description": "message sync is allowed. The user can change this setting." - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder", - "displayName": "Configure the location of the browser executable folder", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc", - "displayName": "Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc_key", - "displayName": "Name", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc_value", - "displayName": "Value", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference", - "displayName": "Set the release channel search order preference", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc", - "displayName": "Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_key", - "displayName": "Name", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_value", - "displayName": "Value", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2", - "displayName": "Retrieve configurations and experiments", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1", - "displayName": "Retrieve configurations only", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0", - "displayName": "Disable communication with the Experimentation and Configuration Service", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled", - "displayName": "Controls whether unload event handlers can be disabled.", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist", - "displayName": "HTTP Allowlist", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc", - "displayName": "HTTP Allowlist (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_key", - "displayName": "Name", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_value", - "displayName": "Value", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed", - "displayName": "Allows enabling the feature NewBaseUrlInheritanceBehavior", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list", - "displayName": "Enable built-in PDF reader powered by Adobe Acrobat for WebView2", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc", - "displayName": "Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_key", - "displayName": "Name", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_value", - "displayName": "Value", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled", - "displayName": "Check RSA key usage for server certificates issued by local trust anchors", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory", - "displayName": "Enable deleting browser and download history", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs", - "displayName": "Allow file selection dialogs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally", - "displayName": "Always open PDF files externally", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue", - "displayName": "Set application locale", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_applicationlocalevalue", - "displayName": "Application locale (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed", - "displayName": "Allow or block audio capture", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls", - "displayName": "Sites that can access audio capture devices without requesting permission", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_audiocaptureallowedurlsdesc", - "displayName": "Sites that can access audio capture devices without requesting permission (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled", - "displayName": "Enable AutoFill for addresses", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled", - "displayName": "Enable AutoFill for payment instruments", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun", - "displayName": "Automatically import another browser's data and settings at first run", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun", - "displayName": "Automatically import another browser's data and settings at first run (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_0", - "displayName": "Automatically imports all supported datatypes and settings from the default browser", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_1", - "displayName": "Automatically imports all supported datatypes and settings from Internet Explorer", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_2", - "displayName": "Automatically imports all supported datatypes and settings from Google Chrome", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_3", - "displayName": "Automatically imports all supported datatypes and settings from Safari", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_4", - "displayName": "Disables automatic import, and the import section of the first-run experience is skipped", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled", - "displayName": "Continue running background apps after Microsoft Edge closes", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies", - "displayName": "Block third party cookies", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled", - "displayName": "Enable profile creation from the Identity flyout menu or the Settings page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled", - "displayName": "Enable guest mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled", - "displayName": "Allow queries to a Browser Network Time service", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin", - "displayName": "Browser sign-in settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin", - "displayName": "Browser sign-in settings (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_0", - "displayName": "Disable browser sign-in", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_1", - "displayName": "Enable browser sign-in", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_2", - "displayName": "Force users to sign-in to use the browser", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled", - "displayName": "Use built-in DNS client", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas", - "displayName": "Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_certificatetransparencyenforcementdisabledforcasdesc", - "displayName": "Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas", - "displayName": "Disable Certificate Transparency enforcement for a list of legacy certificate authorities (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_certificatetransparencyenforcementdisabledforlegacycasdesc", - "displayName": "Disable Certificate Transparency enforcement for a list of legacy certificate authorities (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls", - "displayName": "Disable Certificate Transparency enforcement for specific URLs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_certificatetransparencyenforcementdisabledforurlsdesc", - "displayName": "Disable Certificate Transparency enforcement for specific URLs (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled", - "displayName": "Enable component updates in Microsoft Edge", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack", - "displayName": "Configure Do Not Track", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech", - "displayName": "Configure Online Text To Speech", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability", - "displayName": "Control where developer tools can be used", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability", - "displayName": "Control where developer tools can be used (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_0", - "displayName": "Block the developer tools on extensions installed by enterprise policy, allow in other contexts", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_1", - "displayName": "Allow using the developer tools", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_2", - "displayName": "Don't allow using the developer tools", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis", - "displayName": "Disable support for 3D graphics APIs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots", - "displayName": "Disable taking screenshots", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir", - "displayName": "Set disk cache directory", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_diskcachedir", - "displayName": "Set disk cache directory (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize", - "displayName": "Set disk cache size, in bytes", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_diskcachesize", - "displayName": "Set disk cache size: (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory", - "displayName": "Set download directory", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_downloaddirectory", - "displayName": "Set download directory (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions", - "displayName": "Allow download restrictions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions", - "displayName": "Download restrictions (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1", - "displayName": "Block dangerous downloads", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2", - "displayName": "Block potentially dangerous downloads", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled", - "displayName": "Allows users to edit favorites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures", - "displayName": "Re-enable deprecated web platform features for a limited time", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_enabledeprecatedwebplatformfeaturesdesc", - "displayName": "Re-enable deprecated web platform features for a limited time (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload", - "displayName": "Enable Domain Actions Download from Microsoft (deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks", - "displayName": "Enable online OCSP/CRL checks", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2", - "displayName": "Retrieve configurations and experiments", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1", - "displayName": "Retrieve configurations only", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0", - "displayName": "Disable communication with the Experimentation and Configuration Service", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled", - "displayName": "Enable favorites bar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch", - "displayName": "Enforce Bing SafeSearch", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch", - "displayName": "Enforce Bing SafeSearch (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_0", - "displayName": "Don't configure search restrictions in Bing", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_1", - "displayName": "Configure moderate search restrictions in Bing", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_2", - "displayName": "Configure strict search restrictions in Bing", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles", - "displayName": "Enable use of ephemeral profiles", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch", - "displayName": "Enforce Google SafeSearch", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict", - "displayName": "Force minimum YouTube Restricted Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict", - "displayName": "Force minimum YouTube Restricted Mode (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_0", - "displayName": "Do not enforce Restricted Mode on YouTube", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_1", - "displayName": "Enforce at least Moderate Restricted Mode on YouTube", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_2", - "displayName": "Enforce Strict Restricted Mode for YouTube", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed", - "displayName": "Allow full screen mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled", - "displayName": "Use hardware acceleration when available", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata", - "displayName": "Allow importing of autofill form data", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites", - "displayName": "Allow importing of favorites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory", - "displayName": "Allow importing of browsing history", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage", - "displayName": "Allow importing of home page settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo", - "displayName": "Allow importing of payment info", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords", - "displayName": "Allow importing of saved passwords", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine", - "displayName": "Allow importing of search engine settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability", - "displayName": "Configure InPrivate mode availability", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability", - "displayName": "Configure InPrivate mode availability (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_0", - "displayName": "InPrivate mode available", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_1", - "displayName": "InPrivate mode disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_2", - "displayName": "InPrivate mode forced", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel", - "displayName": "Configure Internet Explorer integration", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel", - "displayName": "Configure Internet Explorer integration (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_1", - "displayName": "Internet Explorer mode", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_2", - "displayName": "Internet Explorer 11", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins", - "displayName": "Enable site isolation for specific origins", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_isolateorigins", - "displayName": "Enable site isolation for specific origins (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites", - "displayName": "Configure favorites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_managedfavorites", - "displayName": "Configure favorites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines", - "displayName": "Manage Search Engines", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_managedsearchengines", - "displayName": "Manage Search Engines (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy", - "displayName": "Maximum number of concurrent connections to the proxy server", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_maxconnectionsperproxy", - "displayName": "Maximum number of concurrent connections to the proxy server: (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips", - "displayName": "Allow Google Cast to connect to Cast devices on all IP addresses", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled", - "displayName": "Enable usage and crash-related data reporting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions", - "displayName": "Enable network prediction", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions", - "displayName": "Enable network prediction (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_0", - "displayName": "Predict network actions on any network connection", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_1", - "displayName": "Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_2", - "displayName": "Don't predict network actions on any network connection", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin", - "displayName": "Control where security restrictions on insecure origins apply", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_overridesecurityrestrictionsoninsecureorigindesc", - "displayName": "Control where security restrictions on insecure origins apply (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled", - "displayName": "Enable Proactive Authentication", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled", - "displayName": "Enable full-tab promotional content (deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation", - "displayName": "Ask where to save downloaded files", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed", - "displayName": "Allow QUIC protocol", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended", - "displayName": "Set application locale", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_applicationlocalevalue", - "displayName": "Application locale (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended", - "displayName": "Enable AutoFill for addresses", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended", - "displayName": "Enable AutoFill for credit cards", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended", - "displayName": "Continue running background apps after Microsoft Edge closes", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended", - "displayName": "Block third party cookies", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended", - "displayName": "Set download directory", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_downloaddirectory", - "displayName": "Set download directory (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended", - "displayName": "Allow download restrictions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions", - "displayName": "Download restrictions (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1", - "displayName": "Block dangerous downloads", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2", - "displayName": "Block potentially dangerous downloads", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended", - "displayName": "Enable favorites bar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended", - "displayName": "Allow importing of autofill form data", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended", - "displayName": "Allow importing of favorites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended", - "displayName": "Allow importing of browsing history", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended", - "displayName": "Allow importing of payment info", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended", - "displayName": "Allow importing of saved passwords", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended", - "displayName": "Allow importing of search engine settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended", - "displayName": "Enable network prediction", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions", - "displayName": "Enable network prediction (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_0", - "displayName": "Predict network actions on any network connection", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_1", - "displayName": "Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_2", - "displayName": "Don't predict network actions on any network connection", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended", - "displayName": "Enable resolution of navigation errors using a web service", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended", - "displayName": "Enable search suggestions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended", - "displayName": "Disable synchronization of data using Microsoft sync services", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended", - "displayName": "Enable Translate", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended", - "displayName": "Register protocol handlers", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_registeredprotocolhandlers", - "displayName": "Register protocol handlers (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended", - "displayName": "Enable saving passwords to the password manager", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended", - "displayName": "Print headers and footers", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended", - "displayName": "Set the system default printer as the default printer", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended", - "displayName": "Configure Microsoft Defender SmartScreen", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended", - "displayName": "Set the new tab page as the home page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended", - "displayName": "Configure the home page URL", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_homepagelocation", - "displayName": "Home page URL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended", - "displayName": "Configure the new tab page URL", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_newtabpagelocation", - "displayName": "New tab page URL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended", - "displayName": "Action to take on Microsoft Edge startup", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup", - "displayName": "Action to take on startup (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5", - "displayName": "Open a new tab", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1", - "displayName": "Restore the last session", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4", - "displayName": "Open a list of URLs", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended", - "displayName": "Sites to open when the browser starts", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_restoreonstartupurlsdesc", - "displayName": "Sites to open when the browser starts (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended", - "displayName": "Show Home button on toolbar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification", - "displayName": "Notify a user that a browser restart is recommended or required for pending updates", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification", - "displayName": "Notify a user that a browser restart is recommended or required for pending updates (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_1", - "displayName": "Recommended - Show a recurring prompt to the user indicating that a restart is recommended", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_2", - "displayName": "Required - Show a recurring prompt to the user indicating that a restart is required", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod", - "displayName": "Set the time period for update notifications", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_relaunchnotificationperiod", - "displayName": "Set the time period for update notifications: (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors", - "displayName": "Specify if online OCSP/CRL checks are required for local trust anchors", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice", - "displayName": "Enable resolution of navigation errors using a web service", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern", - "displayName": "Restrict which accounts can be used to sign in to Microsoft Edge", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_restrictsignintopattern", - "displayName": "Restrict which accounts can be used as Microsoft Edge primary accounts (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode", - "displayName": "Extend Adobe Flash content setting to all content", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled", - "displayName": "Disable saving browser history", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled", - "displayName": "Enable search suggestions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation", - "displayName": "Websites or domains that don't need permission to use direct Security Key attestation", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_securitykeypermitattestationdesc", - "displayName": "Websites or domains that don't need permission to use direct Security Key attestation (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer", - "displayName": "Send all intranet sites to Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices", - "displayName": "Send site information to improve Microsoft services", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar", - "displayName": "Show Microsoft Office shortcut in favorites bar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess", - "displayName": "Enable site isolation for every site", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled", - "displayName": "Enable spellcheck", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage", - "displayName": "Enable specific spellcheck languages", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_spellchecklanguagedesc", - "displayName": "Enable specific spellcheck languages (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed", - "displayName": "Allow users to proceed from the HTTPS warning page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin", - "displayName": "Minimum TLS version enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin", - "displayName": "Minimum SSL version enabled (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1", - "displayName": "TLS 1.0", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.1", - "displayName": "TLS 1.1", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.2", - "displayName": "TLS 1.2", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning", - "displayName": "Suppress the unsupported OS warning", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled", - "displayName": "Disable synchronization of data using Microsoft sync services", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled", - "displayName": "Configure tab lifecycles", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled", - "displayName": "Enable ending processes in the Browser task manager", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled", - "displayName": "Enable Translate", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist", - "displayName": "Define a list of allowed URLs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_urlallowlistdesc", - "displayName": "Define a list of allowed URLs (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist", - "displayName": "Block access to a list of URLs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_urlblocklistdesc", - "displayName": "Block access to a list of URLs (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir", - "displayName": "Set the user data directory", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_userdatadir", - "displayName": "Set the user data directory (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed", - "displayName": "Allow user feedback", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed", - "displayName": "Allow or block video capture", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls", - "displayName": "Sites that can access video capture devices without requesting permission", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_videocaptureallowedurlsdesc", - "displayName": "Sites that can access video capture devices without requesting permission (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies", - "displayName": "Allow WebDriver to Override Incompatible Policies (deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling", - "displayName": "Restrict exposure of local IP address by WebRTC", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling", - "displayName": "Restrict exposure of localhost IP address by WebRTC (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default", - "displayName": "Allow all interfaces. This exposes the local IP address", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_and_private_interfaces", - "displayName": "Allow public and private interfaces over http default route. This exposes the local IP address", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_interface_only", - "displayName": "Allow public interface over http default route. This doesn't expose the local IP address", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_disable_non_proxied_udp", - "displayName": "Use TCP unless proxy server supports UDP. This doesn't expose the local IP address", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange", - "displayName": "Restrict the range of local UDP ports used by WebRTC", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_webrtcudpportrange", - "displayName": "Restrict the range of local UDP ports used by WebRTC (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled", - "displayName": "Set WPAD optimization", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls", - "displayName": "Automatically select client certificates for these sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_autoselectcertificateforurlsdesc", - "displayName": "Automatically select client certificates for these sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls", - "displayName": "Allow cookies on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_cookiesallowedforurlsdesc", - "displayName": "Allow cookies on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls", - "displayName": "Block cookies on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_cookiesblockedforurlsdesc", - "displayName": "Block cookies on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls", - "displayName": "Limit cookies from specific websites to the current session", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_cookiessessiononlyforurlsdesc", - "displayName": "Limit cookies from specific websites to the current session (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting", - "displayName": "Configure cookies", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting", - "displayName": "Configure cookies (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_1", - "displayName": "Let all sites create cookies", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_2", - "displayName": "Don't let any site create cookies", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_4", - "displayName": "Keep cookies for the duration of the session", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting", - "displayName": "Default geolocation setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting", - "displayName": "Default geolocation setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_1", - "displayName": "Allow sites to track users' physical location", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_2", - "displayName": "Don't allow any site to track users' physical location", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_3", - "displayName": "Ask whenever a site wants to track users' physical location", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting", - "displayName": "Default images setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting", - "displayName": "Default images setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_1", - "displayName": "Allow all sites to show all images", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_2", - "displayName": "Don't allow any site to show images", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting", - "displayName": "Default JavaScript setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting", - "displayName": "Default JavaScript setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_1", - "displayName": "Allow all sites to run JavaScript", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_2", - "displayName": "Don't allow any site to run JavaScript", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting", - "displayName": "Default notification setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting", - "displayName": "Default notification setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_1", - "displayName": "Allow sites to show desktop notifications", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_2", - "displayName": "Don't allow any site to show desktop notifications", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_3", - "displayName": "Ask every time a site wants to show desktop notifications", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting", - "displayName": "Default Adobe Flash setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting", - "displayName": "Default Adobe Flash setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_2", - "displayName": "Block the Adobe Flash plugin", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_3", - "displayName": "Click to play", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting", - "displayName": "Default pop-up window setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting", - "displayName": "Default pop-up window setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_1", - "displayName": "Allow all sites to show pop-ups", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_2", - "displayName": "Do not allow any site to show popups", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting", - "displayName": "Control use of the Web Bluetooth API", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting", - "displayName": "Control use of the Web Bluetooth API (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_2", - "displayName": "Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_3", - "displayName": "Allow sites to ask the user to grant access to a nearby Bluetooth device", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting", - "displayName": "Control use of the WebUSB API", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting", - "displayName": "Control use of the WebUSB API (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_2", - "displayName": "Do not allow any site to request access to USB devices via the WebUSB API", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_3", - "displayName": "Allow sites to ask the user to grant access to a connected USB device", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls", - "displayName": "Allow images on these sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_imagesallowedforurlsdesc", - "displayName": "Allow images on these sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls", - "displayName": "Block images on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_imagesblockedforurlsdesc", - "displayName": "Block images on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls", - "displayName": "Allow JavaScript on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_javascriptallowedforurlsdesc", - "displayName": "Allow JavaScript on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls", - "displayName": "Block JavaScript on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_javascriptblockedforurlsdesc", - "displayName": "Block JavaScript on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls", - "displayName": "Allow notifications on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_notificationsallowedforurlsdesc", - "displayName": "Allow notifications on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls", - "displayName": "Block notifications on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_notificationsblockedforurlsdesc", - "displayName": "Block notifications on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls", - "displayName": "Allow the Adobe Flash plug-in on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_pluginsallowedforurlsdesc", - "displayName": "Allow the Adobe Flash plug-in on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls", - "displayName": "Block the Adobe Flash plug-in on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_pluginsblockedforurlsdesc", - "displayName": "Block the Adobe Flash plug-in on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls", - "displayName": "Allow pop-up windows on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_popupsallowedforurlsdesc", - "displayName": "Allow pop-up windows on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls", - "displayName": "Block pop-up windows on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_popupsblockedforurlsdesc", - "displayName": "Block pop-up windows on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls", - "displayName": "Grant access to specific sites to connect to specific USB devices", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_webusballowdevicesforurls", - "displayName": "Grant access to specific sites to connect to specific USB devices (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls", - "displayName": "Allow WebUSB on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_webusbaskforurlsdesc", - "displayName": "Allow WebUSB on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls", - "displayName": "Block WebUSB on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_webusbblockedforurlsdesc", - "displayName": "Block WebUSB on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled", - "displayName": "Enable the default search provider", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings", - "displayName": "Default search provider encodings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_defaultsearchproviderencodingsdesc", - "displayName": "Default search provider encodings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl", - "displayName": "Specifies the search-by-image feature for the default search provider", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_defaultsearchproviderimageurl", - "displayName": "Specifies the search-by-image feature for the default search provider (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams", - "displayName": "Parameters for an image URL that uses POST", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_defaultsearchproviderimageurlpostparams", - "displayName": "Parameters for an image URL that uses POST (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword", - "displayName": "Default search provider keyword", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_defaultsearchproviderkeyword", - "displayName": "Default search provider keyword (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername", - "displayName": "Default search provider name", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_defaultsearchprovidername", - "displayName": "Default search provider name (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl", - "displayName": "Default search provider search URL", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_defaultsearchprovidersearchurl", - "displayName": "Default search provider search URL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl", - "displayName": "Default search provider URL for suggestions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_defaultsearchprovidersuggesturl", - "displayName": "Default search provider URL for suggestions (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes", - "displayName": "Configure allowed extension types", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_extensionallowedtypesdesc", - "displayName": "Types of extensions/apps that are allowed to be installed (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist", - "displayName": "Allow specific extensions to be installed", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_extensioninstallallowlistdesc", - "displayName": "Extension IDs to exempt from the block list (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist", - "displayName": "Control which extensions cannot be installed", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_extensioninstallblocklistdesc", - "displayName": "Extension IDs the user should be prevented from installing (or * for all) (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist", - "displayName": "Control which extensions are installed silently", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_extensioninstallforcelistdesc", - "displayName": "Extension/App IDs and update URLs to be silently installed (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources", - "displayName": "Configure extension and user script install sources", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_extensioninstallsourcesdesc", - "displayName": "URL patterns to allow extension, app, and user script installs from (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings", - "displayName": "Configure extension management settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_extensionsettings", - "displayName": "Configure extension management settings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter", - "displayName": "Enable Google Cast", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar", - "displayName": "Show the cast icon in the toolbar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt", - "displayName": "Allow cross-origin HTTP Basic Auth prompts", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist", - "displayName": "Specifies a list of servers that Microsoft Edge can delegate user credentials to", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_authnegotiatedelegateallowlist", - "displayName": "Specifies a list of servers that Microsoft Edge can delegate user credentials to (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes", - "displayName": "Supported authentication schemes", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_authschemes", - "displayName": "Supported authentication schemes (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist", - "displayName": "Configure list of allowed authentication servers", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_authserverallowlist", - "displayName": "Configure list of allowed authentication servers (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup", - "displayName": "Disable CNAME lookup when negotiating Kerberos authentication", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport", - "displayName": "Include non-standard port in Kerberos SPN", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist", - "displayName": "Control which native messaging hosts users can use", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_nativemessagingallowlistdesc", - "displayName": "Names of the native messaging hosts to exempt from the block list (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist", - "displayName": "Configure native messaging block list", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_nativemessagingblocklistdesc", - "displayName": "Names of the forbidden native messaging hosts (or * for all) (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts", - "displayName": "Allow user-level native messaging hosts (installed without admin permissions)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled", - "displayName": "Enable saving passwords to the password manager", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl", - "displayName": "Configure the change password URL", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_passwordprotectionchangepasswordurl", - "displayName": "Configure the change password URL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls", - "displayName": "Configure the list of enterprise login URLs where password protection service should capture fingerprint of password", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_passwordprotectionloginurlsdesc", - "displayName": "Configure the list of enterprise login URLs where password protection service should capture fingerprint of password (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger", - "displayName": "Configure password protection warning trigger", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger", - "displayName": "Configure password protection warning trigger (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_0", - "displayName": "Password protection warning is off", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_1", - "displayName": "Password protection warning is triggered by password reuse", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection", - "displayName": "Default printer selection rules", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_defaultprinterselection", - "displayName": "Default printer selection rules (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter", - "displayName": "Print headers and footers", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled", - "displayName": "Enable printing", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter", - "displayName": "Set the system default printer as the default printer", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog", - "displayName": "Print using system print dialog", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist", - "displayName": "Configure proxy bypass rules", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_proxybypasslist", - "displayName": "Comma-separated list of proxy bypass rules (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode", - "displayName": "Configure proxy server settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode", - "displayName": "Configure proxy server settings (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_direct", - "displayName": "Never use a proxy", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_auto_detect", - "displayName": "Auto detect proxy settings", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_pac_script", - "displayName": "Use a .pac proxy script", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_fixed_servers", - "displayName": "Use fixed proxy servers", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_system", - "displayName": "Use system proxy settings", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl", - "displayName": "Set the proxy .pac file URL", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_proxypacurl", - "displayName": "Set the proxy .pac file URL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver", - "displayName": "Configure address or URL of proxy server", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_proxyserver", - "displayName": "Configure address or URL of proxy server (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings", - "displayName": "Proxy settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_proxysettings", - "displayName": "Proxy settings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride", - "displayName": "Prevent bypassing Microsoft Defender SmartScreen prompts for sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles", - "displayName": "Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains", - "displayName": "Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_smartscreenallowlistdomainsdesc", - "displayName": "Configure the list of domains for which SmartScreen won't trigger warnings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled", - "displayName": "Configure Microsoft Defender SmartScreen", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage", - "displayName": "Set the new tab page as the home page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation", - "displayName": "Configure the home page URL", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_homepagelocation", - "displayName": "Home page URL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites", - "displayName": "Hide the default top sites from the new tab page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation", - "displayName": "Configure the new tab page URL", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_newtabpagelocation", - "displayName": "New tab page URL (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup", - "displayName": "Action to take on Microsoft Edge startup", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup", - "displayName": "Action to take on startup (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_5", - "displayName": "Open a new tab", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_1", - "displayName": "Restore the last session", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_4", - "displayName": "Open a list of URLs", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls", - "displayName": "Sites to open when the browser starts", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_restoreonstartupurlsdesc", - "displayName": "Sites to open when the browser starts (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton", - "displayName": "Show Home button on toolbar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions", - "displayName": "Allow download restrictions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions", - "displayName": "Download restrictions (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1", - "displayName": "Block malicious downloads and dangerous file types", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2", - "displayName": "Block potentially dangerous or unwanted downloads and dangerous file types", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_4", - "displayName": "Block malicious downloads", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended", - "displayName": "Allow download restrictions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions", - "displayName": "Download restrictions (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1", - "displayName": "Block malicious downloads and dangerous file types", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2", - "displayName": "Block potentially dangerous or unwanted downloads and dangerous file types", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_4", - "displayName": "Block malicious downloads", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled", - "displayName": "Configure if the ads transparency feature is enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled", - "displayName": "Hide restore pages dialog after browser crash", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode", - "displayName": "Secure mode and Certificate-based Digital Signature validation in native PDF reader", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates", - "displayName": "Prompt the user to select a certificate when multiple certificates match", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting", - "displayName": "Control use of the WebHID API", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting", - "displayName": "Control use of the WebHID API (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_2", - "displayName": "Do not allow any site to request access to HID devices via the WebHID API", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_3", - "displayName": "Allow sites to ask the user to grant access to a HID device", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls", - "displayName": "Allow the WebHID API on these sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_webhidaskforurlsdesc", - "displayName": "Allow the WebHID API on these sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls", - "displayName": "Block the WebHID API on these sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_webhidblockedforurlsdesc", - "displayName": "Block the WebHID API on these sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts", - "displayName": "Configure the list of commands for which to disable keyboard shortcuts", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_configurekeyboardshortcuts", - "displayName": "Configure the list of commands for which to disable keyboard shortcuts (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled", - "displayName": "Allow features to download assets from the Asset Delivery Service", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas", - "displayName": "Allow Save page as in Internet Explorer mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended", - "displayName": "Allow features to download assets from the Asset Delivery Service", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended", - "displayName": "Allow users to configure Site safety services (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended", - "displayName": "Configure default state of Allow extensions from other stores setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled", - "displayName": "Allow users to configure Site safety services (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled", - "displayName": "Default Profile Setting Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_edgedefaultprofileenabled", - "displayName": "Default Profile Setting Enabled (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled", - "displayName": "Swipe gestures in Microsoft Edge kiosk mode enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled", - "displayName": "Enable the network service sandbox", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled", - "displayName": "Allow users to access the Outlook menu", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended", - "displayName": "Allow users to access the Outlook menu", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled", - "displayName": "Control Javascript setTimeout() function minimum timeout (deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled", - "displayName": "Control the User-Agent Client Hints GREASE Update feature", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins", - "displayName": "List of origins that allow all HTTP authentication", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_allhttpauthschemesallowedfororiginsdesc", - "displayName": "List of origins that allow all HTTP authentication (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay", - "displayName": "Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed", - "displayName": "Live captions allowed", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled", - "displayName": "Origin-keyed agent clustering enabled by default", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled", - "displayName": "Guided Switch Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps", - "displayName": "Define domains allowed to access Google Workspace", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_alloweddomainsforapps", - "displayName": "Define domains allowed to access Google Workspace (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled", - "displayName": "Get user confirmation before closing a browser window with multiple tabs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting", - "displayName": "Configure browser process code integrity guard setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting", - "displayName": "Configure browser process code integrity guard setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_0", - "displayName": "Do not enable code integrity guard in the browser process.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_1", - "displayName": "Enable code integrity guard audit mode in the browser process.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_2", - "displayName": "Enable code integrity guard enforcement in the browser process.", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled", - "displayName": "Double Click feature in Microsoft Edge enabled (only available in China)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled", - "displayName": "Enable Drop feature in Microsoft Edge", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch", - "displayName": "Allow import of data from other browsers on each Microsoft Edge launch", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled", - "displayName": "XFA support in native PDF reader enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu", - "displayName": "Enables Microsoft Edge mini menu", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended", - "displayName": "Get user confirmation before closing a browser window with multiple tabs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended", - "displayName": "Enables Microsoft Edge mini menu", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled", - "displayName": "Text prediction enabled by default", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled", - "displayName": "Restrict the length of passwords that can be saved in the Password Manager", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings", - "displayName": "Disable download file type extension-based warnings for specified file types on domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_exemptfiletypedownloadwarnings", - "displayName": "Disable download file type extension-based warnings for specified file types on domains (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload", - "displayName": "Wait for Internet Explorer mode tabs to completely unload before ending the browser session", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled", - "displayName": "Spell checking provided by Microsoft Editor", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled", - "displayName": "Synonyms are provided when using Microsoft Editor spell checker", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended", - "displayName": "Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat", - "displayName": "Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_1", - "displayName": "The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_3", - "displayName": "Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_4", - "displayName": "Coming soon. If set, behaves the same as 'Plain URL'.", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled", - "displayName": "JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture", - "displayName": "Always use the OS capture engine to avoid issues with capturing Internet Explorer mode tabs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended", - "displayName": "Efficiency mode enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended", - "displayName": "Enable efficiency mode when the device is connected to a power source", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled", - "displayName": "Efficiency mode enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled", - "displayName": "Enable efficiency mode when the device is connected to a power source", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault", - "displayName": "Print PDF as Image Default", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet", - "displayName": "Enhanced Security Mode configuration for Intranet zone sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled", - "displayName": "Re-enable the Event.path API until Microsoft Edge version 115", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed", - "displayName": "Allow local MHTML files to open automatically in Internet Explorer mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended", - "displayName": "Performance Detector Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled", - "displayName": "Web Select Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess", - "displayName": "Force WebSQL to be enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled", - "displayName": "Force WebSQL in non-secure contexts to be enabled (deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled", - "displayName": "Enable Workspaces", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled", - "displayName": "Enable the linked account feature", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled", - "displayName": "Performance Detector Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled", - "displayName": "Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting", - "displayName": "Set the default \"share additional operating system region\" setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting", - "displayName": "'Set the default \"share additional operating system region\" setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_0", - "displayName": "Limited", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_1", - "displayName": "Always share the OS Regional format", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_2", - "displayName": "Never share the OS Regional format", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled", - "displayName": "TLS Encrypted ClientHello Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended", - "displayName": "Set the default \"share additional operating system region\" setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting", - "displayName": "'Set the default \"share additional operating system region\" setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_0", - "displayName": "Limited", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_1", - "displayName": "Always share the OS Regional format", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_2", - "displayName": "Never share the OS Regional format", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled", - "displayName": "Hide App Launcher on Microsoft Edge new tab page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls", - "displayName": "Allow clipboard use on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_clipboardallowedforurlsdesc", - "displayName": "Allow clipboard use on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls", - "displayName": "Block clipboard use on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_clipboardblockedforurlsdesc", - "displayName": "Block clipboard use on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting", - "displayName": "Default clipboard site permission", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting", - "displayName": "Default clipboard site permission (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_2", - "displayName": "Do not allow any site to use the clipboard site permission", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_3", - "displayName": "Allow sites to ask the user to grant the clipboard site permission", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled", - "displayName": "Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls", - "displayName": "Allow listed sites to connect to any HID device", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_webhidallowalldevicesforurlsdesc", - "displayName": "Allow listed sites to connect to any HID device (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls", - "displayName": "Allow listed sites connect to specific HID devices", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_webhidallowdevicesforurls", - "displayName": "Allow listed sites connect to specific HID devices (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls", - "displayName": "Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_webhidallowdeviceswithhidusagesforurls", - "displayName": "Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled", - "displayName": "Save and fill memberships", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended", - "displayName": "Save and fill memberships", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended", - "displayName": "Search Filters Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended", - "displayName": "Configure the sticky print preview settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_printpreviewstickysettings", - "displayName": "Configure the sticky print preview settings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled", - "displayName": "Search Filters Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled", - "displayName": "Search in Sidebar enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled", - "displayName": "Search in Sidebar enabled (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_0", - "displayName": "Enable search in sidebar", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_1", - "displayName": "Disable search in sidebar for Kids Mode", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_2", - "displayName": "Disable search in sidebar", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls", - "displayName": "Allow multiple automatic downloads in quick succession on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_automaticdownloadsallowedforurlsdesc", - "displayName": "Allow multiple automatic downloads in quick succession on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls", - "displayName": "Block multiple automatic downloads in quick succession on specific sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_automaticdownloadsblockedforurlsdesc", - "displayName": "Block multiple automatic downloads in quick succession on specific sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting", - "displayName": "Default automatic downloads setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting", - "displayName": "Default automatic downloads setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_1", - "displayName": "Allow all websites to perform automatic downloads", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_2", - "displayName": "Don't allow any website to perform automatic downloads", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings", - "displayName": "Configure navigation settings per groups of URLs in Microsoft Edge Workspaces", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_workspacesnavigationsettings", - "displayName": "Configure navigation settings per groups of URLs in Microsoft Edge Workspaces (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled", - "displayName": "Enable Grammar Tools feature within Immersive Reader in Microsoft Edge (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled", - "displayName": "Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings", - "displayName": "Configure the sticky print preview settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_printpreviewstickysettings", - "displayName": "Configure the sticky print preview settings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled", - "displayName": "Clear history for IE and IE mode every time you exit", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled", - "displayName": "Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended", - "displayName": "Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed", - "displayName": "Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton", - "displayName": "Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled", - "displayName": "Enable CryptoWallet feature (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled", - "displayName": "Mouse Gesture Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled", - "displayName": "Enable Read Aloud feature in Microsoft Edge", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview", - "displayName": "Restore PDF view", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled", - "displayName": "Enable tab organization suggestions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled", - "displayName": "Enables default browser settings campaigns", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled", - "displayName": "Enable Discover access to page contents for AAD profiles (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled", - "displayName": "Determines whether the built-in certificate verifier will enforce constraints encoded into trust anchors loaded from the platform trust store (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton", - "displayName": "Show Downloads button on the toolbar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled", - "displayName": "Standalone Sidebar Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled", - "displayName": "Compose is enabled for writing on the web", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled", - "displayName": "Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled", - "displayName": "Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended", - "displayName": "Wallet Donation Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled", - "displayName": "Search for image enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled", - "displayName": "Wallet Donation Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled", - "displayName": "Microsoft Edge management enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken", - "displayName": "Microsoft Edge management enrollment token", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_edgemanagementenrollmenttoken", - "displayName": "Microsoft Edge management enrollment token (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled", - "displayName": "Microsoft Edge management extensions feedback enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended", - "displayName": "Pin browser essentials toolbar button", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed", - "displayName": "Allows enabling throttling of non-visible, cross-origin iframes (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting", - "displayName": "Default setting for third-party storage partitioning", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting", - "displayName": "Default setting for third-party storage partitioning (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_1", - "displayName": "Let third-party storage partitioning to be enabled.", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_2", - "displayName": "Block third-party storage partitioning from being enabled.", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins", - "displayName": "Disable third-party storage partitioning for specific top-level origins", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_thirdpartystoragepartitioningblockedfororiginsdesc", - "displayName": "Block third-party storage partitioning for these origins (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton", - "displayName": "Pin browser essentials toolbar button", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications", - "displayName": "Allows system notifications", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled", - "displayName": "Edge Wallet E-Tree Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed", - "displayName": "Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended", - "displayName": "Edge Wallet E-Tree Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended", - "displayName": "Enable Gamer Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed", - "displayName": "Enable the Search bar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup", - "displayName": "Allow the Search bar at Windows startup", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails", - "displayName": "Show thumbnail images for browsing history", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled", - "displayName": "Enable split screen feature in Microsoft Edge", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled", - "displayName": "Enable upload files from mobile in Microsoft Edge desktop", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled", - "displayName": "Enable Gamer Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled", - "displayName": "Control the behavior for the cancel dialog produced by the beforeunload event", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient", - "displayName": "Forces Microsoft Edge to use its built-in WNS push client to connect to the Windows Push Notification Service.", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled", - "displayName": "Controls whether unload event handlers can be disabled.", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled", - "displayName": "Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended", - "displayName": "Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled", - "displayName": "Control the new behavior for event dispatching on disabled form controls", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled", - "displayName": "Data URL support for SVGUseElement", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled", - "displayName": "Enable compression dictionary transport support", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled", - "displayName": "Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings", - "displayName": "Disable SmartScreen AppRep based warnings for specified file types on specified domains", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_exemptsmartscreendownloadwarnings", - "displayName": "Disable SmartScreen AppRep based warnings for specified file types on specified domains (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled", - "displayName": "Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled", - "displayName": "Hide the company logo on the Microsoft Edge new tab page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended", - "displayName": "Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work profile", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile", - "displayName": "Switch intranet sites to a work profile", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile", - "displayName": "Switch sites on the IE mode site list to a work profile", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy", - "displayName": "Microsoft Edge management service policy overrides platform policy.", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy", - "displayName": "Allow cloud-based Microsoft Edge management service user policies to override local user policies.", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled", - "displayName": "Edge 3P SERP Telemetry Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended", - "displayName": "Edge 3P SERP Telemetry Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended", - "displayName": "Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work profile", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended", - "displayName": "Configure the automatic profile switching site list", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_automaticprofileswitchingsitelist", - "displayName": "Configure the automatic profile switching site list (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended", - "displayName": "Configure auto discard sleeping tabs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings", - "displayName": "Web App management settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_webappsettings", - "displayName": "Web App management settings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist", - "displayName": "Configure the automatic profile switching site list", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_automaticprofileswitchingsitelist", - "displayName": "Configure the automatic profile switching site list (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled", - "displayName": "Configure auto discard sleeping tabs", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly", - "displayName": "Force Windows executable Native Messaging hosts to launch directly", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled", - "displayName": "Enable post-quantum key agreement for TLS", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery", - "displayName": "Disable DIAL protocol for cast device discovery", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled", - "displayName": "Enable Related Website Sets", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides", - "displayName": "Override Related Website Sets.", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_relatedwebsitesetsoverrides", - "displayName": "Override Related Website Sets. (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride", - "displayName": "Prevent bypassing Edge Website Typo Protection prompts for sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains", - "displayName": "Configure the list of domains for which Edge Website Typo Protection won't trigger warnings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_typosquattingallowlistdomainsdesc", - "displayName": "Configure the list of domains for which Edge Website Typo Protection won't trigger warnings (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled", - "displayName": "Enables DALL-E themes generation", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass", - "displayName": "Allow users to bypass Enhanced Security Mode", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled", - "displayName": "Super Drag Drop Enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled", - "displayName": "URL reporting in Edge diagnostic data enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled", - "displayName": "Check RSA key usage for server certificates issued by local trust anchors", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins", - "displayName": "Allow screen capture without prior user gesture", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_screencapturewithoutgestureallowedfororiginsdesc", - "displayName": "Allow screen capture without prior user gesture (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting", - "displayName": "Default Window Management permission setting", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting", - "displayName": "Default Window Management permission setting (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_2", - "displayName": "Denies the Window Management permission on all sites by default", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_3", - "displayName": "Ask every time a site wants obtain the Window Management permission", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls", - "displayName": "Allow Window Management permission on specified sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_windowmanagementallowedforurlsdesc", - "displayName": "Allow Window Management permission on specified sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls", - "displayName": "Block Window Management permission on specified sites", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_windowmanagementblockedforurlsdesc", - "displayName": "Block Window Management permission on specified sites (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist", - "displayName": "Blocklist for extension install types", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_extensioninstalltypeblocklistdesc", - "displayName": "Blocklist for extension install types (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability", - "displayName": "Control Manifest v2 extension availability", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability", - "displayName": "Control Manifest v2 extension availability (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_0", - "displayName": "Default browser behavior", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_1", - "displayName": "Manifest v2 is disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_2", - "displayName": "Manifest v2 is enabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_3", - "displayName": "Manifest v2 is enabled for forced extensions only", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext", - "displayName": "Control Copilot with Commercial Data Protection access to page context for Microsoft Entra ID profiles (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext", - "displayName": "Control Copilot access to page context for Microsoft Entra ID profiles", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled", - "displayName": "Enable deprecated/removed Mutation Events (deprecated)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled", - "displayName": "Enable the Designer for Image Editor feature", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled", - "displayName": "Enable QR Code Generator", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled", - "displayName": "Enable zstd content encoding support", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive", - "displayName": "Keep the active Microsoft Edge window with an Internet Explorer mode tab always in the foreground.", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled", - "displayName": "Enable proactive authentication", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled", - "displayName": "Controls whether the deprecated :--foo syntax for CSS custom state is enabled (obsolete)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist", - "displayName": "Control which apps cannot be opened in Microsoft Edge sidebar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_edgesidebarappurlhostblocklistdesc", - "displayName": "Control which apps cannot be opened in Microsoft Edge sidebar (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled", - "displayName": "Enable Application Bound Encryption", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings", - "displayName": "Dynamic Code Settings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings", - "displayName": "Dynamic Code Settings (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_0", - "displayName": "Default dynamic code settings", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_1", - "displayName": "Prevent the browser process from creating dynamic code", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled", - "displayName": "Enable open in sidebar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled", - "displayName": "Enable sidebar customize", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled", - "displayName": "Enable keyboard focusable scrollers", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended", - "displayName": "Enable insecure download warnings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled", - "displayName": "Enable insecure download warnings", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings", - "displayName": "Control the availability of developer mode on extensions page", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings", - "displayName": "Control the availability of developer mode on extensions page (Device)", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_0", - "displayName": "Allow the usage of developer mode on extensions page", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_1", - "displayName": "Do not allow the usage of developer mode on extensions page", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls", - "displayName": "Configure a list of origins that grant an extended background lifetime to connecting extensions.", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_extensionextendedbackgroundlifetimeforportconnectionstourlsdesc", - "displayName": "Configure a list of origins that grant an extended background lifetime to connecting extensions. (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled", - "displayName": "Enable Printing LPAC Sandbox", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext", - "displayName": "Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled", - "displayName": "Extensions Performance Detector enabled", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist", - "displayName": "Allow specific apps to be opened in Microsoft Edge sidebar", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_edgesidebarappurlhostallowlistdesc", - "displayName": "Allow specific apps to be opened in Microsoft Edge sidebar (Device)", - "options": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled", - "displayName": "Machine learning powered autofill suggestions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed", - "displayName": "Live translation allowed", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled", - "displayName": "Personalize my top sites in Customize Sidebar enabled by default", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended", - "displayName": "Machine learning powered autofill suggestions", - "options": [ - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled", - "displayName": "Controls whether the new HTML parser behavior for the element is enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled", - "displayName": "Control the new behavior for event dispatching on disabled form controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled", - "displayName": "Control Javascript setTimeout() function minimum timeout. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings", - "displayName": "Settings for Tab Organizer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings", - "displayName": "Settings for Tab Organizer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_0", - "displayName": "Allow Tab Organizer and improve AI models.", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_1", - "displayName": "Allow Tab Organizer without improving AI models.", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_2", - "displayName": "Do not allow Tab Organizer.", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed", - "displayName": "Allows enabling throttling of non-visible, cross-origin iframes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings", - "displayName": "Managed toolbar avatar label setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings", - "displayName": "Managed toolbar avatar label setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_0", - "displayName": "Always display management label", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_1", - "displayName": "Display management labels for 30s", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled", - "displayName": "Control the nesting threshold before which Javascript setTimeout() function start being clamped (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled", - "displayName": "Control the URL parameter filter feature (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed", - "displayName": "Allow Pepper to use a new decoder for hardware accelerated video decoding. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled", - "displayName": "Control the User-Agent Client Hints GREASE Update feature. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess", - "displayName": "Force WebSQL to be enabled. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled", - "displayName": "Force WebSQL in non-secure contexts to be enabled. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled", - "displayName": "Enable zstd content-encoding support (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled", - "displayName": "Allow download deep scanning for Safe Browsing-enabled users (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed", - "displayName": "Allow Safe Browsing Proxied Real Time Checks (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled", - "displayName": "Allow Safe Browsing Surveys (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled", - "displayName": "Bind Google credentials to a device (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist", - "displayName": "Enterprise profile separation secondary domain allowlist (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_profileseparationdomainexceptionlistdesc", - "displayName": "Enterprise profile separation secondary domain allowlist (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl", - "displayName": "WebRTC per URL IP Handling (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_webrtciphandlingurl", - "displayName": "WebRTC per URL IP Handling (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement", - "displayName": "Enable post-quantum key agreement for WebRTC (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_connectivity_disablecrossdeviceresume", - "displayName": "Disable Cross Device Resume (User) (Windows Insiders only)", - "options": [ - { - "id": "user_vendor_msft_policy_config_connectivity_disablecrossdeviceresume_0", - "displayName": "CrossDeviceResume is Enabled.", - "description": "CrossDeviceResume is Enabled." - }, - { - "id": "user_vendor_msft_policy_config_connectivity_disablecrossdeviceresume_1", - "displayName": "CrossDeviceResume is Disabled.", - "description": "CrossDeviceResume is Disabled." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_credentialsui_disablepasswordreveal", - "displayName": "Do not display the password reveal button (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_credentialsui_disablepasswordreveal_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_credentialsui_disablepasswordreveal_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_desktop_preventuserredirectionofprofilefolders", - "displayName": "Prohibit User from manually redirecting Profile Folders (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_desktop_preventuserredirectionofprofilefolders_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_desktop_preventuserredirectionofprofilefolders_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_display_configuremultipledisplaymode", - "displayName": "Configure Multiple Display Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_display_configuremultipledisplaymode_0", - "displayName": "Default.", - "description": "Default." - }, - { - "id": "user_vendor_msft_policy_config_display_configuremultipledisplaymode_1", - "displayName": "Internal Only.", - "description": "Internal Only." - }, - { - "id": "user_vendor_msft_policy_config_display_configuremultipledisplaymode_2", - "displayName": "External Only.", - "description": "External Only." - }, - { - "id": "user_vendor_msft_policy_config_display_configuremultipledisplaymode_3", - "displayName": "Clone.", - "description": "Clone." - }, - { - "id": "user_vendor_msft_policy_config_display_configuremultipledisplaymode_4", - "displayName": "Extend.", - "description": "Extend." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_display_enableperprocessdpi", - "displayName": "Enable Per Process Dpi (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_display_enableperprocessdpi_0", - "displayName": "Disabled", - "description": "Disable." - }, - { - "id": "user_vendor_msft_policy_config_display_enableperprocessdpi_1", - "displayName": "Enabled", - "description": "Enable." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_display_setclonepreferredresolutionsource", - "displayName": "Set Clone Preferred Resolution Source (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_display_setclonepreferredresolutionsource_0", - "displayName": "Default.", - "description": "Default." - }, - { - "id": "user_vendor_msft_policy_config_display_setclonepreferredresolutionsource_1", - "displayName": "Internal.", - "description": "Internal." - }, - { - "id": "user_vendor_msft_policy_config_display_setclonepreferredresolutionsource_2", - "displayName": "External.", - "description": "External." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_education_allowgraphingcalculator", - "displayName": "Allow Graphing Calculator (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_education_allowgraphingcalculator_0", - "displayName": "Block", - "description": "Disabled." - }, - { - "id": "user_vendor_msft_policy_config_education_allowgraphingcalculator_1", - "displayName": "Allow", - "description": "Enabled." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_education_defaultprintername", - "displayName": "Default Printer Name (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_education_preventaddingnewprinters", - "displayName": "Prevent Adding New Printers (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_education_preventaddingnewprinters_0", - "displayName": "Disabled", - "description": "Allow user installation." - }, - { - "id": "user_vendor_msft_policy_config_education_preventaddingnewprinters_1", - "displayName": "Enabled", - "description": "Prevent user installation." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_education_printernames", - "displayName": "Printer Names (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_enterprisecloudprint_cloudprinterdiscoveryendpoint", - "displayName": "Cloud Printer Discovery End Point (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_enterprisecloudprint_cloudprintoauthauthority", - "displayName": "Cloud Print OAuth Authority (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_enterprisecloudprint_cloudprintoauthclientid", - "displayName": "Cloud Print OAuth Client Id (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_enterprisecloudprint_cloudprintresourceid", - "displayName": "Cloud Print Resource Id (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_enterprisecloudprint_mopriadiscoveryresourceid", - "displayName": "Mopria Discovery Resource Id (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v10~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_excelforcesupportforunicodesurrogates", - "displayName": "Force support for Unicode surrogates in Excel 2021 and Excel 2024 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v10~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_excelforcesupportforunicodesurrogates_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v10~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_excelforcesupportforunicodesurrogates_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize", - "displayName": "List of error messages to customize (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize87", - "displayName": "List of error messages to customize (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize87_key", - "displayName": "Name", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize87_value", - "displayName": "Value", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_datarecovery_l_donotshowdataextractionoptionswhenopeningcorruptworkbooks", - "displayName": "Do not show data extraction options when opening corrupt workbooks (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_datarecovery_l_donotshowdataextractionoptionswhenopeningcorruptworkbooks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_datarecovery_l_donotshowdataextractionoptionswhenopeningcorruptworkbooks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems165", - "displayName": "Disable commands (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems165_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems165_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems165_l_enteracommandbaridtodisable", - "displayName": "Enter a command bar ID to disable (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys166", - "displayName": "Disable shortcut keys (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys166_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys166_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys166_l_enterakeyandmodifiertodisable", - "displayName": "Enter a key and modifier to disable (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems", - "displayName": "Disable commands (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacros", - "displayName": "Developer tab | Code | Macros (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacros_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacros_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacrosecurity", - "displayName": "Developer tab | Code | Macro Security (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacrosecurity_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodemacrosecurity_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercoderecordmacro", - "displayName": "Developer tab | Code | Record Macro (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercoderecordmacro_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercoderecordmacro_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodevisualbasic", - "displayName": "Developer tab | Code | Visual Basic (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodevisualbasic_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_developercodevisualbasic_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_insertlinkshyperlink", - "displayName": "Insert tab | Links | Hyperlink (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_insertlinkshyperlink_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_insertlinkshyperlink_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizationmailrecipient", - "displayName": "File tab | Share | Email (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizationmailrecipient_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizationmailrecipient_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizedocumentlocation", - "displayName": "File tab | Options | Customize Ribbon | All Commands | Document Location (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizedocumentlocation_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonexceloptionscustomizedocumentlocation_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonxceloptionscustomizationcombinedpreviewwebpagepreview", - "displayName": "File tab | Options | Customize Ribbon | All Commands | Web Page Preview (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonxceloptionscustomizationcombinedpreviewwebpagepreview_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_officebuttonxceloptionscustomizationcombinedpreviewwebpagepreview_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsharing", - "displayName": "Review tab | Changes | Protect and Share Workbook (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsharing_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsharing_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsheet", - "displayName": "Review tab | Changes | Protect Sheet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsheet_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectsheet_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectworkbook", - "displayName": "Review tab | Changes | Protect Workbook (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectworkbook_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_reviewchangesprotectworkbook_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_viewmacrosmacros", - "displayName": "View tab | Macros | Macros (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_viewmacrosmacros_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_viewmacrosmacros_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys", - "displayName": "Disable shortcut keys (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros", - "displayName": "Alt+F8 (Developer | Code | Macros) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf8toolsmacromacros_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altlvdevelopercodevisualbasic", - "displayName": "Alt+F11 (Developer | Code | Visual Basic) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altlvdevelopercodevisualbasic_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altlvdevelopercodevisualbasic_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlfhomeeditingfind", - "displayName": "Ctrl+F (Home | Editing | Find & Select | Find) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlfhomeeditingfind_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlfhomeeditingfind_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinsertlinkshyperlinks", - "displayName": "Ctrl+K (Insert | Links | Hyperlink) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinsertlinkshyperlinks_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinsertlinkshyperlinks_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alertbeforeoverwritingcells", - "displayName": "Alert before overwriting cells (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alertbeforeoverwritingcells_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alertbeforeoverwritingcells_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alternatestartupfilelocation", - "displayName": "Alternate startup file location (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alternatestartupfilelocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alternatestartupfilelocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_alternatestartupfilelocation_l_alternatestartupfilelocation86", - "displayName": "Alternate startup file location (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_asktoupdateautomaticlinks", - "displayName": "Ask to update automatic links (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_asktoupdateautomaticlinks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_asktoupdateautomaticlinks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyflashfill", - "displayName": "Automatically Flash Fill (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyflashfill_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyflashfill_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyinsertadecimalpoint", - "displayName": "Automatically insert a decimal point (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyinsertadecimalpoint_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_automaticallyinsertadecimalpoint_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_chartreftrackingenabled", - "displayName": "Allow formatting and labels to track data points (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_chartreftrackingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_chartreftrackingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments", - "displayName": "Comments (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_l_comments85", - "displayName": "Comments (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_l_comments85_0", - "displayName": "None", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_l_comments85_1", - "displayName": "Comment indicator only", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_comments_l_comments85_2", - "displayName": "Comment & indicator", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement", - "displayName": "Cursor movement (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_l_cursormovement82", - "displayName": "Cursor movement (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_l_cursormovement82_0", - "displayName": "Logical", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cursormovement_l_cursormovement82_1", - "displayName": "Visual", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cutandcopyobjectswithcells", - "displayName": "Cut and copy objects with cells (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cutandcopyobjectswithcells_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_cutandcopyobjectswithcells_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection", - "displayName": "Default sheet direction (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_l_defaultdirection81", - "displayName": "Default sheet direction (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_l_defaultdirection81_1", - "displayName": "Right-to-Left", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_defaultdirection_l_defaultdirection81_0", - "displayName": "Left-to-Right", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_editdirectlyincell", - "displayName": "Edit directly in cell (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_editdirectlyincell_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_editdirectlyincell_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautocompleteforcellvalues", - "displayName": "Enable AutoComplete for cell values (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautocompleteforcellvalues_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautocompleteforcellvalues_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautomaticpercententry", - "displayName": "Enable automatic percent entry (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautomaticpercententry_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enableautomaticpercententry_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enablefillhandleandcelldraganddrop", - "displayName": "Enable fill handle and cell drag-and-drop (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enablefillhandleandcelldraganddrop_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_enablefillhandleandcelldraganddrop_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_extenddatarangeformatsandformulas", - "displayName": "Extend data range formats and formulas (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_extenddatarangeformatsandformulas_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_extenddatarangeformatsandformulas_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_functiontooltips", - "displayName": "Function tooltips (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_functiontooltips_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_functiontooltips_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_ignoreotherapplications", - "displayName": "Ignore other applications (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_ignoreotherapplications_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_ignoreotherapplications_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_microsoftexcelmenuorhelpkey", - "displayName": "Microsoft Excel menu or Help key (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_microsoftexcelmenuorhelpkey_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_microsoftexcelmenuorhelpkey_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_microsoftexcelmenuorhelpkey_l_helpkey", - "displayName": "Enter ASCII value (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenter", - "displayName": "Move selection after Enter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection", - "displayName": "Move selection after Enter direction (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84", - "displayName": "Move selection after Enter direction (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84_0", - "displayName": "Down", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84_1", - "displayName": "Right", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84_2", - "displayName": "Up", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_moveselectionafterenterdirection_l_moveselectionafterenterdirection84_3", - "displayName": "Left", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_recentlyusedfilelist", - "displayName": "Number of workbooks in the Recent Workbooks list (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_recentlyusedfilelist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_recentlyusedfilelist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_recentlyusedfilelist_l_entriesonrecentlyusedfilelist", - "displayName": "Entries on recently used file list (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_setnumberofplacesintherecentplaceslist", - "displayName": "Number of folders in the Recent Folders list (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_setnumberofplacesintherecentplaceslist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_setnumberofplacesintherecentplaceslist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid", - "displayName": "", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showalertifnotdefault", - "displayName": "Show Alert if Excel is not the default for its associated file types (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showalertifnotdefault_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showalertifnotdefault_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showcontrolcharacters", - "displayName": "Show control characters (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showcontrolcharacters_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showcontrolcharacters_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinfullview", - "displayName": "Show Formula bar in Full View (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinfullview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinfullview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinnormalview", - "displayName": "Show Formula bar in Normal View (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinnormalview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showformulabarinnormalview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showinsertoptionsbuttons", - "displayName": "Show Insert Options buttons (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showinsertoptionsbuttons_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showinsertoptionsbuttons_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_shownames", - "displayName": "Show names (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_shownames_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_shownames_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showpasteoptionsbuttonwhencontentispasted", - "displayName": "Show Paste Options button when content is pasted (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showpasteoptionsbuttonwhencontentispasted_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showpasteoptionsbuttonwhencontentispasted_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showvalues", - "displayName": "Show values (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showvalues_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_showvalues_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_transitionnavigationkeys", - "displayName": "Transition navigation keys (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_transitionnavigationkeys_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_transitionnavigationkeys_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_zoomonrollwithintellimouse", - "displayName": "Zoom on roll with IntelliMouse (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_zoomonrollwithintellimouse_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced_l_zoomonrollwithintellimouse_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced~l_weboptions~l_general_l_loadpicturesfromwebpagesnotcreatedinexcel", - "displayName": "Load pictures from Web pages not created in Excel (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced~l_weboptions~l_general_l_loadpicturesfromwebpagesnotcreatedinexcel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_advanced~l_weboptions~l_general_l_loadpicturesfromwebpagesnotcreatedinexcel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_formulas_l_r1c1referencestyle", - "displayName": "R1C1 reference style (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_formulas_l_r1c1referencestyle_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_formulas_l_r1c1referencestyle_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionscustomizeribbon_l_displaydevelopertab", - "displayName": "Display Developer tab in the Ribbon (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionscustomizeribbon_l_displaydevelopertab_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionscustomizeribbon_l_displaydevelopertab_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowquickanalysis", - "displayName": "Show Quick Analysis options on selection (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowquickanalysis_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowquickanalysis_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowselectionfloaties", - "displayName": "Show Mini Toolbar on selection (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowselectionfloaties_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_allowselectionfloaties_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_defaultsheets", - "displayName": "Default Sheets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_defaultsheets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_defaultsheets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_defaultsheets_l_sheetsinnewworkbook", - "displayName": "Sheets in new workbook (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_disablelivepreview", - "displayName": "Enable Live Preview (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_disablelivepreview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_disablelivepreview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_font", - "displayName": "Font (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_font_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_font_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_font_l_namesize", - "displayName": "Name, Size (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_windowsintaskbar", - "displayName": "Show all windows in the Taskbar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_windowsintaskbar_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_optionsgeneral_l_windowsintaskbar_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_includenewrowsandcolumnsinlist", - "displayName": "Include new rows and columns in table (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_includenewrowsandcolumnsinlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_includenewrowsandcolumnsinlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_internetandnetworkpathsashyperlinks", - "displayName": "Internet and network paths as hyperlinks (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_internetandnetworkpathsashyperlinks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_proofing~l_autocorrectoptions_l_internetandnetworkpathsashyperlinks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoverdelay", - "displayName": "AutoRecover delay (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoverdelay_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoverdelay_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoverdelay_l_secondsofidletimebeforeautorecoverstarts", - "displayName": "Seconds of idle time before AutoRecover starts (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoversavelocation", - "displayName": "AutoRecover save location (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoversavelocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoversavelocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecoversavelocation_l_autorecoversavelocation2", - "displayName": "AutoRecover save location (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecovertime", - "displayName": "AutoRecover time (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecovertime_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecovertime_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_autorecovertime_l_saveautorecoverinfoevery", - "displayName": "Save AutoRecover info every (minutes): (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_defaultfilelocation", - "displayName": "Default file location (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_defaultfilelocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_defaultfilelocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_defaultfilelocation_l_defaultfilelocation0", - "displayName": "Default file location (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_disableautorepublish", - "displayName": "Disable AutoRepublish (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_disableautorepublish_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_disableautorepublish_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_donotshowautorepublishwarningalert", - "displayName": "Do not show AutoRepublish warning alert (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_donotshowautorepublishwarningalert_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_donotshowautorepublishwarningalert_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_keeplastautosavedversions", - "displayName": "Keep the last AutoSaved versions of files for the next session (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_keeplastautosavedversions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_keeplastautosavedversions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_promptforworkbookproperties", - "displayName": "Prompt for workbook properties (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_promptforworkbookproperties_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_promptforworkbookproperties_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveautorecoverinfo", - "displayName": "Save AutoRecover info (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveautorecoverinfo_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveautorecoverinfo_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas", - "displayName": "Default file format (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1", - "displayName": "Save Excel files as (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_51", - "displayName": "Excel Workbook (*.xlsx)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_52", - "displayName": "Excel Macro-Enabled Workbook (*.xlsm)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_50", - "displayName": "Excel Binary Workbook (*.xlsb)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_44", - "displayName": "Web Page (*.htm; *.html)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_56", - "displayName": "Excel 97-2003 Workbook (*.xls)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_39", - "displayName": "Excel 5.0/95 Workbook (*.xls)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_saveexcelfilesas_l_saveexcelfilesas1_60", - "displayName": "OpenDocument Spreadsheet (*.ods)", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_turnofffileformatcompatiblitydialogforods", - "displayName": "Suppress file format compatibility dialog box for OpenDocument Spreadsheet format (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_turnofffileformatcompatiblitydialogforods_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_save_l_turnofffileformatcompatiblitydialogforods_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel", - "displayName": "Scan encrypted macros in Excel Open XML workbooks (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_l_determinewhethertoforceencryptedexceldropid", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_l_determinewhethertoforceencryptedexceldropid_0", - "displayName": "Scan encrypted macros (default)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_l_determinewhethertoforceencryptedexceldropid_1", - "displayName": "Scan if anti-virus software available", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_determinewhethertoforceencryptedexcel_l_determinewhethertoforceencryptedexceldropid_2", - "displayName": "Load macros without scanning", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch", - "displayName": "Force file extension to match file type (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_l_empty", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_l_empty_0", - "displayName": "Allow different", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_l_empty_1", - "displayName": "Allow different, but warn", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_forcefileextenstionstomatch_l_empty_2", - "displayName": "Always match file type", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches", - "displayName": "Perform file validation on pivot caches (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_l_performfilevalidationonpivotcachesdropid", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_l_performfilevalidationonpivotcachesdropid_0", - "displayName": "No file validation", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_l_performfilevalidationonpivotcachesdropid_1", - "displayName": "Web and email sources", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_performfilevalidationonpivotcaches_l_performfilevalidationonpivotcachesdropid_2", - "displayName": "Always perform validation", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_turnofffilevalidation", - "displayName": "Turn off file validation (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_turnofffilevalidation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_turnofffilevalidation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel", - "displayName": "WEBSERVICE Function Notification Settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_l_webcontentwarninglevelvalue", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_l_webcontentwarninglevelvalue_0", - "displayName": "Enable all WEBSERVICE functions (not recommended)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_l_webcontentwarninglevelvalue_1", - "displayName": "Disable all with notification", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security_l_webcontentwarninglevel_l_webcontentwarninglevelvalue_2", - "displayName": "Disable all without notification", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode", - "displayName": "Configure CNG cipher chaining mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecbc", - "displayName": "Cipher Block Chaining (CBC)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecfb", - "displayName": "Cipher Feedback (CFB)", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipheralgorithm", - "displayName": "Set CNG cipher algorithm (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipheralgorithm_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipheralgorithm_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipheralgorithm_l_setcngcipheralgorithmid", - "displayName": "CNG cipher algorithm: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipherkeylength", - "displayName": "Set CNG cipher key length (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipherkeylength_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipherkeylength_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngcipherkeylength_l_setcngcipherkeylengthspinid", - "displayName": "Cipher key length (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngpasswordspincount", - "displayName": "Set CNG password spin count (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngpasswordspincount_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngpasswordspincount_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setcngpasswordspincount_l_setcngpasswordspincountspinid", - "displayName": "", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setparametersforcngcontext", - "displayName": "Set parameters for CNG context (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setparametersforcngcontext_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setparametersforcngcontext_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_setparametersforcngcontext_l_setparametersforcngcontextid", - "displayName": "Parameters (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm", - "displayName": "Specify CNG hash algorithm (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha1", - "displayName": "SHA1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha256", - "displayName": "SHA256", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha384", - "displayName": "SHA384", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha512", - "displayName": "SHA512", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm", - "displayName": "Specify CNG random number generator algorithm (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_l_specifycngrandomnumbergeneratoralgorithmid", - "displayName": "Random number generator: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngsaltlength", - "displayName": "Specify CNG salt length (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngsaltlength_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngsaltlength_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifycngsaltlength_l_specifycngsaltlengthspinid", - "displayName": "Number of bytes (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility", - "displayName": "Specify encryption compatibility (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_0", - "displayName": "Use legacy format", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_1", - "displayName": "Use next generation format", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_2", - "displayName": "All files save with next generation format", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_usenewkeyonpasswordchange", - "displayName": "Use new key on password change (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_usenewkeyonpasswordchange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_cryptography_l_usenewkeyonpasswordchange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet", - "displayName": "Block macros from running in Office files from the Internet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disableallapplicationextensions", - "displayName": "Disable all application add-ins (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disableallapplicationextensions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disableallapplicationextensions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned", - "displayName": "Disable Trust Bar Notification for unsigned application add-ins and block them (User) (Deprecated)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2", - "displayName": "Disable Trust Bar Notification for unsigned application add-ins and block them (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_v2_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned", - "displayName": "Require that application add-ins are signed by Trusted Publisher (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments", - "displayName": "Set maximum number of trusted documents (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_l_setmaximumnumberoftrusteddocumentsspinid", - "displayName": "Maximum number: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve", - "displayName": "Set maximum number of trust records to preserve (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_l_setmaximumnumberoftrustrecordstopreservespinid", - "displayName": "Maximum to preserve: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_storemacroinpersonalmacroworkbookbydefault", - "displayName": "Store macro in Personal Macro Workbook by default (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_storemacroinpersonalmacroworkbookbydefault_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_storemacroinpersonalmacroworkbookbydefault_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject", - "displayName": "Trust access to Visual Basic Project (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_trustaccesstovisualbasicproject_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocuments", - "displayName": "Turn off trusted documents (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocuments_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocuments_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork", - "displayName": "Turn off Trusted Documents on the network (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy", - "displayName": "VBA Macro Notification Settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_2", - "displayName": "Disable all with notification", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_3", - "displayName": "Disable all except digitally signed macros", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_4", - "displayName": "Disable all without notification", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_vbawarningspolicy_l_empty4_1", - "displayName": "Enable all macros (not recommended)", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles", - "displayName": "dBase III / IV files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_l_dbaseiiiandivfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_l_dbaseiiiandivfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_dbaseiiiandivfiles_l_dbaseiiiandivfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles", - "displayName": "Dif and Sylk files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles_l_difandsylkfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles_l_difandsylkfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles_l_difandsylkfilesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_difandsylkfiles_l_difandsylkfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles", - "displayName": "Excel 2007 and later add-in files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_l_excel2007andlateraddinfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_l_excel2007andlateraddinfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_l_excel2007andlateraddinfilesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlateraddinfiles_l_excel2007andlateraddinfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks", - "displayName": "Excel 2007 and later binary workbooks (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterbinaryworkbooks_l_excel2007andlaterbinaryworkbooksdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates", - "displayName": "Excel 2007 and later macro-enabled workbooks and templates (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlatermacroenabledworkbooksandtemplates_l_excel2007andlatermacroenabledworkbooksandtemplatesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates", - "displayName": "Excel 2007 and later workbooks and templates (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2007andlaterworkbooksandtemplates_l_excel2007andlaterworkbooksandtemplatesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles", - "displayName": "Excel 2 macrosheets and add-in files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2macrosheetsandaddinfiles_l_excel2macrosheetsandaddinfilesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets", - "displayName": "Excel 2 worksheets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel2worksheets_l_excel2worksheetsdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles", - "displayName": "Excel 3 macrosheets and add-in files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3macrosheetsandaddinfiles_l_excel3macrosheetsandaddinfilesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets", - "displayName": "Excel 3 worksheets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel3worksheets_l_excel3worksheetsdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles", - "displayName": "Excel 4 macrosheets and add-in files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4macrosheetsandaddinfiles_l_excel4macrosheetsandaddinfilesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks", - "displayName": "Excel 4 workbooks (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4workbooks_l_excel4workbooksdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets", - "displayName": "Excel 4 worksheets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel4worksheets_l_excel4worksheetsdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates", - "displayName": "Excel 95-97 workbooks and templates (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel9597workbooksandtemplates_l_excel9597workbooksandtemplatesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks", - "displayName": "Excel 95 workbooks (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel95workbooks_l_excel95workbooksdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles", - "displayName": "Excel 97-2003 add-in files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_l_excel972003addinfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_l_excel972003addinfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_l_excel972003addinfilesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003addinfiles_l_excel972003addinfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates", - "displayName": "Excel 97-2003 workbooks and templates (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excel972003workbooksandtemplates_l_excel972003workbooksandtemplatesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles", - "displayName": "Excel add-in files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_l_exceladdinfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_l_exceladdinfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_exceladdinfiles_l_exceladdinfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel", - "displayName": "Legacy converters for Excel (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_l_legacyconvertersforexceldropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_l_legacyconvertersforexceldropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_l_legacyconvertersforexceldropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_l_legacyconvertersforexceldropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_l_legacyconvertersforexceldropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_legacyconvertersforexcel_l_legacyconvertersforexceldropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel", - "displayName": "Microsoft Office Open XML converters for Excel (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficeopenxmlconvertersforexcel_l_microsoftofficeopenxmlconvertersforexceldropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles", - "displayName": "Microsoft Office query files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_microsoftofficequeryfiles_l_microsoftofficequeryfilesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles", - "displayName": "Microsoft Office data connection files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_l_officedataconnectionfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_l_officedataconnectionfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_officedataconnectionfiles_l_officedataconnectionfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles", - "displayName": "Offline cube files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_l_offlinecubefilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_l_offlinecubefilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_offlinecubefiles_l_offlinecubefilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles", - "displayName": "OpenDocument Spreadsheet files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_opendocumentspreadsheetfiles_l_opendocumentspreadsheetfilesdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles", - "displayName": "Other data source files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_l_otherdatasourcefilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_l_otherdatasourcefilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_otherdatasourcefiles_l_otherdatasourcefilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior", - "displayName": "Set default file block behavior (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_0", - "displayName": "Blocked files are not opened", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_1", - "displayName": "Blocked files open in Protected View and can not be edited", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_setdefaultfileblockbehavior_l_setdefaultfileblockbehaviordropid_2", - "displayName": "Blocked files open in Protected View and can be edited", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles", - "displayName": "Text files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_l_textfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_l_textfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_l_textfilesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_textfiles_l_textfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets", - "displayName": "Web pages and Excel 2003 XML spreadsheets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_3", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_4", - "displayName": "Open in Protected View", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_webpagesandexcel2003xmlspreadsheets_l_webpagesandexcel2003xmlspreadsheetsdropid_5", - "displayName": "Allow editing and open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles", - "displayName": "XML files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_l_xmlfilesdropid", - "displayName": "File block setting: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_l_xmlfilesdropid_0", - "displayName": "Do not block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_l_xmlfilesdropid_1", - "displayName": "Save blocked", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_xmlfiles_l_xmlfilesdropid_2", - "displayName": "Open/Save blocked, use open policy", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview", - "displayName": "Do not open files from the Internet zone in Protected View (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesfromtheinternetzoneinprotectedview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview", - "displayName": "Do not open files in unsafe locations in Protected View (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_donotopenfilesinunsafelocationsinprotectedview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview", - "displayName": "Open files on local Intranet UNC in Protected View (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_openfilesonlocalintranetuncinprotectedview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails", - "displayName": "Set document behavior if file validation fails (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid_0", - "displayName": "Block files", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsdropid_1", - "displayName": "Open in Protected View", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3", - "displayName": "Checked: Allow edit. Unchecked: Do not allow edit. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_setdocumentbehavioriffilevalidationfails_l_setdocumentbehavioriffilevalidationfailsstr3_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook", - "displayName": "Turn off Protected View for attachments opened from Outlook (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_turnoffprotectedviewforattachmentsopenedfromoutlook_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork", - "displayName": "Allow Trusted Locations on the network (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc", - "displayName": "Disable all trusted locations (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01", - "displayName": "Trusted Location #1 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_datecolon", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_descriptioncolon", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_pathcolon", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02", - "displayName": "Trusted Location #2 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders8", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders8_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders8_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_datecolon6", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_descriptioncolon7", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_pathcolon5", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03", - "displayName": "Trusted Location #3 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders12", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders12_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders12_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_datecolon10", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_descriptioncolon11", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_pathcolon9", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04", - "displayName": "Trusted Location #4 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders16", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders16_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders16_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_datecolon14", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_descriptioncolon15", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_pathcolon13", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05", - "displayName": "Trusted Location #5 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders20", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders20_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders20_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_datecolon18", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_descriptioncolon19", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_pathcolon17", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06", - "displayName": "Trusted Location #6 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders24", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders24_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders24_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_datecolon22", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_descriptioncolon23", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_pathcolon21", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07", - "displayName": "Trusted Location #7 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders28", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders28_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders28_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_datecolon26", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_descriptioncolon27", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_pathcolon25", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08", - "displayName": "Trusted Location #8 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders32", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders32_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders32_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_datecolon30", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_descriptioncolon31", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_pathcolon29", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09", - "displayName": "Trusted Location #9 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders36", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders36_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders36_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_datecolon34", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_descriptioncolon35", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_pathcolon33", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10", - "displayName": "Trusted Location #10 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders40", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders40_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders40_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_datecolon38", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_descriptioncolon39", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_pathcolon37", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11", - "displayName": "Trusted Location #11 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders44", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders44_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders44_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_datecolon42", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_descriptioncolon43", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_pathcolon41", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12", - "displayName": "Trusted Location #12 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders48", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders48_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders48_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_datecolon46", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_descriptioncolon47", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_pathcolon45", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13", - "displayName": "Trusted Location #13 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders52", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders52_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders52_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_datecolon50", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_descriptioncolon51", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_pathcolon49", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14", - "displayName": "Trusted Location #14 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders56", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders56_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders56_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_datecolon54", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_descriptioncolon55", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_pathcolon53", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15", - "displayName": "Trusted Location #15 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders60", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders60_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders60_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_datecolon58", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_descriptioncolon59", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_pathcolon57", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16", - "displayName": "Trusted Location #16 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders64", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders64_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders64_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_datecolon62", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_descriptioncolon63", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_pathcolon61", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17", - "displayName": "Trusted Location #17 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders68", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders68_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders68_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_datecolon66", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_descriptioncolon67", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_pathcolon65", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18", - "displayName": "Trusted Location #18 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders72", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders72_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders72_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_datecolon70", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_descriptioncolon71", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_pathcolon69", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19", - "displayName": "Trusted Location #19 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders76", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders76_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders76_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_datecolon74", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_descriptioncolon75", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_pathcolon73", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20", - "displayName": "Trusted Location #20 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders80", - "displayName": "Allow sub folders: (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders80_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders80_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_datecolon78", - "displayName": "Date: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_descriptioncolon79", - "displayName": "Description: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_pathcolon77", - "displayName": "Path: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation", - "displayName": "Check for accessibility issues while editing (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_backgroundaccessibilitycheckerinformation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation", - "displayName": "Stop checking for alt text accessibility information (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingalttextaccessibilityinformation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsusedasformatting", - "displayName": "Stop checking for blank table rows used as formatting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsusedasformatting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingforblanktablerowsusedasformatting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingformergedcells", - "displayName": "Stop checking for merged cells (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingformergedcells_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingformergedcells_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation", - "displayName": "Stop checking for table header accessibility information (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtableheaderaccessibilityinformation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful", - "displayName": "Stop checking to ensure hyperlink text is meaningful (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurehyperlinktextismeaningful_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurenondefaultsheetnames", - "displayName": "Stop checking to ensure non-default sheet names (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurenondefaultsheetnames_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensurenondefaultsheetnames_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensureworkbooksallowprogrammaticaccess", - "displayName": "Stop checking to ensure workbooks allow programmatic access (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensureworkbooksallowprogrammaticaccess_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtoensureworkbooksallowprogrammaticaccess_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_intelligentservices_l_insights", - "displayName": "Remove Ideas button from the Ribbon (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_intelligentservices_l_insights_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_intelligentservices_l_insights_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_blockallunmanagedaddins", - "displayName": "Block all unmanaged add-ins (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_blockallunmanagedaddins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_blockallunmanagedaddins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_defaultcustomtab", - "displayName": "Show custom templates tab by default in Excel on the Office Start screen and in File | New (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_defaultcustomtab_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_defaultcustomtab_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_disableofficestartexcel", - "displayName": "Disable the Office Start screen for Excel (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_disableofficestartexcel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_disableofficestartexcel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_donotcachenetworkfileslocally", - "displayName": "Do not cache network files locally (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_donotcachenetworkfileslocally_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_donotcachenetworkfileslocally_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_enablefourdigityeardisplay", - "displayName": "Enable four-digit year display (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_enablefourdigityeardisplay_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_enablefourdigityeardisplay_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_graphgallerypath", - "displayName": "Graph gallery path (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_graphgallerypath_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_graphgallerypath_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_graphgallerypath_l_graphgallerypath169", - "displayName": "Graph gallery path (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins", - "displayName": "List of managed add-ins (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_l_listofmanagedaddins2", - "displayName": "List of managed add-ins (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_l_listofmanagedaddins2_key", - "displayName": "Name", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_listofmanagedaddins_l_listofmanagedaddins2_value", - "displayName": "Value", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting", - "displayName": "OLAP PivotTable User Defined Function (UDF) security setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_l_olappivottableuserdefinedfunctionudfsecuritysetting171", - "displayName": "OLAP PivotTable User Defined Function (UDF) security setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_l_olappivottableuserdefinedfunctionudfsecuritysetting171_1", - "displayName": "Allow ALL UDFs", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_l_olappivottableuserdefinedfunctionudfsecuritysetting171_2", - "displayName": "Allow safe UDFs only", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_olappivottableuserdefinedfunctionudfsecuritysetting_l_olappivottableuserdefinedfunctionudfsecuritysetting171_3", - "displayName": "Allow NO UDFs", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_personaltemplatespath", - "displayName": "Personal templates path for Excel (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_personaltemplatespath_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_personaltemplatespath_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168_l_personaltemplatespath_l_personaltemplatespath", - "displayName": "Personal templates path (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp", - "displayName": "Turn off file synchronization via SOAP over HTTP (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v2~policy~l_microsoftofficeexcel~l_miscellaneous168~l_serversettings_l_turnofffilesynchronizationviasoapoverhttp_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlaunch", - "displayName": "Don’t allow Dynamic Data Exchange (DDE) server launch in Excel (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlaunch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlaunch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlookup", - "displayName": "Don’t allow Dynamic Data Exchange (DDE) server lookup in Excel (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlookup_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_disableddeserverlookup_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_enableblockunsecurequeryfiles", - "displayName": "Always prevent untrusted Microsoft Query files from opening (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_enableblockunsecurequeryfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_externalcontent_l_enableblockunsecurequeryfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enabledatabasefileprotectedview", - "displayName": "Always open untrusted database files in Protected View (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enabledatabasefileprotectedview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enabledatabasefileprotectedview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enableforeigntextfileprotectedview", - "displayName": "Always open untrusted text-based files in Protected View (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enableforeigntextfileprotectedview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v3~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_protectedview_l_enableforeigntextfileprotectedview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v4~policy~l_microsoftofficeexcel~l_powerbi_l_disablefrompowerbidatasetorganizationname", - "displayName": "Disable displaying organization name in the buttons to create PivotTables from Power BI datasets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v4~policy~l_microsoftofficeexcel~l_powerbi_l_disablefrompowerbidatasetorganizationname_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v4~policy~l_microsoftofficeexcel~l_powerbi_l_disablefrompowerbidatasetorganizationname_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v5~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation", - "displayName": "Stop checking for table alt text accessibility information (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v5~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v5~policy~l_microsoftofficeexcel~l_filetab~l_checkaccessibility_l_stopcheckingtablealttextaccessibilityinformation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v6~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_xl4killswitchpolicy", - "displayName": "Prevent Excel from running XLM macros (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v6~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_xl4killswitchpolicy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v6~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_xl4killswitchpolicy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v7~policy~l_microsoftofficeexcel~l_miscellaneous168_l_exceldisableofficescripts", - "displayName": "Disable Office Scripts in Excel for Windows Desktop (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v7~policy~l_microsoftofficeexcel~l_miscellaneous168_l_exceldisableofficescripts_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v7~policy~l_microsoftofficeexcel~l_miscellaneous168_l_exceldisableofficescripts_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet", - "displayName": "Block Excel XLL Add-ins that come from an untrusted source (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_l_blockxllfrominternetenum", - "displayName": "", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_l_blockxllfrominternetenum_1", - "displayName": "Block", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_l_blockxllfrominternetenum_0", - "displayName": "Show Additional Warning", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v8~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter_l_blockxllfrominternet_l_blockxllfrominternetenum_2", - "displayName": "Allow", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_excel16v9~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excelfileblockexternallinks", - "displayName": "File Block includes external link files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_excel16v9~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excelfileblockexternallinks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_excel16v9~policy~l_microsoftofficeexcel~l_exceloptions~l_security~l_trustcenter~l_fileblocksettings_l_excelfileblockexternallinks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_experience_allowspotlightcollection", - "displayName": "Allow Spotlight Collection (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_experience_allowtailoredexperienceswithdiagnosticdata", - "displayName": "Allow Tailored Experiences With Diagnostic Data (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_experience_allowtailoredexperienceswithdiagnosticdata_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "user_vendor_msft_policy_config_experience_allowtailoredexperienceswithdiagnosticdata_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_experience_allowthirdpartysuggestionsinwindowsspotlight", - "displayName": "Allow Third Party Suggestions In Windows Spotlight (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_experience_allowthirdpartysuggestionsinwindowsspotlight_0", - "displayName": "Block", - "description": "Third-party suggestions not allowed." - }, - { - "id": "user_vendor_msft_policy_config_experience_allowthirdpartysuggestionsinwindowsspotlight_1", - "displayName": "Allow", - "description": "Third-party suggestions allowed." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlight", - "displayName": "Allow Windows Spotlight (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlight_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlight_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightonactioncenter", - "displayName": "Allow Windows Spotlight On Action Center (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightonactioncenter_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightonactioncenter_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightonsettings", - "displayName": "Allow Windows Spotlight On Settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightonsettings_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightonsettings_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightwindowswelcomeexperience", - "displayName": "Allow Windows Spotlight Windows Welcome Experience (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightwindowswelcomeexperience_0", - "displayName": "Block", - "description": "Not allowed." - }, - { - "id": "user_vendor_msft_policy_config_experience_allowwindowsspotlightwindowswelcomeexperience_1", - "displayName": "Allow", - "description": "Allowed." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen", - "displayName": "Configure Windows Spotlight On Lock Screen (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen_0", - "displayName": "Windows spotlight disabled.", - "description": "Windows spotlight disabled." - }, - { - "id": "user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen_1", - "displayName": "Windows spotlight enabled.", - "description": "Windows spotlight enabled." - }, - { - "id": "user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen_2", - "displayName": "Windows spotlight is always enabled, the user cannot disable it", - "description": "Windows spotlight is always enabled, the user cannot disable it" - }, - { - "id": "user_vendor_msft_policy_config_experience_configurewindowsspotlightonlockscreen_3", - "displayName": "Windows spotlight is always enabled, the user cannot disable it. For special configurations only", - "description": "Windows spotlight is always enabled, the user cannot disable it. For special configurations only" - } - ] - }, - { - "id": "user_vendor_msft_policy_config_experience_enableorganizationalmessages", - "displayName": "Enable delivery of organizational messages (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_experience_enableorganizationalmessages_0", - "displayName": "Disabled", - "description": "Disabled" - }, - { - "id": "user_vendor_msft_policy_config_experience_enableorganizationalmessages_1", - "displayName": "Enabled", - "description": "Enabled" - } - ] - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork", - "displayName": "Allow Option To Show Network (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_0", - "displayName": "Not Allowed.", - "description": "Not Allowed." - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc", - "displayName": "Allow Option To Show This PC (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_0", - "displayName": "Not Allowed.", - "description": "Not Allowed." - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_1", - "displayName": "Allowed.", - "description": "Allowed." - } - ] - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations", - "displayName": "Set Allowed Folder Locations (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_0", - "displayName": "Access to all folder locations.", - "description": "Access to all folder locations." - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_13", - "displayName": "Documents, Pictures, Downloads", - "description": "Documents, Pictures, Downloads" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_15", - "displayName": "Desktop, Documents, Pictures, Downloads", - "description": "Desktop, Documents, Pictures, Downloads" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_31", - "displayName": "Desktop, Documents, Pictures, Downloads, Network", - "description": "Desktop, Documents, Pictures, Downloads, Network" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_47", - "displayName": "This PC, Desktop, Documents, Pictures, Downloads", - "description": "This PC, Desktop, Documents, Pictures, Downloads" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_63", - "displayName": "This PC, Desktop, Documents, Pictures, Downloads, Network", - "description": "This PC, Desktop, Documents, Pictures, Downloads, Network" - } - ] - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations", - "displayName": "Set Allowed Storage Locations (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_0", - "displayName": "Access to all storage locations.", - "description": "Access to all storage locations." - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_1", - "displayName": "Removable Drives", - "description": "Removable Drives" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_2", - "displayName": "Sync roots", - "description": "Sync roots" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_3", - "displayName": "Removable Drives, Sync roots", - "description": "Removable Drives, Sync roots" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_4", - "displayName": "Local Drives", - "description": "Local Drives" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_5", - "displayName": "Removable Drives, Local Drives", - "description": "Removable Drives, Local Drives" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_6", - "displayName": "Sync Roots, Local Drives", - "description": "Sync Roots, Local Drives" - }, - { - "id": "user_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_7", - "displayName": "Removable Drives, Sync Roots, Local Drives", - "description": "Removable Drives, Sync Roots, Local Drives" - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_addsearchprovider", - "displayName": "Add a specific list of search providers to the user's list of search providers (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_addsearchprovider_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_addsearchprovider_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowactivexfiltering", - "displayName": "Turn on ActiveX Filtering (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowaddonlist", - "displayName": "Add-on List (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowaddonlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowaddonlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist", - "displayName": "Add-on List (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_key", - "displayName": "Name", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_value", - "displayName": "Value", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowautocomplete", - "displayName": "Turn on the auto-complete feature for user names and passwords on forms (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowautocomplete_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowautocomplete_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowautocomplete_chkbox_passwordask", - "displayName": "Prompt me to save passwords (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowautocomplete_chkbox_passwordask_0", - "displayName": "False", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowautocomplete_chkbox_passwordask_1", - "displayName": "True", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning", - "displayName": "Turn on certificate address mismatch warning (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit", - "displayName": "Allow deleting browsing history on exit (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode", - "displayName": "Turn on Enhanced Protected Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar", - "displayName": "Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu", - "displayName": "Let users turn on and use Enterprise Mode from the Tools menu (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_enterreportbackprompt", - "displayName": "Type the location (URL) of where to receive reports about the websites for which users turn on and use Enterprise Mode (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist", - "displayName": "Use the Enterprise Mode IE website list (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_entersitelistprompt", - "displayName": "Type the location (URL) of your Enterprise Mode IE website list (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist", - "displayName": "Use Policy List of Internet Explorer 7 sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_compatview_sitelist", - "displayName": "List of sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode", - "displayName": "Turn on Internet Explorer Standards Mode for local intranet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate", - "displayName": "Internet Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate", - "displayName": "Internet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate", - "displayName": "Intranet Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate", - "displayName": "Intranet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate", - "displayName": "Local Machine Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate", - "displayName": "Local Machine Zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate", - "displayName": "Locked-Down Internet Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate", - "displayName": "Locked-Down Internet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate", - "displayName": "Locked-Down Intranet Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate", - "displayName": "Locked-Down Intranet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate", - "displayName": "Locked-Down Local Machine Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate", - "displayName": "Locked-Down Local Machine Zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate", - "displayName": "Locked-Down Restricted Sites Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate", - "displayName": "Locked-Down Restricted Sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowonewordentry", - "displayName": "Go to an intranet site for a one-word entry in the Address bar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowonewordentry_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowonewordentry_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode", - "displayName": "Allow \"Save Target As\" in Internet Explorer mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist", - "displayName": "Site to Zone Assignment List (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt", - "displayName": "Enter the zone assignments here. (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_key", - "displayName": "Name", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_value", - "displayName": "Value", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate", - "displayName": "Locked-Down Trusted Sites Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate", - "displayName": "Locked-Down Trusted Sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid", - "displayName": "Allow software to run or install even if the signature is invalid (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate", - "displayName": "Restricted Sites Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate", - "displayName": "Restricted Sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsuggestedsites", - "displayName": "Turn on Suggested Sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate", - "displayName": "Trusted Sites Zone Template (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate", - "displayName": "Trusted Sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_1", - "displayName": "Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_2", - "displayName": "Medium Low", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_3", - "displayName": "Medium", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_5", - "displayName": "Medium High", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_4", - "displayName": "High", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_autodetectintranet", - "displayName": "Turn on automatic detection of intranet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_autodetectintranet_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_autodetectintranet_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation", - "displayName": "Check for server certificate revocation (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms", - "displayName": "Check for signatures on downloaded programs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel", - "displayName": "Configure which channel of Microsoft Edge to use for opening redirected sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser", - "displayName": "First choice (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_", - "displayName": "", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_1", - "displayName": "Microsoft Edge Stable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_2", - "displayName": "Microsoft Edge Beta version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_3", - "displayName": "Microsoft Edge Dev version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_4", - "displayName": "Microsoft Edge Canary version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_0", - "displayName": "Microsoft Edge version 45 or earlier", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2", - "displayName": "Second choice (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_", - "displayName": "", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_1", - "displayName": "Microsoft Edge Stable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_2", - "displayName": "Microsoft Edge Beta version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_3", - "displayName": "Microsoft Edge Dev version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_4", - "displayName": "Microsoft Edge Canary version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_0", - "displayName": "Microsoft Edge version 45 or earlier", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3", - "displayName": "Third choice (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_", - "displayName": "", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_1", - "displayName": "Microsoft Edge Stable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_2", - "displayName": "Microsoft Edge Beta version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_3", - "displayName": "Microsoft Edge Dev version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_4", - "displayName": "Microsoft Edge Canary version 77 or later", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_0", - "displayName": "Microsoft Edge version 45 or earlier", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses", - "displayName": "Internet Explorer Processes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableactivexversionlistautodownload", - "displayName": "Turn off automatic download of the ActiveX VersionList (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableactivexversionlistautodownload_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableactivexversionlistautodownload_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableadobeflash", - "displayName": "Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableadobeflash_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableadobeflash_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings", - "displayName": "Prevent bypassing SmartScreen Filter warnings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles", - "displayName": "Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecompatview", - "displayName": "Turn off Compatibility View (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecompatview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecompatview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory", - "displayName": "Disable \"Configuring History\" (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_daystokeep_prompt", - "displayName": "Days to keep pages in History (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecrashdetection", - "displayName": "Turn off Crash Detection (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecrashdetection_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecrashdetection_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation", - "displayName": "Prevent participation in the Customer Experience Improvement Program (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites", - "displayName": "Prevent deleting websites that the user has visited (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading", - "displayName": "Prevent downloading of enclosures (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport", - "displayName": "Turn off encryption support (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions", - "displayName": "Secure Protocol combinations (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_0", - "displayName": "Use no secure protocols", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_8", - "displayName": "[Obsolete] Only use SSL 2.0", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_32", - "displayName": "Only use SSL 3.0", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_40", - "displayName": "[Obsolete] Use SSL 2.0 and SSL 3.0", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_128", - "displayName": "Only use TLS 1.0", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_136", - "displayName": "[Obsolete] Use SSL 2.0 and TLS 1.0", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_160", - "displayName": "Use SSL 3.0 and TLS 1.0", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_168", - "displayName": "[Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.0", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_512", - "displayName": "Only use TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_520", - "displayName": "[Obsolete] Use SSL 2.0 and TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_544", - "displayName": "Use SSL 3.0 and TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_552", - "displayName": "[Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_640", - "displayName": "Use TLS 1.0 and TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_648", - "displayName": "[Obsolete] Use SSL 2.0, TLS 1.0, and TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_672", - "displayName": "Use SSL 3.0, TLS 1.0, and TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_680", - "displayName": "[Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2048", - "displayName": "Only use TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2056", - "displayName": "[Obsolete] Use SSL 2.0 and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2080", - "displayName": "Use SSL 3.0 and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2088", - "displayName": "[Obsolete] Use SSL 2.0, SSL 3.0, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2176", - "displayName": "Use TLS 1.0 and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2184", - "displayName": "[Obsolete] Use SSL 2.0, TLS 1.0, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2208", - "displayName": "Use SSL 3.0, TLS 1.0, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2216", - "displayName": "[Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2560", - "displayName": "Use TLS 1.1 and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2568", - "displayName": "[Obsolete] Use SSL 2.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2592", - "displayName": "Use SSL 3.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2600", - "displayName": "[Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2688", - "displayName": "Use TLS 1.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2696", - "displayName": "[Obsolete] Use SSL 2.0, TLS 1.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2720", - "displayName": "Use SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2728", - "displayName": "[Obsolete] Use SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_8192", - "displayName": "Only use TLS 1.3", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10240", - "displayName": "Use TLS 1.2 and TLS 1.3", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10752", - "displayName": "Use TLS 1.1, TLS 1.2, and TLS 1.3", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10880", - "displayName": "Use TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10912", - "displayName": "Use SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync", - "displayName": "Turn off background synchronization for feeds and Web Slices (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard", - "displayName": "Prevent running First Run wizard (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions", - "displayName": "Select your choice (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions_1", - "displayName": "Go directly to home page", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions_2", - "displayName": "Go directly to \"Welcome To IE\" page", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature", - "displayName": "Turn off the flip ahead with page prediction feature (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablegeolocation", - "displayName": "Turn off browser geolocation (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablegeolocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablegeolocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablehomepagechange", - "displayName": "Disable changing home page settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablehomepagechange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablehomepagechange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablehomepagechange_enterhomepageprompt", - "displayName": "Home Page (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablehtmlapplication", - "displayName": "Disable HTML Application (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablehtmlapplication_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablehtmlapplication_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors", - "displayName": "Prevent ignoring certificate errors (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing", - "displayName": "Turn off InPrivate Browsing (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp", - "displayName": "[Deprecated] Disable Internet Explorer 11 as a standalone browser (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2", - "displayName": "Disable Internet Explorer 11 as a standalone browser (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions", - "displayName": "Notify that Internet Explorer 11 browser is disabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_0", - "displayName": "Never", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_1", - "displayName": "Always", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_2", - "displayName": "Once per user", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom", - "displayName": "Disable Internet Explorer 11 Launch Via COM Automation (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode", - "displayName": "Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableproxychange", - "displayName": "Prevent changing proxy settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableproxychange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disableproxychange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange", - "displayName": "Prevent changing the default search provider (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange", - "displayName": "Disable changing secondary home page settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_secondaryhomepageslist", - "displayName": "Secondary home pages (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck", - "displayName": "Turn off the Security Settings Check feature (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete", - "displayName": "Turn off the auto-complete feature for web addresses (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode", - "displayName": "Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols", - "displayName": "Turn off blocking of outdated ActiveX controls for Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains", - "displayName": "Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_domainlist", - "displayName": "Domain allow list (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys", - "displayName": "Enable extended hot keys in Internet Explorer mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode", - "displayName": "Enable global window list in Internet Explorer mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_includealllocalsites", - "displayName": "Intranet Sites: Include all local (intranet) sites not listed in other zones (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_includealllocalsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_includealllocalsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths", - "displayName": "Intranet Sites: Include all network paths (UNCs) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites", - "displayName": "Intranet Sites: Include all sites that bypass the proxy server (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript", - "displayName": "Allow cut, copy or paste operations from the clipboard via script (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407", - "displayName": "Allow paste operations via script (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles", - "displayName": "Allow drag and drop or copy and paste files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802", - "displayName": "Allow drag and drop or copy and paste files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles", - "displayName": "Allow loading of XAML files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402", - "displayName": "XAML Files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols", - "displayName": "Allow only approved domains to use ActiveX controls without prompt (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b", - "displayName": "Only allow approved domains to use ActiveX controls without prompt (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol", - "displayName": "Allow only approved domains to use the TDC ActiveX control (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c", - "displayName": "Only allow approved domains to use the TDC ActiveX control (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols", - "displayName": "Allow scripting of Internet Explorer WebBrowser controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206", - "displayName": "Internet Explorer web browser control (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows", - "displayName": "Allow script-initiated windows without size or position constraints (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102", - "displayName": "Allow script-initiated windows without size or position constraints (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript", - "displayName": "Allow updates to status bar via script (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103", - "displayName": "Status bar updates via script (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer", - "displayName": "Allow VBScript to run in Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c", - "displayName": "Allow VBScript to run in Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols", - "displayName": "Download signed ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001", - "displayName": "Download signed ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols", - "displayName": "Download unsigned ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004", - "displayName": "Download unsigned ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter", - "displayName": "Turn on Cross-Site Scripting Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409", - "displayName": "Turn on Cross-Site Scripting (XSS) Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows", - "displayName": "Enable dragging of content from different domains across windows (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709", - "displayName": "Enable dragging of content from different domains across windows (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows", - "displayName": "Enable dragging of content from different domains within a window (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708", - "displayName": "Enable dragging of content from different domains within a window (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing", - "displayName": "Enable MIME Sniffing (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100", - "displayName": "Enable MIME Sniffing (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode", - "displayName": "Turn on Protected Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500", - "displayName": "Protected Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver", - "displayName": "Include local path when user is uploading files to a server (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a", - "displayName": "Include local directory path when uploading files to a server (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe", - "displayName": "Launching applications and files in an IFRAME (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804", - "displayName": "Launching applications and files in an IFRAME (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode", - "displayName": "Run .NET Framework-reliant components signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001", - "displayName": "Run .NET Framework-reliant components signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles", - "displayName": "Show security warning for potentially unsafe files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806", - "displayName": "Launching programs and unsafe files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker", - "displayName": "Use Pop-up Blocker (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809", - "displayName": "Use Pop-up Blocker (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_jscriptreplacement", - "displayName": "Replace JScript by loading JScript9Legacy in place of JScript. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_jscriptreplacement_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_jscriptreplacement_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer", - "displayName": "Keep all intranet sites in Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses", - "displayName": "Internet Explorer Processes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses", - "displayName": "Internet Explorer Processes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage", - "displayName": "Specify default behavior for a new tab (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions", - "displayName": "New tab behavior (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_3", - "displayName": "New tab page with my news feed", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_0", - "displayName": "about:blank", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_2", - "displayName": "New tab page", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_1", - "displayName": "Home page", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses", - "displayName": "Internet Explorer Processes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter", - "displayName": "Prevent managing SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions", - "displayName": "Select SmartScreen Filter mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_0", - "displayName": "Off", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_1", - "displayName": "On", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols", - "displayName": "Prevent per-user installation of ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses", - "displayName": "Internet Explorer Processes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols", - "displayName": "Remove \"Run this time\" button for outdated ActiveX controls in Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode", - "displayName": "Reset zoom to default for HTML dialogs in Internet Explorer mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses", - "displayName": "Internet Explorer Processes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting", - "displayName": "Allow active scripting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400", - "displayName": "Allow active scripting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors", - "displayName": "Allow binary and script behaviors (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000", - "displayName": "Allow Binary and Script Behaviors (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_65536", - "displayName": "Administrator approved", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript", - "displayName": "Allow cut, copy or paste operations from the clipboard via script (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407", - "displayName": "Allow paste operations via script (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles", - "displayName": "Allow drag and drop or copy and paste files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802", - "displayName": "Allow drag and drop or copy and paste files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads", - "displayName": "Allow file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803", - "displayName": "Allow file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles", - "displayName": "Allow loading of XAML files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402", - "displayName": "XAML Files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh", - "displayName": "Allow META REFRESH (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608", - "displayName": "Allow META REFRESH (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols", - "displayName": "Allow only approved domains to use ActiveX controls without prompt (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b", - "displayName": "Only allow approved domains to use ActiveX controls without prompt (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol", - "displayName": "Allow only approved domains to use the TDC ActiveX control (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c", - "displayName": "Only allow approved domains to use the TDC ActiveX control (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols", - "displayName": "Allow scripting of Internet Explorer WebBrowser controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206", - "displayName": "Internet Explorer web browser control (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows", - "displayName": "Allow script-initiated windows without size or position constraints (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102", - "displayName": "Allow script-initiated windows without size or position constraints (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript", - "displayName": "Allow updates to status bar via script (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103", - "displayName": "Status bar updates via script (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer", - "displayName": "Allow VBScript to run in Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c", - "displayName": "Allow VBScript to run in Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols", - "displayName": "Download signed ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001", - "displayName": "Download signed ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols", - "displayName": "Download unsigned ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004", - "displayName": "Download unsigned ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter", - "displayName": "Turn on Cross-Site Scripting Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409", - "displayName": "Turn on Cross-Site Scripting (XSS) Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows", - "displayName": "Enable dragging of content from different domains across windows (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709", - "displayName": "Enable dragging of content from different domains across windows (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows", - "displayName": "Enable dragging of content from different domains within a window (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708", - "displayName": "Enable dragging of content from different domains within a window (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing", - "displayName": "Enable MIME Sniffing (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100", - "displayName": "Enable MIME Sniffing (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver", - "displayName": "Include local path when user is uploading files to a server (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a", - "displayName": "Include local directory path when uploading files to a server (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe", - "displayName": "Launching applications and files in an IFRAME (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804", - "displayName": "Launching applications and files in an IFRAME (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins", - "displayName": "Run ActiveX controls and plugins (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200", - "displayName": "Run ActiveX controls and plugins (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_65536", - "displayName": "Administrator approved", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode", - "displayName": "Run .NET Framework-reliant components signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001", - "displayName": "Run .NET Framework-reliant components signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting", - "displayName": "Script ActiveX controls marked safe for scripting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405", - "displayName": "Script ActiveX controls marked safe for scripting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets", - "displayName": "Scripting of Java applets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402", - "displayName": "Scripting of Java applets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles", - "displayName": "Show security warning for potentially unsafe files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806", - "displayName": "Launching programs and unsafe files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode", - "displayName": "Turn on Protected Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500", - "displayName": "Protected Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker", - "displayName": "Use Pop-up Blocker (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809", - "displayName": "Use Pop-up Blocker (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses", - "displayName": "Internet Explorer Processes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses", - "displayName": "Internet Explorer Processes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_searchproviderlist", - "displayName": "Restrict search providers to a specific list (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_searchproviderlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_searchproviderlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge", - "displayName": "Send all sites not included in the Enterprise Mode Site List to Microsoft Edge. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice", - "displayName": "Specify use of ActiveX Installer Service for installation of ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406", - "displayName": "Access data sources across domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201", - "displayName": "Automatic prompting for ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200", - "displayName": "Automatic prompting for file downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604", - "displayName": "Allow font downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101", - "displayName": "Web sites in less privileged Web content zones can navigate into this zone (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004", - "displayName": "Run .NET Framework-reliant components not signed with Authenticode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets", - "displayName": "Allow scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209", - "displayName": "Scriptlets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie", - "displayName": "Turn on SmartScreen Filter scan (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301", - "displayName": "Use SmartScreen Filter (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606", - "displayName": "Userdata persistence (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_3", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c", - "displayName": "Don't run antimalware programs against ActiveX controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0", - "displayName": "Disable", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201", - "displayName": "Initialize and script ActiveX controls not marked as safe (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00", - "displayName": "Java permissions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_65536", - "displayName": "High safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_131072", - "displayName": "Medium safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_196608", - "displayName": "Low safety", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_8388608", - "displayName": "Custom", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_0", - "displayName": "Disable Java", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00", - "displayName": "Logon options (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_196608", - "displayName": "Anonymous logon", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_131072", - "displayName": "Automatic logon only in Intranet zone", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_0", - "displayName": "Automatic logon with current username and password", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_65536", - "displayName": "Prompt for user name and password", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607", - "displayName": "Navigate windows and frames across different domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_0", - "displayName": "Enable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_3", - "displayName": "Disable", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_1", - "displayName": "Prompt", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_blockedurlexceptions", - "displayName": "Blocked Url Exceptions (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_blockedurls", - "displayName": "Blocked Urls (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_defaulturl", - "displayName": "Default URL (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton", - "displayName": "Enable End Session Button (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enablehomebutton", - "displayName": "Enable Home Button (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enablehomebutton_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enablehomebutton_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons", - "displayName": "Enable Navigation Buttons (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_1", - "displayName": "Enable", - "description": "Enable" - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_0", - "displayName": "Disable", - "description": "Disable" - } - ] - }, - { - "id": "user_vendor_msft_policy_config_kioskbrowser_restartonidletime", - "displayName": "Restart On Idle Time (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1", - "displayName": "Specify server (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1_l_serveraddressexternal_value", - "displayName": "DNS name of the external server (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1_l_serveraddressinternal_value", - "displayName": "DNS name of the internal server (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1", - "displayName": "Additional server versions supported (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1_l_configuredservercheckvalues_value", - "displayName": "Server version names (semicolon separated list): (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1", - "displayName": "Disable automatic upload of sign-in failure logs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1", - "displayName": "Disable HTTP fallback for SIP connection (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1", - "displayName": "Require logon credentials (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1", - "displayName": "Disable server version check (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1", - "displayName": "Enable using BITS to download Address Book Service files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1", - "displayName": "Configure SIP security mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1", - "displayName": "Global Address Book Download Initial Delay (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1_l_galdownloadinitialdelay_value", - "displayName": "Maximum possible number of minutes to delay download: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1", - "displayName": "Prevent users from running Microsoft Lync (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1", - "displayName": "Allow storage of user passwords (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1", - "displayName": "Configure SIP compression mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression", - "displayName": "Configure SIP compression mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression_0", - "displayName": "Always disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression_1", - "displayName": "Always enabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression_2", - "displayName": "Based on adaptor speed (default)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1_l_policysipcompression_3", - "displayName": "Based on ping round-trip time", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1", - "displayName": "Trusted Domain List (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1_l_trustmodeldata_value", - "displayName": "Trusted Domains (comma separated list): (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder", - "displayName": "Configure the location of the browser executable folder (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc", - "displayName": "Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc_key", - "displayName": "Name", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc_value", - "displayName": "Value", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference", - "displayName": "Set the release channel search order preference (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc", - "displayName": "Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_key", - "displayName": "Name", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_value", - "displayName": "Value", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2", - "displayName": "Retrieve configurations and experiments", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1", - "displayName": "Retrieve configurations only", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0", - "displayName": "Disable communication with the Experimentation and Configuration Service", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled", - "displayName": "Controls whether unload event handlers can be disabled. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist", - "displayName": "HTTP Allowlist (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc", - "displayName": "HTTP Allowlist (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_key", - "displayName": "Name", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_value", - "displayName": "Value", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed", - "displayName": "Allows enabling the feature NewBaseUrlInheritanceBehavior (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list", - "displayName": "Enable built-in PDF reader powered by Adobe Acrobat for WebView2 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc", - "displayName": "Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_key", - "displayName": "Name", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_value", - "displayName": "Value", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled", - "displayName": "Check RSA key usage for server certificates issued by local trust anchors (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory", - "displayName": "Enable deleting browser and download history (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs", - "displayName": "Allow file selection dialogs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally", - "displayName": "Always open PDF files externally (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue", - "displayName": "Set application locale (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_applicationlocalevalue", - "displayName": "Application locale (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed", - "displayName": "Allow or block audio capture (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls", - "displayName": "Sites that can access audio capture devices without requesting permission (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_audiocaptureallowedurlsdesc", - "displayName": "Sites that can access audio capture devices without requesting permission (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled", - "displayName": "Enable AutoFill for addresses (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled", - "displayName": "Enable AutoFill for payment instruments (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun", - "displayName": "Automatically import another browser's data and settings at first run (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun", - "displayName": "Automatically import another browser's data and settings at first run (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_0", - "displayName": "Automatically imports all supported datatypes and settings from the default browser", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_1", - "displayName": "Automatically imports all supported datatypes and settings from Internet Explorer", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_2", - "displayName": "Automatically imports all supported datatypes and settings from Google Chrome", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_3", - "displayName": "Automatically imports all supported datatypes and settings from Safari", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_4", - "displayName": "Disables automatic import, and the import section of the first-run experience is skipped", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled", - "displayName": "Continue running background apps after Microsoft Edge closes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies", - "displayName": "Block third party cookies (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled", - "displayName": "Enable profile creation from the Identity flyout menu or the Settings page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled", - "displayName": "Enable guest mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled", - "displayName": "Allow queries to a Browser Network Time service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin", - "displayName": "Browser sign-in settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin", - "displayName": "Browser sign-in settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_0", - "displayName": "Disable browser sign-in", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_1", - "displayName": "Enable browser sign-in", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_2", - "displayName": "Force users to sign-in to use the browser", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled", - "displayName": "Use built-in DNS client (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas", - "displayName": "Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_certificatetransparencyenforcementdisabledforcasdesc", - "displayName": "Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas", - "displayName": "Disable Certificate Transparency enforcement for a list of legacy certificate authorities (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_certificatetransparencyenforcementdisabledforlegacycasdesc", - "displayName": "Disable Certificate Transparency enforcement for a list of legacy certificate authorities (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls", - "displayName": "Disable Certificate Transparency enforcement for specific URLs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_certificatetransparencyenforcementdisabledforurlsdesc", - "displayName": "Disable Certificate Transparency enforcement for specific URLs (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled", - "displayName": "Enable component updates in Microsoft Edge (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack", - "displayName": "Configure Do Not Track (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech", - "displayName": "Configure Online Text To Speech (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability", - "displayName": "Control where developer tools can be used (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability", - "displayName": "Control where developer tools can be used (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_0", - "displayName": "Block the developer tools on extensions installed by enterprise policy, allow in other contexts", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_1", - "displayName": "Allow using the developer tools", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_2", - "displayName": "Don't allow using the developer tools", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis", - "displayName": "Disable support for 3D graphics APIs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots", - "displayName": "Disable taking screenshots (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir", - "displayName": "Set disk cache directory (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_diskcachedir", - "displayName": "Set disk cache directory (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize", - "displayName": "Set disk cache size, in bytes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_diskcachesize", - "displayName": "Set disk cache size: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory", - "displayName": "Set download directory (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_downloaddirectory", - "displayName": "Set download directory (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions", - "displayName": "Allow download restrictions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions", - "displayName": "Download restrictions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1", - "displayName": "Block dangerous downloads", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2", - "displayName": "Block potentially dangerous downloads", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled", - "displayName": "Allows users to edit favorites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures", - "displayName": "Re-enable deprecated web platform features for a limited time (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_enabledeprecatedwebplatformfeaturesdesc", - "displayName": "Re-enable deprecated web platform features for a limited time (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload", - "displayName": "Enable Domain Actions Download from Microsoft (deprecated) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks", - "displayName": "Enable online OCSP/CRL checks (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol", - "displayName": "Control communication with the Experimentation and Configuration Service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2", - "displayName": "Retrieve configurations and experiments", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1", - "displayName": "Retrieve configurations only", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0", - "displayName": "Disable communication with the Experimentation and Configuration Service", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled", - "displayName": "Enable favorites bar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch", - "displayName": "Enforce Bing SafeSearch (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch", - "displayName": "Enforce Bing SafeSearch (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_0", - "displayName": "Don't configure search restrictions in Bing", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_1", - "displayName": "Configure moderate search restrictions in Bing", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_2", - "displayName": "Configure strict search restrictions in Bing", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles", - "displayName": "Enable use of ephemeral profiles (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch", - "displayName": "Enforce Google SafeSearch (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict", - "displayName": "Force minimum YouTube Restricted Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict", - "displayName": "Force minimum YouTube Restricted Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_0", - "displayName": "Do not enforce Restricted Mode on YouTube", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_1", - "displayName": "Enforce at least Moderate Restricted Mode on YouTube", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_2", - "displayName": "Enforce Strict Restricted Mode for YouTube", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed", - "displayName": "Allow full screen mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled", - "displayName": "Use hardware acceleration when available (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata", - "displayName": "Allow importing of autofill form data (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites", - "displayName": "Allow importing of favorites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory", - "displayName": "Allow importing of browsing history (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage", - "displayName": "Allow importing of home page settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo", - "displayName": "Allow importing of payment info (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords", - "displayName": "Allow importing of saved passwords (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine", - "displayName": "Allow importing of search engine settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability", - "displayName": "Configure InPrivate mode availability (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability", - "displayName": "Configure InPrivate mode availability (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_0", - "displayName": "InPrivate mode available", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_1", - "displayName": "InPrivate mode disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_2", - "displayName": "InPrivate mode forced", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel", - "displayName": "Configure Internet Explorer integration (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel", - "displayName": "Configure Internet Explorer integration (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_1", - "displayName": "Internet Explorer mode", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_2", - "displayName": "Internet Explorer 11", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins", - "displayName": "Enable site isolation for specific origins (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_isolateorigins", - "displayName": "Enable site isolation for specific origins (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites", - "displayName": "Configure favorites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_managedfavorites", - "displayName": "Configure favorites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines", - "displayName": "Manage Search Engines (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_managedsearchengines", - "displayName": "Manage Search Engines (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy", - "displayName": "Maximum number of concurrent connections to the proxy server (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_maxconnectionsperproxy", - "displayName": "Maximum number of concurrent connections to the proxy server: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips", - "displayName": "Allow Google Cast to connect to Cast devices on all IP addresses (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled", - "displayName": "Enable usage and crash-related data reporting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions", - "displayName": "Enable network prediction (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions", - "displayName": "Enable network prediction (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_0", - "displayName": "Predict network actions on any network connection", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_1", - "displayName": "Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_2", - "displayName": "Don't predict network actions on any network connection", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin", - "displayName": "Control where security restrictions on insecure origins apply (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_overridesecurityrestrictionsoninsecureorigindesc", - "displayName": "Control where security restrictions on insecure origins apply (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled", - "displayName": "Enable Proactive Authentication (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled", - "displayName": "Enable full-tab promotional content (deprecated) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation", - "displayName": "Ask where to save downloaded files (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed", - "displayName": "Allow QUIC protocol (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended", - "displayName": "Set application locale (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_applicationlocalevalue", - "displayName": "Application locale (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended", - "displayName": "Enable AutoFill for addresses (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended", - "displayName": "Enable AutoFill for credit cards (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended", - "displayName": "Continue running background apps after Microsoft Edge closes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended", - "displayName": "Block third party cookies (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended", - "displayName": "Set download directory (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_downloaddirectory", - "displayName": "Set download directory (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended", - "displayName": "Allow download restrictions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions", - "displayName": "Download restrictions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1", - "displayName": "Block dangerous downloads", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2", - "displayName": "Block potentially dangerous downloads", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended", - "displayName": "Enable favorites bar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended", - "displayName": "Allow importing of autofill form data (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended", - "displayName": "Allow importing of favorites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended", - "displayName": "Allow importing of browsing history (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended", - "displayName": "Allow importing of payment info (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended", - "displayName": "Allow importing of saved passwords (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended", - "displayName": "Allow importing of search engine settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended", - "displayName": "Enable network prediction (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions", - "displayName": "Enable network prediction (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_0", - "displayName": "Predict network actions on any network connection", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_1", - "displayName": "Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_2", - "displayName": "Don't predict network actions on any network connection", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended", - "displayName": "Enable resolution of navigation errors using a web service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended", - "displayName": "Enable search suggestions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended", - "displayName": "Disable synchronization of data using Microsoft sync services (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended", - "displayName": "Enable Translate (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended", - "displayName": "Register protocol handlers (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_registeredprotocolhandlers", - "displayName": "Register protocol handlers (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended", - "displayName": "Enable saving passwords to the password manager (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended", - "displayName": "Print headers and footers (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended", - "displayName": "Set the system default printer as the default printer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended", - "displayName": "Configure Microsoft Defender SmartScreen (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended", - "displayName": "Set the new tab page as the home page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended", - "displayName": "Configure the home page URL (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_homepagelocation", - "displayName": "Home page URL (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended", - "displayName": "Configure the new tab page URL (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_newtabpagelocation", - "displayName": "New tab page URL (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended", - "displayName": "Action to take on Microsoft Edge startup (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup", - "displayName": "Action to take on startup (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5", - "displayName": "Open a new tab", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1", - "displayName": "Restore the last session", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4", - "displayName": "Open a list of URLs", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended", - "displayName": "Sites to open when the browser starts (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_restoreonstartupurlsdesc", - "displayName": "Sites to open when the browser starts (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended", - "displayName": "Show Home button on toolbar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification", - "displayName": "Notify a user that a browser restart is recommended or required for pending updates (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification", - "displayName": "Notify a user that a browser restart is recommended or required for pending updates (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_1", - "displayName": "Recommended - Show a recurring prompt to the user indicating that a restart is recommended", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_2", - "displayName": "Required - Show a recurring prompt to the user indicating that a restart is required", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod", - "displayName": "Set the time period for update notifications (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_relaunchnotificationperiod", - "displayName": "Set the time period for update notifications: (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors", - "displayName": "Specify if online OCSP/CRL checks are required for local trust anchors (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice", - "displayName": "Enable resolution of navigation errors using a web service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern", - "displayName": "Restrict which accounts can be used to sign in to Microsoft Edge (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_restrictsignintopattern", - "displayName": "Restrict which accounts can be used as Microsoft Edge primary accounts (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode", - "displayName": "Extend Adobe Flash content setting to all content (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled", - "displayName": "Disable saving browser history (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled", - "displayName": "Enable search suggestions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation", - "displayName": "Websites or domains that don't need permission to use direct Security Key attestation (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_securitykeypermitattestationdesc", - "displayName": "Websites or domains that don't need permission to use direct Security Key attestation (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer", - "displayName": "Send all intranet sites to Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices", - "displayName": "Send site information to improve Microsoft services (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar", - "displayName": "Show Microsoft Office shortcut in favorites bar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess", - "displayName": "Enable site isolation for every site (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled", - "displayName": "Enable spellcheck (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage", - "displayName": "Enable specific spellcheck languages (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_spellchecklanguagedesc", - "displayName": "Enable specific spellcheck languages (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed", - "displayName": "Allow users to proceed from the HTTPS warning page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin", - "displayName": "Minimum TLS version enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin", - "displayName": "Minimum SSL version enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1", - "displayName": "TLS 1.0", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.1", - "displayName": "TLS 1.1", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.2", - "displayName": "TLS 1.2", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning", - "displayName": "Suppress the unsupported OS warning (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled", - "displayName": "Disable synchronization of data using Microsoft sync services (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled", - "displayName": "Configure tab lifecycles (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled", - "displayName": "Enable ending processes in the Browser task manager (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled", - "displayName": "Enable Translate (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist", - "displayName": "Define a list of allowed URLs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_urlallowlistdesc", - "displayName": "Define a list of allowed URLs (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist", - "displayName": "Block access to a list of URLs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_urlblocklistdesc", - "displayName": "Block access to a list of URLs (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir", - "displayName": "Set the user data directory (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_userdatadir", - "displayName": "Set the user data directory (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed", - "displayName": "Allow user feedback (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed", - "displayName": "Allow or block video capture (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls", - "displayName": "Sites that can access video capture devices without requesting permission (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_videocaptureallowedurlsdesc", - "displayName": "Sites that can access video capture devices without requesting permission (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies", - "displayName": "Allow WebDriver to Override Incompatible Policies (deprecated) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling", - "displayName": "Restrict exposure of local IP address by WebRTC (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling", - "displayName": "Restrict exposure of localhost IP address by WebRTC (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default", - "displayName": "Allow all interfaces. This exposes the local IP address", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_and_private_interfaces", - "displayName": "Allow public and private interfaces over http default route. This exposes the local IP address", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_interface_only", - "displayName": "Allow public interface over http default route. This doesn't expose the local IP address", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_disable_non_proxied_udp", - "displayName": "Use TCP unless proxy server supports UDP. This doesn't expose the local IP address", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange", - "displayName": "Restrict the range of local UDP ports used by WebRTC (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_webrtcudpportrange", - "displayName": "Restrict the range of local UDP ports used by WebRTC (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled", - "displayName": "Set WPAD optimization (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls", - "displayName": "Automatically select client certificates for these sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_autoselectcertificateforurlsdesc", - "displayName": "Automatically select client certificates for these sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls", - "displayName": "Allow cookies on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_cookiesallowedforurlsdesc", - "displayName": "Allow cookies on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls", - "displayName": "Block cookies on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_cookiesblockedforurlsdesc", - "displayName": "Block cookies on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls", - "displayName": "Limit cookies from specific websites to the current session (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_cookiessessiononlyforurlsdesc", - "displayName": "Limit cookies from specific websites to the current session (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting", - "displayName": "Configure cookies (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting", - "displayName": "Configure cookies (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_1", - "displayName": "Let all sites create cookies", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_2", - "displayName": "Don't let any site create cookies", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_4", - "displayName": "Keep cookies for the duration of the session", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting", - "displayName": "Default geolocation setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting", - "displayName": "Default geolocation setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_1", - "displayName": "Allow sites to track users' physical location", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_2", - "displayName": "Don't allow any site to track users' physical location", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_3", - "displayName": "Ask whenever a site wants to track users' physical location", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting", - "displayName": "Default images setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting", - "displayName": "Default images setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_1", - "displayName": "Allow all sites to show all images", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_2", - "displayName": "Don't allow any site to show images", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting", - "displayName": "Default JavaScript setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting", - "displayName": "Default JavaScript setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_1", - "displayName": "Allow all sites to run JavaScript", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_2", - "displayName": "Don't allow any site to run JavaScript", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting", - "displayName": "Default notification setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting", - "displayName": "Default notification setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_1", - "displayName": "Allow sites to show desktop notifications", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_2", - "displayName": "Don't allow any site to show desktop notifications", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_3", - "displayName": "Ask every time a site wants to show desktop notifications", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting", - "displayName": "Default Adobe Flash setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting", - "displayName": "Default Adobe Flash setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_2", - "displayName": "Block the Adobe Flash plugin", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_3", - "displayName": "Click to play", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting", - "displayName": "Default pop-up window setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting", - "displayName": "Default pop-up window setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_1", - "displayName": "Allow all sites to show pop-ups", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_2", - "displayName": "Do not allow any site to show popups", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting", - "displayName": "Control use of the Web Bluetooth API (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting", - "displayName": "Control use of the Web Bluetooth API (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_2", - "displayName": "Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_3", - "displayName": "Allow sites to ask the user to grant access to a nearby Bluetooth device", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting", - "displayName": "Control use of the WebUSB API (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting", - "displayName": "Control use of the WebUSB API (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_2", - "displayName": "Do not allow any site to request access to USB devices via the WebUSB API", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_3", - "displayName": "Allow sites to ask the user to grant access to a connected USB device", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls", - "displayName": "Allow images on these sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_imagesallowedforurlsdesc", - "displayName": "Allow images on these sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls", - "displayName": "Block images on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_imagesblockedforurlsdesc", - "displayName": "Block images on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls", - "displayName": "Allow JavaScript on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_javascriptallowedforurlsdesc", - "displayName": "Allow JavaScript on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls", - "displayName": "Block JavaScript on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_javascriptblockedforurlsdesc", - "displayName": "Block JavaScript on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls", - "displayName": "Allow notifications on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_notificationsallowedforurlsdesc", - "displayName": "Allow notifications on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls", - "displayName": "Block notifications on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_notificationsblockedforurlsdesc", - "displayName": "Block notifications on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls", - "displayName": "Allow the Adobe Flash plug-in on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_pluginsallowedforurlsdesc", - "displayName": "Allow the Adobe Flash plug-in on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls", - "displayName": "Block the Adobe Flash plug-in on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_pluginsblockedforurlsdesc", - "displayName": "Block the Adobe Flash plug-in on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls", - "displayName": "Allow pop-up windows on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_popupsallowedforurlsdesc", - "displayName": "Allow pop-up windows on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls", - "displayName": "Block pop-up windows on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_popupsblockedforurlsdesc", - "displayName": "Block pop-up windows on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls", - "displayName": "Grant access to specific sites to connect to specific USB devices (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_webusballowdevicesforurls", - "displayName": "Grant access to specific sites to connect to specific USB devices (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls", - "displayName": "Allow WebUSB on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_webusbaskforurlsdesc", - "displayName": "Allow WebUSB on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls", - "displayName": "Block WebUSB on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_webusbblockedforurlsdesc", - "displayName": "Block WebUSB on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled", - "displayName": "Enable the default search provider (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings", - "displayName": "Default search provider encodings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_defaultsearchproviderencodingsdesc", - "displayName": "Default search provider encodings (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl", - "displayName": "Specifies the search-by-image feature for the default search provider (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_defaultsearchproviderimageurl", - "displayName": "Specifies the search-by-image feature for the default search provider (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams", - "displayName": "Parameters for an image URL that uses POST (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_defaultsearchproviderimageurlpostparams", - "displayName": "Parameters for an image URL that uses POST (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword", - "displayName": "Default search provider keyword (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_defaultsearchproviderkeyword", - "displayName": "Default search provider keyword (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername", - "displayName": "Default search provider name (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_defaultsearchprovidername", - "displayName": "Default search provider name (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl", - "displayName": "Default search provider search URL (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_defaultsearchprovidersearchurl", - "displayName": "Default search provider search URL (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl", - "displayName": "Default search provider URL for suggestions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_defaultsearchprovidersuggesturl", - "displayName": "Default search provider URL for suggestions (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes", - "displayName": "Configure allowed extension types (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_extensionallowedtypesdesc", - "displayName": "Types of extensions/apps that are allowed to be installed (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist", - "displayName": "Allow specific extensions to be installed (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_extensioninstallallowlistdesc", - "displayName": "Extension IDs to exempt from the block list (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist", - "displayName": "Control which extensions cannot be installed (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_extensioninstallblocklistdesc", - "displayName": "Extension IDs the user should be prevented from installing (or * for all) (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist", - "displayName": "Control which extensions are installed silently (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_extensioninstallforcelistdesc", - "displayName": "Extension/App IDs and update URLs to be silently installed (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources", - "displayName": "Configure extension and user script install sources (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_extensioninstallsourcesdesc", - "displayName": "URL patterns to allow extension, app, and user script installs from (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings", - "displayName": "Configure extension management settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_extensionsettings", - "displayName": "Configure extension management settings (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter", - "displayName": "Enable Google Cast (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar", - "displayName": "Show the cast icon in the toolbar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt", - "displayName": "Allow cross-origin HTTP Basic Auth prompts (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist", - "displayName": "Specifies a list of servers that Microsoft Edge can delegate user credentials to (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_authnegotiatedelegateallowlist", - "displayName": "Specifies a list of servers that Microsoft Edge can delegate user credentials to (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes", - "displayName": "Supported authentication schemes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_authschemes", - "displayName": "Supported authentication schemes (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist", - "displayName": "Configure list of allowed authentication servers (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_authserverallowlist", - "displayName": "Configure list of allowed authentication servers (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup", - "displayName": "Disable CNAME lookup when negotiating Kerberos authentication (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport", - "displayName": "Include non-standard port in Kerberos SPN (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist", - "displayName": "Control which native messaging hosts users can use (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_nativemessagingallowlistdesc", - "displayName": "Names of the native messaging hosts to exempt from the block list (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist", - "displayName": "Configure native messaging block list (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_nativemessagingblocklistdesc", - "displayName": "Names of the forbidden native messaging hosts (or * for all) (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts", - "displayName": "Allow user-level native messaging hosts (installed without admin permissions) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled", - "displayName": "Enable saving passwords to the password manager (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl", - "displayName": "Configure the change password URL (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_passwordprotectionchangepasswordurl", - "displayName": "Configure the change password URL (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls", - "displayName": "Configure the list of enterprise login URLs where password protection service should capture fingerprint of password (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_passwordprotectionloginurlsdesc", - "displayName": "Configure the list of enterprise login URLs where password protection service should capture fingerprint of password (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger", - "displayName": "Configure password protection warning trigger (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger", - "displayName": "Configure password protection warning trigger (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_0", - "displayName": "Password protection warning is off", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_1", - "displayName": "Password protection warning is triggered by password reuse", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection", - "displayName": "Default printer selection rules (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_defaultprinterselection", - "displayName": "Default printer selection rules (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter", - "displayName": "Print headers and footers (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled", - "displayName": "Enable printing (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter", - "displayName": "Set the system default printer as the default printer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog", - "displayName": "Print using system print dialog (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist", - "displayName": "Configure proxy bypass rules (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_proxybypasslist", - "displayName": "Comma-separated list of proxy bypass rules (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode", - "displayName": "Configure proxy server settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode", - "displayName": "Configure proxy server settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_direct", - "displayName": "Never use a proxy", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_auto_detect", - "displayName": "Auto detect proxy settings", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_pac_script", - "displayName": "Use a .pac proxy script", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_fixed_servers", - "displayName": "Use fixed proxy servers", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_system", - "displayName": "Use system proxy settings", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl", - "displayName": "Set the proxy .pac file URL (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_proxypacurl", - "displayName": "Set the proxy .pac file URL (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver", - "displayName": "Configure address or URL of proxy server (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_proxyserver", - "displayName": "Configure address or URL of proxy server (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings", - "displayName": "Proxy settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_proxysettings", - "displayName": "Proxy settings (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride", - "displayName": "Prevent bypassing Microsoft Defender SmartScreen prompts for sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles", - "displayName": "Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains", - "displayName": "Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_smartscreenallowlistdomainsdesc", - "displayName": "Configure the list of domains for which SmartScreen won't trigger warnings (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled", - "displayName": "Configure Microsoft Defender SmartScreen (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage", - "displayName": "Set the new tab page as the home page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation", - "displayName": "Configure the home page URL (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_homepagelocation", - "displayName": "Home page URL (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites", - "displayName": "Hide the default top sites from the new tab page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation", - "displayName": "Configure the new tab page URL (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_newtabpagelocation", - "displayName": "New tab page URL (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup", - "displayName": "Action to take on Microsoft Edge startup (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup", - "displayName": "Action to take on startup (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_5", - "displayName": "Open a new tab", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_1", - "displayName": "Restore the last session", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_4", - "displayName": "Open a list of URLs", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls", - "displayName": "Sites to open when the browser starts (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_restoreonstartupurlsdesc", - "displayName": "Sites to open when the browser starts (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton", - "displayName": "Show Home button on toolbar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions", - "displayName": "Allow download restrictions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions", - "displayName": "Download restrictions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1", - "displayName": "Block malicious downloads and dangerous file types", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2", - "displayName": "Block potentially dangerous or unwanted downloads and dangerous file types", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_4", - "displayName": "Block malicious downloads", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended", - "displayName": "Allow download restrictions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions", - "displayName": "Download restrictions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0", - "displayName": "No special restrictions", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1", - "displayName": "Block malicious downloads and dangerous file types", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2", - "displayName": "Block potentially dangerous or unwanted downloads and dangerous file types", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3", - "displayName": "Block all downloads", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_4", - "displayName": "Block malicious downloads", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled", - "displayName": "Configure if the ads transparency feature is enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled", - "displayName": "Hide restore pages dialog after browser crash (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode", - "displayName": "Secure mode and Certificate-based Digital Signature validation in native PDF reader (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates", - "displayName": "Prompt the user to select a certificate when multiple certificates match (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting", - "displayName": "Control use of the WebHID API (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting", - "displayName": "Control use of the WebHID API (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_2", - "displayName": "Do not allow any site to request access to HID devices via the WebHID API", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_3", - "displayName": "Allow sites to ask the user to grant access to a HID device", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls", - "displayName": "Allow the WebHID API on these sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_webhidaskforurlsdesc", - "displayName": "Allow the WebHID API on these sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls", - "displayName": "Block the WebHID API on these sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_webhidblockedforurlsdesc", - "displayName": "Block the WebHID API on these sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts", - "displayName": "Configure the list of commands for which to disable keyboard shortcuts (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_configurekeyboardshortcuts", - "displayName": "Configure the list of commands for which to disable keyboard shortcuts (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled", - "displayName": "Allow features to download assets from the Asset Delivery Service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas", - "displayName": "Allow Save page as in Internet Explorer mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended", - "displayName": "Allow features to download assets from the Asset Delivery Service (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended", - "displayName": "Allow users to configure Site safety services (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended", - "displayName": "Configure default state of Allow extensions from other stores setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled", - "displayName": "Allow users to configure Site safety services (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled", - "displayName": "Default Profile Setting Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_edgedefaultprofileenabled", - "displayName": "Default Profile Setting Enabled (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled", - "displayName": "Swipe gestures in Microsoft Edge kiosk mode enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled", - "displayName": "Enable the network service sandbox (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled", - "displayName": "Allow users to access the Outlook menu (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended", - "displayName": "Allow users to access the Outlook menu (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled", - "displayName": "Control Javascript setTimeout() function minimum timeout (deprecated) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled", - "displayName": "Control the User-Agent Client Hints GREASE Update feature (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins", - "displayName": "List of origins that allow all HTTP authentication (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_allhttpauthschemesallowedfororiginsdesc", - "displayName": "List of origins that allow all HTTP authentication (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay", - "displayName": "Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed", - "displayName": "Live captions allowed (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled", - "displayName": "Origin-keyed agent clustering enabled by default (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled", - "displayName": "Guided Switch Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps", - "displayName": "Define domains allowed to access Google Workspace (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_alloweddomainsforapps", - "displayName": "Define domains allowed to access Google Workspace (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled", - "displayName": "Get user confirmation before closing a browser window with multiple tabs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting", - "displayName": "Configure browser process code integrity guard setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting", - "displayName": "Configure browser process code integrity guard setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_0", - "displayName": "Do not enable code integrity guard in the browser process.", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_1", - "displayName": "Enable code integrity guard audit mode in the browser process.", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_2", - "displayName": "Enable code integrity guard enforcement in the browser process.", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled", - "displayName": "Double Click feature in Microsoft Edge enabled (only available in China) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled", - "displayName": "Enable Drop feature in Microsoft Edge (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch", - "displayName": "Allow import of data from other browsers on each Microsoft Edge launch (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled", - "displayName": "XFA support in native PDF reader enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu", - "displayName": "Enables Microsoft Edge mini menu (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended", - "displayName": "Get user confirmation before closing a browser window with multiple tabs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended", - "displayName": "Enables Microsoft Edge mini menu (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled", - "displayName": "Text prediction enabled by default (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled", - "displayName": "Restrict the length of passwords that can be saved in the Password Manager (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings", - "displayName": "Disable download file type extension-based warnings for specified file types on domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_exemptfiletypedownloadwarnings", - "displayName": "Disable download file type extension-based warnings for specified file types on domains (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload", - "displayName": "Wait for Internet Explorer mode tabs to completely unload before ending the browser session (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled", - "displayName": "Spell checking provided by Microsoft Editor (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled", - "displayName": "Synonyms are provided when using Microsoft Editor spell checker (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended", - "displayName": "Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat", - "displayName": "Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_1", - "displayName": "The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_3", - "displayName": "Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_4", - "displayName": "Coming soon. If set, behaves the same as 'Plain URL'.", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled", - "displayName": "JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture", - "displayName": "Always use the OS capture engine to avoid issues with capturing Internet Explorer mode tabs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended", - "displayName": "Efficiency mode enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended", - "displayName": "Enable efficiency mode when the device is connected to a power source (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled", - "displayName": "Efficiency mode enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled", - "displayName": "Enable efficiency mode when the device is connected to a power source (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault", - "displayName": "Print PDF as Image Default (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet", - "displayName": "Enhanced Security Mode configuration for Intranet zone sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled", - "displayName": "Re-enable the Event.path API until Microsoft Edge version 115 (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed", - "displayName": "Allow local MHTML files to open automatically in Internet Explorer mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended", - "displayName": "Performance Detector Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled", - "displayName": "Web Select Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess", - "displayName": "Force WebSQL to be enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled", - "displayName": "Force WebSQL in non-secure contexts to be enabled (deprecated) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled", - "displayName": "Enable Workspaces (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled", - "displayName": "Enable the linked account feature (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled", - "displayName": "Performance Detector Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled", - "displayName": "Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting", - "displayName": "Set the default \"share additional operating system region\" setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting", - "displayName": "'Set the default \"share additional operating system region\" setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_0", - "displayName": "Limited", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_1", - "displayName": "Always share the OS Regional format", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_2", - "displayName": "Never share the OS Regional format", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled", - "displayName": "TLS Encrypted ClientHello Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended", - "displayName": "Set the default \"share additional operating system region\" setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting", - "displayName": "'Set the default \"share additional operating system region\" setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_0", - "displayName": "Limited", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_1", - "displayName": "Always share the OS Regional format", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_2", - "displayName": "Never share the OS Regional format", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled", - "displayName": "Hide App Launcher on Microsoft Edge new tab page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls", - "displayName": "Allow clipboard use on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_clipboardallowedforurlsdesc", - "displayName": "Allow clipboard use on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls", - "displayName": "Block clipboard use on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_clipboardblockedforurlsdesc", - "displayName": "Block clipboard use on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting", - "displayName": "Default clipboard site permission (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting", - "displayName": "Default clipboard site permission (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_2", - "displayName": "Do not allow any site to use the clipboard site permission", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_3", - "displayName": "Allow sites to ask the user to grant the clipboard site permission", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled", - "displayName": "Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls", - "displayName": "Allow listed sites to connect to any HID device (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_webhidallowalldevicesforurlsdesc", - "displayName": "Allow listed sites to connect to any HID device (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls", - "displayName": "Allow listed sites connect to specific HID devices (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_webhidallowdevicesforurls", - "displayName": "Allow listed sites connect to specific HID devices (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls", - "displayName": "Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_webhidallowdeviceswithhidusagesforurls", - "displayName": "Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled", - "displayName": "Save and fill memberships (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended", - "displayName": "Save and fill memberships (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended", - "displayName": "Search Filters Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended", - "displayName": "Configure the sticky print preview settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_printpreviewstickysettings", - "displayName": "Configure the sticky print preview settings (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled", - "displayName": "Search Filters Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled", - "displayName": "Search in Sidebar enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled", - "displayName": "Search in Sidebar enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_0", - "displayName": "Enable search in sidebar", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_1", - "displayName": "Disable search in sidebar for Kids Mode", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_2", - "displayName": "Disable search in sidebar", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls", - "displayName": "Allow multiple automatic downloads in quick succession on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_automaticdownloadsallowedforurlsdesc", - "displayName": "Allow multiple automatic downloads in quick succession on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls", - "displayName": "Block multiple automatic downloads in quick succession on specific sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_automaticdownloadsblockedforurlsdesc", - "displayName": "Block multiple automatic downloads in quick succession on specific sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting", - "displayName": "Default automatic downloads setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting", - "displayName": "Default automatic downloads setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_1", - "displayName": "Allow all websites to perform automatic downloads", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_2", - "displayName": "Don't allow any website to perform automatic downloads", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings", - "displayName": "Configure navigation settings per groups of URLs in Microsoft Edge Workspaces (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_workspacesnavigationsettings", - "displayName": "Configure navigation settings per groups of URLs in Microsoft Edge Workspaces (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled", - "displayName": "Enable Grammar Tools feature within Immersive Reader in Microsoft Edge (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled", - "displayName": "Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings", - "displayName": "Configure the sticky print preview settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_printpreviewstickysettings", - "displayName": "Configure the sticky print preview settings (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled", - "displayName": "Clear history for IE and IE mode every time you exit (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled", - "displayName": "Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended", - "displayName": "Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed", - "displayName": "Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton", - "displayName": "Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled", - "displayName": "Enable CryptoWallet feature (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled", - "displayName": "Mouse Gesture Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled", - "displayName": "Enable Read Aloud feature in Microsoft Edge (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview", - "displayName": "Restore PDF view (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled", - "displayName": "Enable tab organization suggestions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled", - "displayName": "Enables default browser settings campaigns (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled", - "displayName": "Enable Discover access to page contents for AAD profiles (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled", - "displayName": "Determines whether the built-in certificate verifier will enforce constraints encoded into trust anchors loaded from the platform trust store (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton", - "displayName": "Show Downloads button on the toolbar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled", - "displayName": "Standalone Sidebar Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled", - "displayName": "Compose is enabled for writing on the web (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled", - "displayName": "Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled", - "displayName": "Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (deprecated) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended", - "displayName": "Wallet Donation Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled", - "displayName": "Search for image enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled", - "displayName": "Wallet Donation Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled", - "displayName": "Microsoft Edge management enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken", - "displayName": "Microsoft Edge management enrollment token (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_edgemanagementenrollmenttoken", - "displayName": "Microsoft Edge management enrollment token (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled", - "displayName": "Microsoft Edge management extensions feedback enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended", - "displayName": "Pin browser essentials toolbar button (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed", - "displayName": "Allows enabling throttling of non-visible, cross-origin iframes (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting", - "displayName": "Default setting for third-party storage partitioning (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting", - "displayName": "Default setting for third-party storage partitioning (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_1", - "displayName": "Let third-party storage partitioning to be enabled.", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_2", - "displayName": "Block third-party storage partitioning from being enabled.", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins", - "displayName": "Disable third-party storage partitioning for specific top-level origins (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_thirdpartystoragepartitioningblockedfororiginsdesc", - "displayName": "Block third-party storage partitioning for these origins (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton", - "displayName": "Pin browser essentials toolbar button (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications", - "displayName": "Allows system notifications (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled", - "displayName": "Edge Wallet E-Tree Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed", - "displayName": "Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended", - "displayName": "Edge Wallet E-Tree Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended", - "displayName": "Enable Gamer Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed", - "displayName": "Enable the Search bar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup", - "displayName": "Allow the Search bar at Windows startup (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails", - "displayName": "Show thumbnail images for browsing history (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled", - "displayName": "Enable split screen feature in Microsoft Edge (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled", - "displayName": "Enable upload files from mobile in Microsoft Edge desktop (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled", - "displayName": "Enable Gamer Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled", - "displayName": "Control the behavior for the cancel dialog produced by the beforeunload event (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient", - "displayName": "Forces Microsoft Edge to use its built-in WNS push client to connect to the Windows Push Notification Service. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled", - "displayName": "Controls whether unload event handlers can be disabled. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled", - "displayName": "Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended", - "displayName": "Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled", - "displayName": "Control the new behavior for event dispatching on disabled form controls (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled", - "displayName": "Data URL support for SVGUseElement (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled", - "displayName": "Enable compression dictionary transport support (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled", - "displayName": "Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings", - "displayName": "Disable SmartScreen AppRep based warnings for specified file types on specified domains (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_exemptsmartscreendownloadwarnings", - "displayName": "Disable SmartScreen AppRep based warnings for specified file types on specified domains (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled", - "displayName": "Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled", - "displayName": "Hide the company logo on the Microsoft Edge new tab page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended", - "displayName": "Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work profile (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile", - "displayName": "Switch intranet sites to a work profile (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile", - "displayName": "Switch sites on the IE mode site list to a work profile (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy", - "displayName": "Microsoft Edge management service policy overrides platform policy. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy", - "displayName": "Allow cloud-based Microsoft Edge management service user policies to override local user policies. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled", - "displayName": "Edge 3P SERP Telemetry Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended", - "displayName": "Edge 3P SERP Telemetry Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended", - "displayName": "Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work profile (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended", - "displayName": "Configure the automatic profile switching site list (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_automaticprofileswitchingsitelist", - "displayName": "Configure the automatic profile switching site list (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended", - "displayName": "Configure auto discard sleeping tabs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings", - "displayName": "Web App management settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_webappsettings", - "displayName": "Web App management settings (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist", - "displayName": "Configure the automatic profile switching site list (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_automaticprofileswitchingsitelist", - "displayName": "Configure the automatic profile switching site list (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled", - "displayName": "Configure auto discard sleeping tabs (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly", - "displayName": "Force Windows executable Native Messaging hosts to launch directly (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled", - "displayName": "Enable post-quantum key agreement for TLS (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery", - "displayName": "Disable DIAL protocol for cast device discovery (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled", - "displayName": "Enable Related Website Sets (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides", - "displayName": "Override Related Website Sets. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_relatedwebsitesetsoverrides", - "displayName": "Override Related Website Sets. (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride", - "displayName": "Prevent bypassing Edge Website Typo Protection prompts for sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains", - "displayName": "Configure the list of domains for which Edge Website Typo Protection won't trigger warnings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_typosquattingallowlistdomainsdesc", - "displayName": "Configure the list of domains for which Edge Website Typo Protection won't trigger warnings (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled", - "displayName": "Enables DALL-E themes generation (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass", - "displayName": "Allow users to bypass Enhanced Security Mode (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled", - "displayName": "Super Drag Drop Enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled", - "displayName": "URL reporting in Edge diagnostic data enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled", - "displayName": "Check RSA key usage for server certificates issued by local trust anchors (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins", - "displayName": "Allow screen capture without prior user gesture (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_screencapturewithoutgestureallowedfororiginsdesc", - "displayName": "Allow screen capture without prior user gesture (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting", - "displayName": "Default Window Management permission setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting", - "displayName": "Default Window Management permission setting (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_2", - "displayName": "Denies the Window Management permission on all sites by default", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_3", - "displayName": "Ask every time a site wants obtain the Window Management permission", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls", - "displayName": "Allow Window Management permission on specified sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_windowmanagementallowedforurlsdesc", - "displayName": "Allow Window Management permission on specified sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls", - "displayName": "Block Window Management permission on specified sites (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_windowmanagementblockedforurlsdesc", - "displayName": "Block Window Management permission on specified sites (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist", - "displayName": "Blocklist for extension install types (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_extensioninstalltypeblocklistdesc", - "displayName": "Blocklist for extension install types (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability", - "displayName": "Control Manifest v2 extension availability (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability", - "displayName": "Control Manifest v2 extension availability (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_0", - "displayName": "Default browser behavior", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_1", - "displayName": "Manifest v2 is disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_2", - "displayName": "Manifest v2 is enabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_3", - "displayName": "Manifest v2 is enabled for forced extensions only", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext", - "displayName": "Control Copilot with Commercial Data Protection access to page context for Microsoft Entra ID profiles (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext", - "displayName": "Control Copilot access to page context for Microsoft Entra ID profiles (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled", - "displayName": "Enable deprecated/removed Mutation Events (deprecated) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled", - "displayName": "Enable the Designer for Image Editor feature (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled", - "displayName": "Enable QR Code Generator (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled", - "displayName": "Enable zstd content encoding support (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive", - "displayName": "Keep the active Microsoft Edge window with an Internet Explorer mode tab always in the foreground. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled", - "displayName": "Enable proactive authentication (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled", - "displayName": "Controls whether the deprecated :--foo syntax for CSS custom state is enabled (obsolete) (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist", - "displayName": "Control which apps cannot be opened in Microsoft Edge sidebar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_edgesidebarappurlhostblocklistdesc", - "displayName": "Control which apps cannot be opened in Microsoft Edge sidebar (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled", - "displayName": "Enable Application Bound Encryption (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings", - "displayName": "Dynamic Code Settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings", - "displayName": "Dynamic Code Settings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_0", - "displayName": "Default dynamic code settings", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_1", - "displayName": "Prevent the browser process from creating dynamic code", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled", - "displayName": "Enable open in sidebar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled", - "displayName": "Enable sidebar customize (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled", - "displayName": "Enable keyboard focusable scrollers (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended", - "displayName": "Enable insecure download warnings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled", - "displayName": "Enable insecure download warnings (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings", - "displayName": "Control the availability of developer mode on extensions page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings", - "displayName": "Control the availability of developer mode on extensions page (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_0", - "displayName": "Allow the usage of developer mode on extensions page", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_1", - "displayName": "Do not allow the usage of developer mode on extensions page", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls", - "displayName": "Configure a list of origins that grant an extended background lifetime to connecting extensions. (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_extensionextendedbackgroundlifetimeforportconnectionstourlsdesc", - "displayName": "Configure a list of origins that grant an extended background lifetime to connecting extensions. (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled", - "displayName": "Enable Printing LPAC Sandbox (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext", - "displayName": "Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled", - "displayName": "Extensions Performance Detector enabled (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist", - "displayName": "Allow specific apps to be opened in Microsoft Edge sidebar (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_edgesidebarappurlhostallowlistdesc", - "displayName": "Allow specific apps to be opened in Microsoft Edge sidebar (User)", - "options": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled", - "displayName": "Machine learning powered autofill suggestions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed", - "displayName": "Live translation allowed (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled", - "displayName": "Personalize my top sites in Customize Sidebar enabled by default (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended", - "displayName": "Machine learning powered autofill suggestions (User)", - "options": [ - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_0", - "displayName": "Disabled", - "description": null - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_1", - "displayName": "Enabled", - "description": null - } - ] - }, - { - "id": "user_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled", - "displayName": "Controls whether the new HTML parser behavior for the element is enabled (Obsolete)","description":"The HTML parser is being changed to allow additional HTML tags inside the element.\n\nIf this policy is disabled, then the HTML parser restricts which tags can be put in the element is enabled","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled","displayName":"Control the new behavior for event dispatching on disabled form controls","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_sendmouseeventsdisabledformcontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled","displayName":"Control Javascript setTimeout() function minimum timeout.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_settimeoutwithout1msclampenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings","displayName":"Settings for Tab Organizer","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings","displayName":"Settings for Tab Organizer (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_0","displayName":"Allow Tab Organizer and improve AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_1","displayName":"Allow Tab Organizer without improving AI models.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_taborganizersettings_taborganizersettings_2","displayName":"Do not allow Tab Organizer.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed","displayName":"Allows enabling throttling of non-visible, cross-origin iframes","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_throttlenonvisiblecrossoriginiframesallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings","displayName":"Managed toolbar avatar label setting","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings","displayName":"Managed toolbar avatar label setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_0","displayName":"Always display management label","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_toolbaravatarlabelsettings_toolbaravatarlabelsettings_1","displayName":"Display management labels for 30s","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled","displayName":"Control the nesting threshold before which Javascript setTimeout() function start being clamped","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_unthrottlednestedtimeoutenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled","displayName":"Control the URL parameter filter feature","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_urlparamfilterenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed","displayName":"Allow Pepper to use a new decoder for hardware accelerated video decoding.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_usemojovideodecoderforpepperallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled","displayName":"Control the User-Agent Client Hints GREASE Update feature.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_useragentclienthintsgreaseupdateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess","displayName":"Force WebSQL to be enabled.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlaccess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled","displayName":"Force WebSQL in non-secure contexts to be enabled.","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_websqlnonsecurecontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled","displayName":"Enable zstd content-encoding support","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_zstdcontentencodingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled","displayName":"Allow download deep scanning for Safe Browsing-enabled users","description":"When this policy is enabled or left unset, Google Chrome can send suspicious downloads from Safe Browsing-enabled users to Google to scan for malware, or prompt users to provide a password for encrypted archives.\r\nWhen this policy is disabled, this scanning will not be performed.\r\nThis policy does not impact download content analysis configured by Chrome Enterprise Connectors.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingdeepscanningenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed","displayName":"Allow Safe Browsing Proxied Real Time Checks","description":"This controls whether Safe Browsing's standard protection mode is allowed to\r\nsend partial hashes of URLs to Google through a proxy via Oblivious HTTP\r\nin order to determine whether they are safe to visit.\r\n\r\nThe proxy allows browsers to upload partial hashes of URLs to Google\r\nwithout them being linked to the user's IP address. The policy also allows\r\nbrowsers to upload the partial hashes of URLs with higher frequency for\r\nbetter Safe Browsing protection quality.\r\n\r\nThis policy will be ignored if Safe Browsing is disabled or set to enhanced\r\nprotection mode.\r\n\r\nSetting the policy to Enabled or leaving it unset allows the\r\nhigher-protection proxied lookups.\r\n\r\nSetting the policy to Disabled disallows the higher-protection proxied\r\nlookups. Partial hashes of URLs will be uploaded to Google directly with much\r\nlower frequency, which will degrade protection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingproxiedrealtimechecksallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled","displayName":"Allow Safe Browsing Surveys","description":"When this policy is enabled or left unset, the user may receive surveys related to Safe Browsing.\r\nWhen this policy is disabled, the user will not receive surveys related to Safe Browsing.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~safebrowsing_safebrowsingsurveysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled","displayName":"Bind Google credentials to a device","description":"Controls the state of the Device Bound Session Credentials feature.\r\n\r\nDevice Bound Session Credentials protects Google authentication cookies against cookie theft by regularly providing a cryptographic proof of device possession to Google servers.\r\n\r\nIf this policy is set to false, Device Bound Session Credentials feature will be disabled.\r\n\r\nIf this policy is set to true, Device Bound Session Credentials feature will be enabled.\r\n\r\nIf this policy is unset, Google Chrome will follow the default rollout process for the Device Bound Session Credentials feature, which means that the feature will be gradually rolled out to an increasing number of users.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_boundsessioncredentialsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist","displayName":"Enterprise profile separation secondary domain allowlist","description":"If this policy is unset, account logins will not be required to create a new separate profile.\r\n\r\nIf this policy is set, account logins from the listed domains will not be required to create a new separate profile.\r\n\r\nThis policy can be set to an empty string so that all account logins are required to create a new separate profile.\r\n\r\nExample value:\r\n\r\ndomain.com\r\notherdomain.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~signin_profileseparationdomainexceptionlist_profileseparationdomainexceptionlistdesc","displayName":"Enterprise profile separation secondary domain allowlist (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl","displayName":"WebRTC per URL IP Handling","description":"This policy allows restricting which IP addresses and interfaces WebRTC uses when attempting to find the best available connection for each specific URL pattern.\r\n\r\nIt accepts a list of URL patterns and handling type pairs. The URL patterns are checked in order and the first match will configure which handling is used by WebRTC for the domain. When the URL of the current document is not matched against any entry, it uses the configuration set by the policy WebRtcIPHandling.\r\n\r\nFor detailed information on valid input patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nValid handling values:\r\n\r\n* default - WebRTC uses all network interfaces.\r\n\r\n* default_public_and_private_interfaces - WebRTC uses all public and private interfaces.\r\n\r\n* default_public_interface_only - WebRTC uses all public interfaces, but not private ones.\r\n\r\n* disable_non_proxied_udp - WebRTC uses either UDP SOCKS proxying or will fallback to TCP proxying.\r\n\r\nSee RFC 8828 section 5.2 (https://tools.ietf.org/html/rfc8828.html#section-5.2) for a detailed description of all the handling values.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebRtcIPHandlingUrl for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.example.com\",\r\n \"handling\": \"default_public_and_private_interfaces\"\r\n },\r\n {\r\n \"url\": \"https://[*.]example.edu\",\r\n \"handling\": \"default_public_interface_only\"\r\n },\r\n {\r\n \"url\": \"*\",\r\n \"handling\": \"disable_non_proxied_udp\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtciphandlingurl_webrtciphandlingurl","displayName":"WebRTC per URL IP Handling (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement","displayName":"Enable post-quantum key agreement for WebRTC","description":"This policy allows controlling post-quantum key agreement for WebRTC.\r\n\r\nIf this policy is set to Enabled, post-quantum key agreement would be offered for\r\nWebRTC.\r\n\r\nIf this policy is set to Disabled, post-quantum key agreement would not be offered\r\nfor WebRTC.\r\n\r\nIf this policy is not set, the value would be set by the default rollout process\r\nfor post-quantum key agreement offered for WebRTC.\r\n\r\nOffering a post-quantum key agreement is backwards-compatible. Existing DTLS\r\npeers and networking middleware are expected to ignore the new option and\r\ncontinue selecting previous options.\r\n\r\nHowever, devices that do not correctly implement DTLS may malfunction when\r\noffered the new option. For example, they may disconnect in response to\r\nunrecognized options or the resulting larger messages. Such devices are not\r\npost-quantum-ready and will interfere with an enterprise's post-quantum\r\ntransition. If encountered, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure and will be removed after some milestones.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~webrtc_webrtcpostquantumkeyagreement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_clouddesktop_boottocloudmode","displayName":"Boot To Cloud Mode","description":"This policy is used by IT admin to set the configuration mode of cloud PC.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-CloudDesktop#boottocloudmode"],"options":[{"id":"device_vendor_msft_policy_config_clouddesktop_boottocloudmode_0","displayName":"Not Configured","description":"Not Configured","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_boottocloudmode_1","displayName":"Enable Boot to Cloud Desktop","description":"Enable Boot to Cloud Desktop","helpText":null}]},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout","displayName":"Set Max Connection Timeout","description":"IT admins can use this policy to set the max connection timeout. The connection timeout decides the max wait time for connecting to Cloud PC after sign in. The default max value is 5 min. For best user experience, it is recommended to continue with the default timeout of 5 min. Update only if it takes more than 5 min to connect to the Cloud PC in your organization.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-CloudDesktop#setmaxconnectiontimeout"],"options":[{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_5","displayName":"5 min","description":"5 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_6","displayName":"6 min","description":"6 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_7","displayName":"7 min","description":"7 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_8","displayName":"8 min","description":"8 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_9","displayName":"9 min","description":"9 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_10","displayName":"10 min","description":"10 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_11","displayName":"11 min","description":"11 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_12","displayName":"12 min","description":"12 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_13","displayName":"13 min","description":"13 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_14","displayName":"14 min","description":"14 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_15","displayName":"15 min","description":"15 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_16","displayName":"16 min","description":"16 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_17","displayName":"17 min","description":"17 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_18","displayName":"18 min","description":"18 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_19","displayName":"19 min","description":"19 min","helpText":null},{"id":"device_vendor_msft_policy_config_clouddesktop_setmaxconnectiontimeout_20","displayName":"20 min","description":"20 min","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_allowbluetooth","displayName":"Allow Bluetooth","description":"Allows the user to enable Bluetooth or restrict access. Note  This value is not supported in Windows Phone 8. 1 MDM and EAS, Windows 10 for desktop, or Windows 10 Mobile. If this is not set or it is deleted, the default value of 2 (Allow) is used. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowbluetooth"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_allowbluetooth_0","displayName":"Disallow Bluetooth. The radio in the Bluetooth control panel will be grayed out and the user will not be able to turn Bluetooth on.","description":"Disallow Bluetooth. If this is set to 0, the radio in the Bluetooth control panel will be grayed out and the user will not be able to turn Bluetooth on.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowbluetooth_1","displayName":"Reserved. The radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.","description":"Reserved. If this is set to 1, the radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowbluetooth_2","displayName":"Allow Bluetooth. The radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.","description":"Allow Bluetooth. If this is set to 2, the radio in the Bluetooth control panel will be functional and the user will be able to turn Bluetooth on.","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardata","displayName":"Allow Cellular Data","description":"Allows the cellular data channel on the device. Device reboot is not required to enforce the policy.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowcellulardata"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardata_0","displayName":"Do not allow the cellular data channel. The user cannot turn it on. This value is not supported in Windows 10, version 1511.","description":"Do not allow the cellular data channel. The user cannot turn it on. This value is not supported in Windows 10, version 1511.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardata_1","displayName":"Allow the cellular data channel. The user can turn it off.","description":"Allow the cellular data channel. The user can turn it off.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardata_2","displayName":"Allow the cellular data channel. The user cannot turn it off.","description":"Allow the cellular data channel. The user cannot turn it off.","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming","displayName":"Allow Cellular Data Roaming","description":"Allows or disallows cellular data roaming on the device. Device reboot is not required to enforce the policy. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowcellulardataroaming"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_0","displayName":"Do not allow cellular data roaming. The user cannot turn it on. This value is not supported in Windows 10, version 1511.","description":"Do not allow cellular data roaming. The user cannot turn it on. This value is not supported in Windows 10, version 1511.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_1","displayName":"Allow cellular data roaming.","description":"Allow cellular data roaming.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowcellulardataroaming_2","displayName":"Allow cellular data roaming on. The user cannot turn it off.","description":"Allow cellular data roaming on. The user cannot turn it off.","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_allowconnecteddevices","displayName":"Allow Connected Devices","description":"Note This policy requires reboot to take effect. Allows IT Admins the ability to disable the Connected Devices Platform (CDP) component. CDP enables discovery and connection to other devices (either proximally with BT/LAN or through the cloud) to support remote app launching, remote messaging, remote app sessions, and other cross-device experiences.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowconnecteddevices"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_allowconnecteddevices_0","displayName":"Block","description":"Disable (CDP service not available).","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowconnecteddevices_1","displayName":"Allow","description":"Allow (CDP service available).","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_allowphonepclinking","displayName":"Allow Phone PC Linking","description":"This policy allows IT admins to turn off the ability to Link a Phone with a PC to continue tasks, such as reading, email, and other tasks that require linking between Phone and PC. If you enable this policy setting, the Windows device will be able to enroll in Phone-PC linking functionality and participate in 'Continue on PC experiences'. If you disable this policy setting, the Windows device is not allowed to be linked to phones, will remove itself from the device list of any linked Phones, and cannot participate in 'Continue on PC experiences'. If you do not configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowphonepclinking"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_allowphonepclinking_0","displayName":"Block","description":"Do not link.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowphonepclinking_1","displayName":"Allow","description":"Allow phone-PC linking.","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_allowusbconnection","displayName":"Allow USB Connection","description":"Note Currently, this policy is supported only in HoloLens 2, Hololens (1st gen) Commercial Suite, and HoloLens (1st gen) Development Edition. Enables USB connection between the device and a computer to sync files with the device or to use developer tools to deploy or debug applications. Changing this policy does not affect USB charging. Both Media Transfer Protocol (MTP) and IP over USB are disabled when this policy is enforced. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#allowusbconnection"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_allowusbconnection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowusbconnection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_allowvpnovercellular","displayName":"Allow VPN Over Cellular","description":"Specifies what type of underlying connections VPN is allowed to use. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowvpnovercellular"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_allowvpnovercellular_0","displayName":"Block","description":"VPN is not allowed over cellular.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowvpnovercellular_1","displayName":"Allow","description":"VPN can use any connection, including cellular.","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular","displayName":"Allow VPN Roaming Over Cellular","description":"Prevents the device from connecting to VPN when the device roams over cellular networks. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#allowvpnroamingovercellular"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_allowvpnroamingovercellular_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_diableprintingoverhttp","displayName":"Turn off printing over HTTP","description":"This policy setting specifies whether to allow printing over HTTP from this client.\r\n\r\nPrinting over HTTP allows a client to print to printers on the intranet as well as the Internet.\r\n\r\nNote: This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP.\r\n\r\nIf you enable this policy setting, it prevents this client from printing to Internet printers over HTTP.\r\n\r\nIf you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP.\r\n\r\nAlso, see the \"Web-based printing\" policy setting in Computer Configuration/Administrative Templates/Printers.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#connectivity-diableprintingoverhttp"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_diableprintingoverhttp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_diableprintingoverhttp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage","displayName":"Disable Cellular Operator Settings Page (Windows Insiders only)","description":"This policy makes all configurable settings in the 'Cellular' > 'Mobile operator settings' page read-only.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#disablecellularoperatorsettingspage"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disablecellularoperatorsettingspage_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_disablecellularsettingspage","displayName":"Disable Cellular Settings Page (Windows Insiders only)","description":"This policy makes all configurable settings in the 'Cellular' Settings page read-only.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#disablecellularsettingspage"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_disablecellularsettingspage_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disablecellularsettingspage_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp","displayName":"Turn off downloading of print drivers over HTTP","description":"This policy setting specifies whether to allow this client to download print driver packages over HTTP.\r\n\r\nTo set up HTTP printing, non-inbox drivers need to be downloaded over HTTP.\r\n\r\nNote: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. It only prohibits downloading drivers that are not already installed locally.\r\n\r\nIf you enable this policy setting, print drivers cannot be downloaded over HTTP.\r\n\r\nIf you disable or do not configure this policy setting, users can download print drivers over HTTP.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#connectivity-disabledownloadingofprintdriversoverhttp"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disabledownloadingofprintdriversoverhttp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards","displayName":"Turn off Internet download for Web publishing and online ordering wizards","description":"This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards.\r\n\r\nThese wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry.\r\n\r\nIf you enable this policy setting, Windows does not download providers, and only the service providers that are cached in the local registry are displayed.\r\n\r\nIf you disable or do not configure this policy setting, a list of providers are downloaded when the user uses the web publishing or online ordering wizards.\r\n\r\nSee the documentation for the web publishing and online ordering wizards for more information, including details on specifying service providers in the registry.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#connectivity-disableinternetdownloadforwebpublishingandonlineorderingwizards"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disableinternetdownloadforwebpublishingandonlineorderingwizards_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests","displayName":"Disallow Network Connectivity Active Tests","description":"Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to http://www.msftconnecttest.com/connecttest.txt to determine if the device can communicate with the Internet. This policy disables the NCSI active probe, preventing network connectivity to www. msftconnecttest. com. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#disallownetworkconnectivityactivetests"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_disallownetworkconnectivityactivetests_0","displayName":"Block","description":"Block","helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths","displayName":"Hardened UNC Paths","description":"This policy setting configures secure access to UNC paths.\r\n\r\nIf you enable this policy, Windows only allows access to the specified UNC paths after fulfilling additional security requirements.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-connectivity#connectivity-hardeneduncpaths"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_pol_hardenedpaths","displayName":"Hardened UNC Paths: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_pol_hardenedpaths_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_connectivity_hardeneduncpaths_pol_hardenedpaths_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge","displayName":"Prohibit installation and configuration of Network Bridge on your DNS domain network","description":"Determines whether a user can install and configure the Network Bridge.\r\n\r\nImportant: This settings is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting does not apply.\r\n\r\nThe Network Bridge allows users to create a layer 2 MAC bridge, enabling them to connect two or more network segements together. This connection appears in the Network Connections folder.\r\n\r\nIf you disable this setting or do not configure it, the user will be able to create and modify the configuration of a Network Bridge. Enabling this setting does not remove an existing Network Bridge from the user's computer.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-connectivity#connectivity-prohibitinstallationandconfigurationofnetworkbridge"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_prohibitinstallationandconfigurationofnetworkbridge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor","displayName":"Use Cellular When Wi Fi Poor (Windows Insiders only)","description":"This policy allows the use of a cellular connection when Wi-Fi connectivity is limited.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Connectivity#usecellularwhenwifipoor"],"options":[{"id":"device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_connectivity_usecellularwhenwifipoor_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp","displayName":"MDM Wins Over GP","description":"If set to 1 then any MDM policy that is set that has an equivalent GP policy will result in GP service blocking the setting of the policy by GP MMC. Setting the value to 0 (zero) or deleting the policy will remove the GP policy blocks restore the saved GP policies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ControlPolicyConflict#mdmwinsovergp"],"options":[{"id":"device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp_0","displayName":"","description":"","helpText":null},{"id":"device_vendor_msft_policy_config_controlpolicyconflict_mdmwinsovergp_1","displayName":"The MDM policy is used and the GP policy is blocked.","description":"The MDM policy is used and the GP policy is blocked.","helpText":null}]},{"id":"device_vendor_msft_policy_config_credentialproviders_allowpinlogon","displayName":"Turn on convenience PIN sign-in","description":"This policy setting allows you to control whether a domain user can sign in using a convenience PIN.\r\n\r\nIf you enable this policy setting, a domain user can set up and sign in with a convenience PIN.\r\n\r\nIf you disable or don't configure this policy setting, a domain user can't set up and use a convenience PIN.\r\n\r\nNote: The user's domain password will be cached in the system vault when using this feature.\r\n\r\nTo configure Windows Hello for Business, use the Administrative Template policies under Windows Hello for Business.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialproviders#credentialproviders-allowpinlogon"],"options":[{"id":"device_vendor_msft_policy_config_credentialproviders_allowpinlogon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialproviders_allowpinlogon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_credentialproviders_blockpicturepassword","displayName":"Turn off picture password sign-in","description":"This policy setting allows you to control whether a domain user can sign in using a picture password.\r\n\r\nIf you enable this policy setting, a domain user can't set up or sign in with a picture password. \r\n\r\nIf you disable or don't configure this policy setting, a domain user can set up and use a picture password.\r\n\r\nNote that the user's domain password will be cached in the system vault when using this feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialproviders#credentialproviders-blockpicturepassword"],"options":[{"id":"device_vendor_msft_policy_config_credentialproviders_blockpicturepassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialproviders_blockpicturepassword_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_credentialproviders_disableautomaticredeploymentcredentials","displayName":"Disable Automatic Re Deployment Credentials","description":"Boolean policy to disable the visibility of the credential provider that triggers the PC refresh on a device. This policy does not actually trigger the refresh. The admin user is required to authenticate to trigger the refresh on the target device. The Autopilot Reset feature allows admin to reset devices to a known good managed state while preserving the management enrollment. After the Autopilot Reset is triggered the devices are for ready for use by information workers or students.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-CredentialProviders#disableautomaticredeploymentcredentials"],"options":[{"id":"device_vendor_msft_policy_config_credentialproviders_disableautomaticredeploymentcredentials_0","displayName":"Disabled","description":"Enable the visibility of the credentials for Autopilot Reset.","helpText":null},{"id":"device_vendor_msft_policy_config_credentialproviders_disableautomaticredeploymentcredentials_1","displayName":"Enabled","description":"Disable visibility of the credentials for Autopilot Reset.","helpText":null}]},{"id":"device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials","displayName":"Remote host allows delegation of non-exportable credentials","description":"Remote host allows delegation of non-exportable credentials\r\n\r\nWhen using credential delegation, devices provide an exportable version of credentials to the remote host. This exposes users to the risk of credential theft from attackers on the remote host.\r\n\r\nIf you enable this policy setting, the host supports Restricted Admin or Remote Credential Guard mode.\r\n\r\nIf you disable or do not configure this policy setting, Restricted Administration and Remote Credential Guard mode are not supported. User will always need to pass their credentials to the host.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialsdelegation#credentialsdelegation-remotehostallowsdelegationofnonexportablecredentials"],"options":[{"id":"device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialsdelegation_remotehostallowsdelegationofnonexportablecredentials_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_credentialsui_disablepasswordreveal","displayName":"Do not display the password reveal button","description":"This policy setting allows you to configure the display of the password reveal button in password entry user experiences.\r\n\r\nIf you enable this policy setting, the password reveal button will not be displayed after a user types a password in the password entry text box.\r\n\r\nIf you disable or do not configure this policy setting, the password reveal button will be displayed after a user types a password in the password entry text box.\r\n\r\nBy default, the password reveal button is displayed after a user types a password in the password entry text box. To display the password, click the password reveal button.\r\n\r\nThe policy applies to all Windows components and applications that use the Windows system controls, including Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialsui#credentialsui-disablepasswordreveal"],"options":[{"id":"device_vendor_msft_policy_config_credentialsui_disablepasswordreveal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialsui_disablepasswordreveal_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_credentialsui_enumerateadministrators","displayName":"Enumerate administrator accounts on elevation","description":"This policy setting controls whether administrator accounts are displayed when a user attempts to elevate a running application. By default, administrator accounts are not displayed when the user attempts to elevate a running application.\r\n\r\nIf you enable this policy setting, all local administrator accounts on the PC will be displayed so the user can choose one and enter the correct password.\r\n\r\nIf you disable this policy setting, users will always be required to type a user name and password to elevate.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-credentialsui#credentialsui-enumerateadministrators"],"options":[{"id":"device_vendor_msft_policy_config_credentialsui_enumerateadministrators_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_credentialsui_enumerateadministrators_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy","displayName":"Allow Fips Algorithm Policy","description":"Allows or disallows the Federal Information Processing Standard (FIPS) policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Cryptography#allowfipsalgorithmpolicy"],"options":[{"id":"device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_cryptography_allowfipsalgorithmpolicy_0","displayName":"Block","description":"Block","helpText":null}]},{"id":"device_vendor_msft_policy_config_cryptography_tlsciphersuites","displayName":"TLS Cipher Suites","description":"Lists the Cryptographic Cipher Algorithms allowed for SSL connections. Format is a semicolon delimited list. Last write wins.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Cryptography#tlsciphersuites"],"options":null},{"id":"device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess","displayName":"Allow Direct Memory Access","description":"This policy setting allows you to block direct memory access (DMA) for all hot pluggable PCI downstream ports until a user logs into Windows. Once a user logs in, Windows will enumerate the PCI devices connected to the host plug PCI ports. Every time the user locks the machine, DMA will be blocked on hot plug PCI ports with no children devices until the user logs in again. Devices which were already enumerated when the machine was unlocked will continue to function until unplugged. This policy setting is only enforced when BitLocker Device Encryption is enabled. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-dataprotection#allowdirectmemoryaccess"],"options":[{"id":"device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_dataprotection_allowdirectmemoryaccess_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_dataprotection_legacyselectivewipeid","displayName":"Legacy Selective Wipe ID","description":"Important. This policy may change in a future release. It may be used for testing purposes, but should not be used in a production environment at this time. Setting used by Windows 8. 1 Selective Wipe. Note This policy is not recommended for use in Windows 10.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DataProtection#legacyselectivewipeid"],"options":null},{"id":"device_vendor_msft_policy_config_datausage_setcost3g","displayName":"Set 3G Cost","description":"This policy setting configures the cost of 3G connections on the local machine.\r\n\r\nIf this policy setting is enabled, a drop-down list box presenting possible cost values will be active. Selecting one of the following values from the list will set the cost of all 3G connections on the local machine:\r\n\r\n- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capacity constraints. \r\n\r\n- Fixed: Use of this connection is not restricted by usage charges and capacity constraints up to a certain data limit. \r\n\r\n- Variable: This connection is costed on a per byte basis.\r\n\r\nIf this policy setting is disabled or is not configured, the cost of 3G connections is Fixed by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-datausage#datausage-setcost3g"],"options":[{"id":"device_vendor_msft_policy_config_datausage_setcost3g_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost3g_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist","displayName":"Please select a 3G connection cost value to set: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_1","displayName":"Unrestricted","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_2","displayName":"Fixed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost3g_cost3g_dropdownlist_3","displayName":"Variable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_datausage_setcost4g","displayName":"Set 4G Cost","description":"This policy setting configures the cost of 4G connections on the local machine. \r\n\r\nIf this policy setting is enabled, a drop-down list box presenting possible cost values will be active. Selecting one of the following values from the list will set the cost of all 4G connections on the local machine:\r\n\r\n- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capacity constraints. \r\n\r\n- Fixed: Use of this connection is not restricted by usage charges and capacity constraints up to a certain data limit. \r\n\r\n- Variable: This connection is costed on a per byte basis.\r\n\r\nIf this policy setting is disabled or is not configured, the cost of 4G connections is Fixed by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-datausage#datausage-setcost4g"],"options":[{"id":"device_vendor_msft_policy_config_datausage_setcost4g_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost4g_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist","displayName":"Please select a 4G connection cost value to set: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_1","displayName":"Unrestricted","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_2","displayName":"Fixed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_datausage_setcost4g_cost4g_dropdownlist_3","displayName":"Variable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowarchivescanning","displayName":"Allow Archive Scanning","description":"Allows or disallows scanning of archives.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowarchivescanning_0","displayName":"Not allowed. Turns off scanning on archived files.","description":"Not allowed. Turns off scanning on archived files.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowarchivescanning_1","displayName":"Allowed. Scans the archive files.","description":"Allowed. Scans the archive files.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowbehaviormonitoring","displayName":"Allow Behavior Monitoring","description":"Allows or disallows Windows Defender Behavior Monitoring functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowbehaviormonitoring_0","displayName":"Not allowed. Turns off behavior monitoring.","description":"Not allowed. Turns off behavior monitoring.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowbehaviormonitoring_1","displayName":"Allowed. Turns on real-time behavior monitoring.","description":"Allowed. Turns on real-time behavior monitoring.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowcloudprotection","displayName":"Allow Cloud Protection","description":"To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowcloudprotection_0","displayName":"Not allowed. Turns off Cloud Protection.","description":"Not allowed. Turns off Cloud Protection.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowcloudprotection_1","displayName":"Allowed. Turns on Cloud Protection.","description":"Allowed. Turns on Cloud Protection.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowemailscanning","displayName":"Allow Email Scanning","description":"Allows or disallows scanning of email.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowemailscanning_0","displayName":"Not allowed. Turns off email scanning.","description":"Not allowed. Turns off email scanning.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowemailscanning_1","displayName":"Allowed. Turns on email scanning.","description":"Allowed. Turns on email scanning.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives","displayName":"Allow Full Scan On Mapped Network Drives","description":"Allows or disallows a full scan of mapped network drives.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives_0","displayName":"Not allowed. Disables scanning on mapped network drives.","description":"Not allowed. Disables scanning on mapped network drives.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowfullscanonmappednetworkdrives_1","displayName":"Allowed. Scans mapped network drives.","description":"Allowed. Scans mapped network drives.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning","displayName":"Allow Full Scan Removable Drive Scanning","description":"Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning_0","displayName":"Not allowed. Turns off scanning on removable drives.","description":"Not allowed. Turns off scanning on removable drives.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowfullscanremovabledrivescanning_1","displayName":"Allowed. Scans removable drives.","description":"Allowed. Scans removable drives.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem","displayName":"[Deprecated] Allow Intrusion Prevention System","description":"Allows or disallows Windows Defender Intrusion Prevention functionality. This setting is deprecated and no longer has impact on devices.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowintrusionpreventionsystem_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowioavprotection","displayName":"Allow scanning of all downloaded files and attachments","description":"Allows or disallows Windows Defender IOAVP Protection functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowioavprotection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowioavprotection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowonaccessprotection","displayName":"Allow On Access Protection","description":"Allows or disallows Windows Defender On Access Protection functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowonaccessprotection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowonaccessprotection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowrealtimemonitoring","displayName":"Allow Realtime Monitoring","description":"Allows or disallows Windows Defender Realtime Monitoring functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowrealtimemonitoring_0","displayName":"Not allowed. Turns off the real-time monitoring service.","description":"Not allowed. Turns off the real-time monitoring service.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowrealtimemonitoring_1","displayName":"Allowed. Turns on and runs the real-time monitoring service.","description":"Allowed. Turns on and runs the real-time monitoring service.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowscanningnetworkfiles","displayName":"Allow Scanning Network Files","description":"Allows or disallows a scanning of network files.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowscanningnetworkfiles_0","displayName":"Not allowed. Turns off scanning of network files.","description":"Not allowed. Turns off scanning of network files.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowscanningnetworkfiles_1","displayName":"Allowed. Scans network files.","description":"Allowed. Scans network files.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowscriptscanning","displayName":"Allow Script Scanning","description":"Allows or disallows Windows Defender Script Scanning functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowscriptscanning_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowscriptscanning_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_allowuseruiaccess","displayName":"Allow User UI Access","description":"Allows or disallows user access to the Windows Defender UI. If disallowed, all Windows Defender notifications will also be suppressed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#allowuseruiaccess"],"options":[{"id":"device_vendor_msft_policy_config_defender_allowuseruiaccess_0","displayName":"Not allowed. Prevents users from accessing UI.","description":"Not allowed. Prevents users from accessing UI.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_allowuseruiaccess_1","displayName":"Allowed. Lets users access UI.","description":"Allowed. Lets users access UI.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductiononlyexclusions","displayName":"Attack Surface Reduction Only Exclusions","description":"This policy setting allows you to prevent Attack Surface reduction rules from matching on files under the paths specified or for the fully qualified resources specified. Paths should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of a path or a fully qualified resource name. As an example, a path might be defined as: c:\\Windows to exclude all files in this directory. A fully qualified resource name might be defined as: C:\\Windows\\App.exe. Value type is string.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#attacksurfacereductiononlyexclusions"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules","displayName":"Attack Surface Reduction Rules","description":"Attack surface reduction rules help prevent actions that malware often abuse to compromise devices and networks. ","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender#attacksurfacereductionrules"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers","displayName":"Block abuse of exploited vulnerable signed drivers (Device)","description":"This rule prevents an application from writing a vulnerable signed driver to disk. In-the-wild, vulnerable signed drivers can be exploited by local applications - that have sufficient privileges - to gain access to the kernel. Vulnerable signed drivers enable attackers to disable or circumvent security solutions, eventually leading to system compromise. The Block abuse of exploited vulnerable signed drivers rule does not block a driver already existing on the system from being loaded.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockabuseofexploitedvulnerablesigneddrivers_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses","displayName":"Block Adobe Reader from creating child processes","description":"This rule prevents attacks by blocking Adobe Reader from creating additional processes.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockadobereaderfromcreatingchildprocesses_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses","displayName":"Block all Office applications from creating child processes","description":"This rule blocks Office apps from creating child processes. This includes Word, Excel, PowerPoint, OneNote, and Access.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockallofficeapplicationsfromcreatingchildprocesses_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem","displayName":"Block credential stealing from the Windows local security authority subsystem","description":"This rule helps prevent credential stealing, by locking down Local Security Authority Subsystem Service (LSASS).","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockcredentialstealingfromwindowslocalsecurityauthoritysubsystem_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail","displayName":"Block executable content from email client and webmail","description":"This rule blocks the following file types from launching from email opened within the Microsoft Outlook application, or Outlook.com and other popular webmail providers: Executable files (such as .exe, .dll, or .scr), Script files (such as a PowerShell .ps, VisualBasic .vbs, or JavaScript .js file).","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablecontentfromemailclientandwebmail_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion","displayName":"Block executable files from running unless they meet a prevalence, age, or trusted list criterion","description":"This rule blocks the following file types from launching unless they meet prevalence or age criteria, or they're in a trusted list or an exclusion list: Executable files (such as .exe, .dll, or .scr).","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutablefilesrunningunlesstheymeetprevalenceagetrustedlistcriterion_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts","displayName":"Block execution of potentially obfuscated scripts","description":"This rule detects suspicious properties within an obfuscated script.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockexecutionofpotentiallyobfuscatedscripts_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent","displayName":"Block JavaScript or VBScript from launching downloaded executable content","description":"This rule prevents scripts from launching potentially malicious downloaded content. Malware written in JavaScript or VBScript often acts as a downloader to fetch and launch other malware from the Internet.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockjavascriptorvbscriptfromlaunchingdownloadedexecutablecontent_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent","displayName":"Block Office applications from creating executable content","description":"This rule prevents Office apps, including Word, Excel, and PowerPoint, from creating potentially malicious executable content, by blocking malicious code from being written to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfromcreatingexecutablecontent_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses","displayName":"Block Office applications from injecting code into other processes","description":"This rule blocks code injection attempts from Office apps into other processes.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficeapplicationsfrominjectingcodeintootherprocesses_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses","displayName":"Block Office communication application from creating child processes","description":"This rule prevents Outlook from creating child processes, while still allowing legitimate Outlook functions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockofficecommunicationappfromcreatingchildprocesses_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription","displayName":"Block persistence through WMI event subscription","description":"This rule prevents malware from abusing WMI to attain persistence on a device. Fileless threats employ various tactics to stay hidden, to avoid being seen in the file system, and to gain periodic execution control. Some threats can abuse the WMI repository and event model to stay hidden.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockpersistencethroughwmieventsubscription_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands","displayName":"Block process creations originating from PSExec and WMI commands","description":"This rule blocks processes created through PsExec and WMI from running. Both PsExec and WMI can remotely execute code, so there is a risk of malware abusing this functionality for command and control purposes, or to spread an infection throughout an organization's network.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockprocesscreationsfrompsexecandwmicommands_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode","displayName":"Block rebooting machine in Safe Mode","description":"This rule blocks attempts of restarting a machine in SAFE mode.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockrebootingmachineinsafemode_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb","displayName":"Block untrusted and unsigned processes that run from USB","description":"With this rule, admins can prevent unsigned or untrusted scripts (such as VBScript, JavaScript) and executables (such as .exe, .dll, .scr files) from removable USB drives, including attached SD cards, from running.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuntrustedunsignedprocessesthatrunfromusb_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools","displayName":"Block use of copied or impersonated system tools","description":"This rule blocks executables that impersonate or are copies of system tools & binaries found on the machine.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockuseofcopiedorimpersonatedsystemtools_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers","displayName":"Block Webshell creation for Servers","description":"This rule block webshell creation for servers.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwebshellcreationforservers_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros","displayName":"Block Win32 API calls from Office macros","description":"This rule prevents VBA macros from calling Win32 APIs.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_blockwin32apicallsfromofficemacros_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware","displayName":"Use advanced protection against ransomware","description":"This rule provides an extra layer of protection against ransomware. It scans executable files entering the system to determine whether they're trustworthy. If the files closely resemble ransomware, this rule blocks them from running, unless they're in a trusted list or an exclusion list.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":[{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_off","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_block","displayName":"Block","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_audit","displayName":"Audit","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_warn","displayName":"Warn","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_attacksurfacereductionrules_useadvancedprotectionagainstransomware_perruleexclusions","displayName":"ASR Only Per Rule Exclusions","description":"Apply ASR only per rule exclusions.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction"],"options":null},{"id":"device_vendor_msft_policy_config_defender_avgcpuloadfactor","displayName":"Avg CPU Load Factor","description":"Represents the average CPU load factor for the Windows Defender scan (in percent). The default value is 50.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":null},{"id":"device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan","displayName":"Check For Signatures Before Running Scan","description":"This policy setting allows you to manage whether a check for new virus and spyware definitions will occur before running a scan. This setting applies to scheduled scans as well as the command line mpcmdrun -SigUpdate, but it has no effect on scans initiated manually from the user interface. If you enable this setting, a check for new definitions will occur before running a scan. If you disable this setting or do not configure this setting, the scan will start using the existing definitions. Supported values:0 (default) - Disabled1 - EnabledOMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/CheckForSignaturesBeforeRunningScan","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_checkforsignaturesbeforerunningscan_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel","displayName":"Cloud Block Level","description":"This policy setting determines how aggressive Windows Defender Antivirus will be in blocking and scanning suspicious files. Value type is integer. If this setting is on, Windows Defender Antivirus will be more aggressive when identifying suspicious files to block and scan; otherwise, it will be less aggressive and therefore block and scan with less frequency. For more information about specific values that are supported, see the Windows Defender Antivirus documentation site. NoteThis feature requires the Join Microsoft MAPS setting enabled in order to function.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel_0","displayName":"Default State","description":"Default State","helpText":null},{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel_2","displayName":"High","description":"High","helpText":null},{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel_4","displayName":"High Plus","description":"HighPlus","helpText":null},{"id":"device_vendor_msft_policy_config_defender_cloudblocklevel_6","displayName":"Zero Tolerance","description":"ZeroTolerance","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_cloudextendedtimeout","displayName":"Cloud Extended Timeout","description":"This feature allows Windows Defender Antivirus to block a suspicious file for up to 60 seconds, and scan it in the cloud to make sure it's safe. Value type is integer, range is 0 - 50. The typical cloud check timeout is 10 seconds. To enable the extended cloud check feature, specify the extended time in seconds, up to an additional 50 seconds. For example, if the desired timeout is 60 seconds, specify 50 seconds in this setting, which will enable the extended cloud check feature, and will raise the total time to 60 seconds. NoteThis feature depends on three other MAPS settings the must all be enabled- Configure the 'Block at First Sight' feature; Join Microsoft MAPS; Send file samples when further analysis is required.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":null},{"id":"device_vendor_msft_policy_config_defender_controlledfolderaccessallowedapplications","displayName":"Controlled Folder Access Allowed Applications","description":"The previous name was GuardedFoldersAllowedApplications and changed to ControlledFolderAccessAllowedApplications. This policy setting allows user-specified applications to the controlled folder access feature. Adding an allowed application means the controlled folder access feature will allow the application to modify or delete content in certain folders such as My Documents. In most cases it will not be necessary to add entries. Windows Defender Antivirus will automatically detect and dynamically add applications that are friendly. Value type is string. Use the | as the substring separator.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#controlledfolderaccessallowedapplications"],"options":null},{"id":"device_vendor_msft_policy_config_defender_controlledfolderaccessprotectedfolders","displayName":"Controlled Folder Access Protected Folders","description":"The previous name was GuardedFoldersList and changed to ControlledFolderAccessProtectedFolders. This policy settings allows adding user-specified folder locations to the controlled folder access feature.  These folders will complement the system defined folders such as My Documents and My Pictures. The list of system folders will be displayed in the user interface and can not be changed. Value type is string. Use the | as the substring separator.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#controlledfolderaccessprotectedfolders"],"options":null},{"id":"device_vendor_msft_policy_config_defender_daystoretaincleanedmalware","displayName":"Days To Retain Cleaned Malware","description":"Time period (in days) that quarantine items will be stored on the system. The default value is 0, which keeps items in quarantine, and does not automatically remove them.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":null},{"id":"device_vendor_msft_policy_config_defender_disablecatchupfullscan","displayName":"Disable Catchup Full Scan","description":"This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. If you disable or do not configure this setting, catch-up scans for scheduled full scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run. If you enable this setting, catch-up scans for scheduled full scans will be disabled. Supported values:0 - Disabled1 - Enabled (default)OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/DisableCatchupFullScan","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_disablecatchupfullscan_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_disablecatchupfullscan_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_disablecatchupquickscan","displayName":"Disable Catchup Quick Scan","description":"This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. If you enable this setting, catch-up scans for scheduled quick scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run. If you disable or do not configure this setting, catch-up scans for scheduled quick scans will be turned off. Supported values:0 - Disabled1 - Enabled (default)OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/DisableCatchupQuickScan","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#disablecatchupquickscan"],"options":[{"id":"device_vendor_msft_policy_config_defender_disablecatchupquickscan_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_disablecatchupquickscan_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess","displayName":"Enable Controlled Folder Access","description":"The previous name was EnableGuardMyFolders and changed to EnableControlledFolderAccess. This policy enables setting the state (On/Off/Audit) for the controlled folder access feature. The controlled folder access feature removes modify and delete permissions from untrusted applications to certain folders such as My Documents.  Value type is integer and the range is 0 - 2.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_2","displayName":"Audit Mode","description":"Audit Mode","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_3","displayName":"Block disk modification only","description":"Block disk modification only","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablecontrolledfolderaccess_4","displayName":"Audit disk modification only","description":"Audit disk modification only","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_enablelowcpupriority","displayName":"Enable Low CPU Priority","description":"This policy setting allows you to enable or disable low CPU priority for scheduled scans. If you enable this setting, low CPU priority will be used during scheduled scans. If you disable or do not configure this setting, not changes will be made to CPU priority for scheduled scans. Supported values:0 - Disabled (default)1 - Enabled","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_enablelowcpupriority_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablelowcpupriority_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_enablenetworkprotection","displayName":"Enable Network Protection","description":"This policy allows you to turn network protection on (block/audit) or off. Network protection protects employees using any app from accessing phishing scams, exploit-hosting sites, and malicious content on the Internet. This includes preventing third-party browsers from connecting to dangerous sites. Value type is integer. If you enable this setting, network protection is turned on and employees can't turn it off. Its behavior can be controlled by the following options: Block and Audit. If you enable this policy with the Block option, users/apps will be blocked from connecting to dangerous domains. You will be able to see this activity in Windows Defender Security Center. If you enable this policy with the Audit option, users/apps will not be blocked from connecting to dangerous domains. However, you will still see this activity in Windows Defender Security Center. If you disable this policy, users/apps will not be blocked from connecting to dangerous domains. You will not see any network activity in Windows Defender Security Center. If you do not configure this policy, network blocking will be disabled by default.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_enablenetworkprotection_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablenetworkprotection_1","displayName":"Enabled (block mode)","description":"Enabled (block mode)","helpText":null},{"id":"device_vendor_msft_policy_config_defender_enablenetworkprotection_2","displayName":"Enabled (audit mode)","description":"Enabled (audit mode)","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_excludedextensions","displayName":"Excluded Extensions","description":"Allows an administrator to specify a list of file type extensions to ignore during a scan. Each file type in the list must be separated by a |. For example, lib|obj.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#excludedextensions"],"options":null},{"id":"device_vendor_msft_policy_config_defender_excludedpaths","displayName":"Excluded Paths","description":"Allows an administrator to specify a list of directory paths to ignore during a scan. Each path in the list must be in a new line.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#excludedpaths"],"options":null},{"id":"device_vendor_msft_policy_config_defender_excludedprocesses","displayName":"Excluded Processes","description":"Allows an administrator to specify a list of files opened by processes to ignore during a scan. ImportantThe process itself is not excluded from the scan, but can be by using the Defender/ExcludedPaths policy to exclude its path. Each file type must be separated by a |. For example, C:\\Example. exe|C:\\Example1. exe.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#excludedprocesses"],"options":null},{"id":"device_vendor_msft_policy_config_defender_puaprotection","displayName":"PUA Protection","description":"Specifies the level of detection for potentially unwanted applications (PUAs). Windows Defender alerts you when potentially unwanted software is being downloaded or attempts to install itself on your computer.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_puaprotection_0","displayName":"PUA Protection off. Windows Defender will not protect against potentially unwanted applications.","description":"PUA Protection off. Windows Defender will not protect against potentially unwanted applications.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_puaprotection_1","displayName":"PUA Protection on. Detected items are blocked. They will show in history along with other threats.","description":"PUA Protection on. Detected items are blocked. They will show in history along with other threats.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_puaprotection_2","displayName":"Audit mode. Windows Defender will detect potentially unwanted applications, but take no action. You can review information about the applications Windows Defender would have taken action against by searching for events created by Windows Defender in the Event Viewer.","description":"Audit mode. Windows Defender will detect potentially unwanted applications, but take no action. You can review information about the applications Windows Defender would have taken action against by searching for events created by Windows Defender in the Event Viewer.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_realtimescandirection","displayName":"Real Time Scan Direction","description":"Controls which sets of files should be monitored. Note If AllowOnAccessProtection is not allowed, then this configuration can be used to monitor specific files.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#realtimescandirection"],"options":[{"id":"device_vendor_msft_policy_config_defender_realtimescandirection_0","displayName":"Monitor all files (bi-directional).","description":"Monitor all files (bi-directional).","helpText":null},{"id":"device_vendor_msft_policy_config_defender_realtimescandirection_1","displayName":"Monitor incoming files.","description":"Monitor incoming files.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_realtimescandirection_2","displayName":"Monitor outgoing files.","description":"Monitor outgoing files.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_scanparameter","displayName":"Scan Parameter","description":"Selects whether to perform a quick scan or full scan.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_scanparameter_1","displayName":"Quick scan","description":"Quick scan","helpText":null},{"id":"device_vendor_msft_policy_config_defender_scanparameter_2","displayName":"Full scan","description":"Full scan","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_schedulequickscantime","displayName":"Schedule Quick Scan Time","description":"Selects the time of day that the daily Windows Defender quick scan should run. For example, a value of 0=12:00AM, a value of 60=1:00AM, a value of 120=2:00, and so on, up to a value of 1380=11:00PM. The default value is 120","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#schedulequickscantime"],"options":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday","displayName":"Schedule Scan Day","description":"Selects the day that the Windows Defender scan should run. Note The scan type will depends on what scan type is selected in the Defender/ScanParameter setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#schedulescanday"],"options":[{"id":"device_vendor_msft_policy_config_defender_schedulescanday_0","displayName":"Every day","description":"Every day","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_1","displayName":"Sunday","description":"Sunday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_2","displayName":"Monday","description":"Monday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_3","displayName":"Tuesday","description":"Tuesday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_4","displayName":"Wednesday","description":"Wednesday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_5","displayName":"Thursday","description":"Thursday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_6","displayName":"Friday","description":"Friday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_7","displayName":"Saturday","description":"Saturday","helpText":null},{"id":"device_vendor_msft_policy_config_defender_schedulescanday_8","displayName":"No scheduled scan","description":"No scheduled scan","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_schedulescantime","displayName":"Schedule Scan Time","description":"Selects the time of day that the weekly Windows Defender scan should run. Note The scan type will depends on what scan type is selected in the Defender/ScanParameter setting. For example, a value of 0=12:00AM, a value of 60=1:00AM, a value of 120=2:00, and so on, up to a value of 1380=11:00PM. The default value is 120.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#schedulescantime"],"options":null},{"id":"device_vendor_msft_policy_config_defender_securityintelligencelocation","displayName":"Security Intelligence Location","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#securityintelligencelocation"],"options":null},{"id":"device_vendor_msft_policy_config_defender_signatureupdatefallbackorder","displayName":"Signature Update Fallback Order","description":"This policy setting allows you to define the order in which different definition update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the definition update sources in order. Possible values are:InternalDefinitionUpdateServerMicrosoftUpdateServerMMPCFileSharesFor example: InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPCIf you enable this setting, definition update sources will be contacted in the order specified. Once definition updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted. If you disable or do not configure this setting, definition update sources will be contacted in a default order. OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/SignatureUpdateFallbackOrder","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#signatureupdatefallbackorder"],"options":null},{"id":"device_vendor_msft_policy_config_defender_signatureupdatefilesharessources","displayName":"Signature Update File Shares Sources","description":"This policy setting allows you to configure UNC file share sources for downloading definition updates. Sources will be contacted in the order specified. The value of this setting should be entered as a pipe-separated string enumerating the definition update sources. For example: \\unc1\\Signatures | \\unc2\\SignaturesThe list is empty by default. If you enable this setting, the specified sources will be contacted for definition updates. Once definition updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted. If you disable or do not configure this setting, the list will remain empty by default and no sources will be contacted. OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/SignatureUpdateFileSharesSources","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#signatureupdatefilesharessources"],"options":null},{"id":"device_vendor_msft_policy_config_defender_signatureupdateinterval","displayName":"Signature Update Interval","description":"Specifies the interval (in hours) that will be used to check for signatures, so instead of using the ScheduleDay and ScheduleTime the check for new signatures will be set according to the interval. A value of 0 means no check for new signatures, a value of 1 means to check every hour, a value of 2 means to check every two hours, and so on, up to a value of 24, which means to check every day. The default value is 8. OMA-URI Path: . /Vendor/MSFT/Policy/Config/Defender/SignatureUpdateInterval","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Defender#signatureupdateinterval"],"options":null},{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent","displayName":"Submit Samples Consent","description":"Checks for the user consent level in Windows Defender to send data. If the required consent has already been granted, Windows Defender submits them. If not, (and if the user has specified never to ask), the UI is launched to ask for user consent (when Defender/AllowCloudProtection is allowed) before sending data.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender"],"options":[{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent_0","displayName":"Always prompt.","description":"Always prompt.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent_1","displayName":"Send safe samples automatically.","description":"Send safe samples automatically.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent_2","displayName":"Never send.","description":"Never send.","helpText":null},{"id":"device_vendor_msft_policy_config_defender_submitsamplesconsent_3","displayName":"Send all samples automatically.","description":"Send all samples automatically.","helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction","displayName":"Threat Severity Default Action","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats","displayName":"Remediation action for High severity threats","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_clean","displayName":"Clean. Service tries to recover files and try to disinfect.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_quarantine","displayName":"Quarantine. Moves files to quarantine.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_remove","displayName":"Remove. Removes files from system.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_allow","displayName":"Allow. Allows file/does none of the above actions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_userdefined","displayName":"User defined. Requires user to make a decision on which action to take.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_highseveritythreats_block","displayName":"Block. Blocks file execution.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats","displayName":"Remediation action for Low severity threats","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_clean","displayName":"Clean. Service tries to recover files and try to disinfect.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_quarantine","displayName":"Quarantine. Moves files to quarantine.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_remove","displayName":"Remove. Removes files from system.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_allow","displayName":"Allow. Allows file/does none of the above actions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_userdefined","displayName":"User defined. Requires user to make a decision on which action to take.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_lowseveritythreats_block","displayName":"Block. Blocks file execution.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats","displayName":"Remediation action for Moderate severity threats","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_clean","displayName":"Clean. Service tries to recover files and try to disinfect.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_quarantine","displayName":"Quarantine. Moves files to quarantine.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_remove","displayName":"Remove. Removes files from system.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_allow","displayName":"Allow. Allows file/does none of the above actions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_userdefined","displayName":"User defined. Requires user to make a decision on which action to take.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_moderateseveritythreats_block","displayName":"Block. Blocks file execution.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats","displayName":"Remediation action for Severe threats","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_clean","displayName":"Clean. Service tries to recover files and try to disinfect.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_quarantine","displayName":"Quarantine. Moves files to quarantine.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_remove","displayName":"Remove. Removes files from system.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_allow","displayName":"Allow. Allows file/does none of the above actions.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_userdefined","displayName":"User defined. Requires user to make a decision on which action to take.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_defender_threatseveritydefaultaction_severethreats_block","displayName":"Block. Blocks file execution.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_doabsolutemaxcachesize","displayName":"DO Absolute Max Cache Size","description":"Specifies the maximum size in GB of Delivery Optimization cache. This policy overrides the MaxCacheSize policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#doabsolutemaxcachesize"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching","displayName":"DO Allow VPN Peer Caching","description":"Specifies whether the device, with an active VPN connection, is allowed to participate in P2P or not.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#doallowvpnpeercaching"],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching_0","displayName":"Not allowed","description":"Not allowed","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_doallowvpnpeercaching_1","displayName":"Allowed","description":"Allowed","helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_docachehost","displayName":"DO Cache Host","description":"Specifies one or more Microsoft Connected Cache servers that will be used by your client(s). One or more values can be added as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address by commas.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#docachehost"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_docachehostsource","displayName":"DO Cache Host Source","description":"Specifies how your client(s) can discover Microsoft Connected Cache servers dynamically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#docachehostsource"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodelaybackgrounddownloadfromhttp","displayName":"DO Delay Background Download From Http","description":"For background downloads that use P2P, specifies the time to wait before starting to download from the HTTP source.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodelaybackgrounddownloadfromhttp"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodelaycacheserverfallbackbackground","displayName":"DO Delay Cache Server Fallback Background","description":"For background downloads that use a cache server, specifies the time to wait before falling back to download from the original HTTP source.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodelaycacheserverfallbackbackground"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodelaycacheserverfallbackforeground","displayName":"DO Delay Cache Server Fallback Foreground","description":"For foreground downloads that use a cache server, specifies the time to wait before falling back to download from the original HTTP source.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodelaycacheserverfallbackforeground"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodelayforegrounddownloadfromhttp","displayName":"DO Delay Foreground Download From Http","description":"For foreground downloads that use P2P, specifies the time to wait before starting to download from the HTTP source.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodelayforegrounddownloadfromhttp"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn","displayName":"DO Disallow Cache Server Downloads On VPN","description":"Specify to disallow downloads from Microsoft Connected Cache servers when the device has an active VPN connection. By default, the button is 'Not Set'. This means the device is allowed to download from Microsoft Connected Cache when the device has an active VPN connection. To block these downloads, turn the button on to 'Enabled'.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodisallowcacheserverdownloadsonvpn"],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn_0","displayName":"Not Set","description":"Not Set","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodisallowcacheserverdownloadsonvpn_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode","displayName":"DO Download Mode","description":"Specifies the method that Delivery Optimization can use to download content on behalf of various Microsoft products.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dodownloadmode"],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_0","displayName":"HTTP only, no peering","description":"HTTP only, no peering","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_1","displayName":"HTTP blended with peering behind the same NAT","description":"HTTP blended with peering behind the same NAT","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_2","displayName":"HTTP blended with peering across a private group","description":"HTTP blended with peering across a private group","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_3","displayName":"HTTP blended with Internet peering","description":"HTTP blended with Internet peering","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_99","displayName":"HTTP only, no peering, no use of DO cloud service","description":"HTTP only, no peering, no use of DO cloud service","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dodownloadmode_100","displayName":"Bypass mode, deprecated in Windows 11","description":"Bypass mode, deprecated in Windows 11","helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupid","displayName":"DO Group Id","description":"Specifies an arbitrary group ID that the device belongs to. A GUID must be used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dogroupid"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource","displayName":"DO Group Id Source","description":"Specifies the source of group ID used for peer selection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dogroupidsource"],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_0","displayName":"Not Set","description":"Not Set","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_1","displayName":"AD site","description":"AD site","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_2","displayName":"Authenticated domain SID","description":"Authenticated domain SID","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_3","displayName":"DHCP Option ID","description":"DHCP Option ID","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_4","displayName":"DNS Suffix","description":"DNS Suffix","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dogroupidsource_5","displayName":"Entra ID Tenant ID","description":"Entra ID Tenant ID","helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxbackgrounddownloadbandwidth","displayName":"DO Max Background Download Bandwidth","description":"Specifies the maximum background download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domaxbackgrounddownloadbandwidth"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxcacheage","displayName":"DO Max Cache Age","description":"Specifies the maximum time in seconds that each file is held in the Delivery Optimization cache after downloading successfully.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domaxcacheage"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxcachesize","displayName":"DO Max Cache Size","description":"Specifies the maximum cache size that Delivery Optimization can utilize, as a percentage of the available drive space.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domaxcachesize"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxdownloadbandwidth","displayName":"DO Max Download Bandwidth","description":"This policy specifies the maximum foreground download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.\\r\\nThe default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads.","helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxforegrounddownloadbandwidth","displayName":"DO Max Foreground Download Bandwidth","description":"Specifies the maximum foreground download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domaxforegrounddownloadbandwidth"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domaxuploadbandwidth","displayName":"DO Max Upload Bandwidth","description":"Specifies the minimum download QoS (Quality of Service or speed) in KiloBytes/sec for background downloads. This policy affects the blending of peer and HTTP sources. Delivery Optimization complements the download from the HTTP source to achieve the minimum QoS value set.","helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dominbackgroundqos","displayName":"DO Min Background Qos","description":"Specifies the minimum download QoS (Quality of Service) in KiloBytes/sec for background downloads.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dominbackgroundqos"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dominbatterypercentageallowedtoupload","displayName":"DO Min Battery Percentage Allowed To Upload","description":"Specifies the minimum battery level required for uploading to peers, while on battery power.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dominbatterypercentageallowedtoupload"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domindisksizeallowedtopeer","displayName":"DO Min Disk Size Allowed To Peer","description":"Specifies the required minimum total disk size in GB for the device to use P2P.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domindisksizeallowedtopeer"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dominfilesizetocache","displayName":"DO Min File Size To Cache","description":"Specifies the minimum content file size in MB eligible to use P2P.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dominfilesizetocache"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dominramallowedtopeer","displayName":"DO Min RAM Allowed To Peer","description":"Specifies the minimum total RAM size in GB required to use P2P.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dominramallowedtopeer"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domodifycachedrive","displayName":"DO Modify Cache Drive","description":"Specifies the drive that Delivery Optimization should use for its cache. The drive location can be specified using environment variables, drive letter or using a full path.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domodifycachedrive"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_domonthlyuploaddatacap","displayName":"DO Monthly Upload Data Cap","description":"Specifies the maximum bytes in GB that Delivery Optimization is allowed to upload to Internet peers in each calendar month.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#domonthlyuploaddatacap"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dopercentagemaxbackgroundbandwidth","displayName":"DO Percentage Max Background Bandwidth","description":"Specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dopercentagemaxbackgroundbandwidth"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dopercentagemaxforegroundbandwidth","displayName":"DO Percentage Max Foreground Bandwidth","description":"Specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dopercentagemaxforegroundbandwidth"],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby","displayName":"DO Restrict Peer Selection By","description":"Specifies to restrict peer selection using the selected method, in addition to the DownloadMode policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dorestrictpeerselectionby"],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_0","displayName":"None","description":"None","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_1","displayName":"Subnet mask","description":"Subnet mask","helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dorestrictpeerselectionby_2","displayName":"Local discovery (DNS-SD)","description":"Local discovery (DNS-SD)","helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth","displayName":"Set Business Hours to Limit Background Download Bandwidth","description":"Specifies the maximum background download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deliveryoptimization#deliveryoptimization-dosethourstolimitbackgrounddownloadbandwidth"],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom","displayName":"From: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthfrom_23","displayName":"11 PM","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthin","displayName":"\r\nMaximum Background Download Bandwidth (percentage) during Business Hours:\r\n","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthout","displayName":"\r\nMaximum Background Download Bandwidth (percentage) outside of Business Hours:\r\n","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto","displayName":"To: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitbackgrounddownloadbandwidth_sethourstolimitbackgrounddownloadbandwidthto_23","displayName":"11 PM","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth","displayName":"Set Business Hours to Limit Foreground Download Bandwidth","description":"Specifies the maximum foreground download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deliveryoptimization#deliveryoptimization-dosethourstolimitforegrounddownloadbandwidth"],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom","displayName":"From: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthfrom_23","displayName":"11 PM","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthin","displayName":"\r\nMaximum Foreground Download Bandwidth (percentage) during Business Hours:\r\n","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthout","displayName":"\r\nMaximum Foreground Download Bandwidth (percentage) outside of Business Hours:\r\n","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto","displayName":"To: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_0","displayName":"12 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_1","displayName":"1 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_2","displayName":"2 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_3","displayName":"3 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_4","displayName":"4 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_5","displayName":"5 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_6","displayName":"6 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_7","displayName":"7 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_8","displayName":"8 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_9","displayName":"9 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_10","displayName":"10 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_11","displayName":"11 AM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_12","displayName":"12 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_13","displayName":"1 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_14","displayName":"2 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_15","displayName":"3 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_16","displayName":"4 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_17","displayName":"5 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_18","displayName":"6 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_19","displayName":"7 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_20","displayName":"8 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_21","displayName":"9 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_22","displayName":"10 PM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dosethourstolimitforegrounddownloadbandwidth_sethourstolimitforegrounddownloadbandwidthto_23","displayName":"11 PM","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deliveryoptimization_dovpnkeywords","displayName":"DO Vpn Keywords","description":"Specifies one or more keywords used to recognize VPN connections. To add multiple keywords, separate each by a comma.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeliveryOptimization#dovpnkeywords"],"options":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources","displayName":"Enable App Installer Additional Sources","description":"This policy controls additional sources provided by the enterprise IT administrator.\r\n\r\nIf you do not configure this policy, no additional sources will be configured for the Windows Package Manager.\r\n\r\nIf you enable this policy, the additional sources will be added to the Windows Package Manager and cannot be removed. The representation for each additional source can be obtained from installed sources using 'winget source export'.\r\n\r\nIf you disable this policy, no additional sources can be configured for the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enableadditionalsources"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableadditionalsources_additionalsources","displayName":"Additional Sources: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources","displayName":"Enable App Installer Allowed Sources","description":"This policy controls additional sources allowed by the enterprise IT administrator.\r\n\r\nIf you do not configure this policy, users will be able to add or remove additional sources other than those configured by policy.\r\n\r\nIf you enable this policy, only the sources specified can be added or removed from the Windows Package Manager. The representation for each allowed source can be obtained from installed sources using 'winget source export'.\r\n\r\nIf you disable this policy, no additional sources can be configured for the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enableallowedsources"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableallowedsources_allowedsources","displayName":"Allowed Sources: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller","displayName":"Enable App Installer","description":"This policy controls whether the Windows Package Manager can be used by users.\r\n\r\nIf you enable or do not configure this setting, users will be able to use the Windows Package Manager.\r\n\r\nIf you disable this setting, users will not be able to use the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enableappinstaller"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableappinstaller_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore","displayName":"Enable App Installer Microsoft Store Source Certificate Validation Bypass","description":"This policy controls whether the Windows Package Manager will validate the Microsoft Store certificate hash matches to a known Microsoft Store certificate when initiating a connection to the Microsoft Store Source. \r\n\r\nIf you enable this policy, the Windows Package Manager will bypass the Microsoft Store certificate validation. \r\n\r\nIf you disable this policy, the Windows Package Manager will validate the Microsoft Store certificate used is valid and belongs to the Microsoft Store before communicating with the Microsoft Store source. \r\n\r\nIf you do not configure this policy, the Windows Package Manager administrator settings will be adhered to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablebypasscertificatepinningformicrosoftstore"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablebypasscertificatepinningformicrosoftstore_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource","displayName":"Enable App Installer Default Source","description":"This policy controls the default source included with the Windows Package Manager.\r\n\r\nIf you do not configure this setting, the default source for the Windows Package Manager will be available and can be removed.\r\n\r\nIf you enable this setting, the default source for the Windows Package Manager will be available and cannot be removed.\r\n\r\nIf you disable this setting the default source for the Windows Package Manager will not be available.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enabledefaultsource"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enabledefaultsource_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures","displayName":"Enable App Installer Experimental Features","description":"This policy controls whether users can enable experimental features in the Windows Package Manager.\r\n\r\nIf you enable or do not configure this setting, users will be able to enable experimental features for the Windows Package Manager.\r\n\r\nIf you disable this setting, users will not be able to enable experimental features for the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enableexperimentalfeatures"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enableexperimentalfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride","displayName":"Enable App Installer Hash Override","description":"This policy controls whether or not the Windows Package Manager can be configured to enable the ability override the SHA256 security validation in settings.\r\n\r\nIf you enable or do not configure this policy, users will be able to enable the ability override the SHA256 security validation in the Windows Package Manager settings.\r\n\r\nIf you disable this policy, users will not be able to enable the ability override the SHA256 security validation in the Windows Package Manager settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablehashoverride"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablehashoverride_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride","displayName":"Enable App Installer Local Archive Malware Scan Override","description":"This policy controls the ability to override malware vulnerability scans when installing an archive file using a local manifest using the command line arguments.\r\n\r\nIf you enable this policy, users can override the malware scan when performing a local manifest install of an archive file.\r\n\r\nIf you disable this policy, users will be unable to override the malware scan of an archive file when installing using a local manifest.\r\n\r\nIf you do not configure this policy, the Windows Package Manager administrator settings will be adhered to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablelocalarchivemalwarescanoverride"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalarchivemalwarescanoverride_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalmanifestfiles","displayName":"Enable App Installer Local Manifest Files","description":"This policy controls whether users can install packages with local manifest files.\r\n\r\nIf you enable or do not configure this setting, users will be able to install packages with local manifests using the Windows Package Manager.\r\n\r\nIf you disable this setting, users will not be able to install packages with local manifests using the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablelocalmanifestfiles"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalmanifestfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablelocalmanifestfiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource","displayName":"Enable App Installer Microsoft Store Source","description":"This policy controls the Microsoft Store source included with the Windows Package Manager.\r\n\r\nIf you do not configure this setting, the Microsoft Store source for the Windows Package manager will be available and can be removed.\r\n\r\nIf you enable this setting, the Microsoft Store source for the Windows Package Manager will be available and cannot be removed.\r\n\r\nIf you disable this setting the Microsoft Store source for the Windows Package Manager will not be available.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablemicrosoftstoresource"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemicrosoftstoresource_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol","displayName":"Enable App Installer ms-appinstaller protocol","description":"This policy controls whether users can install packages from a website that is using the ms-appinstaller protocol.\r\n\r\nIf you enable this setting, users will be able to install packages from websites that use this protocol.\r\n\r\nIf you disable or do not configure this setting, users will not be able to install packages from websites that use this protocol.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablemsappinstallerprotocol"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablemsappinstallerprotocol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablesettings","displayName":"Enable App Installer Settings","description":"This policy controls whether users can change their settings.\r\n\r\nIf you enable or do not configure this setting, users will be able to change settings for the Windows Package Manager.\r\n\r\nIf you disable this setting, users will not be able to change settings for the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablesettings"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces","displayName":"Enable Windows Package Manager command line interfaces","description":"This policy determines if a user can perform an action using the Windows Package Manager through a command line interface (WinGet CLI, or WinGet PowerShell).\r\n\r\nIf you disable this policy, users will not be able execute the Windows Package Manager CLI, and PowerShell cmdlets.\r\n\r\nIf you enable, or do not configuring this policy, users will be able to execute the Windows Package Manager CLI commands, and PowerShell cmdlets. (Provided “Enable App Installer” policy is not disabled).\r\n\r\nThis policy does not override the “Enable App Installer” policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablewindowspackagemanagercommandlineinterfaces"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagercommandlineinterfaces_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagerconfiguration","displayName":"Enable Windows Package Manager Configuration","description":"This policy controls whether the Windows Package Manager configuration feature can be used by users.\r\n\r\nIf you enable or do not configure this setting, users will be able to use the Windows Package Manager configuration feature.\r\n\r\nIf you disable this setting, users will not be able to use the Windows Package Manager configuration feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-enablewindowspackagemanagerconfiguration"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagerconfiguration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_enablewindowspackagemanagerconfiguration_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval","displayName":"Set App Installer Source Auto Update Interval In Minutes","description":"This policy controls the auto-update interval for package-based sources. The default source for Windows Package Manager is configured such that an index of the packages is cached on the local machine. The index is downloaded when a user invokes a command, and the interval has passed.\r\n\r\nIf you disable or do not configure this setting, the default interval or the value specified in the Windows Package Manager settings will be used.\r\n\r\nIf you enable this setting, the number of minutes specified will be used by the Windows Package Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-desktopappinstaller#desktopappinstaller-sourceautoupdateinterval"],"options":[{"id":"device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_desktopappinstaller_sourceautoupdateinterval_sourceautoupdateinterval","displayName":"Source Auto Update Interval In Minutes (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch","displayName":"Configure System Guard Launch","description":"Secure Launch configuration: 0 - Unmanaged, configurable by Administrative user, 1 - Enables Secure Launch if supported by hardware, 2 - Disables Secure Launch.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#configuresystemguardlaunch"],"options":[{"id":"device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_0","displayName":"Unmanaged Configurable by Administrative user","description":"Unmanaged Configurable by Administrative user","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_1","displayName":"Unmanaged Enables Secure Launch if supported by hardware","description":"Unmanaged Enables Secure Launch if supported by hardware","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_2","displayName":"Unmanaged Disables Secure Launch","description":"Unmanaged Disables Secure Launch","helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity","displayName":"Enable Virtualization Based Security","description":"Turns On Virtualization Based Security(VBS)","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#enablevirtualizationbasedsecurity"],"options":[{"id":"device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity_0","displayName":"disable virtualization based security.","description":"disable virtualization based security.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity_1","displayName":"enable virtualization based security.","description":"enable virtualization based security.","helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceguard_lsacfgflags","displayName":"Credential Guard","description":"Credential Guard Configuration: 0 - Turns off CredentialGuard remotely if configured previously without UEFI Lock, 1 - Turns on CredentialGuard with UEFI lock. 2 - Turns on CredentialGuard without UEFI lock.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#lsacfgflags"],"options":[{"id":"device_vendor_msft_policy_config_deviceguard_lsacfgflags_0","displayName":"(Disabled) Turns off Credential Guard remotely if configured previously without UEFI Lock.","description":"(Disabled) Turns off Credential Guard remotely if configured previously without UEFI Lock.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_lsacfgflags_1","displayName":"(Enabled with UEFI lock) Turns on Credential Guard with UEFI lock.","description":"(Enabled with UEFI lock) Turns on Credential Guard with UEFI lock.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_lsacfgflags_2","displayName":"(Enabled without lock) Turns on Credential Guard without UEFI lock.","description":"(Enabled without lock) Turns on Credential Guard without UEFI lock.","helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceguard_machineidentityisolation","displayName":"Machine Identity Isolation","description":"Machine Identity Isolation: 0 - Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key. 1 - Machine password both LSASS-bound and IUM-bound. It is stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys. 2 - Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceGuard#machineidentityisolation"],"options":[{"id":"device_vendor_msft_policy_config_deviceguard_machineidentityisolation_0","displayName":"(Disabled) Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key.","description":"(Disabled) Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_machineidentityisolation_1","displayName":"(Enabled in audit mode) Machine password both LSASS-bound and IUM-bound. It is stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys.","description":"(Enabled in audit mode) Machine password both LSASS-bound and IUM-bound. It is stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_machineidentityisolation_2","displayName":"(Enabled in enforcement mode) Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key.","description":"(Enabled in enforcement mode) Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key.","helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceguard_requiremicrosoftsignedbootchain","displayName":"Require Microsoft Signed Boot Chain","description":"Require Microsoft Signed Boot Chain: 1 - Require Microsoft Signed Boot Chain.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceGuard#requiremicrosoftsignedbootchain"],"options":{"id":"device_vendor_msft_policy_config_deviceguard_requiremicrosoftsignedbootchain_1","displayName":"Require Microsoft Signed Boot Chain.","description":"Require Microsoft Signed Boot Chain.","helpText":null}},{"id":"device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures","displayName":"Require Platform Security Features","description":"Select Platform Security Level: 1 - Turns on VBS with Secure Boot, 3 - Turns on VBS with Secure Boot and DMA. DMA requires hardware support.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#requireplatformsecurityfeatures"],"options":[{"id":"device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures_1","displayName":"Turns on VBS with Secure Boot.","description":"Turns on VBS with Secure Boot.","helpText":null},{"id":"device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures_3","displayName":"Turns on VBS with Secure Boot and direct memory access (DMA). DMA requires hardware support.","description":"Turns on VBS with Secure Boot and direct memory access (DMA). DMA requires hardware support.","helpText":null}]},{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_allowdevicehealthmonitoring","displayName":"Allow Device Health Monitoring","description":"Enable/disable 4Nines device health monitoring on devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#allowdevicehealthmonitoring"],"options":[{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_allowdevicehealthmonitoring_1","displayName":"The DeviceHealthMonitoring connection is enabled.","description":"The DeviceHealthMonitoring connection is enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_allowdevicehealthmonitoring_0","displayName":"The DeviceHealthMonitoring connection is disabled.","description":"The DeviceHealthMonitoring connection is disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope","displayName":"[Deprecated] Config Device Health Monitoring Scope","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which types of events are monitored.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringscope"],"options":null},{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope_v2_epm","displayName":"Config Device Health Monitoring Scope","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which types of events are monitored.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringscope"],"options":{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringscope_v2_epm_privilegemanagement","displayName":"Privilege Management","description":null,"helpText":null}},{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringserviceinstance","displayName":"[Deprecated] Config Device Health Monitoring Service Instance","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which service instance to which events are to be uploaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringserviceinstance"],"options":null},{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringuploaddestination","displayName":"[Deprecated] Config Device Health Monitoring Upload Destination","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which destinations are in-scope for monitored events to be uploaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringuploaddestination"],"options":null},{"id":"device_vendor_msft_policy_config_devicehealthmonitoring_configdevicehealthmonitoringuploaddestination_v2","displayName":"Config Device Health Monitoring Upload Destination","description":"If the device is not opted-in to the DeviceHealthMonitoring service via the AllowDeviceHealthMonitoring then this policy has no meaning. For devices which are opted in, the value of this policy modifies which destinations are in-scope for monitored events to be uploaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceHealthMonitoring#configdevicehealthmonitoringuploaddestination"],"options":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids","displayName":"Allow installation of devices that match any of these device IDs","description":"This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is allowed to install. Use this policy setting only when the \"Prevent installation of devices not described by other policy settings\" policy setting is enabled. Other policy settings that prevent device installation take precedence over this one.\r\n\r\nIf you enable this policy setting, Windows is allowed to install or update any device whose Plug and Play hardware ID or compatible ID appears in the list you create, unless another policy setting specifically prevents that installation (for example, the \"Prevent installation of devices that match any of these device IDs\" policy setting, the \"Prevent installation of devices for these device classes\" policy setting, or the \"Prevent installation of removable devices\" policy setting). If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, and no other policy setting describes the device, the \"Prevent installation of devices not described by other policy settings\" policy setting determines whether the device can be installed.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceids_deviceinstall_ids_allow_list","displayName":"Allowed device IDs","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids","displayName":"Allow installation of devices that match any of these device instance IDs","description":"This policy setting allows you to specify a list of Plug and Play device instance IDs for devices that Windows is allowed to install. This policy setting is intended to be used only when the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting is enabled, however it may also be used with the \"Prevent installation of devices not described by other policy settings\" policy setting for legacy policy definitions.\r\n\r\nWhen this policy setting is enabled together with the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting, Windows is allowed to install or update any device whose Plug and Play device instance ID appears in the list you create, unless another policy setting at the same or higher layer in the hierarchy specifically prevents that installation, such as the following policy settings:\r\n- Prevent installation of devices that match any of these device instance IDs\r\nIf the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting is not enabled with this policy setting, then any other policy settings specifically preventing installation will take precedence.\r\n\r\nNOTE: The \"Prevent installation of devices not described by other policy settings\" policy setting has been replaced by the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting for supported target Windows 10 versions. It is recommended that you use the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting when possible.\r\n\r\nAlternatively, if this policy setting is enabled together with the \"Prevent installation of devices not described by other policy settings\" policy setting, Windows is allowed to install or update any device whose Plug and Play device instance ID appears in the list you create, unless another policy setting specifically prevents that installation (for example, the \"Prevent installation of devices that match any of these device IDs\" policy setting, the \"Prevent installation of devices for these device classes\" policy setting, the \"Prevent installation of devices that match any of these device instance IDs\" policy setting, or the \"Prevent installation of removable devices\" policy setting).\r\n\r\nIf you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, and no other policy setting describes the device, the \"Prevent installation of devices not described by other policy settings\" policy setting determines whether the device can be installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-allowinstallationofmatchingdeviceinstanceids"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_allow_list","displayName":"Allowed Instance IDs","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses","displayName":"Allow installation of devices using drivers that match these device setup classes","description":"This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is allowed to install. Use this policy setting only when the \"Prevent installation of devices not described by other policy settings\" policy setting is enabled. Other policy settings that prevent device installation take precedence over this one.\r\n\r\nIf you enable this policy setting, Windows is allowed to install or update device drivers whose device setup class GUIDs appear in the list you create, unless another policy setting specifically prevents installation (for example, the \"Prevent installation of devices that match these device IDs\" policy setting, the \"Prevent installation of devices for these device classes\" policy setting, or the \"Prevent installation of removable devices\" policy setting). If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, and no other policy setting describes the device, the \"Prevent installation of devices not described by other policy settings\" policy setting determines whether the device can be installed.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_allowinstallationofmatchingdevicesetupclasses_deviceinstall_classes_allow_list","displayName":"Allowed classes","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_enableinstallationpolicylayering","displayName":"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria","description":"This policy setting will change the evaluation order in which Allow and Prevent policy settings are applied when more than one install policy setting is applicable for a given device. Enable this policy setting to ensure that overlapping device match criteria is applied based on an established hierarchy where more specific match criteria supersedes less specific match criteria. The hierarchical order of evaluation for policy settings that specify device match criteria is as follows:\r\n\r\nDevice instance IDs > Device IDs > Device setup class > Removable devices\r\n\r\nDevice instance IDs\r\n1. Prevent installation of devices using drivers that match these device instance IDs\r\n2. Allow installation of devices using drivers that match these device instance IDs\r\n\r\nDevice IDs\r\n3. Prevent installation of devices using drivers that match these device IDs\r\n4. Allow installation of devices using drivers that match these device IDs\r\n\r\nDevice setup class\r\n5. Prevent installation of devices using drivers that match these device setup classes\r\n6. Allow installation of devices using drivers that match these device setup classes\r\n\r\nRemovable devices\r\n7. Prevent installation of removable devices\r\n\r\nNOTE: This policy setting provides more granular control than the \"Prevent installation of devices not described by other policy settings\" policy setting. If these conflicting policy settings are enabled at the same time, the \"Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria\" policy setting will be enabled and the other policy setting will be ignored.\r\n\r\nIf you disable or do not configure this policy setting, the default evaluation is used. By default, all \"Prevent installation...\" policy settings have precedence over any other policy setting that allows Windows to install a device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-enableinstallationpolicylayering"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_enableinstallationpolicylayering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_enableinstallationpolicylayering_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork","displayName":"Prevent automatic download of applications associated with device metadata","description":"This policy setting allows you to prevent Windows from downloading applications associated with device metadata.\r\n\r\nIf you enable this policy setting, Windows does not download applications associated with device metadata for installed devices. This policy setting overrides the setting in the Device Installation Settings dialog box (Control Panel > System and Security > System > Advanced System Settings > Hardware tab).\r\n\r\nIf you disable or do not configure this policy setting, the setting in the Device Installation Settings dialog box controls whether Windows downloads applications associated with device metadata.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventdevicemetadatafromnetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings","displayName":"Prevent installation of devices not described by other policy settings","description":"This policy setting allows you to prevent the installation of devices that are not specifically described by any other policy setting.\r\n\r\nIf you enable this policy setting, Windows is prevented from installing or updating the device driver for any device that is not described by either the \"Allow installation of devices that match any of these device IDs\" or the \"Allow installation of devices for these device classes\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, Windows is allowed to install or update the device driver for any device that is not described by the \"Prevent installation of devices that match any of these device IDs,\" \"Prevent installation of devices for these device classes,\" or \"Prevent installation of removable devices\" policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofdevicesnotdescribedbyotherpolicysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids","displayName":"Prevent installation of devices that match any of these device IDs","description":"This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.\r\n\r\nIf you enable this policy setting, Windows is prevented from installing a device whose hardware ID or compatible ID appears in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, devices can be installed and updated as allowed or prevented by other policy settings.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_list","displayName":"Prevented device IDs","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive","displayName":"Also apply to matching devices that are already installed.","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceids_deviceinstall_ids_deny_retroactive_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids","displayName":"Prevent installation of devices that match any of these device instance IDs","description":"This policy setting allows you to specify a list of Plug and Play device instance IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.\r\n\r\nIf you enable this policy setting, Windows is prevented from installing a device whose device instance ID appears in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, devices can be installed and updated as allowed or prevented by other policy settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-deviceinstallation#deviceinstallation-preventinstallationofmatchingdeviceinstanceids"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_list","displayName":"Prevented Instance IDs","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_retroactive","displayName":"Also apply to matching devices that are already installed. (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_retroactive_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdeviceinstanceids_deviceinstall_instance_ids_deny_retroactive_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses","displayName":"Prevent installation of devices using drivers that match these device setup classes","description":"This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.\r\n \r\nIf you enable this policy setting, Windows is prevented from installing or updating device drivers whose device setup class GUIDs appear in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.\r\n\r\nIf you disable or do not configure this policy setting, Windows can install and update devices as allowed or prevented by other policy settings.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_list","displayName":"Prevented Classes","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive","displayName":"Also apply to matching devices that are already installed.","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceinstallation"],"options":[{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_deviceinstallation_preventinstallationofmatchingdevicesetupclasses_deviceinstall_classes_deny_retroactive_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_devicelock_accountlockoutpolicy","displayName":"Account Lockout Policy","description":" Account lockout threshold - This security setting determines the number of failed logon attempts that causes a user account to be locked out. A locked-out account cannot be used until it is reset by an administrator or until the lockout duration for the account has expired. You can set a value between 0 and 999 failed logon attempts. If you set the value to 0, the account will never be locked out. Failed password attempts against workstations or member servers that have been locked using either CTRL+ALT+DELETE or password-protected screen savers count as failed logon attempts. Default: 0 Account lockout duration - This security setting determines the number of minutes a locked-out account remains locked out before automatically becoming unlocked. The available range is from 0 minutes through 99,999 minutes. If you set the account lockout duration to 0, the account will be locked out until an administrator explicitly unlocks it. If an account lockout threshold is defined, the account lockout duration must be greater than or equal to the reset time. Default: None, because this policy setting only has meaning when an Account lockout threshold is specified. Reset account lockout counter after - This security setting determines the number of minutes that must elapse after a failed logon attempt before the failed logon attempt counter is reset to 0 bad logon attempts. The available range is 1 minute to 99,999 minutes. If an account lockout threshold is defined, this reset time must be less than or equal to the Account lockout duration. Default: None, because this policy setting only has meaning when an Account lockout threshold is specified.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#accountlockoutpolicy"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword","displayName":"Allow Simple Device Password","description":"Specifies whether PINs or passwords such as 1111 or 1234 are allowed. For the desktop, it also controls the use of picture passwords.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#allowsimpledevicepassword"],"options":[{"id":"device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_allowsimpledevicepassword_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_devicelock_alphanumericdevicepasswordrequired","displayName":"Alphanumeric Device Password Required","description":"Determines the type of PIN or password required. This policy only applies if the DeviceLock/DevicePasswordEnabled policy is set to 0","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#alphanumericdevicepasswordrequired"],"options":[{"id":"device_vendor_msft_policy_config_devicelock_alphanumericdevicepasswordrequired_0","displayName":"Password or Alphanumeric PIN required.","description":"Password or Alphanumeric PIN required.","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_alphanumericdevicepasswordrequired_1","displayName":"Password or Numeric PIN required.","description":"Password or Numeric PIN required.","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_alphanumericdevicepasswordrequired_2","displayName":"Password, Numeric PIN, or Alphanumeric PIN required.","description":"Password, Numeric PIN, or Alphanumeric PIN required.","helpText":null}]},{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordenabled","displayName":"Device Password Enabled","description":"Specifies whether device lock is enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#devicepasswordenabled"],"options":[{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordenabled_0","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordenabled_1","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordexpiration","displayName":"Device Password Expiration","description":"Specifies when the password expires (in days). 0 - Passwords do not expire.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#devicepasswordexpiration"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_devicepasswordhistory","displayName":"Device Password History","description":"Specifies how many passwords can be stored in the history that can’t be used.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#devicepasswordhistory"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_enforcelockscreenandlogonimage","displayName":"Enforce Lock Screen And Logon Image","description":"Value type is a string, which is the full image filepath and filename.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#enforcelockscreenandlogonimage"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_enforcelockscreenprovider","displayName":"Enforce Lock Screen Provider","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#enforcelockscreenprovider"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_maxdevicepasswordfailedattempts","displayName":"Max Device Password Failed Attempts","description":"On a desktop, when the user reaches the value set by this policy, it is not wiped. Instead, the desktop is put on BitLocker recovery mode, which makes the data inaccessible but recoverable. If BitLocker is not enabled, then the policy cannot be enforced.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#maxdevicepasswordfailedattempts"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_maxinactivitytimedevicelock","displayName":"Max Inactivity Time Device Lock","description":"Specifies the maximum amount of time (in minutes) allowed after the device is idle that will cause the device to become PIN or password locked. Users can select any existing timeout value less than the specified maximum time in the Settings app. 0 - No timeout is defined","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#maxinactivitytimedevicelock"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_maxinactivitytimedevicelockwithexternaldisplay","displayName":"[Deprecated] Max Inactivity Time Device Lock With External Display","description":"Sets the maximum timeout value for the external display.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-DeviceLock#maxinactivitytimedevicelockwithexternaldisplay"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters","displayName":"Min Device Password Complex Characters","description":"The number of complex element types (uppercase and lowercase letters, numbers, and punctuation) required for a strong PIN or password.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#mindevicepasswordcomplexcharacters"],"options":[{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_1","displayName":"Digits only","description":"Digits only","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_2","displayName":"Digits and lowercase letters are required","description":"Digits and lowercase letters are required","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_3","displayName":"Digits lowercase letters and uppercase letters are required. Not supported in desktop Microsoft accounts and domain accounts","description":"Digits lowercase letters and uppercase letters are required. Not supported in desktop Microsoft accounts and domain accounts","helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordcomplexcharacters_4","displayName":"Digits lowercase letters uppercase letters and special characters are required. Not supported in desktop","description":"Digits lowercase letters uppercase letters and special characters are required. Not supported in desktop","helpText":null}]},{"id":"device_vendor_msft_policy_config_devicelock_mindevicepasswordlength","displayName":"Min Device Password Length","description":"Specifies the minimum number or characters required in the PIN or password.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#mindevicepasswordlength"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_minimumpasswordage","displayName":"Minimum Password Age","description":"This security setting determines the period of time (in days) that a password must be used before the user can change it. You can set a value between 1 and 998 days, or you can allow changes immediately by setting the number of days to 0. The minimum password age must be less than the Maximum password age, unless the maximum password age is set to 0, indicating that passwords will never expire. If the maximum password age is set to 0, the minimum password age can be set to any value between 0 and 998. Configure the minimum password age to be more than 0 if you want Enforce password history to be effective. Without a minimum password age, users can cycle through passwords repeatedly until they get to an old favorite. The default setting does not follow this recommendation, so that an administrator can specify a password for a user and then require the user to change the administrator-defined password when the user logs on. If the password history is set to 0, the user does not have to choose a new password. For this reason, Enforce password history is set to 1 by default.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#minimumpasswordage"],"options":null},{"id":"device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera","displayName":"Prevent enabling lock screen camera","description":"Disables the lock screen camera toggle switch in PC Settings and prevents a camera from being invoked on the lock screen.\r\n\r\nBy default, users can enable invocation of an available camera on the lock screen.\r\n\r\nIf you enable this setting, users will no longer be able to enable or disable lock screen camera access in PC Settings, and the camera cannot be invoked on the lock screen.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-devicelock#devicelock-preventenablinglockscreencamera"],"options":[{"id":"device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_preventenablinglockscreencamera_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow","displayName":"Prevent enabling lock screen slide show","description":"Disables the lock screen slide show settings in PC Settings and prevents a slide show from playing on the lock screen.\r\n\r\nBy default, users can enable a slide show that will run after they lock the machine.\r\n\r\nIf you enable this setting, users will no longer be able to modify slide show settings in PC Settings, and no slide show will ever start.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-devicelock#devicelock-preventlockscreenslideshow"],"options":[{"id":"device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_devicelock_preventlockscreenslideshow_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode","displayName":"Configure Multiple Display Mode","description":"Set the default display arrangement as clone, extend, internalOnly, externalOnly or default Windows Settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#configuremultipledisplaymode"],"options":[{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_0","displayName":"Default.","description":"Default.","helpText":null},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_1","displayName":"Internal Only.","description":"Internal Only.","helpText":null},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_2","displayName":"External Only.","description":"External Only.","helpText":null},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_3","displayName":"Clone.","description":"Clone.","helpText":null},{"id":"device_vendor_msft_policy_config_display_configuremultipledisplaymode_4","displayName":"Extend.","description":"Extend.","helpText":null}]},{"id":"device_vendor_msft_policy_config_display_disableperprocessdpiforapps","displayName":"Disable Per Process Dpi For Apps","description":"This policy allows you to disable Per-Process System DPI for a semicolon-separated list of applications. Applications can be specified either by using full paths or with filenames and extensions. This policy will override the system-wide default value.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#disableperprocessdpiforapps"],"options":null},{"id":"device_vendor_msft_policy_config_display_enableperprocessdpi","displayName":"Enable Per Process Dpi","description":"Enable or disable Per-Process System DPI for all applications.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#enableperprocessdpi"],"options":[{"id":"device_vendor_msft_policy_config_display_enableperprocessdpi_0","displayName":"Disabled","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_display_enableperprocessdpi_1","displayName":"Enabled","description":"Enable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_display_enableperprocessdpiforapps","displayName":"Enable Per Process Dpi For Apps","description":"This policy allows you to enable Per-Process System DPI for a semicolon-separated list of applications. Applications can be specified either by using full paths or with filenames and extensions. This policy will override the system-wide default value.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#enableperprocessdpiforapps"],"options":null},{"id":"device_vendor_msft_policy_config_display_turnoffgdidpiscalingforapps","displayName":"Turn Off Gdi DPI Scaling For Apps","description":"This policy allows to force turn off GDI DPI Scaling for a semicolon separated list of applications. Applications can be specified either by using full path or just filename and extension.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#turnoffgdidpiscalingforapps"],"options":null},{"id":"device_vendor_msft_policy_config_display_turnongdidpiscalingforapps","displayName":"Turn On Gdi DPI Scaling For Apps","description":"This policy allows to turn on GDI DPI Scaling for a semicolon separated list of applications. Applications can be specified either by using full path or just filename and extension.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Display#turnongdidpiscalingforapps"],"options":null},{"id":"device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy","displayName":"Device Enumeration Policy","description":"This policy is intended to provide additional security against external DMA capable devices. It allows for more control over the enumeration of external DMA capable devices incompatible with DMA Remapping/device memory isolation and sandboxing. Device memory sandboxing allows the OS to leverage the I/O Memory Management Unit (IOMMU) of a device to block unallowed I/O, or memory access, by the peripheral. In other words, the OS assigns a certain memory range to the peripheral. If the peripheral attempts to read/write to memory outside of the assigned range, the OS blocks it. This policy only takes effect when Kernel DMA Protection is supported and enabled by the system firmware. Kernel DMA Protection is a platform feature that cannot be controlled via policy or by end user. It has to be supported by the system at the time of manufacturing. To check if the system supports Kernel DMA Protection, please check the Kernel DMA Protection field in the Summary page of MSINFO32. exe. NoteThis policy does not apply to 1394/Firewire, PCMCIA, CardBus, or ExpressCard devices. Supported values:0 - Block all (Most restrictive): Devices with DMA remapping compatible drivers will be allowed to enumerate at any time. Devices with DMA remapping incompatible drivers will never be allowed to start and perform DMA at any time. 1 - Only after log in/screen unlock (Default): Devices with DMA remapping compatible drivers will be allowed to enumerate at any time. Devices with DMA remapping incompatible drivers will only be enumerated after the user unlocks the screen2 - Allow all (Least restrictive): All external DMA capable PCIe devices will be enumerated at any time","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-dmaguard#deviceenumerationpolicy"],"options":[{"id":"device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_0","displayName":"Block all (Most restrictive)","description":"Block all (Most restrictive)","helpText":null},{"id":"device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_1","displayName":"Only after log in/screen unlock","description":"Only after log in/screen unlock","helpText":null},{"id":"device_vendor_msft_policy_config_dmaguard_deviceenumerationpolicy_2","displayName":"Allow all (Least restrictive)","description":"Allow all (Least restrictive)","helpText":null}]},{"id":"device_vendor_msft_policy_config_eap_allowtls1_3","displayName":"Allow TLS13","description":"Added in Windows 10, version 21H1. Allow or disallow use of TLS 1.3 during EAP client authentication.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Eap#allowtls1_3"],"options":[{"id":"device_vendor_msft_policy_config_eap_allowtls1_3_0","displayName":"Use of TLS version 1.3 is not allowed for authentication.","description":"Use of TLS version 1.3 is not allowed for authentication.","helpText":null},{"id":"device_vendor_msft_policy_config_eap_allowtls1_3_1","displayName":"Use of TLS version 1.3 is allowed for authentication.","description":"Use of TLS version 1.3 is allowed for authentication.","helpText":null}]},{"id":"device_vendor_msft_policy_config_education_enableeduthemes","displayName":"Enable Edu Themes","description":"This policy setting allows you to control whether EDU-specific theme packs are available in Settings > Personalization. If you disable or don't configure this policy setting, EDU-specific theme packs will not be included. If you enable this policy setting, users will be able to personalize their devices with EDU-specific themes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Education#enableeduthemes"],"options":[{"id":"device_vendor_msft_policy_config_education_enableeduthemes_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_education_enableeduthemes_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_education_iseducationenvironment","displayName":"Is Education Environment","description":"This policy setting allows tenant to control whether to declare this OS as an education environment","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Education#iseducationenvironment"],"options":[{"id":"device_vendor_msft_policy_config_education_iseducationenvironment_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_education_iseducationenvironment_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings","displayName":"Customize consent settings","description":"This policy setting determines the consent behavior of Windows Error Reporting for specific event types.\r\n\r\nIf you enable this policy setting, you can add specific event types to a list by clicking Show, and typing event types in the Value Name column of the Show Contents dialog box. Event types are those for generic, non-fatal errors: crash, no response, and kernel fault errors. For each specified event type, you can set a consent level of 0, 1, 2, 3, or 4.\r\n\r\n- 0 (Disable): Windows Error Reporting sends no data to Microsoft for this event type.\r\n\r\n- 1 (Always ask before sending data): Windows prompts the user for consent to send reports.\r\n\r\n- 2 (Send parameters): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, and Windows prompts the user for consent to send any additional data requested by Microsoft.\r\n\r\n- 3 (Send parameters and safe additional data): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, as well as data which Windows has determined (within a high probability) does not contain personally identifiable data, and prompts the user for consent to send any additional data requested by Microsoft.\r\n\r\n- 4 (Send all data): Any data requested by Microsoft is sent automatically.\r\n\r\nIf you disable or do not configure this policy setting, then the default consent settings that are applied are those specified by the user in Control Panel, or in the Configure Default Consent policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-customizeconsentsettings"],"options":[{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_werconsentcustomize","displayName":"Customize consent settings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_werconsentcustomize_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_errorreporting_customizeconsentsettings_werconsentcustomize_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting","displayName":"Disable Windows Error Reporting","description":"This policy setting turns off Windows Error Reporting, so that reports are not collected or sent to either Microsoft or internal servers within your organization when software unexpectedly stops working or fails.\r\n\r\nIf you enable this policy setting, Windows Error Reporting does not send any problem information to Microsoft. Additionally, solution information is not available in Security and Maintenance in Control Panel.\r\n\r\nIf you disable or do not configure this policy setting, the Turn off Windows Error Reporting policy setting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings takes precedence. If Turn off Windows Error Reporting is also either disabled or not configured, user settings in Control Panel for Windows Error Reporting are applied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-disablewindowserrorreporting"],"options":[{"id":"device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_disablewindowserrorreporting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_errorreporting_displayerrornotification","displayName":"Display Error Notification","description":"This policy setting controls whether users are shown an error dialog box that lets them report an error.\r\n\r\nIf you enable this policy setting, users are notified in a dialog box that an error has occurred, and can display more details about the error. If the Configure Error Reporting policy setting is also enabled, the user can also report the error.\r\n\r\nIf you disable this policy setting, users are not notified that errors have occurred. If the Configure Error Reporting policy setting is also enabled, errors are reported, but users receive no notification. Disabling this policy setting is useful for servers that do not have interactive users.\r\n\r\nIf you do not configure this policy setting, users can change this setting in Control Panel, which is set to enable notification by default on computers that are running Windows XP Personal Edition and Windows XP Professional Edition, and disable notification by default on computers that are running Windows Server.\r\n\r\nSee also the Configure Error Reporting policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-displayerrornotification"],"options":[{"id":"device_vendor_msft_policy_config_errorreporting_displayerrornotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_displayerrornotification_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata","displayName":"Do not send additional data","description":"This policy setting controls whether additional data in support of error reports can be sent to Microsoft automatically.\r\n\r\nIf you enable this policy setting, any additional data requests from Microsoft in response to a Windows Error Reporting report are automatically declined, without notification to the user.\r\n\r\nIf you disable or do not configure this policy setting, then consent policy settings in Computer Configuration/Administrative Templates/Windows Components/Windows Error Reporting/Consent take precedence.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-donotsendadditionaldata"],"options":[{"id":"device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_donotsendadditionaldata_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay","displayName":"Prevent display of the user interface for critical errors","description":"This policy setting prevents the display of the user interface for critical errors.\r\n\r\nIf you enable or do not configure this policy setting, Windows Error Reporting does not display any GUI-based error messages or dialog boxes for critical errors.\r\n\r\nIf you disable this policy setting, Windows Error Reporting displays the GUI-based error messages or dialog boxes for critical errors.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-errorreporting#errorreporting-preventcriticalerrordisplay"],"options":[{"id":"device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_errorreporting_preventcriticalerrordisplay_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior","displayName":"Control Event Log behavior when the log file reaches its maximum size","description":"This policy setting controls Event Log behavior when the log file reaches its maximum size.\r\n\r\nIf you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost.\r\n\r\nIf you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events.\r\n\r\nNote: Old events may or may not be retained according to the \"Backup log automatically when full\" policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-eventlogservice#eventlogservice-controleventlogbehavior"],"options":[{"id":"device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_eventlogservice_controleventlogbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog","displayName":"Specify the maximum log file size (KB)","description":"This policy setting specifies the maximum size of the log file in kilobytes.\r\n\r\nIf you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.\r\n\r\nIf you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 1 megabyte.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-eventlogservice#eventlogservice-specifymaximumfilesizeapplicationlog"],"options":[{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizeapplicationlog_channel_logmaxsize","displayName":"Maximum Log Size (KB)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog","displayName":"Specify the maximum log file size (KB)","description":"This policy setting specifies the maximum size of the log file in kilobytes.\r\n\r\nIf you enable this policy setting, you can configure the maximum log file size to be between 20 megabytes (20480 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.\r\n\r\nIf you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 20 megabytes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-eventlogservice#eventlogservice-specifymaximumfilesizesecuritylog"],"options":[{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesecuritylog_channel_logmaxsize","displayName":"Maximum Log Size (KB)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog","displayName":"Specify the maximum log file size (KB)","description":"This policy setting specifies the maximum size of the log file in kilobytes.\r\n\r\nIf you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.\r\n\r\nIf you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 1 megabyte.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-eventlogservice#eventlogservice-specifymaximumfilesizesystemlog"],"options":[{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_eventlogservice_specifymaximumfilesizesystemlog_channel_logmaxsize","displayName":"Maximum Log Size (KB)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_experience_allowclipboardhistory","displayName":"Allow Clipboard History","description":"Allows history of clipboard items to be stored in memory.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowclipboardhistory"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowclipboardhistory_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowclipboardhistory_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowcortana","displayName":"Allow Cortana","description":"Specifies whether Cortana is allowed on the device. If you enable or don’t configure this setting, Cortana is allowed on the device. If you disable this setting, Cortana is turned off. When Cortana is off, users will still be able to use search to find items on the device. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowcortana"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowcortana_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowcortana_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowdevicediscovery","displayName":"Allow Device Discovery","description":"Allows users to turn on/off device discovery UX. When set to 0 , the projection pane is disabled. The Win+P and Win+K shortcut keys will not work on. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowdevicediscovery"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowdevicediscovery_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowdevicediscovery_1","displayName":"Allow","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowfindmydevice","displayName":"Allow Find My Device","description":"This policy turns on Find My Device. When Find My Device is on, the device and its location are registered in the cloud so that the device can be located when the user initiates a Find command from account. microsoft. com. In Windows 10, version 1709 devices that are compatible with active digitizers, enabling Find My Device will also allow the user to view the last location of use of their active digitizer on their device; this location is stored locally on the user's device after each use of their active digitizer. When Find My Device is off, the device and its location are not registered and the Find My Device feature will not work. In Windows 10, version 1709 the user will not be able to view the location of the last use of their active digitizer on their device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowfindmydevice"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowfindmydevice_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowfindmydevice_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment","displayName":"Allow Manual MDM Unenrollment","description":"Specifies whether to allow the user to delete the workplace account using the workplace control panel. If the device is Azure Active Directory joined and MDM enrolled (e. g. auto-enrolled), then disabling the MDM unenrollment has no effect. Note The MDM server can always remotely delete the account. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowmanualmdmunenrollment"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowmanualmdmunenrollment_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowsaveasofofficefiles","displayName":"Allow Save As Of Office Files","description":"This policy is deprecated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowsaveasofofficefiles"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowsaveasofofficefiles_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowsaveasofofficefiles_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowscreencapture","displayName":"Allow Screen Capture","description":"Allow screen capture","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowscreencapture"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowscreencapture_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowscreencapture_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim","displayName":"Allow SIM Error Dialog Prompt When No SIM","description":"Allow SIM error diaglog prompts when no SIM is inserted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowsimerrordialogpromptwhennosim"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowsimerrordialogpromptwhennosim_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowsyncmysettings","displayName":"Allow Sync My Settings","description":"Allows or disallows all Windows sync settings on the device. For information about what settings are sync'ed, see About sync setting on Windows 10 devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowsyncmysettings"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowsyncmysettings_0","displayName":"Block","description":"Sync settings are not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowsyncmysettings_1","displayName":"Allow","description":"Sync settings allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures","displayName":"Allow Windows Consumer Features","description":"This policy allows IT admins to turn on experiences that are typically for consumers only, such as Start suggestions, Membership notifications, Post-OOBE app install and redirect tiles.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#allowwindowsconsumerfeatures"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowwindowsconsumerfeatures_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_allowwindowstips","displayName":"Allow Windows Tips","description":"Enables or disables Windows Tips / soft landing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#allowwindowstips"],"options":[{"id":"device_vendor_msft_policy_config_experience_allowwindowstips_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_allowwindowstips_1","displayName":"Allow","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_configurechaticon","displayName":"Configure Chat Icon","description":"Configures the Chat icon on the taskbar\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Experience#configurechaticonvisibilityonthetaskbar"],"options":[{"id":"device_vendor_msft_policy_config_experience_configurechaticon_0","displayName":"Windows default","description":"Not configured","helpText":null},{"id":"device_vendor_msft_policy_config_experience_configurechaticon_1","displayName":"Show","description":"Show","helpText":null},{"id":"device_vendor_msft_policy_config_experience_configurechaticon_2","displayName":"Hide","description":"Hide","helpText":null},{"id":"device_vendor_msft_policy_config_experience_configurechaticon_3","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent","displayName":"Disable Cloud Optimized Content","description":"This policy controls Windows experiences that use the cloud optimized content client component. If you enable this policy, they will present only default content. If you disable or do not configure this policy, they will be able to use cloud provided content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#disablecloudoptimizedcontent"],"options":[{"id":"device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_disablecloudoptimizedcontent_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent","displayName":"Disable Consumer Account State Content","description":"This policy controls Windows experiences that use the cloud consumer account state content client component. If you enable this policy, they will present only default content. If you disable or do not configure this policy, they will be able to use cloud provided content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#disableconsumeraccountstatecontent"],"options":[{"id":"device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_disableconsumeraccountstatecontent_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_disableshareapppromotions","displayName":"Disable Share App Promotions","description":"This policy setting allow IT admins to control whether promotional apps are displayed in the Share sheet. If you enable this policy, Windows will not show promotional apps in the Share sheet. If you disable or do not configure this policy, Share sheet may show app suggestions and promotions when the Share sheet is opened.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#disableshareapppromotions"],"options":[{"id":"device_vendor_msft_policy_config_experience_disableshareapppromotions_0","displayName":"Promotional Apps on ShareSheet are Enabled.","description":"Promotional Apps on ShareSheet are Enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_disableshareapppromotions_1","displayName":"Promotional Apps on ShareSheet are Disabled.","description":"Promotional Apps on ShareSheet are Disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications","displayName":"Do Not Show Feedback Notifications","description":"Prevents devices from showing feedback questions from Microsoft. If you enable this policy setting, users will no longer see feedback notifications through the Feedback hub app. If you disable or do not configure this policy setting, users may see notifications through the Feedback hub app asking users for feedback. If you disable or do not configure this policy setting, users can control how often they receive feedback questions.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#donotshowfeedbacknotifications"],"options":[{"id":"device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications_0","displayName":"Feedback notifications are not disabled. The actual state of feedback notifications on the device will then depend on what GP has configured or what the user has configured locally.","description":"Feedback notifications are not disabled. The actual state of feedback notifications on the device will then depend on what GP has configured or what the user has configured locally.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_donotshowfeedbacknotifications_1","displayName":"Feedback notifications are disabled.","description":"Feedback notifications are disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_donotsyncbrowsersettings","displayName":"Do Not Sync Browser Settings","description":"You can configure Microsoft Edge, when enabled, to prevent the \"browser\" group from using the Sync your Settings option to sync information, such as history and favorites, between user's devices. If you want syncing turned off by default in Microsoft Edge but not disabled, enable the Allow users to turn browser syncing on policy. If disabled or not configured, the Sync your Settings options are turned on in Microsoft Edge by default, and configurable by the user. Related policy: PreventUsersFromTurningOnBrowserSyncing 0 (default) = allow syncing, 2 = disable syncing","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#donotsyncbrowsersettings"],"options":[{"id":"device_vendor_msft_policy_config_experience_donotsyncbrowsersettings_2","displayName":"Disable Syncing","description":"Disable Syncing","helpText":null},{"id":"device_vendor_msft_policy_config_experience_donotsyncbrowsersettings_0","displayName":"Allow syncing","description":"Allow syncing","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing","displayName":"Prevent Users From Turning On Browser Syncing","description":"You can configure Microsoft Edge to allow users to turn on the Sync your Settings option to sync information, such as history and favorites, between user's devices. When enabled and you enable the Do not sync browser setting policy, browser settings sync automatically. If disabled, users have the option to sync the browser settings. Related policy: DoNotSyncBrowserSettings 1 (default) = Do not allow users to turn on syncing, 0 = Allows users to turn on syncing","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#preventusersfromturningonbrowsersyncing"],"options":[{"id":"device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing_0","displayName":"Disabled","description":"Allowed/turned on. Users can sync the browser settings.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_preventusersfromturningonbrowsersyncing_1","displayName":"Enabled","description":"Prevented/turned off.","helpText":null}]},{"id":"device_vendor_msft_policy_config_experience_showlockonusertile","displayName":"Show Lock On User Tile","description":"Shows or hides lock from the user tile menu. If you enable this policy setting, the lock option will be shown in the User Tile menu. If you disable this policy setting, the lock option will never be shown in the User Tile menu. If you do not configure this policy setting, users will be able to choose whether they want lock to show through the Power Options Control Panel.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Experience#showlockonusertile"],"options":[{"id":"device_vendor_msft_policy_config_experience_showlockonusertile_0","displayName":"Disabled","description":"The lock option is not displayed in the User Tile menu.","helpText":null},{"id":"device_vendor_msft_policy_config_experience_showlockonusertile_1","displayName":"Enabled","description":"The lock option is displayed in the User Tile menu.","helpText":null}]},{"id":"device_vendor_msft_policy_config_exploitguard_exploitprotectionsettings","displayName":"Exploit Protection Settings","description":"Enables the IT admin to push out a configuration representing the desired system and application mitigation options to all the devices in the organization. The configuration is represented by an XML. For more information Exploit Protection, see Enable Exploit Protection on Devices and Import, export, and deploy Exploit Protection configurations. The system settings require a reboot; the application settings do not require a reboot.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ExploitGuard#exploitprotectionsettings"],"options":null},{"id":"device_vendor_msft_policy_config_federatedauthentication_enablewebsigninforprimaryuser","displayName":"Enable Web Sign In For Primary User","description":"Specifies whether web-based sign-in is enabled with the Primary User experience","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FederatedAuthentication#enablewebsigninforprimaryuser"],"options":[{"id":"device_vendor_msft_policy_config_federatedauthentication_enablewebsigninforprimaryuser_0","displayName":"Feature defaults as appropriate for edition and device capabilities. As of now, all editions/devices exhibit Disabled behavior by default. However, this may change for future editions/devices.","description":"Feature defaults as appropriate for edition and device capabilities. As of now, all editions/devices exhibit Disabled behavior by default. However, this may change for future editions/devices.","helpText":null},{"id":"device_vendor_msft_policy_config_federatedauthentication_enablewebsigninforprimaryuser_1","displayName":"Enabled. Web Sign-in Credential Provider will be enabled for device sign-in.","description":"Enabled. Web Sign-in Credential Provider will be enabled for device sign-in.","helpText":null},{"id":"device_vendor_msft_policy_config_federatedauthentication_enablewebsigninforprimaryuser_2","displayName":"Disabled. Web Sign-in Credential Provider will be not be enabled for device sign-in.","description":"Disabled. Web Sign-in Credential Provider will be not be enabled for device sign-in.","helpText":null}]},{"id":"device_vendor_msft_policy_config_feeds_feedsenabled","displayName":"Enable News and interests","description":"This policy setting specifies whether News and interests is allowed on the device.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_feeds_feedsenabled_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_feeds_feedsenabled_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork","displayName":"Allow Option To Show Network","description":"When the Network folder is restricted, give the user the option to enumerate and navigate into it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#allowoptiontoshownetwork"],"options":[{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_0","displayName":"Not Allowed.","description":"Not Allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshownetwork_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc","displayName":"Allow Option To Show This PC","description":"When This PC location is restricted, give the user the option to enumerate and navigate into it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#allowoptiontoshowthispc"],"options":[{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_0","displayName":"Not Allowed.","description":"Not Allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_allowoptiontoshowthispc_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems","displayName":"Disable Graph Recent Items","description":"Turning off files from Office.com will prevent File Explorer from requesting recent cloud file metadata and displaying it in the Quick access view.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#disablegraphrecentitems"],"options":[{"id":"device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems_0","displayName":"File Explorer will request cloud file metadata and display it in the Quick access view.","description":"File Explorer will request cloud file metadata and display it in the Quick access view.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_disablegraphrecentitems_1","displayName":"File Explorer will not request cloud file metadata or display it in the Quick access view.","description":"File Explorer will not request cloud file metadata or display it in the Quick access view.","helpText":null}]},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations","displayName":"Set Allowed Folder Locations","description":"A value that can represent one or more folder locations in File Explorer. If not specified, the default is access to all folder locations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#setallowedfolderlocations"],"options":[{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_0","displayName":"Access to all folder locations.","description":"Access to all folder locations.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_13","displayName":"Documents, Pictures, Downloads","description":"Documents, Pictures, Downloads","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_15","displayName":"Desktop, Documents, Pictures, Downloads","description":"Desktop, Documents, Pictures, Downloads","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_31","displayName":"Desktop, Documents, Pictures, Downloads, Network","description":"Desktop, Documents, Pictures, Downloads, Network","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_47","displayName":"This PC, Desktop, Documents, Pictures, Downloads","description":"This PC, Desktop, Documents, Pictures, Downloads","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedfolderlocations_63","displayName":"This PC, Desktop, Documents, Pictures, Downloads, Network","description":"This PC, Desktop, Documents, Pictures, Downloads, Network","helpText":null}]},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations","displayName":"Set Allowed Storage Locations","description":"A value that can represent one or more storage locations in File Explorer. If not specified, the default is access to all storage locations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-FileExplorer#setallowedstoragelocations"],"options":[{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_0","displayName":"Access to all storage locations.","description":"Access to all storage locations.","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_1","displayName":"Removable Drives","description":"Removable Drives","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_2","displayName":"Sync roots","description":"Sync roots","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_3","displayName":"Removable Drives, Sync roots","description":"Removable Drives, Sync roots","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_4","displayName":"Local Drives","description":"Local Drives","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_5","displayName":"Removable Drives, Local Drives","description":"Removable Drives, Local Drives","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_6","displayName":"Sync Roots, Local Drives","description":"Sync Roots, Local Drives","helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_setallowedstoragelocations_7","displayName":"Removable Drives, Sync Roots, Local Drives","description":"Removable Drives, Sync Roots, Local Drives","helpText":null}]},{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffdataexecutionpreventionforexplorer","displayName":"Turn off Data Execution Prevention for Explorer","description":"Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-fileexplorer#fileexplorer-turnoffdataexecutionpreventionforexplorer"],"options":[{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffdataexecutionpreventionforexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffdataexecutionpreventionforexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption","displayName":"Turn off heap termination on corruption","description":"Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-fileexplorer#fileexplorer-turnoffheapterminationoncorruption"],"options":[{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fileexplorer_turnoffheapterminationoncorruption_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_filesystem_devdriveattachpolicy","displayName":"Dev drive filter attach policy","description":"Dev drive is a drive optimized for performance considering developer scenarios and by default no file system filters are attached to it. Filters listed in this setting will be allowed to attach even on a dev drive.\r\n\r\nA reboot is required for this setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-filesystem#filesystem-devdriveattachpolicy"],"options":[{"id":"device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_filesystem_devdriveattachpolicy_devdriveattachpolicy","displayName":"Filter list (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive","displayName":"Enable dev drive","description":"Dev drive or developer volume is a volume optimized for performance of developer scenarios. A developer volume allows an administrator to choose file system filters that are attached on the volume.\r\n\r\nDisabling this setting will disallow creation of new developer volumes, existing developer volumes will mount as regular volumes.\r\n\r\nIf this setting is not configured the default policy is to enable developer volumes while allowing antivirus filter to attach on a deveveloper volume. Further, if not configured, a local administrator can choose to not have antivirus filter attached to a developer volume.\r\n\r\nA reboot is required for this setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-filesystem#filesystem-enabledevdrive"],"options":[{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter","displayName":"Let antivirus filter protect dev drives (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_filesystem_enabledevdrive_devdriveallowantivirusfilter_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions","displayName":"Clean-up Invalid Sessions","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nCleans out registry keys in the HKEY_LOCAL_MACHINE hive that refer to a users SID.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Apps\\CleanupInvalidSessions\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_cleanupinvalidsessions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_roamrecyclebin","displayName":"Roam Recycle Bin","description":"[ENABLED BY DEFAULT]\r\n\r\nNOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nCreates a redirection for the user's specific Recycle Bin into the VHD(x) container. Limited to the Recycle Bin on the System Drive only.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Apps\\RoamRecycleBin\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_roamrecyclebin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_roamrecyclebin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk","displayName":"VHD Compact Disk","description":"[ENABLED BY DEFAULT]\r\n\r\nNOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nCompacts the VHD disk during the sign-out operation and is designed to automatically decrease the Size On Disk of the user's container(s) depending on a pre-defined threshold.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Apps\\VHDCompactDisk\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix_vhdcompactdisk_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory","displayName":"Cache Directory","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the location of the local cache location.\r\n\r\nRegistry Entry: HKLM\\SYSTEM\\CurrentControlSet\\Services\\frxccd\\Parameters\\CacheDirectory\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdcachedirectory_ccdcachedirectory","displayName":"Cache Directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory","displayName":"Proxy Directory","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the location of the proxy disk location. This location must not be on a network path.\r\n\r\nRegistry Entry: HKLM\\SYSTEM\\CurrentControlSet\\Services\\frxccds\\Parameters\\ProxyDirectory\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdproxydirectory_ccdproxydirectory","displayName":"Proxy Directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory","displayName":"Write Cache Directory","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the location of the write cache file location. This location must not be on a network path.\r\n\r\nRegistry Entry: HKLM\\SYSTEM\\CurrentControlSet\\Services\\frxccds\\Parameters\\WriteCacheDirectory\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~ccd_ccdwritecachedirectory_ccdwritecachedirectory","displayName":"Write Cache Directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess","displayName":"AD Computer Group Process","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the AD Computer Group Processing.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\AdsComputerGroup\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingadcomputergroupprocess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface","displayName":"Driver Interface","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the driver interface.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\DriverInterface\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingdriverinterface_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled","displayName":"Enabled","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSelect how FSLogix should enable logging. All logs is the default setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\LoggingEnabled\r\nValues: 0 = No Logs, 1 = Specific Logs, 2 = All Logs","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_0","displayName":"Logging Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_1","displayName":"Specific Logs Only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingenabled_loggingenabled_2","displayName":"Enable All Logs","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility","displayName":"Font Visibility","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Font visibility setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Font\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfontvisibility_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfrxlauncher","displayName":"FrxLauncher","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Java Launcher.\r\n\r\nRegistry Entry:HKLM\\SOFTWARE\\FSLogix\\Logging\\FrxLauncher\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfrxlauncher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingfrxlauncher_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin","displayName":"IE plugin","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the IE Plugin.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\IEPlugin\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingieplugin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingjavaruleeditor","displayName":"Java rule editor","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging fo the Java Rule Editor.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\JavaRuleEditor\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingjavaruleeditor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingjavaruleeditor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory","displayName":"Log Directory","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the location where log files should be stored. Local and UNC paths are accepted. Default is %ProgramData%\\FSLogix\\Logs\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\LogDir\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogdirectory_logginglogdirectory","displayName":"Log Directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod","displayName":"Log Keeping Period","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies how many days worth of log files to keep before being cleaned up.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\LogFileKeepingPeriod\r\nType: DWORD\r\nValues: Min = 0, Max = 180","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_logginglogkeepingperiod_logginglogkeepingperiod","displayName":"Log Keeping Period (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork","displayName":"Network","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Network component.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Network\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingnetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer","displayName":"ODFC Container","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\ODFC\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingodfccontainer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility","displayName":"Printer Visibility","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Printer visibility component.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Printer\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprintervisibility_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart","displayName":"Process Start","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Start Process component.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\ProcessStart\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprocessstart_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool","displayName":"Profile Configuration Tool","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Profile Configuration Tool.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\ConfigTool\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofileconfigurationtool_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer","displayName":"Profile Container","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Profile Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Profile\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingprofilecontainer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation","displayName":"Rule Compilation","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging Rule Compilation component.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\RuleCompilation\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingrulecompilation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor","displayName":"Rule Editor","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Rule Editor.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\RuleEditor\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingruleeditor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin","displayName":"Search Plugin","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Search Plugin.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\SearchPlugin\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchplugin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming","displayName":"Search Roaming","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the Search Roam setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Search\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingsearchroaming_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices","displayName":"Services","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nEnables logging of the FSLogix services.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Logging\\Service\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~logging_loggingservices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer","displayName":"Access Network as Computer Object","description":"Attach as computer - folder must have permissions for computer objects.\r\n\r\nCAUTION: Do not use this configuration setting unless your storage provider or architecture will NOT work with user-level permissions to the VHD(x) container locations. This setting will allow the virtual machine to access all the VHD(x) files on the storage provider creating a potential security risk.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\AccessNetworkAsComputerObject\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcaccessnetworkascomputer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl","displayName":"Attached VHD SDDL","description":"SDDL string representing the ACLs to use when attaching the VHD.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\AttachVHDSDDL\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcattachedvhdsddl_odfcattachedvhdsddl","displayName":"Attached VHD SDDL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation","displayName":"Include Office Activation","description":"[ENABLED BY DEFAULT]\r\n\r\nOffice activation data is redirected to the container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOfficeActivation\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeofficeactivation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive","displayName":"Include OneDrive","description":"[ENABLED BY DEFAULT]\r\n\r\nOneDrive cache will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOneDrive\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonedrive_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote","displayName":"Include OneNote","description":"OneNote local notebook cache will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOneNote\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenote_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenoteuwp","displayName":"Include OneNote UWP","description":"OneNote UWP notebook data will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOneNote_UWP\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenoteuwp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeonenoteuwp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook","displayName":"Include Outlook","description":"[ENABLED BY DEFAULT]\r\n\r\nOutlook data files will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOutlook\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlook_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization","displayName":"Include Outlook Personalization","description":"[ENABLED BY DEFAULT]\r\n\r\nOutlook personalization data will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeOutlookPersonalization\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeoutlookpersonalization_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint","displayName":"Include Sharepoint","description":"[ENABLED BY DEFAULT]\r\n\r\nSharepoint data files will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeSharepoint\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludesharepoint_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype","displayName":"Include Skype","description":"[ENABLED BY DEFAULT]\r\n\r\nSkype for Business GAL (Global Address List) data files will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeSkype\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeskype_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams","displayName":"Include Teams","description":"Teams data files will be included in the ODFC Container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IncludeTeams\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcincludeteams_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd","displayName":"Is Dynamic (VHD)","description":"[ENABLED BY DEFAULT]\r\n\r\nVHD(x) containers will be dynamically allocated. VHD(x) file size will grow as data is added to the VHD(x). If disabled, VHD(x) containers that are auto-created will be fully allocated.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\IsDynamic\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcisdynamicvhd_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount","displayName":"Locked Retry Count","description":"Specifies the number of retries to perform when a VHD(x) file is locked (open by another process or computer). The default value is 12 retries which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\LockedRetryCount\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretrycount_odfclockedretrycount","displayName":"Locked Retry Count (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval","displayName":"Locked Retry Interval","description":"Specifies the number of seconds to wait between retries. The default value is 5 seconds which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\LockedRetryInterval\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfclockedretryinterval_odfclockedretryinterval","displayName":"Locked Retry Interval (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd","displayName":"Mirror Local OST To VHD","description":"Sync existing local OST file (if any) to the VHD(x) when a new VHD(x) is created.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\MirrorLocalOSTToVHD\r\nType: DWORD\r\nValues: 0 = Do not mirror, 1 = Copy to VHD, 2 = Move to VHD","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_0","displayName":"Do not mirror OST to VHD","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_1","displayName":"Copy OST to VHD","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcmirrorlocalosttovhd_odfcmirrorlocalosttovhd_2","displayName":"Move OST to VHD","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep","displayName":"Number Session VHD(s) To Keep","description":"This setting is used when VHDAccessMode is set to '3'. This controls the number of session VHD(x) containers that are persisted. For example, if this is set to '2' and the user creates a 3rd session, a new session VHD(x) will be created and used and it will be deleted when the 3rd session ends. Th default value is 2 sessions which is the same as \"Not Configured\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\NumSessionVHDsToKeep\r\nType: DWORD\r\nValues: Min = 0, Max = 10","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcnumbersessionvhdstokeep_odfcnumbersessionvhdstokeep","displayName":"Number Session VHD(s) To Keep (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled","displayName":"Enabled","description":"Enables ODFC containers which changes the location of some Office based data.\r\n\r\nCAUTION: ODFC containers are designed to work with other roaming profie solutions. It is recommended to only use Profile containers when using FSLogix.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\Enabled\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcodfcenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode","displayName":"Outlook Cached Mode","description":"When the ODFC Container is successfully attached, set Outlook to work in cached mode for the user. The setting change will only be effective for the specific user and for the length of the user session.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\OutlookCachedMode\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled (only if container is attached)","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookcachedmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath","displayName":"Outlook Folder Path","description":"Specifies the path to the user's Outlook data folder.\r\n\r\nDefault value: %userprofile%\\AppData\\Local\\Microsoft\\Outlook\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\OutlookFolderPath\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcoutlookfolderpath_odfcoutlookfolderpath","displayName":"Outlook Folder Path (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure","displayName":"Prevent Login With Failure","description":"Prevent user login when a failure occurs while attaching an FSLogix container.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\PreventLoginWithFailure\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithfailure_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile","displayName":"Prevent Login With Temp Profile","description":"Prevent user login when a user receives a temporary Windows profile.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\PreventLoginWithTempProfile\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcpreventloginwithtempprofile_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount","displayName":"Reattach Count","description":"When a VHD(x) volume is detached unexpectedly, the FSLogix system will attempt to re-attach the volume. This value specifies how many times to retry. The default value is 60 retries which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\ReAttachRetryCount\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachcount_odfcreattachcount","displayName":"Reattach Count (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval","displayName":"Reattach Interval","description":"When a VHD(x) volume is detached unexpectedly, the FSLogix system will attempt to reattach the volume. This value specifies the number of seconds to wait between retries. The default value is 10 seconds which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\ReAttachIntervalSeconds\r\nType: DWORD\r\nValues: Min = 1, Max = 60","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcreattachinterval_odfcreattachinterval","displayName":"Reattach Interval (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype","displayName":"Redirect Type","description":"Configures legacy or FSLogix advanced redirection. The default is '2' which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\RedirectType\r\nType: DWORD\r\nValues: Legacy = 1, FSLogix Redirection = 2","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype_1","displayName":"Legacy Redirection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcredirecttype_odfcredirecttype_2","displayName":"FSLogix Redirection","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy","displayName":"Refresh User Policy","description":"If a GPO is configured for an Office product that is included in the ODFC container, there may be a conflict with a previous user setting. Standard behavior is for the GPO to be applied, but when the ODFC container is read, the GPO will be over-written by the setting in the ODFC container. If the desire is for the GPO change to be universally applied, then enabling this setting should be done prior to the GPO update being applied. When this setting is enabled, the ODFC container will overwrite the previous user setting with the GPO setting.\r\n\r\nNOTE: There is a performance implication to enabling the RefreshUserPolicy. RefreshUserPolicy should only be enabled during a specific GPO and then should be set back to disabled.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\RefreshUserPolicy\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcrefreshuserpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff","displayName":"Remove Orphaned OST Files On Logoff","description":"Removes duplicate OST files.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\RemoveOrphanedOSTFilesOnLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcremoveorphanedostfilesonlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch","displayName":"Roam Search","description":"Enable search roaming in legacy Windows Operating Systems.\r\n\r\nNOTE: Do not use this setting with Windows Server 2019 (or later) or Windows 10 (or later). Newer operating systems support per-user search.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\RoamSearch\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Single User Search, 2 = Multi-user Search","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_1","displayName":"Single-user Search","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcroamsearch_odfcroamsearch_2","displayName":"Multi-user Search","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs","displayName":"Size In MBs","description":"Specify the size for auto-created VHD(X) files. The default is 30,000 (30GB) which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\SizeInMBs\r\nType: DWORD\r\nValues: Min = 500, Max = 1000000","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcsizeinmbs_odfcsizeinmbs","displayName":"Size In MBs (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode","displayName":"VHD Access Mode","description":"Controls whether the VHD/X file should be accessed directly or whether a difference disk should be used. The default is Direct Access (0) which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDAccessMode\r\nType: DWORD\r\nValues: 0 = Direct Access, 1 = DiffDisk on Network, 2 = Local DiffDisk, 3 = Unique Disk per Session","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_0","displayName":"Direct Access","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_1","displayName":"DiffDisk On Network","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_2","displayName":"Local DiffDisk","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdaccessmode_odfcvhdaccessmode_3","displayName":"Unique Disk per Session","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations","displayName":"VHD Locations","description":"Specifies the network location where the VHD(X) files are stored.\r\n\r\nExamples:\r\n- Sinlge location: \\\\\\\r\n- Multiple locations: \\\\\\;\\\\\\\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDLocations\r\nREG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdlocations_odfcvhdlocations","displayName":"VHD Locations (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize","displayName":"VHDX Sector Size","description":"This setting is only applicable if the virtual disk type is VHDX. The default is the sytem default which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDXSectorSize\r\nType: DWORD\r\nValues: 0 = System Default, 512, 4096","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize_512","displayName":"512 bytes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvhdxsectorsize_odfcvhdxsectorsize_4096","displayName":"4 KB","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx","displayName":"Volume Type (VHD or VHDX)","description":"Specifies the type of virtual disk to auto-create. The default is VHD which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VolumeType\r\nType: REG_SZ\r\nValues: VHD, VHDX","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx_vhd","displayName":"VHD","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumetypevhdorvhdx_odfcvolumetypevhdorvhdx_vhdx","displayName":"VHDX","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds","displayName":"Volume Wait Time (milliseconds)","description":"Specifies the number of milliseconds to wait for the volume to be attached by the system. The default is 20000 (20 sec) which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VolumeWaitTimeMS\r\nType: DWORD\r\nValues: Min = 1000, Max = 1000000","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc_odfcvolumewaittimemilliseconds_odfcvolumewaittimemilliseconds","displayName":"Volume Wait Time (milliseconds) (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations","displayName":"CCD Locations","description":"CCDLocations are formatted using a type and a connectionString separated using a ; as the delimiter. The type will accept either smb or azure. The connectionString for smb type must include the full UNC path to the file share. The connectionString for azure type should be secured as per the documentation (https://aka.ms/fslogix). The strings are case sensitive.\r\n\r\n- CCDLocations using SMB: type=smb,name=\"SMB Share 1\",connectionString=\\\\\\;type=smb,name=\"SMB Share 2\"connectionString=\\\\\\\r\n\r\n- CCDLocations using Azure (secure): type=smb,name=\"SMB Share 1\",connectionString=\\\\\\;type=azure,name=\"Azure Blob 1\",connectionString=\"|fslogix/stgacct1-connectionstring|\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\CCDLocations\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdlocations_odfcccdlocations","displayName":"CCD Locations (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs","displayName":"CCD Max Cache Size in MBs","description":"CcdMaxCacheSizeInMBs specifies the maximum local cache size in megabytes, per user, during normal operation. Normal operation assumes that all Cloud Cache providers are available, and that storage performance is adequate to accept I/O at the rate necessary to accommodate profile utilization.\r\n\r\nCAUTION: Do not use this setting unless the performance and technical aspects to this setting are fully understood as this setting is a leading cause to poor performance and has limited use cases.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\CcdMaxCacheSizeInMBs\r\nType: DWORD\r\nValues: Min (No Limit) = 0, Max = 10000000","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdmaxcachesizeinmbs_odfcccdmaxcachesizeinmbs","displayName":"CCD Max Cache Size in MBs (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout","displayName":"CCD Unregister Timeout","description":"CCD Unregister Timeout represents the number of seconds that a user's sign out will be delayed if the number of available providers is less than specified in Healthy Providers Required For Unregister.\r\n\r\nIf CCD Unregsiter Timeout is set to 0, then the user sign out will be held until the number of providers specified in Healthy Providers Required For Unregister are available. NOTE: If CCDUnregisterTimeout is set to 0, and the number of providers specified in Healthy Providers Required For Unregister is not met, then the user's sign out may appear to the user as if the session is locked. The sign out may be held infinitely.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\CCDUnregisterTimeout\r\nType: DWORD\r\nValues: Min = 0, Max = 10000000","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcccdunregistertimeout_odfcccdunregistertimeout","displayName":"CCD Unregister Timeout (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister","displayName":"Clear Cache On Forced Unregister","description":"If the desired behavior is for the local cache to be deleted, even if the data has not been flushed to a CCD Location, then Clear Cache On Forced Unregister should be set to Enabled. Setting Clear Cache On Forced Unregister to Enabled may result in user data saved in the registry to be lost during the current session. It is important to understand that this data isn't recoverable if the local cache is cleared in this scenario. Verify that you understand the implications of changing the default value of this setting prior to making changes.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\ClearCacheOnForcedUnregister\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonforcedunregister_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff","displayName":"Clear Cache On Logoff","description":"By default, the Local Cache file won't be removed when the user sign out. If a user accesses a system where it's desirable to have the Local Cache file deleted when they sign out, set Clear Cache On Logoff to Enabled.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\ClearCacheOnLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfcclearcacheonlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister","displayName":"Healthy Providers Required For Register","description":"This setting specifies the number of healthy CCD Locations required to allow a sign in. If using the default setting, users will always be allowed to sign in, even if no CCD Locations are available.\r\n\r\nIf a user signs in with no available CCD Locations, FSLogix assumes that one or more CCD Locations will become available prior to the user signing out. If a CCD Locations does not become available during the time of the user session, then the user is prevented from signing out (discussed in Healthy Provider Required For Unregister).\r\n\r\nIf it is desired to block a user from signing in and a minimum number of CCD Locations are not available, the Healthy Providers Required For Register may be set to the number of CCD Locations required for a sign in.\r\n\r\nIf the minimum number of CCD Locations required for registration aren't available, then the sign in will fail. When setting Healthy Providers Required For Register to anything other than 0, then Prevent Login With Failure and/or Preven tLogin With Temp Profile should be used in order to create the desired user experience.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\HealthyProvidersRequiredForRegister\r\nType: DWORD\r\nValues: Min = 0, Max = 4","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforregister_odfchealthyprovidersrequiredforregister","displayName":"Healthy Providers Required For Register (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister","displayName":"Healthy Providers Required For Unregister","description":"This setting specifies the number of healthy CCD Locations required for a user to sign out. The default setting is 1, meaning that at least one remote CCD Location is required for the user to sign out.\r\n\r\nIf the number of available CCD Locations, when a user attempts to sign out, is less than the number set for Healthy Providers Required For Unregister, the user's sign out will be prevented for the time specified in CCD Unregister Timeout.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\HealthyProvidersRequiredForUnregister\r\nType: DWORD\r\nValues: Min = 0, Max = 4","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_ccd_odfchealthyprovidersrequiredforunregister_odfchealthyprovidersrequiredforunregister","displayName":"Healthy Providers Required For Unregister (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath","displayName":"Diff Disk Parent Folder Path","description":"Specifies the path where difference disks will be created (when ProfileType or VHDAccessMode is configured to use them).\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\DiffDiskParentFolderPath\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcdiffdiskparentfolderpath_odfcdiffdiskparentfolderpath","displayName":"Diff Disk Parent Folder Path (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcflipflopprofiledirectoryname","displayName":"Flip Flop Profile Directory Name","description":"SID folder is created as %username%_%sid% instead of the default %sid%_%username%.\r\n\r\nNOTE:\r\n- This setting will OVERRIDE both SIDDirNameMatch and SIDDirNamePattern\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > (SIDDirNameMatch and SIDDirNamePattern)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\FlipFlopProfileDirectoryName\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcflipflopprofiledirectoryname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcflipflopprofiledirectoryname_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder","displayName":"No Profile Containing Folder","description":"VHD(x) file is placed and used in the root VHDLocation rather than in a SID directory under VHDLocation\r\n\r\nNOTE: This setting will override ANY OTHER setting related to container folders.\r\n\r\n- SIDDIRNameMatch has NO EFFECT when used in conjunction with this setting.\r\n- SIDDIRNamePattern has NO EFFECT when used in conjunction with this setting.\r\n- FlipFlopProfileDirectoryName has NO EFFECT when used in conjunction with this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\NoProfileContainingFolder\r\nType: DWORD\r\nValues: 0 = Disable, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcnoprofilecontainingfolder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch","displayName":"SID Directory Name Match","description":"Specifies a string pattern used when matching a Profile or ODFC container folder. Use this setting to define how FSLogix will attempt to locate a users Profile or ODFC container. FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to search.\r\n\r\nNOTE: When using this configuration setting, be sure the SIDDIRNamePattern value matches this setting.\r\n\r\n- This setting has NO EFFECT when FlipFlopProfileDirectoryName is enabled.\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled.\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > SIDDirNameMatch (this setting)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\SIDDirNameMatch\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamematch_odfcsiddirectorynamematch","displayName":"SID Directory Name Match (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern","displayName":"SID Directory Name Pattern","description":"Specifies a string pattern used when creating a Profile or ODFC container folder. Use this setting to define how FSLogix will attempt to create a users Profile or ODFC container folder. FSLogix will use the VHDLocations or CCDLocations as the location where to create and this setting defines what to create.\r\n\r\nNOTE: When using this configuration setting, be sure the SIDDIRNameMatch value matches this setting.\r\n\r\n- This setting has NO EFFECT when FlipFlopProfileDirectoryName is enabled.\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled.\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > SIDDirNamePattern (this setting)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\SIDDirNamePattern\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcsiddirectorynamepattern_odfcsiddirectorynamepattern","displayName":"SID Directory Name Pattern (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch","displayName":"VHD Name Match","description":"Specifies a string pattern used when matching a users ODFC container. Use this setting to define how FSLogix will attempt to locate a users ODFC container (VHD(x) file). FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to search.\r\n\r\nNOTE: When using this configuration setting, be sure the VHDNamePattern value matches this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDNameMatch\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamematch_odfcvhdnamematch","displayName":"VHD Name Match (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern","displayName":"VHD Name Pattern","description":"Specifies a string pattern used when creating a users ODFC container. Use this setting to define how FSLogix will attempt to create a users ODFC container (VHD(x) file). FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to create.\r\n\r\nNOTE: When using this configuration setting, be sure the VHDNameMatch value matches this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\Policies\\FSLogix\\ODFC\\VHDNamePattern\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~odfc~odfc_containeranddirectorynaming_odfcvhdnamepattern_odfcvhdnamepattern","displayName":"VHD Name Pattern (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer","displayName":"Access Network as Computer Object","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nAttach as computer - folder must have permissions for computer objects\r\n\r\nCAUTION: Do not use this configuration setting unless your storage provider or architecture will NOT work with user-level permissions to the VHD(x) container locations. This setting will allow the virtual machine to access all the VHD(x) files on the storage provider creating a potential security risk.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\AccessNetworkAsComputerObject\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesaccessnetworkascomputer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl","displayName":"Attached VHD SDDL","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSDDL string representing the ACLs to use when attaching the VHD.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\AttachVHDSDDL\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesattachedvhdsddl_profilesattachedvhdsddl","displayName":"Attached VHD SDDL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications","displayName":"Clean Out Notifications","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nThis setting cleans out stale entries created by the Windows Push Notification Platform (WPN) and Windows Notification Facility (WFN) which under some conditions leads to slow sign-ins. Only enable this setting if directed by a Microsoft Support Engineer.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\CleanOutNotifications\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilescleanoutnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply","displayName":"Delete Local Profile When VHD Should Apply","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nWhen the FSLogix Profiles system determines that a user should have a FSLogix profile but a local profile exists, the local profile WILL BE REMOVED and the user logged on with the FSLogix profile\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\DeleteLocalProfileWhenVHDShouldApply\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesdeletelocalprofilewhenvhdshouldapply_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled","displayName":"Enabled","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nControls whether or not the Profiles feature is active\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\Enabled\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages","displayName":"Install Appx Packages","description":"[ENABLED BY DEFAULT]\r\n\r\nNOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nWhen enabled, this setting will read the AppxPackages.xml manifest file from the user's profile and install / re-register the list of applications.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\InstallAppxPackages\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesinstallappxpackages_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd","displayName":"Is Dynamic (VHD)","description":"[ENABLED BY DEFAULT]\r\n\r\nNOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nVHD(x)s will be dynamically allocated. VHD(x) file size will grow as data is added to the VHD(x). If disabled, VHD(x)s that are auto-created will be fully allocated.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\IsDynamic\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesisdynamicvhd_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff","displayName":"Keep Local Directory (after logoff)","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nThe 'local_%username%' folder will be left on the system after logoff and will also be used again if the same user logs on again\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\KeepLocalDir\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileskeeplocaldirectoryafterlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount","displayName":"Locked Retry Count","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the number of retries to perform when a VHD(x) file is locked (open by another process or computer). The default value is 12 retries which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\LockedRetryCount\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretrycount_profileslockedretrycount","displayName":"Locked Retry Count (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval","displayName":"Locked Retry Interval","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the number of seconds to wait between retries. The default value is 5 seconds which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\LockedRetryInterval\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profileslockedretryinterval_profileslockedretryinterval","displayName":"Locked Retry Interval (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode","displayName":"Outlook Cached Mode","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nWhen the Profile Container is successfully attached, set Outlook to work in cached mode for the user. The setting change will only be effective for the specific user and for the length of the user session\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\OutlookCachedMode\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled (only if container is attached)","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesoutlookcachedmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure","displayName":"Prevent Login With Failure","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nPrevent user login when a failure occurs while attaching an FSLogix container\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\PreventLoginWithFailure\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithfailure_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile","displayName":"Prevent Login With Temp Profile","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nPrevent user login when a user receives a temporary Windows profile\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\PreventLoginWithTempProfile\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilespreventloginwithtempprofile_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl","displayName":"Profile Directory SDDL","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSDDL string representing the ACLs to use when creating the profile directory.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ProfileDirSDDL\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiledirectorysddl_profilesprofiledirectorysddl","displayName":"Profile Directory SDDL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype","displayName":"Profile Type","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nControls whether the VHD(x) file should be accessed directly, if a difference disk should be used, and if Read/Write or Read Only access should be used. The default value is Normal Profile.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ProfileType\r\nType: DWORD\r\nValues: 0 = Normal direct-access profile, 1= Read-write profile, 2 = Read-only profile, 3 = Try for read-write profile and fallback to read-only","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_0","displayName":"Normal Profile","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_1","displayName":"Read / Write Profile","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_2","displayName":"Read Only Profile","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesprofiletype_profilesprofiletype_3","displayName":"Read / Write profile - fallback to Read Only","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount","displayName":"Reattach Count","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nWhen a VHD(x) volume is detached unexpectedly, the FSLogix system will attempt to re-attach the volume. This value specifies how many times to retry. The default value is 60 retries which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ReAttachRetryCount\r\nType: DWORD\r\nValues: Min = 0, Max = 600","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachcount_profilesreattachcount","displayName":"Reattach Count (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval","displayName":"Reattach Interval","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nWhen a VHD(x) volume is detached unexpectedly, the FSLogix system will attempt to reattach the volume. This value specifies the number of seconds to wait between retries. The default value is 10 seconds which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ReAttachIntervalSeconds\r\nType: DWORD\r\nValues: Min = 1, Max = 60","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesreattachinterval_profilesreattachinterval","displayName":"Reattach Interval (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff","displayName":"Reboot On User Logoff","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nReboots the machine when a user logs off\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RebootOnUserLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Any user, 2 = Any FSLogix Profile user","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_profilesrebootonuserlogoff","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_profilesrebootonuserlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_profilesrebootonuserlogoff_1","displayName":"Reboot on any logoff","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesrebootonuserlogoff_profilesrebootonuserlogoff_2","displayName":"Reboot only on any FSLogix Profile logoff","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder","displayName":"Redirection XML Source Folder","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the path to a folder containing the XML file. If the folder contains a redirections.xml, it will be copied to the local profile and immediately used.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RedirXMLSourceFolder\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirectionxmlsourcefolder_profilesredirectionxmlsourcefolder","displayName":"Redirection XML Source Folder (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype","displayName":"Redirect Type","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nConfigures legacy or FSLogix advanced redirection. The default is '2' which is the same as \"Not Configured\".\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RedirectType\r\nType: DWORD\r\nValues: Legacy = 1, FSLogix Redirection = 2","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype_1","displayName":"Legacy Redirection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesredirecttype_profilesredirecttype_2","displayName":"FSLogix Redirection","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff","displayName":"Remove Orphaned OST Files On Logoff","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nRemoves duplicate OST files\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RemoveOrphanedOSTFilesOnLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesremoveorphanedostfilesonlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity","displayName":"Roam Identity","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nAllows legacy roaming for credentials and tokens created by the Web Account Manager (WAM) system. Some Microsoft 365 applications may require authentication at every sign-in when disabled.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RoamIdentity\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamidentity_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch","displayName":"Roam Search","description":"NOTE:\r\n- Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n- Do not use this setting with Windows Server 2019 (or later) or Windows 10 (or later). Newer operating systems support per-user search.\r\n\r\nEnable search roaming in legacy Windows Operating Systems\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\RoamSearch\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Single User Search, 2 = Multi-user Search","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_1","displayName":"Single-user Search","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesroamsearch_profilesroamsearch_2","displayName":"Multi-user Search","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath","displayName":"Set Temp Folders to Local Path","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nRedirects the TEMP, TMP, and INetCache paths to the local drive\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SetTempToLocalPath\r\nType: DWORD\r\nValues: 0 = No Action, 1 = Redirect TEMP and TMP to Local Disk, 2 = Redirect INetCache to Local Disk, 3 = Redirect TEMP, TMP, INetCache to Local Disk","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_0","displayName":"Take no action","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_1","displayName":"Redirect TEMP and TMP to local drive","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_2","displayName":"Redirect INetCache to local drive","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessettempfolderstolocalpath_profilessettempfolderstolocalpath_3","displayName":"Redirect TEMP, TMP and INetCache to local drive","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff","displayName":"Shutdown On User Logoff","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nShuts down the machine when a user logs off\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ShutdownOnUserLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Any user, 2 = Any FSLogix Profile user","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_1","displayName":"Shutdown on any logoff","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesshutdownonuserlogoff_profilesshutdownonuserlogoff_2","displayName":"Shutdown on any FSLogix Profile logoff","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl","displayName":"SID Directory SDDL","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSDDL string representing the ACLs to use when creating the SID container folder.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SIDDirSDDL\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessiddirectorysddl_profilessiddirectorysddl","displayName":"SID Directory SDDL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs","displayName":"Size In MBs","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecify the size for auto-created VHD(x) files.\r\n\r\nNOTE: Default is 30,000 (30GB) which is the same as \"Not Configured\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SizeInMBs\r\nType: DWORD\r\nValues: Min = 500, Max = 1000000","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilessizeinmbs_profilessizeinmbs","displayName":"Size In MBs (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations","displayName":"VHD Locations","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the network location where the VHD(X) files are stored.\r\n\r\nExamples:\r\n- Sinlge location: \\\\\\\r\n- Multiple locations: \\\\\\;\\\\\\\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VHDLocations\r\nREG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdlocations_profilesvhdlocations","displayName":"VHD Locations (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize","displayName":"VHDX Sector Size","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nThis setting is only applicable if the virtual disk type is VHDX\r\n\r\nNOTE: The default is the sytem default which is the same as \"Not Configured\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VHDXSectorSize\r\nType: DWORD\r\nValues: 0 = System Default, 512, 4096","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize_512","displayName":"512 bytes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvhdxsectorsize_profilesvhdxsectorsize_4096","displayName":"4 KB","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds","displayName":"Volume Wait Time (milliseconds)","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the number of milliseconds to wait for the volume to be attached by the system. Default is 20,000 (20 seconds)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VolumeWaitTimeMS\r\nType: DWORD\r\nValues: Min = 1000, Max = 1000000","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles_profilesvolumewaittimemilliseconds_profilesvolumewaittimemilliseconds","displayName":"Volume Wait Time (milliseconds) (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations","displayName":"CCD Locations","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nCCDLocations are formatted using a type, name and a connectionString separated using a ; as the delimiter. The type will accept either smb or azure. The name is a free-form field used to describe the location. The connectionString for smb type must include the full UNC path to the file share. The connectionString for azure type should be secured as per the documentation (https://aka.ms/fslogix). The strings are case sensitive.\r\n\r\n- CCDLocations using SMB: type=smb,name=\"SMB Share 1\",connectionString=\\\\\\;type=smb,name=\"SMB Share 2\"connectionString=\\\\\\\r\n\r\n- CCDLocations using Azure (secure): type=smb,name=\"SMB Share 1\",connectionString=\\\\\\;type=azure,name=\"Azure Blob 1\",connectionString=\"|fslogix/stgacct1-connectionstring|\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\CCDLocations\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdlocations_profilesccdlocations","displayName":"CCD Locations (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs","displayName":"CCD Max Cache Size in MBs","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nCcdMaxCacheSizeInMBs specifies the maximum local cache size in megabytes, per user, during normal operation. Normal operation assumes that all Cloud Cache providers are available, and that storage performance is adequate to accept I/O at the rate necessary to accommodate profile utilization.\r\n\r\nCAUTION: Do not use this setting unless the performance and technical aspects to this setting are fully understood as this setting is a leading cause to poor performance and has limited use cases.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\CcdMaxCacheSizeInMBs\r\nType: DWORD\r\nValues: Min (No Limit) = 0, Max = 1000000","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdmaxcachesizeinmbs_profilesccdmaxcachesizeinmbs","displayName":"CCD Max Cache Size in MBs (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout","displayName":"CCD Unregister Timeout","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nCCD Unregister Timeout represents the number of seconds that a user's sign out will be delayed if the number of available providers is less than specified in Healthy Providers Required For Unregister.\r\n\r\nIf CCD Unregsiter Timeout is set to 0, then the user sign out will be held until the number of providers specified in Healthy Providers Required For Unregister are available. NOTE: If CCDUnregisterTimeout is set to 0, and the number of providers specified in Healthy Providers Required For Unregister is not met, then the user's sign out may appear to the user as if the session is locked. The sign out may be held infinitely.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\CCDUnregisterTimeout\r\nType: DWORD\r\nValues: Min = 0, Max = 10000000","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesccdunregistertimeout_profilesccdunregistertimeout","displayName":"CCD Unregister Timeout (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister","displayName":"Clear Cache on Forced Unregister","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nIf the desired behavior is for the local cache to be deleted, even if the data has not been flushed to a CCD Location, then Clear Cache On Forced Unregister should be set to Enabled. Setting Clear Cache On Forced Unregister to Enabled may result in user data saved in the registry to be lost during the current session. It is important to understand that this data isn't recoverable if the local cache is cleared in this scenario. Verify that you understand the implications of changing the default value of this setting prior to making changes.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ClearCacheOnForcedUnregister\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonforcedunregister_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff","displayName":"Clear Cache on Logoff","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nClears the local cache during user sign out.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\ClearCacheOnLogoff\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profilesclearcacheonlogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister","displayName":"Healthy Providers Required For Register","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nThis setting specifies the number of healthy CCD Locations required to allow a sign in. If using the default setting, users will always be allowed to sign in, even if no CCD Locations are available.\r\n\r\nIf a user signs in with no available CCD Locations, FSLogix assumes that one or more CCD Locations will become available prior to the user signing out. If a CCD Locations does not become available during the time of the user session, then the user is prevented from signing out (discussed in Healthy Provider Required For Unregister).\r\n\r\nIf it is desired to block a user from signing in and a minimum number of CCD Locations are not available, the Healthy Providers Required For Register may be set to the number of CCD Locations required for a sign in.\r\n\r\nIf the minimum number of CCD Locations required for registration aren't available, then the sign in will fail. When setting Healthy Providers Required For Register to anything other than 0, then Prevent Login With Failure and/or Preven tLogin With Temp Profile should be used in order to create the desired user experience.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\HealthyProvidersRequiredForRegister\r\nType: DWORD\r\nValues: Min = 0, Max = 4","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforregister_profileshealthyprovidersrequiredforregister","displayName":"Healthy Providers Required For Register (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister","displayName":"Healthy Providers Required For Unregister","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nThis setting specifies the number of healthy CCD Locations required for a user to sign out. The default setting is 1, meaning that at least one remote CCD Location is required for the user to sign out.\r\n\r\nIf the number of available CCD Locations, when a user attempts to sign out, is less than the number set for Healthy Providers Required For Unregister, the user's sign out will be prevented for the time specified in CCD Unregister Timeout.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\HealthyProvidersRequiredForUnregister\r\nType: DWORD\r\nValues: Min = 0, Max = 4","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_ccd_profileshealthyprovidersrequiredforunregister_profileshealthyprovidersrequiredforunregister","displayName":"Healthy Providers Required For Unregister (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath","displayName":"Diff Disk Parent Folder Path","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the path where difference disks will be created (when ProfileType or VHDAccessMode is configured to use them).\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\DiffDiskParentFolderPath\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesdiffdiskparentfolderpath_profilesdiffdiskparentfolderpath","displayName":"Diff Disk Parent Folder Path (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname","displayName":"Flip Flop Profile Directory Name","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nSID folder is created as %username%_%sid% instead of the default %sid%_%username%.\r\n\r\nNOTE:\r\n- This setting will OVERRIDE both SIDDirNameMatch and SIDDirNamePattern\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > (SIDDirNameMatch and SIDDirNamePattern)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\FlipFlopProfileDirectoryName\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesflipflopprofiledirectoryname_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder","displayName":"No Profile Containing Folder","description":"NOTE: Once this policy is Enabled or Disabled, setting it back to Not Configured has NO EFFECT.\r\n\r\nVHD(x) file is placed and used in the root VHDLocation rather than in a SID directory under VHDLocation\r\n\r\nNOTE: This setting will override ANY OTHER setting related to container folders.\r\n\r\n- SIDDIRNameMatch has NO EFFECT when used in conjunction with this setting.\r\n- SIDDIRNamePattern has NO EFFECT when used in conjunction with this setting.\r\n- FlipFlopProfileDirectoryName has NO EFFECT when used in conjunction with this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\NoProfileContainingFolder\r\nType: DWORD\r\nValues: 0 = Disabled, 1 = Enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesnoprofilecontainingfolder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch","displayName":"SID Directory Name Match","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies a string pattern used when matching a Profile or ODFC container folder. Use this setting to define how FSLogix will attempt to locate a users Profile or ODFC container. FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to search.\r\n\r\nNOTE: When using this configuration setting, be sure the SIDDIRNamePattern value matches this setting.\r\n\r\n- This setting has NO EFFECT when FlipFlopProfileDirectoryName is enabled.\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled.\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > SIDDirNameMatch (this setting)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SIDDirNameMatch\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamematch_profilessiddirectorynamematch","displayName":"SID Directory Name Match (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern","displayName":"SID Directory Name Pattern","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies a string pattern used when creating a Profile or ODFC container folder. Use this setting to define how FSLogix will attempt to create a users Profile or ODFC container folder. FSLogix will use the VHDLocations or CCDLocations as the location where to create and this setting defines what to create.\r\n\r\nNOTE: When using this configuration setting, be sure the SIDDIRNameMatch value matches this setting.\r\n\r\n- This setting has NO EFFECT when FlipFlopProfileDirectoryName is enabled.\r\n- This setting has NO EFFECT when NoProfileContainingFolder is enabled.\r\n- NoProfileContainingFolder > FlipFlopProfileDirectoryName > SIDDirNamePattern (this setting)\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\SIDDirNamePattern\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilessiddirectorynamepattern_profilessiddirectorynamepattern","displayName":"SID Directory Name Pattern (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch","displayName":"VHD Name Match","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies a string pattern used when matching a users Profile container. Use this setting to define how FSLogix will attempt to locate a users Profile container (VHD(x) file). FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to search.\r\n\r\nNOTE: When using this configuration setting, be sure the VHDNamePattern value matches this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VHDNameMatch\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamematch_profilesvhdnamematch","displayName":"VHD Name Match (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern","displayName":"VHD Name Pattern","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies a string pattern used when creating a users Profile container. Use this setting to define how FSLogix will attempt to create a users Profile container (VHD(x) file). FSLogix will use the VHDLocations or CCDLocations as the location where to search and this setting defines what to create.\r\n\r\nNOTE: When using this configuration setting, be sure the VHDNameMatch value matches this setting.\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VHDNamePattern\r\nType: REG_SZ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvhdnamepattern_profilesvhdnamepattern","displayName":"VHD Name Pattern (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx","displayName":"Volume Type (VHD or VHDX)","description":"NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT.\r\n\r\nSpecifies the type of virtual disk to auto-create. Default is VHD. The default is VHD which is the same as \"Not Configured\"\r\n\r\nRegistry Entry: HKLM\\SOFTWARE\\FSLogix\\Profiles\\VolumeType\r\nType: REG_SZ\r\nValues: VHD, VHDX","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx_vhd","displayName":"VHD","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_fslogixv1~policy~fslogix~profiles~profiles_containeranddirectorynaming_profilesvolumetypevhdorvhdx_profilesvolumetypevhdorvhdx_vhdx","displayName":"VHDX","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_games_allowadvancedgamingservices","displayName":"Allow Advanced Gaming Services","description":"Specifies whether advanced gaming services can be used. These services may send data to Microsoft or publishers of games that use these services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Games#allowadvancedgamingservices"],"options":[{"id":"device_vendor_msft_policy_config_games_allowadvancedgamingservices_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_games_allowadvancedgamingservices_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked","displayName":"Panel Default Mode Docked","description":"Specifies whether the handwriting panel comes up floating near the text box or attached to the bottom of the screen","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Handwriting#paneldefaultmodedocked"],"options":[{"id":"device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_handwriting_paneldefaultmodedocked_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantlock","displayName":"Force Instant Lock","description":"Determines whether Lock on Leave is forced on/off by the MDM policy. The user will not be able to change this setting and the toggle in the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forceinstantlock"],"options":[{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantlock_2","displayName":"Forced Off.","description":"ForcedOff.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantlock_1","displayName":"Forced On.","description":"ForcedOn.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantlock_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantwake","displayName":"Force Instant Wake","description":"Determines whether Wake on Arrival is forced on/off by the MDM policy. The user will not be able to change this setting and the toggle in the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forceinstantwake"],"options":[{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantwake_2","displayName":"Forced Off.","description":"ForcedOff.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantwake_1","displayName":"Forced On.","description":"ForcedOn.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceinstantwake_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout","displayName":"Force Lock Timeout","description":"Determines the timeout for Lock on Leave forced by the MDM policy. The user will be unable to change this setting and the toggle in the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forcelocktimeout"],"options":[{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_120","displayName":"Two Minutes","description":"TwoMinutes","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_30","displayName":"Thirty Seconds.","description":"ThirtySeconds.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_10","displayName":"Ten Seconds.","description":"TenSeconds.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_1","displayName":"Immediate.","description":"Immediate.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forcelocktimeout_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetection","displayName":"Force Onlooker Detection","description":"Determines whether detect when other people are looking at my screen is forced on/off by the MDM policy. The user will not be able to change this setting and the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forceonlookerdetection"],"options":[{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_2","displayName":"Forced Off.","description":"ForcedOff.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_1","displayName":"Forced On.","description":"ForcedOn.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetection_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction","displayName":"Force Onlooker Detection Action","description":"Determines whether the Onlooker Detection action is forced by the MDM policy. The user will not be able to change this setting and the toggle in the UI will be greyed out.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-HumanPresence#forceonlookerdetectionaction"],"options":[{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_3","displayName":"Forced Dim And Notify.","description":"ForcedDimAndNotify.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_2","displayName":"Forced Notify.","description":"ForcedNotify.","helpText":null},{"id":"device_vendor_msft_policy_config_humanpresence_forceonlookerdetectionaction_0","displayName":"Default To User Choice.","description":"DefaultToUserChoice.","helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_addsearchprovider","displayName":"Add a specific list of search providers to the user's list of search providers","description":"This policy setting allows you to add a specific list of search providers to the user's default list of search providers. Normally, search providers can be added from third-party toolbars or in Setup. The user can also add a search provider from the provider's website.\r\n\r\nIf you enable this policy setting, the user can add and remove search providers, but only from the set of search providers specified in the list of policy keys for search providers (found under [HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\SearchScopes]). Note: This list can be created from a custom administrative template file. For information about creating this custom administrative template file, see the Internet Explorer documentation on search providers.\r\n\r\nIf you disable or do not configure this policy setting, the user can configure their list of search providers unless another policy setting restricts such configuration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-addsearchprovider"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_addsearchprovider_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_addsearchprovider_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering","displayName":"Turn on ActiveX Filtering","description":"This policy setting controls the ActiveX Filtering feature for websites that are running ActiveX controls. The user can choose to turn off ActiveX Filtering for specific websites so that ActiveX controls can run properly.\r\n\r\nIf you enable this policy setting, ActiveX Filtering is enabled by default for the user. The user cannot turn off ActiveX Filtering, although they may add per-site exceptions.\r\n\r\nIf you disable or do not configure this policy setting, ActiveX Filtering is not enabled by default for the user. The user can turn ActiveX Filtering on or off.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowactivexfiltering"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowactivexfiltering_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist","displayName":"Add-on List","description":"This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. Add-ons in this case are controls like ActiveX Controls, Toolbars, and Browser Helper Objects (BHOs) which are specifically written to extend or enhance the functionality of the browser or web pages.\r\n\r\nThis list can be used with the 'Deny all add-ons unless specifically allowed in the Add-on List' policy setting, which defines whether add-ons not listed here are assumed to be denied.\r\n\r\nIf you enable this policy setting, you can enter a list of add-ons to be allowed or denied by Internet Explorer. For each entry that you add to the list, enter the following information:\r\n\r\nName of the Value - the CLSID (class identifier) for the add-on you wish to add to the list. The CLSID should be in brackets for example, ‘{000000000-0000-0000-0000-0000000000000}'. The CLSID for an add-on can be obtained by reading the OBJECT tag from a Web page on which the add-on is referenced.\r\n\r\nValue - A number indicating whether Internet Explorer should deny or allow the add-on to be loaded. To specify that an add-on should be denied enter a 0 (zero) into this field. To specify that an add-on should be allowed, enter a 1 (one) into this field. To specify that an add-on should be allowed and also permit the user to manage the add-on through Add-on Manager, enter a 2 (two) into this field.\r\n\r\nIf you disable this policy setting, the list is deleted. The 'Deny all add-ons unless specifically allowed in the Add-on List' policy setting will still determine whether add-ons not in this list are assumed to be denied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowaddonlist"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist","displayName":"Add-on List (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowaddonlist_addonlist_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning","displayName":"Turn on certificate address mismatch warning","description":"This policy setting allows you to turn on the certificate address mismatch security warning. When this policy setting is turned on, the user is warned when visiting Secure HTTP (HTTPS) websites that present certificates issued for a different website address. This warning helps prevent spoofing attacks.\r\n\r\nIf you enable this policy setting, the certificate address mismatch warning always appears.\r\n\r\nIf you disable or do not configure this policy setting, the user can choose whether the certificate address mismatch warning appears (by using the Advanced page in the Internet Control panel).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowcertificateaddressmismatchwarning"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowcertificateaddressmismatchwarning_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit","displayName":"Allow deleting browsing history on exit","description":"This policy setting allows the automatic deletion of specified items when the last browser window closes. The preferences selected in the Delete Browsing History dialog box (such as deleting temporary Internet files, cookies, history, form data, and passwords) are applied, and those items are deleted.\r\n\r\nIf you enable this policy setting, deleting browsing history on exit is turned on.\r\n\r\nIf you disable this policy setting, deleting browsing history on exit is turned off.\r\n\r\nIf you do not configure this policy setting, it can be configured on the General tab in Internet Options.\r\n\r\nIf the \"Prevent access to Delete Browsing History\" policy setting is enabled, this policy setting has no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowdeletingbrowsinghistoryonexit"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowdeletingbrowsinghistoryonexit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode","displayName":"Turn on Enhanced Protected Mode","description":"Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system.\r\n\r\nIf you enable this policy setting, Enhanced Protected Mode will be turned on. Any zone that has Protected Mode enabled will use Enhanced Protected Mode. Users will not be able to disable Enhanced Protected Mode.\r\n\r\nIf you disable this policy setting, Enhanced Protected Mode will be turned off. Any zone that has Protected Mode enabled will use the version of Protected Mode introduced in Internet Explorer 7 for Windows Vista.\r\n\r\nIf you do not configure this policy, users will be able to turn on or turn off Enhanced Protected Mode on the Advanced tab of the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenhancedprotectedmode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar","displayName":"Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar","description":"This policy setting allows Internet Explorer to provide enhanced suggestions as the user types in the Address bar. To provide enhanced suggestions, the user's keystrokes are sent to Microsoft through Microsoft services.\r\n\r\nIf you enable this policy setting, users receive enhanced suggestions while typing in the Address bar. In addition, users won't be able to change the Suggestions setting on the Settings charm.\r\n\r\nIf you disable this policy setting, users won't receive enhanced suggestions while typing in the Address bar. In addition, users won't be able to change the Suggestions setting on the Settings charm.\r\n\r\nIf you don't configure this policy setting, users can change the Suggestions setting on the Settings charm.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenhancedsuggestionsinaddressbar"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenhancedsuggestionsinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu","displayName":"Let users turn on and use Enterprise Mode from the Tools menu","description":"This policy setting lets you decide whether users can turn on Enterprise Mode for websites with compatibility issues. Optionally, this policy also lets you specify where to get reports (through post messages) about the websites for which users turn on Enterprise Mode using the Tools menu.\r\n\r\nIf you turn this setting on, users can see and use the Enterprise Mode option from the Tools menu. If you turn this setting on, but don't specify a report location, Enterprise Mode will still be available to your users, but you won't get any reports.\r\n\r\nIf you disable or don't configure this policy setting, the menu option won't appear and users won't be able to run websites in Enterprise Mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenterprisemodefromtoolsmenu"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodefromtoolsmenu_enterreportbackprompt","displayName":"Type the location (URL) of where to receive reports about the websites for which users turn on and use Enterprise Mode","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist","displayName":"Use the Enterprise Mode IE website list","description":"This policy setting lets you specify where to find the list of websites you want opened using Enterprise Mode IE, instead of Standard mode, because of compatibility issues. Users can't edit this list.\r\n\r\nIf you enable this policy setting, Internet Explorer downloads the website list from your location (HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\Main\\EnterpriseMode), opening all listed websites using Enterprise Mode IE.\r\n\r\nIf you disable or don't configure this policy setting, Internet Explorer opens all websites using Standards mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowenterprisemodesitelist"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowenterprisemodesitelist_entersitelistprompt","displayName":"Type the location (URL) of your Enterprise Mode IE website list","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3","displayName":"Allow fallback to SSL 3.0 (Internet Explorer)","description":"This policy setting allows you to block an insecure fallback to SSL 3.0. When this policy is enabled, Internet Explorer will attempt to connect to sites using SSL 3.0 or below when TLS 1.0 or greater fails.\r\n\r\nWe recommend that you do not allow insecure fallback in order to prevent a man-in-the-middle attack.\r\n\r\nThis policy does not affect which security protocols are enabled.\r\n\r\nIf you disable this policy, system defaults will be used.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowfallbacktossl3"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions","displayName":"Allow insecure fallback for:","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_0","displayName":"No Sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_1","displayName":"Non-Protected Mode Sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowfallbacktossl3_advanced_enablessl3fallbackoptions_3","displayName":"All Sites","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist","displayName":"Use Policy List of Internet Explorer 7 sites","description":"This policy setting allows you to add specific sites that must be viewed in Internet Explorer 7 Compatibility View.\r\n\r\nIf you enable this policy setting, the user can add and remove sites from the list, but the user cannot remove the entries that you specify.\r\n\r\nIf you disable or do not configure this policy setting, the user can add and remove sites from the list.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowinternetexplorer7policylist"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorer7policylist_compatview_sitelist","displayName":"List of sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode","displayName":"Turn on Internet Explorer Standards Mode for local intranet","description":"This policy setting controls how Internet Explorer displays local intranet content. Intranet content is defined as any webpage that belongs to the local intranet security zone.\r\n\r\nIf you enable this policy setting, Internet Explorer uses the current user agent string for local intranet content. Additionally, all local intranet Standards Mode pages appear in the Standards Mode available with the latest version of Internet Explorer. The user cannot change this behavior through the Compatibility View Settings dialog box.\r\n\r\nIf you disable this policy setting, Internet Explorer uses an Internet Explorer 7 user agent string (with an additional string appended) for local intranet content. Additionally, all local intranet Standards Mode pages appear in Internet Explorer 7 Standards Mode. The user cannot change this behavior through the Compatibility View Settings dialog box.\r\n\r\nIf you do not configure this policy setting, Internet Explorer uses an Internet Explorer 7 user agent string (with an additional string appended) for local intranet content. Additionally, all local intranet Standards Mode pages appear in Internet Explorer 7 Standards Mode. This option results in the greatest compatibility with existing webpages, but newer content written to common Internet standards may be displayed incorrectly. This option matches the default behavior of Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowinternetexplorerstandardsmode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetexplorerstandardsmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate","displayName":"Internet Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowinternetzonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate","displayName":"Internet","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowinternetzonetemplate_iz_partnameinternetzonetemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate","displayName":"Intranet Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowintranetzonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate","displayName":"Intranet","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowintranetzonetemplate_iz_partnameintranetzonetemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate","displayName":"Local Machine Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlocalmachinezonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate","displayName":"Local Machine Zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlocalmachinezonetemplate_iz_partnamelocalmachinezonetemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate","displayName":"Locked-Down Internet Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddowninternetzonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate","displayName":"Locked-Down Internet","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddowninternetzonetemplate_iz_partnameinternetzonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate","displayName":"Locked-Down Intranet Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddownintranetzonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate","displayName":"Locked-Down Intranet","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownintranetzonetemplate_iz_partnameintranetzonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate","displayName":"Locked-Down Local Machine Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddownlocalmachinezonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate","displayName":"Locked-Down Local Machine Zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownlocalmachinezonetemplate_iz_partnamelocalmachinezonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate","displayName":"Locked-Down Restricted Sites Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowlockeddownrestrictedsiteszonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate","displayName":"Locked-Down Restricted Sites","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowlockeddownrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowonewordentry","displayName":"Go to an intranet site for a one-word entry in the Address bar","description":"This policy allows the user to go directly to an intranet site for a one-word entry in the Address bar.\r\n\r\nIf you enable this policy setting, Internet Explorer goes directly to an intranet site for a one-word entry in the Address bar, if it is available.\r\n\r\nIf you disable or do not configure this policy setting, Internet Explorer does not go directly to an intranet site for a one-word entry in the Address bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowonewordentry"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowonewordentry_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowonewordentry_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode","displayName":"Allow \"Save Target As\" in Internet Explorer mode","description":"This policy setting allows admins to enable \"Save Target As\" context menu in Internet Explorer mode.\r\n\r\nIf you enable this policy, \"Save Target As\" will show up in the Internet Explorer mode context menu and work the same as Internet Explorer.\r\n\r\nIf you disable or do not configure this policy setting, \"Save Target As\" will not show up in the Internet Explorer mode context menu.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2102115","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsavetargetasiniemode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsavetargetasiniemode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist","displayName":"Site to Zone Assignment List","description":"This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security settings that apply to all of the sites in the zone.\r\n\r\nInternet Explorer has 4 security zones, numbered 1-4, and these are used by this policy setting to associate sites to zones. They are: (1) Intranet zone, (2) Trusted Sites zone, (3) Internet zone, and (4) Restricted Sites zone. Security settings can be set for each of these zones through other policy settings, and their default settings are: Trusted Sites zone (Low template), Intranet zone (Medium-Low template), Internet zone (Medium template), and Restricted Sites zone (High template). (The Local Machine zone and its locked down equivalent have special security settings that protect your local computer.)\r\n\r\nIf you enable this policy setting, you can enter a list of sites and their related zone numbers. The association of a site with a zone will ensure that the security settings for the specified zone are applied to the site.  For each entry that you add to the list, enter the following information:\r\n\r\nValuename – A host for an intranet site, or a fully qualified domain name for other sites. The valuename may also include a specific protocol. For example, if you enter http://www.contoso.com as the valuename, other protocols are not affected. If you enter just www.contoso.com, then all protocols are affected for that site, including http, https, ftp, and so on. The site may also be expressed as an IP address (e.g., 127.0.0.1) or range (e.g., 127.0.0.1-10). To avoid creating conflicting policies, do not include additional characters after the domain such as trailing slashes or URL path. For example, policy settings for www.contoso.com and www.contoso.com/mail would be treated as the same policy setting by Internet Explorer, and would therefore be in conflict.\r\n\r\nValue - A number indicating the zone with which this site should be associated for security settings. The Internet Explorer zones described above are 1-4.\r\n\r\nIf you disable or do not configure this policy, users may choose their own site-to-zone assignments.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsitetozoneassignmentlist"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt","displayName":"Enter the zone assignments here. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsitetozoneassignmentlist_iz_zonemapprompt_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate","displayName":"Locked-Down Trusted Sites Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowslockeddowntrustedsiteszonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate","displayName":"Locked-Down Trusted Sites","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowslockeddowntrustedsiteszonetemplate_iz_partnametrustedsiteszonelockdowntemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid","displayName":"Allow software to run or install even if the signature is invalid","description":"This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file.\r\n\r\nIf you enable this policy setting, users will be prompted to install or run files with an invalid signature.\r\n\r\nIf you disable this policy setting, users cannot run or install files with an invalid signature.\r\n\r\nIf you do not configure this policy, users can choose to run or install files with an invalid signature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsoftwarewhensignatureisinvalid"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsoftwarewhensignatureisinvalid_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate","displayName":"Restricted Sites Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsrestrictedsiteszonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate","displayName":"Restricted Sites","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsrestrictedsiteszonetemplate_iz_partnamerestrictedsiteszonetemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites","displayName":"Turn on Suggested Sites","description":"This policy setting controls the Suggested Sites feature, which recommends websites based on the user’s browsing activity. Suggested Sites reports a user’s browsing history to Microsoft to suggest sites that the user might want to visit.\r\n\r\nIf you enable this policy setting, the user is not prompted to enable Suggested Sites. The user’s browsing history is sent to Microsoft to produce suggestions.\r\n\r\nIf you disable this policy setting, the entry points and functionality associated with this feature are turned off.\r\n\r\nIf you do not configure this policy setting, the user can turn on and turn off the Suggested Sites feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowsuggestedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowsuggestedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate","displayName":"Trusted Sites Zone Template","description":"This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.\r\n\r\nIf you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.\r\n\r\nIf you disable this template policy setting, no security level is configured.\r\n\r\nIf you do not configure this template policy setting, no security level is configured.\r\n\r\nNote. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL's zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.\r\n\r\nNote. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-allowtrustedsiteszonetemplate"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate","displayName":"Trusted Sites","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_1","displayName":"Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_3","displayName":"Medium","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_5","displayName":"Medium High","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_allowtrustedsiteszonetemplate_iz_partnametrustedsiteszonetemplate_4","displayName":"High","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_autodetectintranet","displayName":"Turn on automatic detection of intranet","description":"This policy setting enables intranet mapping rules to be applied automatically if the computer belongs to a domain.\r\n\r\nIf you enable this policy setting, automatic detection of the intranet is turned on, and intranet mapping rules are applied automatically if the computer belongs to a domain.\r\n\r\nIf you disable this policy setting, automatic detection of the intranet is turned off, and intranet mapping rules are applied however they are configured.\r\n\r\nIf this policy setting is not configured, the user can choose whether or not to automatically detect the intranet through the intranet settings dialog in Control Panel.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-autodetectintranet"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_autodetectintranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_autodetectintranet_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation","displayName":"Check for server certificate revocation","description":"This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have been compromised or are no longer valid, and this option protects users from submitting confidential data to a site that may be fraudulent or not secure.\r\n\r\nIf you enable this policy setting, Internet Explorer will check to see if server certificates have been revoked.\r\n\r\nIf you disable this policy setting, Internet Explorer will not check server certificates to see if they have been revoked.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not check server certificates to see if they have been revoked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-checkservercertificaterevocation"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_checkservercertificaterevocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms","displayName":"Check for signatures on downloaded programs","description":"This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it hasn't been modified or tampered with) on user computers before downloading executable programs.\r\n\r\nIf you enable this policy setting, Internet Explorer will check the digital signatures of executable programs and display their identities before downloading them to user computers.\r\n\r\nIf you disable this policy setting, Internet Explorer will not check the digital signatures of executable programs or display their identities before downloading them to user computers.\r\n\r\nIf you do not configure this policy, Internet Explorer will not check the digital signatures of executable programs or display their identities before downloading them to user computers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-checksignaturesondownloadedprograms"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_checksignaturesondownloadedprograms_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel","displayName":"Configure which channel of Microsoft Edge to use for opening redirected sites","description":"Enables you to configure up to three versions of Microsoft Edge to open a redirected site (in order of preference). Use this policy if your environment is configured to redirect sites from Internet Explorer 11 to Microsoft Edge. If any of the chosen versions are not installed on the device, that preference will be bypassed.\r\n\r\nIf both the Windows Update for the next version of Microsoft Edge* and Microsoft Edge Stable channel are installed, the following behaviors occur:\r\n- If you disable or don't configure this policy, Microsoft Edge Stable channel is used. This is the default behavior.\r\n- If you enable this policy, you can configure redirected sites to open in up to three of the following channels where:\r\n 1 = Microsoft Edge Stable\r\n 2 = Microsoft Edge Beta version 77 or later\r\n 3 = Microsoft Edge Dev version 77 or later\r\n 4 = Microsoft Edge Canary version 77 or later\r\n\r\nIf the Windows Update for the next version of Microsoft Edge* or Microsoft Edge Stable channel are not installed, the following behaviors occur:\r\n- If you disable or don't configure this policy, Microsoft Edge version 45 or earlier is automatically used. This is the default behavior.\r\n- If you enable this policy, you can configure redirected sites to open in up to three of the following channels where:\r\n 0 = Microsoft Edge version 45 or earlier\r\n 1 = Microsoft Edge Stable\r\n 2 = Microsoft Edge Beta version 77 or later\r\n 3 = Microsoft Edge Dev version 77 or later\r\n 4 = Microsoft Edge Canary version 77 or later\r\n\r\n*For more information about the Windows update for the next version of Microsoft Edge including how to disable it, see https://go.microsoft.com/fwlink/?linkid=2102115. This update applies only to Windows 10 version 1709 and higher.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-configureedgeredirectchannel"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser","displayName":"First choice (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_","displayName":"","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_1","displayName":"Microsoft Edge Stable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_2","displayName":"Microsoft Edge Beta version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_3","displayName":"Microsoft Edge Dev version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_4","displayName":"Microsoft Edge Canary version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser_0","displayName":"Microsoft Edge version 45 or earlier","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2","displayName":"Second choice (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_","displayName":"","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_1","displayName":"Microsoft Edge Stable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_2","displayName":"Microsoft Edge Beta version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_3","displayName":"Microsoft Edge Dev version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_4","displayName":"Microsoft Edge Canary version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser2_0","displayName":"Microsoft Edge version 45 or earlier","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3","displayName":"Third choice (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_","displayName":"","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_1","displayName":"Microsoft Edge Stable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_2","displayName":"Microsoft Edge Beta version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_3","displayName":"Microsoft Edge Dev version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_4","displayName":"Microsoft Edge Canary version 77 or later","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_configureedgeredirectchannel_neededgebrowser3_0","displayName":"Microsoft Edge version 45 or earlier","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server.\r\n\r\nThis policy setting determines whether Internet Explorer requires that all file-type information provided by Web servers be consistent. For example, if the MIME type of a file is text/plain but the MIME sniff indicates that the file is really an executable file, Internet Explorer renames the file by saving it in the Internet Explorer cache and changing its extension.\r\n\r\nIf you enable this policy setting, Internet Explorer requires consistent MIME data for all received files.\r\n\r\nIf you disable this policy setting, Internet Explorer will not require consistent MIME data for all received files.\r\n\r\nIf you do not configure this policy setting, Internet Explorer requires consistent MIME data for all received files.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-consistentmimehandlinginternetexplorerprocesses"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_consistentmimehandlinginternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableadobeflash","displayName":"Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects","description":"This policy setting turns off Adobe Flash in Internet Explorer and prevents applications from using Internet Explorer technology to instantiate Flash objects.\r\n\r\nIf you enable this policy setting, Flash is turned off for Internet Explorer, and applications cannot use Internet Explorer technology to instantiate Flash objects. In the Manage Add-ons dialog box, the Flash status will be 'Disabled', and users cannot enable Flash. If you enable this policy setting, Internet Explorer will ignore settings made for Adobe Flash through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings.\r\n\r\nIf you disable, or do not configure this policy setting, Flash is turned on for Internet Explorer, and applications can use Internet Explorer technology to instantiate Flash objects. Users can enable or disable Flash in the Manage Add-ons dialog box.\r\n\r\nNote that Adobe Flash can still be disabled through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings, even if this policy setting is disabled, or not configured. However, if Adobe Flash is disabled through the \"Add-on List\" and \"Deny all add-ons unless specifically allowed in the Add-on List\" policy settings and not through this policy setting, all applications that use Internet Explorer technology to instantiate Flash object can still do so. For more information, see \"Group Policy Settings in Internet Explorer 10\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-InternetExplorer#internetexplorer-disableadobeflash"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableadobeflash_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableadobeflash_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings","displayName":"Prevent bypassing SmartScreen Filter warnings","description":"This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter prevents the user from browsing to or downloading from sites that are known to host malicious content. SmartScreen Filter also prevents the execution of files that are known to be malicious.\r\n\r\nIf you enable this policy setting, SmartScreen Filter warnings block the user.\r\n\r\nIf you disable or do not configure this policy setting, the user can bypass SmartScreen Filter warnings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablebypassofsmartscreenwarnings"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles","displayName":"Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet","description":"This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter warns the user about executable files that Internet Explorer users do not commonly download from the Internet.\r\n\r\nIf you enable this policy setting, SmartScreen Filter warnings block the user.\r\n\r\nIf you disable or do not configure this policy setting, the user can bypass SmartScreen Filter warnings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablebypassofsmartscreenwarningsaboutuncommonfiles"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablebypassofsmartscreenwarningsaboutuncommonfiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecompatview","displayName":"Turn off Compatibility View","description":"This policy setting controls the Compatibility View feature, which allows the user to fix website display problems that he or she may encounter while browsing.\r\n\r\nIf you enable this policy setting, the user cannot use the Compatibility View button or manage the Compatibility View sites list.\r\n\r\nIf you disable or do not configure this policy setting, the user can use the Compatibility View button and manage the Compatibility View sites list.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecompatview"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablecompatview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecompatview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory","displayName":"Disable \"Configuring History\"","description":"This setting specifies the number of days that Internet Explorer tracks views of pages in the History List. To access the Temporary Internet Files and History Settings dialog box, from the Menu bar, on the Tools menu, click Internet Options, click the General tab, and then click Settings under Browsing history.\r\n\r\nIf you enable this policy setting, a user cannot set the number of days that Internet Explorer tracks views of the pages in the History List. You must specify the number of days that Internet Explorer tracks views of pages in the History List. Users can not delete browsing history.\r\n\r\nIf you disable or do not configure this policy setting, a user can set the number of days that Internet Explorer tracks views of pages in the History list. Users can delete browsing history.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableconfiguringhistory"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableconfiguringhistory_daystokeep_prompt","displayName":"Days to keep pages in History","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecrashdetection","displayName":"Turn off Crash Detection","description":"This policy setting allows you to manage the crash detection feature of add-on Management.\r\n\r\nIf you enable this policy setting, a crash in Internet Explorer will exhibit behavior found in Windows XP Professional Service Pack 1 and earlier, namely to invoke Windows Error Reporting. All policy settings for Windows Error Reporting continue to apply.\r\n\r\nIf you disable or do not configure this policy setting, the crash detection feature for add-on management will be functional.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecrashdetection"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablecrashdetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecrashdetection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation","displayName":"Prevent participation in the Customer Experience Improvement Program","description":"This policy setting prevents the user from participating in the Customer Experience Improvement Program (CEIP).\r\n\r\nIf you enable this policy setting, the user cannot participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.\r\n\r\nIf you disable this policy setting, the user must participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.\r\n\r\nIf you do not configure this policy setting, the user can choose to participate in the CEIP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablecustomerexperienceimprovementprogramparticipation"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablecustomerexperienceimprovementprogramparticipation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites","displayName":"Prevent deleting websites that the user has visited","description":"This policy setting prevents the user from deleting the history of websites that he or she has visited. This feature is available in the Delete Browsing History dialog box.\r\n\r\nIf you enable this policy setting, websites that the user has visited are preserved when he or she clicks Delete.\r\n\r\nIf you disable this policy setting, websites that the user has visited are deleted when he or she clicks Delete.\r\n\r\nIf you do not configure this policy setting, the user can choose whether to delete or preserve visited websites when he or she clicks Delete.\r\n\r\nIf the \"Prevent access to Delete Browsing History\" policy setting is enabled, this policy setting is enabled by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disabledeletinguservisitedwebsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disabledeletinguservisitedwebsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading","displayName":"Prevent downloading of enclosures","description":"This policy setting prevents the user from having enclosures (file attachments) downloaded from a feed to the user's computer.\r\n\r\nIf you enable this policy setting, the user cannot set the Feed Sync Engine to download an enclosure through the Feed property page. A developer cannot change the download setting through the Feed APIs.\r\n\r\nIf you disable or do not configure this policy setting, the user can set the Feed Sync Engine to download an enclosure through the Feed property page. A developer can change the download setting through the Feed APIs.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableenclosuredownloading"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableenclosuredownloading_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport","displayName":"Turn off encryption support","description":"This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Layer (SSL) 2.0, or SSL 3.0 in the browser. TLS and SSL are protocols that help protect communication between the browser and the target server. When the browser attempts to set up a protected communication with the target server, the browser and server negotiate which protocol and version to use. The browser and server attempt to match each other’s list of supported protocols and versions, and they select the most preferred match.\r\n\r\nIf you enable this policy setting, the browser negotiates or does not negotiate an encryption tunnel by using the encryption methods that you select from the drop-down list.\r\n\r\nIf you disable or do not configure this policy setting, the user can select which encryption method the browser supports.\r\n\r\nNote: SSL 2.0 is off by default and is no longer supported starting with Windows 10 Version 1607. SSL 2.0 is an outdated security protocol, and enabling SSL 2.0 impairs the performance and functionality of TLS 1.0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableencryptionsupport"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions","displayName":"Secure Protocol combinations","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_0","displayName":"Use no secure protocols","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_8","displayName":"Only use SSL 2.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_32","displayName":"Only use SSL 3.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_40","displayName":"Use SSL 2.0 and SSL 3.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_128","displayName":"Only use TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_136","displayName":"Use SSL 2.0 and TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_160","displayName":"Use SSL 3.0 and TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_168","displayName":"Use SSL 2.0, SSL 3.0, and TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_512","displayName":"Only use TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_520","displayName":"Use SSL 2.0 and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_544","displayName":"Use SSL 3.0 and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_552","displayName":"Use SSL 2.0, SSL 3.0, and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_640","displayName":"Use TLS 1.0 and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_648","displayName":"Use SSL 2.0, TLS 1.0, and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_672","displayName":"Use SSL 3.0, TLS 1.0, and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_680","displayName":"Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2048","displayName":"Only use TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2056","displayName":"Use SSL 2.0 and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2080","displayName":"Use SSL 3.0 and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2088","displayName":"Use SSL 2.0, SSL 3.0, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2176","displayName":"Use TLS 1.0 and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2184","displayName":"Use SSL 2.0, TLS 1.0, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2208","displayName":"Use SSL 3.0, TLS 1.0, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2216","displayName":"Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2560","displayName":"Use TLS 1.1 and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2568","displayName":"Use SSL 2.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2592","displayName":"Use SSL 3.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2600","displayName":"Use SSL 2.0, SSL 3.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2688","displayName":"Use TLS 1.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2696","displayName":"Use SSL 2.0, TLS 1.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2720","displayName":"Use SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_2728","displayName":"Use SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_8192","displayName":"Only use TLS 1.3","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10240","displayName":"Use TLS 1.2 and TLS 1.3","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10752","displayName":"Use TLS 1.1, TLS 1.2, and TLS 1.3","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10880","displayName":"Use TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableencryptionsupport_advanced_wininetprotocoloptions_10912","displayName":"Use SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync","displayName":"Turn off background synchronization for feeds and Web Slices","description":"This policy setting controls whether to have background synchronization for feeds and Web Slices.\r\n\r\nIf you enable this policy setting, the ability to synchronize feeds and Web Slices in the background is turned off.\r\n\r\nIf you disable or do not configure this policy setting, the user can synchronize feeds and Web Slices in the background.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablefeedsbackgroundsync"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablefeedsbackgroundsync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard","displayName":"Prevent running First Run wizard","description":"This policy setting prevents Internet Explorer from running the First Run wizard the first time a user starts the browser after installing Internet Explorer or Windows.\r\n\r\nIf you enable this policy setting, you must make one of the following choices:\r\n • Skip the First Run wizard, and go directly to the user's home page.\r\n • Skip the First Run wizard, and go directly to the \"Welcome to Internet Explorer\" webpage.\r\n\r\nStarting with Windows 8, the \"Welcome to Internet Explorer\" webpage is not available. The user's home page will display regardless of which option is chosen.\r\n\r\nIf you disable or do not configure this policy setting, Internet Explorer may run the First Run wizard the first time the browser is started after installation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablefirstrunwizard"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions","displayName":"Select your choice","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions_1","displayName":"Go directly to home page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablefirstrunwizard_firstrunoptions_2","displayName":"Go directly to \"Welcome To IE\" page","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature","displayName":"Turn off the flip ahead with page prediction feature","description":"This policy setting determines whether a user can swipe across a screen or click Forward to go to the next pre-loaded page of a website.\r\n\r\nMicrosoft collects your browsing history to improve how flip ahead with page prediction works. This feature isn't available for Internet Explorer for the desktop.\r\n\r\nIf you enable this policy setting, flip ahead with page prediction is turned off and the next webpage isn't loaded into the background.\r\n\r\nIf you disable this policy setting, flip ahead with page prediction is turned on and the next webpage is loaded into the background.\r\n\r\nIf you don't configure this setting, users can turn this behavior on or off, using the Settings charm.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableflipaheadfeature"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableflipaheadfeature_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablegeolocation","displayName":"Turn off browser geolocation","description":"This policy setting allows you to disable browser geolocation support. This will prevent websites from requesting location data about the user.\r\n\r\nIf you enable this policy setting, browser geolocation support is turned off.\r\n\r\nIf you disable this policy setting, browser geolocation support is turned on.\r\n\r\nIf you do not configure this policy setting, browser geolocation support can be turned on or off in Internet Options on the Privacy tab.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablegeolocation"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablegeolocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablegeolocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication","displayName":"Disable HTML Application","description":"This policy setting specifies if running the HTML Application (HTA file) is blocked or allowed.\r\n\r\nIf you enable this policy setting, running the HTML Application (HTA file) will be blocked.\r\n\r\nIf you disable or do not configure this policy setting, running the HTML Application (HTA file) is allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablehtmlapplication"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablehtmlapplication_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors","displayName":"Prevent ignoring certificate errors","description":"This policy setting prevents the user from ignoring Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt browsing (such as \"expired\", \"revoked\", or \"name mismatch\" errors) in Internet Explorer.\r\n\r\nIf you enable this policy setting, the user cannot continue browsing.\r\n\r\nIf you disable or do not configure this policy setting, the user can choose to ignore certificate errors and continue browsing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableignoringcertificateerrors"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableignoringcertificateerrors_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing","displayName":"Turn off InPrivate Browsing","description":"This policy setting allows you to turn off the InPrivate Browsing feature.\r\n\r\nInPrivate Browsing prevents Internet Explorer from storing data about a user's browsing session. This includes cookies, temporary Internet files, history, and other data.\r\n\r\nIf you enable this policy setting, InPrivate Browsing is turned off.\r\n\r\nIf you disable this policy setting, InPrivate Browsing is available for use.\r\n\r\nIf you do not configure this policy setting, InPrivate Browsing can be turned on or off through the registry.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinprivatebrowsing"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinprivatebrowsing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp","displayName":"[Deprecated] Disable Internet Explorer 11 as a standalone browser","description":"This policy lets you restrict launching of Internet Explorer as a standalone browser.\r\n\r\nIf you enable this policy, it:\r\n- Prevents Internet Explorer 11 from launching as a standalone browser.\r\n- Restricts Internet Explorer's usage to Microsoft Edge's native 'Internet Explorer mode'.\r\n- Redirects all attempts at launching Internet Explorer 11 to Microsoft Edge Stable Channel browser.\r\n- Overrides any other policies that redirect to Internet Explorer 11.\r\n\r\nIf you disable, or don’t configure this policy, all sites are opened using the current active browser settings. Note: Microsoft Edge Stable Channel must be installed for this policy to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerapp"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2","displayName":"Disable Internet Explorer 11 as a standalone browser","description":"This policy lets you restrict launching of Internet Explorer as a standalone browser.\r\n\r\nIf you enable this policy, it:\r\n- Prevents Internet Explorer 11 from launching as a standalone browser.\r\n- Restricts Internet Explorer's usage to Microsoft Edge's native 'Internet Explorer mode'.\r\n- Redirects attempts at launching Internet Explorer 11 to Microsoft Edge Stable Channel browser.\r\n- Overrides any other policies that redirect to Internet Explorer 11.\r\n\r\nEven with this policy enabled launching Internet Explorer 11 using COM automation will still be allowed. To disable COM automation launches of Internet Explorer 11 use the \"Disable Internet Explorer 11 COM Automation\" group policy.\r\n\r\nIf you disable, or don’t configure this policy, all sites are opened using the current active browser settings. Note: Microsoft Edge Stable Channel must be installed for this policy to take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerapp"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions","displayName":"Notify that Internet Explorer 11 browser is disabled (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_0","displayName":"Never","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_1","displayName":"Always","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerapp_v2_notifydisableieoptions_2","displayName":"Once per user","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom","displayName":"Disable Internet Explorer 11 Launch Via COM Automation","description":"This policy lets you restrict launching of Internet Explorer using COM automation.\r\n\r\nIf you enable this policy, it prevents Internet Explorer 11 from being launched using COM automation.\r\n\r\nIf you disable, or don’t configure this policy, Internet Explorer 11 COM automation launches are allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableinternetexplorerlaunchviacom"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableinternetexplorerlaunchviacom_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode","displayName":"Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows","description":"This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows.\r\n\r\nImportant: Some ActiveX controls and toolbars may not be available when 64-bit processes are used.\r\n\r\nIf you enable this policy setting, Internet Explorer 11 will use 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.\r\n\r\nIf you disable this policy setting, Internet Explorer 11 will use 32-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.\r\n\r\nIf you don't configure this policy setting, users can turn this feature on or off using Internet Explorer settings. This feature is turned off by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableprocessesinenhancedprotectedmode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableprocessesinenhancedprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableproxychange","displayName":"Prevent changing proxy settings","description":"This policy setting specifies if a user can change proxy settings.\r\n\r\nIf you enable this policy setting, the user will not be able to configure proxy settings.\r\n\r\nIf you disable or do not configure this policy setting, the user can configure proxy settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableproxychange"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableproxychange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableproxychange_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange","displayName":"Prevent changing the default search provider","description":"This policy setting prevents the user from changing the default search provider for the Address bar and the toolbar Search box.\r\n\r\nIf you enable this policy setting, the user cannot change the default search provider.\r\n\r\nIf you disable or do not configure this policy setting, the user can change the default search provider.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesearchproviderchange"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesearchproviderchange_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange","displayName":"Disable changing secondary home page settings","description":"Secondary home pages are the default Web pages that Internet Explorer loads in separate tabs from the home page whenever the browser is run. This policy setting allows you to set default secondary home pages.\r\n\r\nIf you enable this policy setting, you can specify which default home pages should load as secondary home pages. The user cannot set custom default secondary home pages.\r\n\r\nIf you disable or do not configure this policy setting, the user can add secondary home pages.\r\n\r\nNote: If the “Disable Changing Home Page Settings” policy is enabled, the user cannot add secondary home pages.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesecondaryhomepagechange"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecondaryhomepagechange_secondaryhomepageslist","displayName":"Secondary home pages (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck","displayName":"Turn off the Security Settings Check feature","description":"This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Explorer at risk.\r\n\r\nIf you enable this policy setting, the feature is turned off.\r\n\r\nIf you disable or do not configure this policy setting, the feature is turned on.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablesecuritysettingscheck"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablesecuritysettingscheck_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disableupdatecheck","displayName":"Disable Periodic Check for Internet Explorer software updates","description":"Prevents Internet Explorer from checking whether a new version of the browser is available.\r\n\r\nIf you enable this policy, it prevents Internet Explorer from checking to see whether it is the latest available browser version and notifying users if a new version is available.\r\n\r\nIf you disable this policy or do not configure it, Internet Explorer checks every 30 days by default, and then notifies users if a new version is available.\r\n\r\nThis policy is intended to help the administrator maintain version control for Internet Explorer by preventing users from being notified about new versions of the browser.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disableupdatecheck"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disableupdatecheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disableupdatecheck_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete","displayName":"Turn off the auto-complete feature for web addresses","description":"This AutoComplete feature suggests possible matches when users are entering Web addresses in the browser address bar.\r\n\r\nIf you enable this policy setting, user will not be suggested matches when entering Web addresses. The user cannot change the auto-complete for web-address setting.\r\n\r\nIf you disable this policy setting, user will be suggested matches when entering Web addresses. The user cannot change the auto-complete for web-address setting.\r\n\r\nIf you do not configure this policy setting, a user will have the freedom to choose to turn the auto-complete setting for web-addresses on or off.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-disablewebaddressautocomplete"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_disablewebaddressautocomplete_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode","displayName":"Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled","description":"This policy setting prevents ActiveX controls from running in Protected Mode when Enhanced Protected Mode is enabled. When a user has an ActiveX control installed that is not compatible with Enhanced Protected Mode and a website attempts to load the control, Internet Explorer notifies the user and gives the option to run the website in regular Protected Mode. This policy setting disables this notification and forces all websites to run in Enhanced Protected Mode.\r\n\r\nEnhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system.\r\n\r\nWhen Enhanced Protected Mode is enabled, and a user encounters a website that attempts to load an ActiveX control that is not compatible with Enhanced Protected Mode, Internet Explorer notifies the user and gives the option to disable Enhanced Protected Mode for that particular website.\r\n\r\nIf you enable this policy setting, Internet Explorer will not give the user the option to disable Enhanced Protected Mode. All Protected Mode websites will run in Enhanced Protected Mode.\r\n\r\nIf you disable or do not configure this policy setting, Internet Explorer notifies users and provides an option to run websites with incompatible ActiveX controls in regular Protected Mode. This is the default behavior.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotallowactivexcontrolsinprotectedmode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowactivexcontrolsinprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites","displayName":"Security Zones: Do not allow users to add/delete sites","description":"Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level.\r\n\r\nIf you enable this policy, the site management settings for security zones are disabled. (To see the site management settings for security zones, in the Internet Options dialog box, click the Security tab, and then click the Sites button.)\r\n\r\nIf you disable this policy or do not configure it, users can add Web sites to or remove sites from the Trusted Sites and Restricted Sites zones, and alter settings for the Local Intranet zone.\r\n\r\nThis policy prevents users from changing site management settings for security zones established by the administrator.\r\n\r\nNote: The \"Disable the Security page\" policy (located in \\User Configuration\\Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel), which removes the Security tab from the interface, takes precedence over this policy. If it is enabled, this policy is ignored.\r\n\r\nAlso, see the \"Security zones: Use only machine settings\" policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotallowuserstoaddsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstoaddsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies","displayName":"Security Zones: Do not allow users to change policies","description":"Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level.\r\n\r\nIf you enable this policy, the Custom Level button and security-level slider on the Security tab in the Internet Options dialog box are disabled.\r\n\r\nIf you disable this policy or do not configure it, users can change the settings for security zones.\r\n\r\nThis policy prevents users from changing security zone settings established by the administrator.\r\n\r\nNote: The \"Disable the Security page\" policy (located in \\User Configuration\\Administrative Templates\\Windows Components\\Internet Explorer\\Internet Control Panel), which removes the Security tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored.\r\n\r\nAlso, see the \"Security zones: Use only machine settings\" policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotallowuserstochangepolicies"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotallowuserstochangepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols","displayName":"Turn off blocking of outdated ActiveX controls for Internet Explorer","description":"This policy setting determines whether Internet Explorer blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.\r\n\r\nIf you enable this policy setting, Internet Explorer stops blocking outdated ActiveX controls.\r\n\r\nIf you disable or don't configure this policy setting, Internet Explorer continues to block specific outdated ActiveX controls.\r\n\r\nFor more information, see \"Outdated ActiveX Controls\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotblockoutdatedactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains","displayName":"Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains","description":"This policy setting allows you to manage a list of domains on which Internet Explorer will stop blocking outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.\r\n\r\nIf you enable this policy setting, you can enter a custom list of domains for which outdated ActiveX controls won't be blocked in Internet Explorer. Each domain entry must be formatted like one of the following:\r\n\r\n1. \"domain.name.TLD\". For example, if you want to include *.contoso.com/*, use \"contoso.com\"\r\n2. \"hostname\". For example, if you want to include http://example, use \"example\"\r\n3. \"file:///path/filename.htm\". For example, use \"file:///C:/Users/contoso/Desktop/index.htm\"\r\n\r\nIf you disable or don't configure this policy setting, the list is deleted and Internet Explorer continues to block specific outdated ActiveX controls on all domains in the Internet Zone.\r\n\r\nFor more information, see \"Outdated ActiveX Controls\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-donotblockoutdatedactivexcontrolsonspecificdomains"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_donotblockoutdatedactivexcontrolsonspecificdomains_domainlist","displayName":"Domain allow list (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys","displayName":"Enable extended hot keys in Internet Explorer mode","description":"This policy setting lets admins enable extended Microsoft Edge Internet Explorer mode hotkeys, such as \"Ctrl+S\" to have \"Save as\" functionality.\r\n\r\nIf you enable this policy, extended hotkey functionality is enabled in Internet Explorer mode and work the same as Internet Explorer.\r\n\r\nIf you disable, or don't configure this policy, extended hotkeys will not work in Internet Explorer mode.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2102115","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-enableextendediemodehotkeys"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_enableextendediemodehotkeys_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode","displayName":"Enable global window list in Internet Explorer mode","description":"This setting allows Internet Explorer mode to use the global window list that enables sharing state with other applications.\r\nThe setting will take effect only when Internet Explorer 11 is disabled as a standalone browser.\r\n\r\nIf you enable this policy, Internet Explorer mode will use the global window list.\r\n\r\nIf you disable or don’t configure this policy, Internet Explorer mode will continue to maintain a separate window list.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2102921\r\nTo learn more about disabling Internet Explorer 11 as a standalone browser, see https://go.microsoft.com/fwlink/?linkid=2168340","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-enableglobalwindowlistiniemode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_enableglobalwindowlistiniemode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_includealllocalsites","displayName":"Intranet Sites: Include all local (intranet) sites not listed in other zones","description":"This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone.\r\n\r\nIf you enable this policy setting, local sites which are not explicitly mapped into a zone are considered to be in the Intranet Zone.\r\n\r\nIf you disable this policy setting, local sites which are not explicitly mapped into a zone will not be considered to be in the Intranet Zone (so would typically be in the Internet Zone).\r\n\r\nIf you do not configure this policy setting, users choose whether to force local sites into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includealllocalsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_includealllocalsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_includealllocalsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths","displayName":"Intranet Sites: Include all network paths (UNCs)","description":"This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.\r\n\r\nIf you enable this policy setting, all network paths are mapped into the Intranet Zone.\r\n\r\nIf you disable this policy setting, network paths are not necessarily mapped into the Intranet Zone (other rules might map one there).\r\n\r\nIf you do not configure this policy setting, users choose whether network paths are mapped into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includeallnetworkpaths"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_includeallnetworkpaths_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites","displayName":"Intranet Sites: Include all sites that bypass the proxy server","description":"This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone.\r\n\r\nIf you enable this policy setting, sites which bypass the proxy server are mapped into the Intranet Zone.\r\n\r\nIf you disable this policy setting, sites which bypass the proxy server aren't necessarily mapped into the Intranet Zone (other rules might map one there).\r\n\r\nIf you do not configure this policy setting, users choose whether sites which bypass the proxy server are mapped into the Intranet Zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-includeallproxybypasssites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_includeallproxybypasssites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript","displayName":"Allow cut, copy or paste operations from the clipboard via script","description":"This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region.\r\n\r\nIf you enable this policy setting, a script can perform a clipboard operation.\r\n\r\nIf you select Prompt in the drop-down box, users are queried as to whether to perform clipboard operations.\r\n\r\nIf you disable this policy setting, a script cannot perform a clipboard operation.\r\n\r\nIf you do not configure this policy setting, a script can perform a clipboard operation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowcopypasteviascript"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407","displayName":"Allow paste operations via script","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowcopypasteviascript_iz_partname1407_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles","displayName":"Allow drag and drop or copy and paste files","description":"This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\r\n\r\nIf you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone.\r\n\r\nIf you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone.\r\n\r\nIf you do not configure this policy setting, users can drag files or copy and paste files from this zone automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowdraganddropcopyandpastefiles"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802","displayName":"Allow drag and drop or copy and paste files","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowdraganddropcopyandpastefiles_iz_partname1802_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles","displayName":"Allow loading of XAML files","description":"This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation.\r\n\r\nIf you enable this policy setting and set the drop-down box to Enable, XAML files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XAML files.\r\n\r\nIf you disable this policy setting, XAML files are not loaded inside Internet Explorer. The user cannot change this behavior.\r\n\r\nIf you do not configure this policy setting, the user can decide whether to load XAML files inside Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowloadingofxamlfiles"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402","displayName":"XAML Files","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowloadingofxamlfiles_iz_partname2402_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols","displayName":"Allow only approved domains to use ActiveX controls without prompt","description":"This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.\r\n\r\nIf you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.\r\n\r\nIf you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowonlyapproveddomainstouseactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b","displayName":"Only allow approved domains to use ActiveX controls without prompt","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol","displayName":"Allow only approved domains to use the TDC ActiveX control","description":"This policy setting controls whether or not the user is allowed to run the TDC ActiveX control on websites.\r\n\r\nIf you enable this policy setting, the TDC ActiveX control will not run from websites in this zone.\r\n\r\nIf you disable this policy setting, the TDC Active X control will run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowonlyapproveddomainstousetdcactivexcontrol"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c","displayName":"Only allow approved domains to use the TDC ActiveX control","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols","displayName":"Allow scripting of Internet Explorer WebBrowser controls","description":"This policy setting determines whether a page can control embedded WebBrowser controls via script.\r\n\r\nIf you enable this policy setting, script access to the WebBrowser control is allowed.\r\n\r\nIf you disable this policy setting, script access to the WebBrowser control is not allowed.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable script access to the WebBrowser control. By default, script access to the WebBrowser control is allowed only in the Local Machine and Intranet zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptingofinternetexplorerwebbrowsercontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206","displayName":"Internet Explorer web browser control","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows","displayName":"Allow script-initiated windows without size or position constraints","description":"This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars.\r\n\r\nIf you enable this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature.\r\n\r\nIf you disable this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.\r\n\r\nIf you do not configure this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptinitiatedwindows"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102","displayName":"Allow script-initiated windows without size or position constraints","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptinitiatedwindows_iz_partname2102_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript","displayName":"Allow updates to status bar via script","description":"This policy setting allows you to manage whether script is allowed to update the status bar within the zone.\r\n\r\nIf you enable this policy setting, script is allowed to update the status bar.\r\n\r\nIf you disable or do not configure this policy setting, script is not allowed to update the status bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowupdatestostatusbarviascript"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103","displayName":"Status bar updates via script","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowupdatestostatusbarviascript_iz_partname2103_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer","displayName":"Allow VBScript to run in Internet Explorer","description":"This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer.\r\n\r\nIf you selected Enable in the drop-down box, VBScript can run without user intervention.\r\n\r\nIf you selected Prompt in the drop-down box, users are asked to choose whether to allow VBScript to run.\r\n\r\nIf you selected Disable in the drop-down box, VBScript is prevented from running.\r\n\r\nIf you do not configure or disable this policy setting, VBScript is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneallowvbscripttorunininternetexplorer"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c","displayName":"Allow VBScript to run in Internet Explorer","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneallowvbscripttorunininternetexplorer_iz_partname140c_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\r\n\r\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you don't configure this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedonotrunantimalwareagainstactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols","displayName":"Download signed ActiveX controls","description":"This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\r\n\r\nIf you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.\r\n\r\nIf you disable the policy setting, signed controls cannot be downloaded.\r\n\r\nIf you do not configure this policy setting, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedownloadsignedactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001","displayName":"Download signed ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadsignedactivexcontrols_iz_partname1001_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols","displayName":"Download unsigned ActiveX controls","description":"This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.\r\n\r\nIf you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run.\r\n\r\nIf you disable this policy setting, users cannot run unsigned controls.\r\n\r\nIf you do not configure this policy setting, users cannot run unsigned controls.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonedownloadunsignedactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004","displayName":"Download unsigned ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonedownloadunsignedactivexcontrols_iz_partname1004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter","displayName":"Turn on Cross-Site Scripting Filter","description":"This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.\r\n\r\nIf you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections.\r\n\r\nIf you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenablecrosssitescriptingfilter"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409","displayName":"Turn on Cross-Site Scripting (XSS) Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablecrosssitescriptingfilter_iz_partname1409_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows","displayName":"Enable dragging of content from different domains across windows","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows.\r\n\r\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.\r\n\r\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when both the source and destination are in different windows. Users cannot change this setting.\r\n\r\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in different windows. Users can change this setting in the Internet Options dialog.\r\n\r\nIn Internet Explorer 9 and earlier versions, if you disable this policy or do not configure it, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709","displayName":"Enable dragging of content from different domains across windows","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows","displayName":"Enable dragging of content from different domains within a window","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window.\r\n\r\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting.\r\n\r\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.\r\n\r\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users can change this setting in the Internet Options dialog.\r\n\r\nIn Internet Explorer 9 and earlier versions, if you disable this policy setting or do not configure it, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708","displayName":"Enable dragging of content from different domains within a window","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing","displayName":"Enable MIME Sniffing","description":"This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature.\r\n\r\nIf you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature.\r\n\r\nIf you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.\r\n\r\nIf you do not configure this policy setting, the MIME Sniffing Safety Feature will not apply in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenablemimesniffing"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100","displayName":"Enable MIME Sniffing","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenablemimesniffing_iz_partname2100_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode","displayName":"Turn on Protected Mode","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\r\n\r\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\r\n\r\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\r\n\r\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneenableprotectedmode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500","displayName":"Protected Mode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneenableprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver","displayName":"Include local path when user is uploading files to a server","description":"This policy setting controls whether or not local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path.\r\n\r\nIf you enable this policy setting, path information is sent when the user is uploading a file via an HTML form.\r\n\r\nIf you disable this policy setting, path information is removed when the user is uploading a file via an HTML form.\r\n\r\nIf you do not configure this policy setting, the user can choose whether path information is sent when he or she is uploading a file via an HTML form. By default, path information is sent.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneincludelocalpathwhenuploadingfilestoserver"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a","displayName":"Include local directory path when uploading files to a server","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, the permission is set to High Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe","displayName":"Launching applications and files in an IFRAME","description":"This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.\r\n\r\nIf you enable this policy setting, users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.\r\n\r\nIf you disable this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.\r\n\r\nIf you do not configure this policy setting, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonelaunchingapplicationsandfilesiniframe"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804","displayName":"Launching applications and files in an IFRAME","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelaunchingapplicationsandfilesiniframe_iz_partname1804_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\r\n\r\nIf you enable this policy setting, you can choose from the following logon options.\r\n\r\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\r\n\r\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\r\n\r\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\r\n\r\nIf you do not configure this policy setting, logon is set to Automatic logon only in Intranet zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonelogonoptions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00","displayName":"Logon options","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode","displayName":"Run .NET Framework-reliant components signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute signed managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute signed managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute signed managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will execute signed managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzonerunnetframeworkreliantcomponentssignedwithauthenticode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001","displayName":"Run .NET Framework-reliant components signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles","displayName":"Show security warning for potentially unsafe files","description":"This policy setting controls whether or not the \"Open File - Security Warning\" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example).\r\n\r\nIf you enable this policy setting and set the drop-down box to Enable, these files open without a security warning. If you set the drop-down box to Prompt, a security warning appears before the files open.\r\n\r\nIf you disable this policy setting, these files do not open.\r\n\r\nIf you do not configure this policy setting, the user can configure how the computer handles these files. By default, these files are blocked in the Restricted zone, enabled in the Intranet and Local Computer zones, and set to prompt in the Internet and Trusted zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneshowsecuritywarningforpotentiallyunsafefiles"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806","displayName":"Launching programs and unsafe files","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker","displayName":"Use Pop-up Blocker","description":"This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked.\r\n\r\nIf you enable this policy setting, most unwanted pop-up windows are prevented from appearing.\r\n\r\nIf you disable this policy setting, pop-up windows are not prevented from appearing.\r\n\r\nIf you do not configure this policy setting, most unwanted pop-up windows are prevented from appearing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-internetzoneusepopupblocker"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809","displayName":"Use Pop-up Blocker","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_internetzoneusepopupblocker_iz_partname1809_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\r\n\r\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonedonotrunantimalwareagainstactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, the permission is set to Medium Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\r\n\r\nIf you enable this policy setting, you can choose from the following logon options.\r\n\r\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\r\n\r\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\r\n\r\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\r\n\r\nIf you do not configure this policy setting, logon is set to Automatic logon only in Intranet zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonelogonoptions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00","displayName":"Logon options (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-intranetzonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_intranetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_jscriptreplacement","displayName":"Replace JScript by loading JScript9Legacy in place of JScript.","description":"This policy setting specifies whether JScript or JScript9Legacy is loaded.\r\n \r\nIf you enable this policy setting or not configured, JScript9Legacy will be loaded in situations where JScript is instantiated.\r\n\r\nIf you disable this policy, then JScript will be utilized.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-jscriptreplacement"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_jscriptreplacement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_jscriptreplacement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer","displayName":"Keep all intranet sites in Internet Explorer","description":"Prevents intranet sites from being opened in any browser except Internet Explorer. But note that If the ‘Send all sites not included in the Enterprise Mode Site List to Microsoft Edge’ (‘RestrictIE’) policy isn’t enabled, this policy has no effect.\r\n\r\nIf you enable this policy, all intranet sites are opened in Internet Explorer 11. The only exceptions are sites listed in your Enterprise Mode Site List.\r\n\r\nIf you disable or don’t configure this policy, all intranet sites are automatically opened in Microsoft Edge.\r\n\r\nWe strongly recommend keeping this policy in sync with the ‘Send all intranet sites to Internet Explorer’ (‘SendIntranetToInternetExplorer’) policy. Additionally, it’s best to enable this policy only if your intranet sites have known compatibility problems with Microsoft Edge.\r\n\r\nRelated policies:\r\n- Send all intranet sites to Internet Explorer (‘SendIntranetToInternetExplorer’)\r\n- Send all sites not included in the Enterprise Mode Site List to Microsoft Edge (‘RestrictIE’)\r\n\r\nFor more info about how to use this policy together with other related policies to create the optimal configuration for your organization, see https://go.microsoft.com/fwlink/?linkid=2094210.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-keepintranetsitesininternetexplorer"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_keepintranetsitesininternetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\r\n\r\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonedonotrunantimalwareagainstactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, users are queried whether to allow the control to be loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, the permission is set to Medium Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\r\n\r\nIf you enable this policy setting, you can choose from the following logon options.\r\n\r\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\r\n\r\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\r\n\r\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\r\n\r\nIf you do not configure this policy setting, logon is set to Automatic logon with current username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonelogonoptions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00","displayName":"Logon options (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-localmachinezonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_localmachinezonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowninternetzonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowninternetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetjavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetjavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownintranetzonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownintranetzonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownlocalmachinezonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownlocalmachinezonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, users are queried whether to allow HTML fonts to download.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open additional windows and frames from other domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow additional windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open other windows and frames from other domains or access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users cannot open other windows and frames from different domains or access applications from different domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddownrestrictedsiteszonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddownrestrictedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-lockeddowntrustedsiteszonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_lockeddowntrustedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type.\r\n\r\nIf you enable this policy setting, MIME sniffing will never promote a file of one type to a more dangerous file type.\r\n\r\nIf you disable this policy setting, Internet Explorer processes will allow a MIME sniff promoting a file of one type to a more dangerous file type.\r\n\r\nIf you do not configure this policy setting, MIME sniffing will never promote a file of one type to a more dangerous file type.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-mimesniffingsafetyfeatureinternetexplorerprocesses"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_mimesniffingsafetyfeatureinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on the MK protocol will fail.\r\n\r\nIf you enable this policy setting, the MK Protocol is prevented for File Explorer and Internet Explorer, and resources hosted on the MK protocol will fail.\r\n\r\nIf you disable this policy setting, applications can use the MK protocol API. Resources hosted on the MK protocol will work for the File Explorer and Internet Explorer processes.\r\n\r\nIf you do not configure this policy setting, the MK Protocol is prevented for File Explorer and Internet Explorer, and resources hosted on the MK protocol will fail.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-mkprotocolsecurityrestrictioninternetexplorerprocesses"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_mkprotocolsecurityrestrictioninternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage","displayName":"Specify default behavior for a new tab","description":"This policy setting allows you to specify what is displayed when the user opens a new tab.\r\n\r\nIf you enable this policy setting, you can choose which page to display when the user opens a new tab: blank page (about:blank), the first home page, the new tab page or the new tab page with my news feed.\r\n\r\nIf you disable or do not configure this policy setting, the user can select his or her preference for this behavior.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-newtabdefaultpage"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions","displayName":"New tab behavior","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_3","displayName":"New tab page with my news feed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_0","displayName":"about:blank","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_2","displayName":"New tab page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_newtabdefaultpage_newtabactionoptions_1","displayName":"Home page","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"This policy setting allows you to manage whether the Notification bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Notification bar is displayed for Internet Explorer processes.\r\n\r\nIf you enable this policy setting, the Notification bar will be displayed for Internet Explorer Processes.\r\n\r\nIf you disable this policy setting, the Notification bar will not be displayed for Internet Explorer processes.\r\n\r\nIf you do not configure this policy setting, the Notification bar will be displayed for Internet Explorer Processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-notificationbarinternetexplorerprocesses"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_notificationbarinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter","displayName":"Prevent managing SmartScreen Filter","description":"This policy setting prevents the user from managing SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through \"phishing,\" or is known to host malware.\r\n\r\nIf you enable this policy setting, the user is not prompted to turn on SmartScreen Filter. All website addresses that are not on the filter's allow list are sent automatically to Microsoft without prompting the user.\r\n\r\nIf you disable or do not configure this policy setting, the user is prompted to decide whether to turn on SmartScreen Filter during the first-run experience.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-preventmanagingsmartscreenfilter"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions","displayName":"Select SmartScreen Filter mode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_0","displayName":"Off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_preventmanagingsmartscreenfilter_ie9safetyfilteroptions_1","displayName":"On","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols","displayName":"Prevent per-user installation of ActiveX controls","description":"This policy setting allows you to prevent the installation of ActiveX controls on a per-user basis.\r\n\r\nIf you enable this policy setting, ActiveX controls cannot be installed on a per-user basis.\r\n\r\nIf you disable or do not configure this policy setting, ActiveX controls can be installed on a per-user basis.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-preventperuserinstallationofactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_preventperuserinstallationofactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, etc.). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone, making the Local Machine security zone a prime target for malicious users. Zone Elevation also disables JavaScript navigation if there is no security context.\r\n\r\nIf you enable this policy setting, any zone can be protected from zone elevation by Internet Explorer processes.\r\n\r\nIf you disable this policy setting, no zone receives such protection for Internet Explorer processes.\r\n\r\nIf you do not configure this policy setting, any zone can be protected from zone elevation by Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-protectionfromzoneelevationinternetexplorerprocesses"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_protectionfromzoneelevationinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols","displayName":"Remove \"Run this time\" button for outdated ActiveX controls in Internet Explorer","description":"This policy setting allows you to stop users from seeing the \"Run this time\" button and from running specific outdated ActiveX controls in Internet Explorer.\r\n\r\nIf you enable this policy setting, users won't see the \"Run this time\" button on the warning message that appears when Internet Explorer blocks an outdated ActiveX control.\r\n\r\nIf you disable or don't configure this policy setting, users will see the \"Run this time\" button on the warning message that appears when Internet Explorer blocks an outdated ActiveX control. Clicking this button lets the user run the outdated ActiveX control once.\r\n\r\nFor more information, see \"Outdated ActiveX Controls\" in the Internet Explorer TechNet library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-removerunthistimebuttonforoutdatedactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_removerunthistimebuttonforoutdatedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode","displayName":"Reset zoom to default for HTML dialogs in Internet Explorer mode","description":"This policy setting lets admins reset zoom to default for HTML dialogs in Internet Explorer mode.\r\n\r\nIf you enable this policy, the zoom of an HTML dialog in Internet Explorer mode will not get propagated from its parent page.\r\n\r\nIf you disable, or don't configure this policy, the zoom of an HTML dialog in Internet Explorer mode will be set based on the zoom of it's parent page.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/?linkid=2220107","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-resetzoomfordialoginiemode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_resetzoomfordialoginiemode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes.\r\n\r\nIf you enable this policy setting, prompting for ActiveX control installations will be blocked for Internet Explorer processes.\r\n\r\nIf you disable this policy setting, prompting for ActiveX control installations will not be blocked for Internet Explorer processes.\r\n\r\nIf you do not configure this policy setting, the user's preference will be used to determine whether to block ActiveX control installations for Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictactivexinstallinternetexplorerprocesses"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictactivexinstallinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting","displayName":"Allow active scripting","description":"This policy setting allows you to manage whether script code on pages in the zone is run.\r\n\r\nIf you enable this policy setting, script code on pages in the zone can run automatically. If you select Prompt in the drop-down box, users are queried to choose whether to allow script code on pages in the zone to run.\r\n\r\nIf you disable this policy setting, script code on pages in the zone is prevented from running.\r\n\r\nIf you do not configure this policy setting, script code on pages in the zone is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowactivescripting"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400","displayName":"Allow active scripting","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowactivescripting_iz_partname1400_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, file downloads that are not user-initiated will be blocked, and users will see the Notification bar instead of the file download dialog. Users can then click the Notification bar to allow the file download prompt.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors","displayName":"Allow binary and script behaviors","description":"This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which they were attached.\r\n\r\nIf you enable this policy setting, binary and script behaviors are available. If you select Administrator approved in the drop-down box, only behaviors listed in the Admin-approved Behaviors under Binary Behaviors Security Restriction policy are available.\r\n\r\nIf you disable this policy setting, binary and script behaviors are not available unless applications have implemented a custom security manager.\r\n\r\nIf you do not configure this policy setting, binary and script behaviors are not available unless applications have implemented a custom security manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowbinaryandscriptbehaviors"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000","displayName":"Allow Binary and Script Behaviors","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_65536","displayName":"Administrator approved","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowbinaryandscriptbehaviors_iz_partname2000_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript","displayName":"Allow cut, copy or paste operations from the clipboard via script","description":"This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region.\r\n\r\nIf you enable this policy setting, a script can perform a clipboard operation.\r\n\r\nIf you select Prompt in the drop-down box, users are queried as to whether to perform clipboard operations.\r\n\r\nIf you disable this policy setting, a script cannot perform a clipboard operation.\r\n\r\nIf you do not configure this policy setting, a script cannot perform a clipboard operation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowcopypasteviascript"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407","displayName":"Allow paste operations via script","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowcopypasteviascript_iz_partname1407_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles","displayName":"Allow drag and drop or copy and paste files","description":"This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\r\n\r\nIf you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone.\r\n\r\nIf you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone.\r\n\r\nIf you do not configure this policy setting, users are queried to choose whether to drag or copy files from this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowdraganddropcopyandpastefiles"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802","displayName":"Allow drag and drop or copy and paste files","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowdraganddropcopyandpastefiles_iz_partname1802_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads","displayName":"Allow file downloads","description":"This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered.\r\n\r\nIf you enable this policy setting, files can be downloaded from the zone.\r\n\r\nIf you disable this policy setting, files are prevented from being downloaded from the zone.\r\n\r\n If you do not configure this policy setting, files are prevented from being downloaded from the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803","displayName":"Allow file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfiledownloads_iz_partname1803_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, users are queried whether to allow HTML fonts to download.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles","displayName":"Allow loading of XAML files","description":"This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation.\r\n\r\nIf you enable this policy setting and set the drop-down box to Enable, XAML files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XAML files.\r\n\r\nIf you disable this policy setting, XAML files are not loaded inside Internet Explorer. The user cannot change this behavior.\r\n\r\nIf you do not configure this policy setting, the user can decide whether to load XAML files inside Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowloadingofxamlfiles"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402","displayName":"XAML Files","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowloadingofxamlfiles_iz_partname2402_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh","displayName":"Allow META REFRESH","description":"This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh setting (tag) to redirect browsers to another Web page.\r\n\r\nIf you enable this policy setting, a user's browser that loads a page containing an active Meta Refresh setting can be redirected to another Web page.\r\n\r\nIf you disable this policy setting, a user's browser that loads a page containing an active Meta Refresh setting cannot be redirected to another Web page.\r\n\r\nIf you do not configure this policy setting, a user's browser that loads a page containing an active Meta Refresh setting cannot be redirected to another Web page.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowmetarefresh"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608","displayName":"Allow META REFRESH","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowmetarefresh_iz_partname1608_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols","displayName":"Allow only approved domains to use ActiveX controls without prompt","description":"This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.\r\n\r\nIf you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.\r\n\r\nIf you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b","displayName":"Only allow approved domains to use ActiveX controls without prompt","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols_iz_partname120b_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol","displayName":"Allow only approved domains to use the TDC ActiveX control","description":"This policy setting controls whether or not the user is allowed to run the TDC ActiveX control on websites.\r\n\r\nIf you enable this policy setting, the TDC ActiveX control will not run from websites in this zone.\r\n\r\nIf you disable this policy setting, the TDC Active X control will run from all sites in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c","displayName":"Only allow approved domains to use the TDC ActiveX control","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol_iz_partname120c_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols","displayName":"Allow scripting of Internet Explorer WebBrowser controls","description":"This policy setting determines whether a page can control embedded WebBrowser controls via script.\r\n\r\nIf you enable this policy setting, script access to the WebBrowser control is allowed.\r\n\r\nIf you disable this policy setting, script access to the WebBrowser control is not allowed.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable script access to the WebBrowser control. By default, script access to the WebBrowser control is allowed only in the Local Machine and Intranet zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206","displayName":"Internet Explorer web browser control","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols_iz_partname1206_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows","displayName":"Allow script-initiated windows without size or position constraints","description":"This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars.\r\n\r\nIf you enable this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature.\r\n\r\nIf you disable this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.\r\n\r\nIf you do not configure this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowscriptinitiatedwindows"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102","displayName":"Allow script-initiated windows without size or position constraints","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptinitiatedwindows_iz_partname2102_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript","displayName":"Allow updates to status bar via script","description":"This policy setting allows you to manage whether script is allowed to update the status bar within the zone.\r\n\r\nIf you enable this policy setting, script is allowed to update the status bar.\r\n\r\nIf you disable or do not configure this policy setting, script is not allowed to update the status bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowupdatestostatusbarviascript"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103","displayName":"Status bar updates via script","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowupdatestostatusbarviascript_iz_partname2103_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer","displayName":"Allow VBScript to run in Internet Explorer","description":"This policy setting allows you to manage whether VBScript can be run on pages from the specified zone in Internet Explorer.\r\n\r\nIf you selected Enable in the drop-down box, VBScript can run without user intervention.\r\n\r\nIf you selected Prompt in the drop-down box, users are asked to choose whether to allow VBScript to run.\r\n\r\nIf you selected Disable in the drop-down box, VBScript is prevented from running.\r\n\r\nIf you do not configure or disable this policy setting, VBScript is prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneallowvbscripttorunininternetexplorer"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c","displayName":"Allow VBScript to run in Internet Explorer","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneallowvbscripttorunininternetexplorer_iz_partname140c_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\r\n\r\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you don't configure this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedonotrunantimalwareagainstactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols","displayName":"Download signed ActiveX controls","description":"This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\r\n\r\nIf you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.\r\n\r\nIf you disable the policy setting, signed controls cannot be downloaded.\r\n\r\nIf you do not configure this policy setting, signed controls cannot be downloaded.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedownloadsignedactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001","displayName":"Download signed ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadsignedactivexcontrols_iz_partname1001_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols","displayName":"Download unsigned ActiveX controls","description":"This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.\r\n\r\nIf you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run.\r\n\r\nIf you disable this policy setting, users cannot run unsigned controls.\r\n\r\nIf you do not configure this policy setting, users cannot run unsigned controls.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonedownloadunsignedactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004","displayName":"Download unsigned ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonedownloadunsignedactivexcontrols_iz_partname1004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter","displayName":"Turn on Cross-Site Scripting Filter","description":"This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.\r\n\r\nIf you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections.\r\n\r\nIf you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenablecrosssitescriptingfilter"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409","displayName":"Turn on Cross-Site Scripting (XSS) Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablecrosssitescriptingfilter_iz_partname1409_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows","displayName":"Enable dragging of content from different domains across windows","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows.\r\n\r\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.\r\n\r\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when both the source and destination are in different windows. Users cannot change this setting.\r\n\r\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in different windows. Users can change this setting in the Internet Options dialog.\r\n\r\nIn Internet Explorer 9 and earlier versions, if you disable this policy or do not configure it, users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709","displayName":"Enable dragging of content from different domains across windows","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows_iz_partname2709_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows","displayName":"Enable dragging of content from different domains within a window","description":"This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window.\r\n\r\nIf you enable this policy setting and click Enable, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting.\r\n\r\nIf you enable this policy setting and click Disable, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.\r\n\r\nIn Internet Explorer 10, if you disable this policy setting or do not configure it, users cannot drag content from one domain to a different domain when the source and destination are in the same window. Users can change this setting in the Internet Options dialog.\r\n\r\nIn Internet Explorer 9 and earlier versions, if you disable this policy setting or do not configure it, users can drag content from one domain to a different domain when the source and destination are in the same window. Users cannot change this setting in the Internet Options dialog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708","displayName":"Enable dragging of content from different domains within a window","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows_iz_partname2708_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing","displayName":"Enable MIME Sniffing","description":"This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature.\r\n\r\nIf you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature.\r\n\r\nIf you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.\r\n\r\nIf you do not configure this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneenablemimesniffing"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100","displayName":"Enable MIME Sniffing","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneenablemimesniffing_iz_partname2100_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver","displayName":"Include local path when user is uploading files to a server","description":"This policy setting controls whether or not local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user's desktop may contain the user name as a part of the path.\r\n\r\nIf you enable this policy setting, path information is sent when the user is uploading a file via an HTML form.\r\n\r\nIf you disable this policy setting, path information is removed when the user is uploading a file via an HTML form.\r\n\r\nIf you do not configure this policy setting, the user can choose whether path information is sent when he or she is uploading a file via an HTML form. By default, path information is sent.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a","displayName":"Include local directory path when uploading files to a server","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneincludelocalpathwhenuploadingfilestoserver_iz_partname160a_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, Java applets are disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe","displayName":"Launching applications and files in an IFRAME","description":"This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.\r\n\r\nIf you enable this policy setting, users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.\r\n\r\nIf you disable this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.\r\n\r\nIf you do not configure this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonelaunchingapplicationsandfilesiniframe"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804","displayName":"Launching applications and files in an IFRAME","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelaunchingapplicationsandfilesiniframe_iz_partname1804_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\r\n\r\nIf you enable this policy setting, you can choose from the following logon options.\r\n\r\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\r\n\r\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\r\n\r\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\r\n\r\nIf you do not configure this policy setting, logon is set to Prompt for username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonelogonoptions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00","displayName":"Logon options","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open additional windows and frames from other domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow additional windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open other windows and frames from other domains or access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users cannot open other windows and frames from different domains or access applications from different domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins","displayName":"Run ActiveX controls and plugins","description":"This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone.\r\n\r\nIf you enable this policy setting, controls and plug-ins can run without user intervention.\r\n\r\nIf you selected Prompt in the drop-down box, users are asked to choose whether to allow the controls or plug-in to run.\r\n\r\nIf you disable this policy setting, controls and plug-ins are prevented from running.\r\n\r\nIf you do not configure this policy setting, controls and plug-ins are prevented from running.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonerunactivexcontrolsandplugins"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200","displayName":"Run ActiveX controls and plugins","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_65536","displayName":"Administrator approved","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunactivexcontrolsandplugins_iz_partname1200_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode","displayName":"Run .NET Framework-reliant components signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute signed managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute signed managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute signed managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will not execute signed managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001","displayName":"Run .NET Framework-reliant components signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode_iz_partname2001_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting","displayName":"Script ActiveX controls marked safe for scripting","description":"This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.\r\n\r\nIf you enable this policy setting, script interaction can occur automatically without user intervention.\r\n\r\nIf you select Prompt in the drop-down box, users are queried to choose whether to allow script interaction.\r\n\r\nIf you disable this policy setting, script interaction is prevented from occurring.\r\n\r\nIf you do not configure this policy setting, script interaction is prevented from occurring.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405","displayName":"Script ActiveX controls marked safe for scripting","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting_iz_partname1405_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets","displayName":"Scripting of Java applets","description":"This policy setting allows you to manage whether applets are exposed to scripts within the zone.\r\n\r\nIf you enable this policy setting, scripts can access applets automatically without user intervention.\r\n\r\nIf you select Prompt in the drop-down box, users are queried to choose whether to allow scripts to access applets.\r\n\r\nIf you disable this policy setting, scripts are prevented from accessing applets.\r\n\r\nIf you do not configure this policy setting, scripts are prevented from accessing applets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszonescriptingofjavaapplets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402","displayName":"Scripting of Java applets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszonescriptingofjavaapplets_iz_partname1402_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles","displayName":"Show security warning for potentially unsafe files","description":"This policy setting controls whether or not the \"Open File - Security Warning\" message appears when the user tries to open executable files or other potentially unsafe files (from an intranet file share by using File Explorer, for example).\r\n\r\nIf you enable this policy setting and set the drop-down box to Enable, these files open without a security warning. If you set the drop-down box to Prompt, a security warning appears before the files open.\r\n\r\nIf you disable this policy setting, these files do not open.\r\n\r\nIf you do not configure this policy setting, the user can configure how the computer handles these files. By default, these files are blocked in the Restricted zone, enabled in the Intranet and Local Computer zones, and set to prompt in the Internet and Trusted zones.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806","displayName":"Launching programs and unsafe files","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles_iz_partname1806_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode","displayName":"Turn on Protected Mode","description":"This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.\r\n\r\nIf you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.\r\n\r\nIf you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.\r\n\r\nIf you do not configure this policy setting, the user can turn on or turn off Protected Mode.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneturnonprotectedmode"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500","displayName":"Protected Mode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneturnonprotectedmode_iz_partname2500_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker","displayName":"Use Pop-up Blocker","description":"This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked.\r\n\r\nIf you enable this policy setting, most unwanted pop-up windows are prevented from appearing.\r\n\r\nIf you disable this policy setting, pop-up windows are not prevented from appearing.\r\n\r\nIf you do not configure this policy setting, most unwanted pop-up windows are prevented from appearing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictedsiteszoneusepopupblocker"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809","displayName":"Use Pop-up Blocker","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictedsiteszoneusepopupblocker_iz_partname1809_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"This policy setting enables blocking of file download prompts that are not user initiated.\r\n\r\nIf you enable this policy setting, file download prompts that are not user initiated will be blocked for Internet Explorer processes.\r\n\r\nIf you disable this policy setting, prompting will occur for file downloads that are not user initiated for Internet Explorer processes.\r\n\r\nIf you do not configure this policy setting, the user's preference determines whether to prompt for file downloads that are not user initiated for Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-restrictfiledownloadinternetexplorerprocesses"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_restrictfiledownloadinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses","displayName":"Internet Explorer Processes","description":"Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows' title and status bars.\r\n\r\nIf you enable this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes.\r\n\r\nIf you disable this policy setting, scripts can continue to create popup windows and windows that obfuscate other windows.\r\n\r\nIf you do not configure this policy setting, popup windows and other restrictions apply for File Explorer and Internet Explorer processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-scriptedwindowsecurityrestrictionsinternetexplorerprocesses"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_scriptedwindowsecurityrestrictionsinternetexplorerprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_searchproviderlist","displayName":"Restrict search providers to a specific list","description":"This policy setting allows you to restrict the search providers that appear in the Search box in Internet Explorer to those defined in the list of policy keys for search providers (found under [HKCU or HKLM\\Software\\policies\\Microsoft\\Internet Explorer\\SearchScopes]). Normally, search providers can be added from third-party toolbars or in Setup, but the user can also add them from a search provider's website.\r\n\r\nIf you enable this policy setting, the user cannot configure the list of search providers on his or her computer, and any default providers installed do not appear (including providers installed from other applications). The only providers that appear are those in the list of policy keys for search providers. Note: This list can be created through a custom administrative template file. For information about creating this custom administrative template file, see the Internet Explorer documentation on search providers.\r\n\r\nIf you disable or do not configure this policy setting, the user can configure his or her list of search providers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-searchproviderlist"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_searchproviderlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_searchproviderlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings","displayName":"Security Zones: Use only machine settings","description":"Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level.\r\n\r\nIf you enable this policy, changes that the user makes to a security zone will apply to all users of that computer.\r\n\r\nIf you disable this policy or do not configure it, users of the same computer can establish their own security zone settings.\r\n\r\nThis policy is intended to ensure that security zone settings apply uniformly to the same computer and do not vary from user to user.\r\n\r\nAlso, see the \"Security zones: Do not allow users to change policies\" policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-securityzonesuseonlymachinesettings"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_securityzonesuseonlymachinesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge","displayName":"Send all sites not included in the Enterprise Mode Site List to Microsoft Edge.","description":"This setting lets you decide whether to open all sites not included in the Enterprise Mode Site List in Microsoft Edge. If you use this setting, you must also turn on the Administrative Templates\\Windows Components\\Internet Explorer\\Use the Enterprise Mode IE website list policy setting and you must include at least one site in the Enterprise Mode Site List.\r\n\r\nEnabling this setting automatically opens all sites not included in the Enterprise Mode Site List in Microsoft Edge.\r\n\r\nDisabling, or not configuring this setting, opens all sites based on the currently active browser.\r\n\r\nNote: If you've also enabled the Administrative Templates\\Windows Components\\Microsoft Edge\\Send all intranet sites to Internet Explorer 11 policy setting, then all intranet sites will continue to open in Internet Explorer 11.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-sendsitesnotinenterprisesitelisttoedge"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_sendsitesnotinenterprisesitelisttoedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice","displayName":"Specify use of ActiveX Installer Service for installation of ActiveX controls","description":"This policy setting allows you to specify how ActiveX controls are installed.\r\n\r\nIf you enable this policy setting, ActiveX controls are installed only if the ActiveX Installer Service is present and has been configured to allow the installation of ActiveX controls.\r\n\r\nIf you disable or do not configure this policy setting, ActiveX controls, including per-user controls, are installed through the standard installation process.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-specifyuseofactivexinstallerservice"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_specifyuseofactivexinstallerservice_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources","displayName":"Access data sources across domains","description":"This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).\r\n\r\nIf you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.\r\n\r\nIf you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowaccesstodatasources"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406","displayName":"Access data sources across domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowaccesstodatasources_iz_partname1406_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols","displayName":"Automatic prompting for ActiveX controls","description":"This policy setting manages whether users will be automatically prompted for ActiveX control installations.\r\n\r\nIf you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.\r\n\r\nIf you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.\r\n\r\nIf you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowautomaticpromptingforactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201","displayName":"Automatic prompting for ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforactivexcontrols_iz_partname2201_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads","displayName":"Automatic prompting for file downloads","description":"This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.\r\n\r\nIf you enable this setting, users will receive a file download dialog for automatic download attempts.\r\n\r\nIf you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowautomaticpromptingforfiledownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200","displayName":"Automatic prompting for file downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowautomaticpromptingforfiledownloads_iz_partname2200_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads","displayName":"Allow font downloads","description":"This policy setting allows you to manage whether pages of the zone may download HTML fonts.\r\n\r\nIf you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.\r\n\r\nIf you disable this policy setting, HTML fonts are prevented from downloading.\r\n\r\nIf you do not configure this policy setting, HTML fonts can be downloaded automatically.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowfontdownloads"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604","displayName":"Allow font downloads","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowfontdownloads_iz_partname1604_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.\r\n\r\nIf you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone. The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.\r\n\r\nIf you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.\r\n\r\nIf you do not configure this policy setting, a warning is issued to the user that potentially risky navigation is about to occur.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowlessprivilegedsites"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101","displayName":"Web sites in less privileged Web content zones can navigate into this zone","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowlessprivilegedsites_iz_partname2101_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.\r\n\r\nIf you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.\r\n\r\nIf you disable this policy setting, Internet Explorer will not execute unsigned managed components.\r\n\r\nIf you do not configure this policy setting, Internet Explorer will execute unsigned managed components.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallownetframeworkreliantcomponents"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004","displayName":"Run .NET Framework-reliant components not signed with Authenticode","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallownetframeworkreliantcomponents_iz_partname2004_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets","displayName":"Allow scriptlets","description":"This policy setting allows you to manage whether the user can run scriptlets.\r\n\r\nIf you enable this policy setting, the user can run scriptlets.\r\n\r\nIf you disable this policy setting, the user cannot run scriptlets.\r\n\r\nIf you do not configure this policy setting, the user can enable or disable scriptlets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowscriptlets"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209","displayName":"Scriptlets","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowscriptlets_iz_partname1209_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie","displayName":"Turn on SmartScreen Filter scan","description":"This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nIf you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.\r\n\r\nIf you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.\r\n\r\nNote: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowsmartscreenie"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301","displayName":"Use SmartScreen Filter","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowsmartscreenie_iz_partname2301_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence","displayName":"Userdata persistence","description":"This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.\r\n\r\nIf you enable this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you disable this policy setting, users cannot preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.\r\n\r\nIf you do not configure this policy setting, users can preserve information in the browser's history, in favorites, in an XML store, or directly within a Web page saved to disk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneallowuserdatapersistence"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606","displayName":"Userdata persistence","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneallowuserdatapersistence_iz_partname1606_3","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols","displayName":"Don't run antimalware programs against ActiveX controls","description":"This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.\r\n\r\nIf you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.\r\n\r\nIf you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonedonotrunantimalwareagainstactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c","displayName":"Don't run antimalware programs against ActiveX controls","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_3","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonedonotrunantimalwareagainstactivexcontrols_iz_partname270c_0","displayName":"Disable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols","displayName":"Initialize and script ActiveX controls not marked as safe","description":"This policy setting allows you to manage ActiveX controls not marked as safe.\r\n\r\nIf you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.\r\n\r\nIf you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.\r\n\r\nIf you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.\r\n\r\nIf you do not configure this policy setting, users are queried whether to allow the control to be loaded with parameters or scripted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszoneinitializeandscriptactivexcontrols"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201","displayName":"Initialize and script ActiveX controls not marked as safe","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszoneinitializeandscriptactivexcontrols_iz_partname1201_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions","displayName":"Java permissions","description":"This policy setting allows you to manage permissions for Java applets.\r\n\r\nIf you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.\r\n\r\nLow Safety enables applets to perform all operations.\r\n\r\nMedium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.\r\n\r\nHigh Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.\r\n\r\nIf you disable this policy setting, Java applets cannot run.\r\n\r\nIf you do not configure this policy setting, the permission is set to Low Safety.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonejavapermissions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00","displayName":"Java permissions","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_65536","displayName":"High safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_131072","displayName":"Medium safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_196608","displayName":"Low safety","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_8388608","displayName":"Custom","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonejavapermissions_iz_partname1c00_0","displayName":"Disable Java","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions","displayName":"Logon options","description":"This policy setting allows you to manage settings for logon options.\r\n\r\nIf you enable this policy setting, you can choose from the following logon options.\r\n\r\nAnonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.\r\n\r\nPrompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.\r\n\r\nAutomatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user's network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.\r\n\r\nIf you disable this policy setting, logon is set to Automatic logon only in Intranet zone.\r\n\r\nIf you do not configure this policy setting, logon is set to Automatic logon with current username and password.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonelogonoptions"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00","displayName":"Logon options (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_196608","displayName":"Anonymous logon","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_131072","displayName":"Automatic logon only in Intranet zone","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_0","displayName":"Automatic logon with current username and password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonelogonoptions_iz_partname1a00_65536","displayName":"Prompt for user name and password","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes","displayName":"Navigate windows and frames across different domains","description":"This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\r\n\r\nIf you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.\r\n\r\nIf you disable this policy setting, users cannot open windows and frames to access applications from different domains.\r\n\r\nIf you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-internetexplorer#internetexplorer-trustedsiteszonenavigatewindowsandframes"],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607","displayName":"Navigate windows and frames across different domains","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_0","displayName":"Enable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_3","displayName":"Disable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_internetexplorer_trustedsiteszonenavigatewindowsandframes_iz_partname1607_1","displayName":"Prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_allowforestsearchorder","displayName":"Use forest search order","description":"This policy setting defines the list of trusting forests that the Kerberos client searches when attempting to resolve two-part service principal names (SPNs).\r\n\r\nIf you enable this policy setting, the Kerberos client searches the forests in this list, if it is unable to resolve a two-part SPN. If a match is found, the Kerberos client requests a referral ticket to the appropriate domain.\r\n\r\nIf you disable or do not configure this policy setting, the Kerberos client does not search the listed forests to resolve the SPN. If the Kerberos client is unable to resolve the SPN because the name is not found, NTLM authentication might be used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-allowforestsearchorder"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_allowforestsearchorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_allowforestsearchorder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_allowforestsearchorder_forestsearchlist","displayName":"Forests to Search (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled","displayName":"Cloud Kerberos Ticket Retrieval Enabled","description":"Allow retrieving the cloud kerberos ticket during the logon\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#cloudkerberosticketretrievalenabled"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_cloudkerberosticketretrievalenabled_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor","displayName":"Kerberos client support for claims, compound authentication and Kerberos armoring","description":"This policy setting controls whether a device will request claims and compound authentication for Dynamic Access Control and Kerberos armoring using Kerberos authentication with domains that support these features. \r\nIf you enable this policy setting, the client computers will request claims, provide information required to create compounded authentication and armor Kerberos messages in domains which support claims and compound authentication for Dynamic Access Control and Kerberos armoring.\r\n\r\nIf you disable or do not configure this policy setting, the client devices will not request claims, provide information required to create compounded authentication and armor Kerberos messages. Services hosted on the device will not be able to retrieve claims for clients using Kerberos protocol transition. \r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-kerberosclientsupportsclaimscompoundarmor"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_kerberosclientsupportsclaimscompoundarmor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration","displayName":"PK Init Hash Algorithm Configuration","description":"Configure hash algorithms for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmconfiguration"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration_0","displayName":"Disabled / Not Configured","description":"Disabled / Not Configured","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmconfiguration_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1","displayName":"PK Init Hash Algorithm SHA1","description":"Configure SHA-1 hash algorithm for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmsha1"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_0","displayName":"Not Supported","description":"Not Supported","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_1","displayName":"Default","description":"Default","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_2","displayName":"Audited","description":"Audited","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha1_3","displayName":"Supported","description":"Supported","helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256","displayName":"PK Init Hash Algorithm SHA256","description":"Configure SHA-256 hash algorithm for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmsha256"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_0","displayName":"Not Supported","description":"Not Supported","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_1","displayName":"Default","description":"Default","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_2","displayName":"Audited","description":"Audited","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha256_3","displayName":"Supported","description":"Supported","helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384","displayName":"PK Init Hash Algorithm SHA384","description":"Configure SHA-384 hash algorithm for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmsha384"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_0","displayName":"Not Supported","description":"Not Supported","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_1","displayName":"Default","description":"Default","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_2","displayName":"Audited","description":"Audited","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha384_3","displayName":"Supported","description":"Supported","helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512","displayName":"PK Init Hash Algorithm SHA512","description":"Configure SHA-512 hash algorithm for certificate logon","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#pkinithashalgorithmsha512"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_0","displayName":"Not Supported","description":"Not Supported","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_1","displayName":"Default","description":"Default","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_2","displayName":"Audited","description":"Audited","helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_pkinithashalgorithmsha512_3","displayName":"Supported","description":"Supported","helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_requirekerberosarmoring","displayName":"Fail authentication requests when Kerberos armoring is not available","description":"This policy setting controls whether a computer requires that Kerberos message exchanges be armored when communicating with a domain controller.\r\n\r\nWarning: When a domain does not support Kerberos armoring by enabling \"Support Dynamic Access Control and Kerberos armoring\", then all authentication for all its users will fail from computers with this policy setting enabled.\r\n\r\nIf you enable this policy setting, the client computers in the domain enforce the use of Kerberos armoring in only authentication service (AS) and ticket-granting service (TGS) message exchanges with the domain controllers. \r\n\r\nNote: The Kerberos Group Policy \"Kerberos client support for claims, compound authentication and Kerberos armoring\" must also be enabled to support Kerberos armoring. \r\n\r\nIf you disable or do not configure this policy setting, the client computers in the domain enforce the use of Kerberos armoring when possible as supported by the target domain.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-requirekerberosarmoring"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_requirekerberosarmoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_requirekerberosarmoring_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation","displayName":"Require strict KDC validation","description":"This policy setting controls the Kerberos client's behavior in validating the KDC certificate for smart card and system certificate logon. \r\n\r\nIf you enable this policy setting, the Kerberos client requires that the KDC's X.509 certificate contains the KDC key purpose object identifier in the Extended Key Usage (EKU) extensions, and that the KDC's X.509 certificate contains a dNSName subjectAltName (SAN) extension that matches the DNS name of the domain. If the computer is joined to a domain, the Kerberos client requires that the KDC's X.509 certificate must be signed by a Certificate Authority (CA) in the NTAuth store. If the computer is not joined to a domain, the Kerberos client allows the root CA certificate on the smart card to be used in the path validation of the KDC's X.509 certificate.\r\n\r\nIf you disable or do not configure this policy setting, the Kerberos client requires only that the KDC certificate contain the Server Authentication purpose object identifier in the EKU extensions which can be issued to any server.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-requirestrictkdcvalidation"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_requirestrictkdcvalidation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize","displayName":"Set maximum Kerberos SSPI context token buffer size","description":"This policy setting allows you to set the value returned to applications which request the maximum size of the SSPI context token buffer size.\r\n \r\nThe size of the context token buffer determines the maximum size of SSPI context tokens an application expects and allocates. Depending upon authentication request processing and group memberships, the buffer might be smaller than the actual size of the SSPI context token. \r\n\r\nIf you enable this policy setting, the Kerberos client or server uses the configured value, or the locally allowed maximum value, whichever is smaller.\r\n\r\nIf you disable or do not configure this policy setting, the Kerberos client or server uses the locally configured value or the default value. \r\n\r\nNote: This policy setting configures the existing MaxTokenSize registry value in HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\Kerberos\\Parameters, which was added in Windows XP and Windows Server 2003, with a default value of 12,000 bytes. Beginning with Windows 8 the default is 48,000 bytes. Due to HTTP's base64 encoding of authentication context tokens, it is not advised to set this value more than 48,000 bytes.\r\n\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-kerberos#kerberos-setmaximumcontexttokensize"],"options":[{"id":"device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_kerberos_setmaximumcontexttokensize_maxtokensize","displayName":"Maximum size (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_kerberos_upnnamehints","displayName":"UPN Name Hints","description":"Devices joined to Azure Active Directory in a hybrid environment need to interact with Active Directory Domain Controllers, but they lack the built-in ability to find a Domain Controller that a domain-joined device has. This can cause failures when such a device needs to resolve an AAD UPN into an Active Directory Principal. This parameter adds a list of domains that an Azure Active Directory joined device should attempt to contact if it is otherwise unable to resolve a UPN to a principal.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Kerberos#upnnamehints"],"options":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_blockedurlexceptions","displayName":"Blocked Url Exceptions","description":"List of exceptions to the blocked website URLs (with wildcard support). This is used to configure URLs kiosk browsers are allowed to navigate to, which are a subset of the blocked URLs.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#blockedurlexceptions"],"options":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_blockedurls","displayName":"Blocked Urls","description":"List of blocked website URLs (with wildcard support). This is used to configure blocked URLs kiosk browsers can not navigate to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#blockedurls"],"options":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_defaulturl","displayName":"Default URL","description":"Configures the default URL kiosk browsers to navigate on launch and restart.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#defaulturl"],"options":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton","displayName":"Enable End Session Button","description":"Enable/disable kiosk browser's end session button.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enableendsessionbutton"],"options":[{"id":"device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_enableendsessionbutton_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_kioskbrowser_enablehomebutton","displayName":"Enable Home Button","description":"Enable/disable kiosk browser's home button.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enablehomebutton"],"options":[{"id":"device_vendor_msft_policy_config_kioskbrowser_enablehomebutton_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_enablehomebutton_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons","displayName":"Enable Navigation Buttons","description":"Enable/disable kiosk browser's navigation buttons (forward/back).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#enablenavigationbuttons"],"options":[{"id":"device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_kioskbrowser_enablenavigationbuttons_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_kioskbrowser_restartonidletime","displayName":"Restart On Idle Time","description":"Amount of time in minutes the session is idle until the kiosk browser restarts in a fresh state.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-KioskBrowser#restartonidletime"],"options":null},{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption","displayName":"Audit Client Does Not Support Encryption","description":"This policy controls whether the SMB server will log the event when the SMB client doesn't support encryption. If you enable this policy setting, the SMB server will log the event when the SMB client doesn't support encryption. If you disable or do not configure this policy setting, the SMB server will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#auditclientdoesnotsupportencryption"],"options":[{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportencryption_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning","displayName":"Audit Client Does Not Support Signing","description":"This policy controls whether the SMB server will log the event when the SMB client doesn't support signing. If you enable this policy setting, the SMB server will log the event when the SMB client doesn't support signing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#auditclientdoesnotsupportsigning"],"options":[{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_auditclientdoesnotsupportsigning_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon","displayName":"Audit Insecure Guest Logon","description":"This policy controls whether the SMB server will enable the audit event when the client is logged on as guest account. If you enable this policy setting, the SMB server will log the event when the client is logged on as guest account. If you disable or do not configure this policy setting, the SMB server will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#auditinsecureguestlogon"],"options":[{"id":"device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_auditinsecureguestlogon_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanserver_authratelimiterdelayinms","displayName":"Auth Rate Limiter Delay In Ms","description":"This policy controls whether the SMB server will use a default value in milliseconds for the invalid authentication delay. If you configure this policy setting, the authentication rate limiter will use the specified value for delaying invalid authentication attempts. If you do not configure this policy setting, the authentication rate limiter will use the default value obtained from either the software licensing service or the local registry.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#authratelimiterdelayinms"],"options":null},{"id":"device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter","displayName":"Enable Auth Rate Limiter","description":"This policy controls whether the SMB server will enable or disable the authentication rate limiter. If you disable this policy setting, the authentication rate limiter will not be enabled. If you do not configure this policy setting, the authentication rate limiter may still be working depending on the delay settings (the recommended delay value is 2000ms).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#enableauthratelimiter"],"options":[{"id":"device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_enableauthratelimiter_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanserver_enablemailslots","displayName":"Enable Mailslots","description":"This policy controls whether the SMB server will enable or disable remote mailslots over the computer browser service. If you disable this policy setting, the computer browser service will no longer run as expected. If you do not configure this policy setting, the computer browser may still be working with remote mailslots enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#enablemailslots"],"options":[{"id":"device_vendor_msft_policy_config_lanmanserver_enablemailslots_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_enablemailslots_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect","displayName":"Max Smb2 Dialect","description":"This policy controls the maximum version of SMB protocol. Note: This group policy does not prevent use of SMB 1 if that component is still installed and enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#maxsmb2dialect"],"options":[{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_514","displayName":"SMB 2.0.2","description":"SMB 2.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_528","displayName":"SMB 2.1.0","description":"SMB 2.1.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_768","displayName":"SMB 3.0.0","description":"SMB 3.0.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_770","displayName":"SMB 3.0.2","description":"SMB 3.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_maxsmb2dialect_785","displayName":"SMB 3.1.1","description":"SMB 3.1.1","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect","displayName":"Min Smb2 Dialect","description":"This policy controls the minimum version of SMB protocol. Note: This group policy does not prevent use of SMB 1 if that component is still installed and enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanServer#minsmb2dialect"],"options":[{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_514","displayName":"SMB 2.0.2","description":"SMB 2.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_528","displayName":"SMB 2.1.0","description":"SMB 2.1.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_768","displayName":"SMB 3.0.0","description":"SMB 3.0.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_770","displayName":"SMB 3.0.2","description":"SMB 3.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanserver_minsmb2dialect_785","displayName":"SMB 3.1.1","description":"SMB 3.1.1","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon","displayName":"Audit Insecure Guest Logon","description":"This policy controls whether the SMB client will enable the audit event when the client is logged on as guest account. If you enable this policy setting, the SMB client will log the event when the client is logged on as guest account. If you disable or do not configure this policy setting, the SMB client will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#auditinsecureguestlogon"],"options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditinsecureguestlogon_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportencryption","displayName":"Audit Server Does Not Support Encryption","description":"This policy controls whether the SMB client will enable the audit event when the SMB server doesn't support encryption. If you enable this policy setting, the SMB client will log the event when the SMB server doesn't support encryption. If you disable or do not configure this policy setting, the SMB client will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#auditserverdoesnotsupportencryption"],"options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportencryption_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportencryption_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning","displayName":"Audit Server Does Not Support Signing","description":"This policy controls whether the SMB client will enable the audit event when the SMB server doesn't support signing. If you enable this policy setting, the SMB client will log the event when the SMB server doesn't support signing. If you disable or do not configure this policy setting, the SMB client will not log the event.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#auditserverdoesnotsupportsigning"],"options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_auditserverdoesnotsupportsigning_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons","displayName":"Enable Insecure Guest Logons","description":"This policy setting determines if the SMB client will allow insecure guest logons to an SMB server. If you enable this policy setting or if you do not configure this policy setting, the SMB client will allow insecure guest logons. If you disable this policy setting, the SMB client will reject insecure guest logons. Insecure guest logons are used by file servers to allow unauthenticated access to shared folders. While uncommon in an enterprise environment, insecure guest logons are frequently used by consumer Network Attached Storage (NAS) appliances acting as file servers. Windows file servers require authentication and do not use insecure guest logons by default. Since insecure guest logons are unauthenticated, important security features such as SMB Signing and SMB Encryption are disabled. As a result, clients that allow insecure guest logons are vulnerable to a variety of man-in-the-middle attacks that can result in data loss, data corruption, and exposure to malware. Additionally, any data written to a file server using an insecure guest logon is potentially accessible to anyone on the network. Microsoft recommends disabling insecure guest logons and configuring file servers to require authenticated access.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#enableinsecureguestlogons"],"options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_enableinsecureguestlogons_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanworkstation_enablemailslots","displayName":"Enable Mailslots","description":"This policy controls whether the SMB client will enable or disable remote mailslots over MUP. If you disable this policy setting, remote mailslots will not function over MUP, hence they will not go through the SMB client redirector. If you do not configure this policy setting, remote mailslots may be allowed through MUP.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#enablemailslots"],"options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_enablemailslots_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_enablemailslots_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect","displayName":"Max Smb2 Dialect","description":"This policy controls the maximum version of SMB protocol. Note: This group policy does not prevent use of SMB 1 if that component is still installed and enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#maxsmb2dialect"],"options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_514","displayName":"SMB 2.0.2","description":"SMB 2.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_528","displayName":"SMB 2.1.0","description":"SMB 2.1.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_768","displayName":"SMB 3.0.0","description":"SMB 3.0.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_770","displayName":"SMB 3.0.2","description":"SMB 3.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_maxsmb2dialect_785","displayName":"SMB 3.1.1","description":"SMB 3.1.1","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect","displayName":"Min Smb2 Dialect","description":"This policy controls the minimum version of SMB protocol. Note: This group policy does not prevent use of SMB 1 if that component is still installed and enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#minsmb2dialect"],"options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_514","displayName":"SMB 2.0.2","description":"SMB 2.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_528","displayName":"SMB 2.1.0","description":"SMB 2.1.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_768","displayName":"SMB 3.0.0","description":"SMB 3.0.0","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_770","displayName":"SMB 3.0.2","description":"SMB 3.0.2","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_minsmb2dialect_785","displayName":"SMB 3.1.1","description":"SMB 3.1.1","helpText":null}]},{"id":"device_vendor_msft_policy_config_lanmanworkstation_requireencryption","displayName":"Require Encryption","description":"This policy controls whether the SMB client will require encryption. If you enable this policy setting, the SMB client will require the SMB server to support encryption and encrypt the data. If you disable or do not configure this policy setting, the SMB client will not require encryption. However, SMB encryption may still be required; see notes below. Note: This policy is combined with per-share, per-server, and per mapped drive connection properties, through which SMB encryption may be required. The SMB server must support and enable SMB encryption. For example, should this policy be disabled (or not configured), the SMB client may still perform encryption if an SMB server share has required encryption. Important: SMB encryption requires SMB 3.0 or later.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LanmanWorkstation#requireencryption"],"options":[{"id":"device_vendor_msft_policy_config_lanmanworkstation_requireencryption_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_lanmanworkstation_requireencryption_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation","displayName":"Allow Windows Entitlement Reactivation","description":"Enables or Disable Windows license reactivation on managed devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Licensing#allowwindowsentitlementreactivation"],"options":[{"id":"device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation_0","displayName":"Block","description":"Disable Windows license reactivation on managed devices.","helpText":null},{"id":"device_vendor_msft_policy_config_licensing_allowwindowsentitlementreactivation_1","displayName":"Allow","description":"Enable Windows license reactivation on managed devices.","helpText":null}]},{"id":"device_vendor_msft_policy_config_licensing_disallowkmsclientonlineavsvalidation","displayName":"Disallow KMS Client Online AVS Validation","description":"Enabling this setting prevents this computer from sending data to Microsoft regarding its activation state.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Licensing#disallowkmsclientonlineavsvalidation"],"options":[{"id":"device_vendor_msft_policy_config_licensing_disallowkmsclientonlineavsvalidation_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_licensing_disallowkmsclientonlineavsvalidation_1","displayName":"Allow","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts","displayName":"Accounts Block Microsoft Accounts","description":"This policy setting prevents users from adding new Microsoft accounts on this computer. If you select the \"Users can’t add Microsoft accounts\" option, users will not be able to create new Microsoft accounts on this computer, switch a local account to a Microsoft account, or connect a domain account to a Microsoft account. This is the preferred option if you need to limit the use of Microsoft accounts in your enterprise. If you select the \"Users can’t add or log on with Microsoft accounts\" option, existing Microsoft account users will not be able to log on to Windows. Selecting this option might make it impossible for an existing administrator on this computer to log on and manage the system. If you disable or do not configure this policy (recommended), users will be able to use Microsoft accounts with Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_blockmicrosoftaccounts"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_0","displayName":"Disabled (users will be able to use Microsoft accounts with Windows).","description":"Disabled (users will be able to use Microsoft accounts with Windows).","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_1","displayName":"Enabled (users can't add Microsoft accounts).","description":"Enabled (users can't add Microsoft accounts).","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_blockmicrosoftaccounts_3","displayName":"Users can't add or log on with Microsoft accounts","description":"Users can't add or log on with Microsoft accounts","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus","displayName":"Accounts Enable Administrator Account Status","description":"This security setting determines whether the local Administrator account is enabled or disabled. Notes If you try to reenable the Administrator account after it has been disabled, and if the current Administrator password does not meet the password requirements, you cannot reenable the account. In this case, an alternative member of the Administrators group must reset the password on the Administrator account. For information about how to reset a password, see To reset a password. Disabling the Administrator account can become a maintenance issue under certain circumstances. Under Safe Mode boot, the disabled Administrator account will only be enabled if the machine is non-domain joined and there are no other local active administrator accounts. If the computer is domain joined the disabled administrator will not be enabled. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_enableadministratoraccountstatus"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus","displayName":"Accounts Enable Guest Account Status","description":"This security setting determines if the Guest account is enabled or disabled. Default: Disabled. Note: If the Guest account is disabled and the security option Network Access: Sharing and Security Model for local accounts is set to Guest Only, network logons, such as those performed by the Microsoft Network Server (SMB Service), will fail.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_enableguestaccountstatus"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableguestaccountstatus_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly","displayName":"Accounts Limit Local Account Use Of Blank Passwords To Console Logon Only","description":"Accounts: Limit local account use of blank passwords to console logon only This security setting determines whether local accounts that are not password protected can be used to log on from locations other than the physical computer console. If enabled, local accounts that are not password protected will only be able to log on at the computer's keyboard. Default: Enabled. Warning: Computers that are not in physically secure locations should always enforce strong password policies for all local user accounts. Otherwise, anyone with physical access to the computer can log on by using a user account that does not have a password. This is especially important for portable computers. If you apply this security policy to the Everyone group, no one will be able to log on through Remote Desktop Services. Notes This setting does not affect logons that use domain accounts. It is possible for applications that use remote interactive logons to bypass this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_limitlocalaccountuseofblankpasswordstoconsolelogononly_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_renameadministratoraccount","displayName":"Accounts Rename Administrator Account","description":"Accounts: Rename administrator account This security setting determines whether a different account name is associated with the security identifier (SID) for the account Administrator. Renaming the well-known Administrator account makes it slightly more difficult for unauthorized persons to guess this privileged user name and password combination. Default: Administrator.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_renameadministratoraccount"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_renameguestaccount","displayName":"Accounts Rename Guest Account","description":"Accounts: Rename guest account This security setting determines whether a different account name is associated with the security identifier (SID) for the account \"Guest.\" Renaming the well-known Guest account makes it slightly more difficult for unauthorized persons to guess this user name and password combination. Default: Guest.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#accounts_renameguestaccount"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege","displayName":"Audit The Use Of Backup And Restoreprivilege","description":"Audit: Audit the use of Backup and Restore privilege This security setting determines whether to audit the use of all user privileges, including Backup and Restore, when the Audit privilege use policy is in effect. Enabling this option when the Audit privilege use policy is also enabled generates an audit event for every file that is backed up or restored. If you disable this policy, then use of the Backup or Restore privilege is not audited even when Audit privilege use is enabled. Note: On Windows versions prior to Windows Vista configuring this security setting, changes will not take effect until you restart Windows. Enabling this setting can cause a LOT of events, sometimes hundreds per second, during a backup operation. Default: Disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#audit_audittheuseofbackupandrestoreprivilege"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege_aq==","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_audittheuseofbackupandrestoreprivilege_aa==","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_forceauditpolicysubcategorysettingstooverrideauditpolicycategorysettings","displayName":"Audit Force Audit Policy Subcategory Settings To Override Audit Policy Category Settings","description":"Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings Windows Vista and later versions of Windows allow audit policy to be managed in a more precise way using audit policy subcategories. Setting audit policy at the category level will override the new subcategory audit policy feature. Group Policy only allows audit policy to be set at the category level, and existing group policy may override the subcategory settings of new machines as they are joined to the domain or upgraded to Windows Vista or later versions. To allow audit policy to be managed using subcategories without requiring a change to Group Policy, there is a new registry value in Windows Vista and later versions, SCENoApplyLegacyAuditPolicy, which prevents the application of category-level audit policy from Group Policy and from the Local Security Policy administrative tool. If the category level audit policy set here is not consistent with the events that are currently being generated, the cause might be that this registry key is set. Default: Enabled\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#audit_forceauditpolicysubcategorysettingstooverrideauditpolicycategorysettings"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_audit_shutdownsystemimmediatelyifunabletologsecurityaudits","displayName":"Audit Shutdown System Immediately If Unable To Log Security Audits","description":"Audit: Shut down system immediately if unable to log security audits This security setting determines whether the system shuts down if it is unable to log security events. If this security setting is enabled, it causes the system to stop if a security audit cannot be logged for any reason. Typically, an event fails to be logged when the security audit log is full and the retention method that is specified for the security log is either Do Not Overwrite Events or Overwrite Events by Days. If the security log is full and an existing entry cannot be overwritten, and this security option is enabled, the following Stop error appears: STOP: C0000244 {Audit Failed} An attempt to generate a security audit failed. To recover, an administrator must log on, archive the log (optional), clear the log, and reset this option as desired. Until this security setting is reset, no users, other than a member of the Administrators group will be able to log on to the system, even if the security log is not full. Note: On Windows versions prior to Windows Vista configuring this security setting, changes will not take effect until you restart Windows. Default: Disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#audit_shutdownsystemimmediatelyifunabletologsecurityaudits"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowedtoformatandejectremovablemedia","displayName":"Devices Allowed To Format And Eject Removable Media","description":"Devices: Allowed to format and eject removable media This security setting determines who is allowed to format and eject removable NTFS media. This capability can be given to: Administrators Administrators and Interactive Users Default: This policy is not defined and only Administrators have this ability.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_allowedtoformatandejectremovablemedia"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon","displayName":"Devices Allow Undock Without Having To Logon","description":"Devices: Allow undock without having to log on This security setting determines whether a portable computer can be undocked without having to log on. If this policy is enabled, logon is not required and an external hardware eject button can be used to undock the computer. If disabled, a user must log on and have the Remove computer from docking station privilege to undock the computer. Default: Enabled. Caution Disabling this policy may tempt users to try and physically remove the laptop from its docking station using methods other than the external hardware eject button. Since this may cause damage to the hardware, this setting, in general, should only be disabled on laptop configurations that are physically securable.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_allowundockwithouthavingtologon"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_allowundockwithouthavingtologon_0","displayName":"Block","description":"Block","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_preventusersfrominstallingprinterdriverswhenconnectingtosharedprinters","displayName":"Devices Prevent Users From Installing Printer Drivers When Connecting To Shared Printers","description":"Devices: Prevent users from installing printer drivers when connecting to shared printers For a computer to print to a shared printer, the driver for that shared printer must be installed on the local computer. This security setting determines who is allowed to install a printer driver as part of connecting to a shared printer. If this setting is enabled, only Administrators can install a printer driver as part of connecting to a shared printer. If this setting is disabled, any user can install a printer driver as part of connecting to a shared printer. Default on servers: Enabled. Default on workstations: Disabled Notes This setting does not affect the ability to add a local printer. This setting does not affect Administrators.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_preventusersfrominstallingprinterdriverswhenconnectingtosharedprinters"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_preventusersfrominstallingprinterdriverswhenconnectingtosharedprinters_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_preventusersfrominstallingprinterdriverswhenconnectingtosharedprinters_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_restrictcdromaccesstolocallyloggedonuseronly","displayName":"Devices Restrict CDROM Access To Locally Logged On User Only","description":"Devices: Restrict CD-ROM access to locally logged-on user only This security setting determines whether a CD-ROM is accessible to both local and remote users simultaneously. If this policy is enabled, it allows only the interactively logged-on user to access removable CD-ROM media. If this policy is enabled and no one is logged on interactively, the CD-ROM can be accessed over the network. Default: This policy is not defined and CD-ROM access is not restricted to the locally logged-on user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_restrictcdromaccesstolocallyloggedonuseronly"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_devices_restrictfloppyaccesstolocallyloggedonuseronly","displayName":"Devices Restrict Floppy Access To Locally Logged On User Only","description":"Devices: Restrict floppy access to locally logged-on user only This security setting determines whether removable floppy media are accessible to both local and remote users simultaneously. If this policy is enabled, it allows only the interactively logged-on user to access removable floppy media. If this policy is enabled and no one is logged on interactively, the floppy can be accessed over the network. Default: This policy is not defined and floppy disk drive access is not restricted to the locally logged-on user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#devices_restrictfloppyaccesstolocallyloggedonuseronly"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallyencryptorsignsecurechanneldataalways","displayName":"Domain Member Digitally Encrypt Or Sign Secure Channel Data Always","description":"Domain member: Digitally encrypt or sign secure channel data (always) This security setting determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass through authentication, LSA SID/name Lookup etc. This setting determines whether or not all secure channel traffic initiated by the domain member meets minimum security requirements. Specifically it determines whether all secure channel traffic initiated by the domain member must be signed or encrypted. If this policy is enabled, then the secure channel will not be established unless either signing or encryption of all secure channel traffic is negotiated. If this policy is disabled, then encryption and signing of all secure channel traffic is negotiated with the Domain Controller in which case the level of signing and encryption depends on the version of the Domain Controller and the settings of the following two policies: Domain member: Digitally encrypt secure channel data (when possible) Domain member: Digitally sign secure channel data (when possible) Default: Enabled. Notes: If this policy is enabled, the policy Domain member: Digitally sign secure channel data (when possible) is assumed to be enabled regardless of its current setting. This ensures that the domain member attempts to negotiate at least signing of the secure channel traffic. Logon information transmitted over the secure channel is always encrypted regardless of whether encryption of ALL other secure channel traffic is negotiated or not.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_digitallyencryptorsignsecurechanneldataalways"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallyencryptsecurechanneldatawhenpossible","displayName":"Domain Member Digitally Encrypt Secure Channel Data When Possible","description":"Domain member: Digitally encrypt secure channel data (when possible) This security setting determines whether a domain member attempts to negotiate encryption for all secure channel traffic that it initiates. When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup etc. This setting determines whether or not the domain member attempts to negotiate encryption for all secure channel traffic that it initiates. If enabled, the domain member will request encryption of all secure channel traffic. If the domain controller supports encryption of all secure channel traffic, then all secure channel traffic will be encrypted. Otherwise only logon information transmitted over the secure channel will be encrypted. If this setting is disabled, then the domain member will not attempt to negotiate secure channel encryption. Default: Enabled. Important There is no known reason for disabling this setting. Besides unnecessarily reducing the potential confidentiality level of the secure channel, disabling this setting may unnecessarily reduce secure channel throughput, because concurrent API calls that use the secure channel are only possible when the secure channel is signed or encrypted. Note: Domain controllers are also domain members and establish secure channels with other domain controllers in the same domain as well as domain controllers in trusted domains.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_digitallyencryptsecurechanneldatawhenpossible"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_digitallysignsecurechanneldatawhenpossible","displayName":"Domain Member Digitally Sign Secure Channel Data When Possible","description":"Domain member: Digitally sign secure channel data (when possible) This security setting determines whether a domain member attempts to negotiate signing for all secure channel traffic that it initiates. When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller for its domain. This secure channel is used to perform operations such as NTLM pass through authentication, LSA SID/name Lookup etc. This setting determines whether or not the domain member attempts to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain member will request signing of all secure channel traffic. If the Domain Controller supports signing of all secure channel traffic, then all secure channel traffic will be signed which ensures that it cannot be tampered with in transit. Default: Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_digitallysignsecurechanneldatawhenpossible"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_disablemachineaccountpasswordchanges","displayName":"Domain Member Disable Machine Account Password Changes","description":"Domain member: Disable machine account password changes Determines whether a domain member periodically changes its computer account password. If this setting is enabled, the domain member does not attempt to change its computer account password. If this setting is disabled, the domain member attempts to change its computer account password as specified by the setting for Domain Member: Maximum age for machine account password, which by default is every 30 days. Default: Disabled. Notes This security setting should not be enabled. Computer account passwords are used to establish secure channel communications between members and domain controllers and, within the domain, between the domain controllers themselves. Once it is established, the secure channel is used to transmit sensitive information that is necessary for making authentication and authorization decisions. This setting should not be used in an attempt to support dual-boot scenarios that use the same computer account. If you want to dual-boot two installations that are joined to the same domain, give the two installations different computer names.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_disablemachineaccountpasswordchanges"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_maximummachineaccountpasswordage","displayName":"Domain Member Maximum Machine Account Password Age","description":"Domain member: Maximum machine account password age This security setting determines how often a domain member will attempt to change its computer account password. Default: 30 days. Important This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_maximummachineaccountpasswordage"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_domainmember_requirestrongsessionkey","displayName":"Domain Member Require Strong Session Key","description":"Domain member: Require strong (Windows 2000 or later) session key This security setting determines whether 128-bit key strength is required for encrypted secure channel data. When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller within the domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup, and so on. Depending on what version of Windows is running on the domain controller that the domain member is communicating with and the settings of the parameters: Domain member: Digitally encrypt or sign secure channel data (always) Domain member: Digitally encrypt secure channel data (when possible) Some or all of the information that is transmitted over the secure channel will be encrypted. This policy setting determines whether or not 128-bit key strength is required for the secure channel information that is encrypted. If this setting is enabled, then the secure channel will not be established unless 128-bit encryption can be performed. If this setting is disabled, then the key strength is negotiated with the domain controller. Default: Enabled. Important In order to take advantage of this policy on member workstations and servers, all domain controllers that constitute the member's domain must be running Windows 2000 or later. In order to take advantage of this policy on domain controllers, all domain controllers in the same domain as well as all trusted domains must run Windows 2000 or later.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#domainmember_requirestrongsessionkey"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked","displayName":"Interactive Logon Display User Information When The Session Is Locked","description":"Interactive Logon:Display user information when the session is locked User display name, domain and user names (1) User display name only (2) Do not display user information (3) Domain and user names only (4)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_displayuserinformationwhenthesessionislocked"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_1","displayName":"User display name, domain and user names","description":"User display name, domain and user names","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_2","displayName":"User display name only","description":"User display name only","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_3","displayName":"Do not display user information","description":"Do not display user information","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_displayuserinformationwhenthesessionislocked_4","displayName":"Domain and user names only","description":"Domain and user names only","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin","displayName":"Interactive Logon Do Not Display Last Signed In","description":"Interactive logon: Don't display last signed-in This security setting determines whether the Windows sign-in screen will show the username of the last person who signed in on this PC. If this policy is enabled, the username will not be shown. If this policy is disabled, the username will be shown. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_donotdisplaylastsignedin"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin_0","displayName":"Disabled (username will be shown)","description":"Disabled (username will be shown)","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplaylastsignedin_1","displayName":"Enabled (username will not be shown)","description":"Enabled (username will not be shown)","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin","displayName":"Interactive Logon Do Not Display Username At Sign In","description":"Interactive logon: Don't display username at sign-in This security setting determines whether the username of the person signing in to this PC appears at Windows sign-in, after credentials are entered, and before the PC desktop is shown. If this policy is enabled, the username will not be shown. If this policy is disabled, the username will be shown. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_donotdisplayusernameatsignin"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin_0","displayName":"Disabled (username will be shown)","description":"Disabled (username will be shown)","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotdisplayusernameatsignin_1","displayName":"Enabled (username will not be shown)","description":"Enabled (username will not be shown)","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel","displayName":"Interactive Logon Do Not Require CTRLALTDEL","description":"Interactive logon: Do not require CTRL+ALT+DEL This security setting determines whether pressing CTRL+ALT+DEL is required before a user can log on. If this policy is enabled on a computer, a user is not required to press CTRL+ALT+DEL to log on. Not having to press CTRL+ALT+DEL leaves users susceptible to attacks that attempt to intercept the users' passwords. Requiring CTRL+ALT+DEL before users log on ensures that users are communicating by means of a trusted path when entering their passwords. If this policy is disabled, any user is required to press CTRL+ALT+DEL before logging on to Windows. Default on domain-computers: Enabled: At least Windows 8/Disabled: Windows 7 or earlier. Default on stand-alone computers: Enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_donotrequirectrlaltdel"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_donotrequirectrlaltdel_1","displayName":"Enabled (a user is not required to press CTRL+ALT+DEL to log on)","description":"Enabled (a user is not required to press CTRL+ALT+DEL to log on)","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineaccountlockoutthreshold","displayName":"Interactive Logon Machine Account Lockout Threshold","description":"Interactive logon: Machine account threshold. The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recovery password backup policies are enabled. This security setting determines the number of failed logon attempts that causes the machine to be locked out. A locked out machine can only be recovered by providing recovery key at console. You can set the value between 1 and 999 failed logon attempts. If you set the value to 0, the machine will never be locked out. Values from 1 to 3 will be interpreted as 4. Failed password attempts against workstations or member servers that have been locked using either CTRL+ALT+DELETE or password protected screen savers counts as failed logon attempts. The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that the appropriate recovery password backup policies are enabled. Default: 0.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_machineaccountlockoutthreshold"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit","displayName":"[Deprecated] Interactive Logon Machine Inactivity Limit (Deprecated)","description":"Interactive logon: Machine inactivity limit. Windows notices inactivity of a logon session, and if the amount of inactive time exceeds the inactivity limit, then the screen saver will run, locking the session. Default: not enforced.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#localpoliciessecurityoptions-interactivelogon-machineinactivitylimit"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_1","displayName":"Enabled (session will lock after amount of inactive time exceeds the inactivity limit)","description":"Enabled (session will lock after amount of inactive time exceeds the inactivity limit)","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_machineinactivitylimit_v2","displayName":"Interactive Logon Machine Inactivity Limit","description":"Interactive logon: Machine inactivity limit. Windows notices inactivity of a logon session, and if the amount of inactive time exceeds the inactivity limit, then the screen saver will run, locking the session. Default: not enforced.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_machineinactivitylimit"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_messagetextforusersattemptingtologon","displayName":"Interactive Logon Message Text For Users Attempting To Log On","description":"Interactive logon: Message text for users attempting to log on This security setting specifies a text message that is displayed to users when they log on. This text is often used for legal reasons, for example, to warn users about the ramifications of misusing company information or to warn them that their actions may be audited. Default: No message.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_messagetextforusersattemptingtologon"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_messagetitleforusersattemptingtologon","displayName":"Interactive Logon Message Title For Users Attempting To Log On","description":"Interactive logon: Message title for users attempting to log on This security setting allows the specification of a title to appear in the title bar of the window that contains the Interactive logon: Message text for users attempting to log on. Default: No message.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_messagetitleforusersattemptingtologon"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_numberofpreviouslogonstocache","displayName":"Interactive Logon Number Of Previous Logons To Cache","description":"Interactive logon: Number of previous logons to cache (in case domain controller is not available) Each unique user's logon information is cached locally so that, in the event that a domain controller is unavailable during subsequent logon attempts, they are able to log on. The cached logon information is stored from the previous logon session. If a domain controller is unavailable and a user's logon information is not cached, the user is prompted with this message: There are currently no logon servers available to service the logon request. In this policy setting, a value of 0 disables logon caching. Any value above 50 only caches 50 logon attempts. Windows supports a maximum of 50 cache entries and the number of entries consumed per user depends on the credential. For example, a maximum of 50 unique password user accounts can be cached on a Windows system, but only 25 smart card user accounts can be cached because both the password information and the smart card information are stored. When a user with cached logon information logs on again, the user’s individual cached information is replaced. Default: Windows Server 2008: 25 All Other Versions: 10\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_numberofpreviouslogonstocache"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_promptusertochangepasswordbeforeexpiration","displayName":"Interactive Logon Prompt User To Change Password Before Expiration","description":"Interactive logon: Prompt user to change password before expiration Determines how far in advance (in days) users are warned that their password is about to expire. With this advance warning, the user has time to construct a password that is sufficiently strong. Default: 5 days.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_promptusertochangepasswordbeforeexpiration"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior","displayName":"Interactive Logon Smart Card Removal Behavior","description":"Interactive logon: Smart card removal behavior This security setting determines what happens when the smart card for a logged-on user is removed from the smart card reader. The options are: No Action Lock Workstation Force Logoff Disconnect if a Remote Desktop Services session If you click Lock Workstation in the Properties dialog box for this policy, the workstation is locked when the smart card is removed, allowing users to leave the area, take their smart card with them, and still maintain a protected session. If you click Force Logoff in the Properties dialog box for this policy, the user is automatically logged off when the smart card is removed. If you click Disconnect if a Remote Desktop Services session, removal of the smart card disconnects the session without logging the user off. This allows the user to insert the smart card and resume the session later, or at another smart card reader-equipped computer, without having to log on again. If the session is local, this policy functions identically to Lock Workstation. Note: Remote Desktop Services was called Terminal Services in previous versions of Windows Server. Default: This policy is not defined, which means that the system treats it as No action. On Windows Vista and above: For this setting to work, the Smart Card Removal Policy service must be started.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#interactivelogon_smartcardremovalbehavior"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_0","displayName":"No Action","description":"No Action","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_1","displayName":"Lock Workstation","description":"Lock Workstation","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_2","displayName":"Force Logoff","description":"Force Logoff","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_interactivelogon_smartcardremovalbehavior_3","displayName":"Disconnect Remote Desktop Session","description":"Disconnect Remote Desktop Session","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways","displayName":"Microsoft Network Client Digitally Sign Communications Always","description":"Microsoft network client: Digitally sign communications (always) This security setting determines whether packet signing is required by the SMB client component. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB server is permitted. If this setting is enabled, the Microsoft network client will not communicate with a Microsoft network server unless that server agrees to perform SMB packet signing. If this policy is disabled, SMB packet signing is negotiated between the client and server. Default: Disabled. Important For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. To enable client-side SMB packet signing, set Microsoft network client: Digitally sign communications (if server agrees). Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later operating systems, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkclient_digitallysigncommunicationsalways"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsalways_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees","displayName":"Microsoft Network Client Digitally Sign Communications If Server Agrees","description":"Microsoft network client: Digitally sign communications (if server agrees) This security setting determines whether the SMB client attempts to negotiate SMB packet signing. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether the SMB client component attempts to negotiate SMB packet signing when it connects to an SMB server. If this setting is enabled, the Microsoft network client will ask the server to perform SMB packet signing upon session setup. If packet signing has been enabled on the server, packet signing will be negotiated. If this policy is disabled, the SMB client will never negotiate SMB packet signing. Default: Enabled. Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. If both client-side and server-side SMB signing is enabled and the client establishes an SMB 1.0 connection to the server, SMB signing will be attempted. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. This setting only applies to SMB 1.0 connections. For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkclient_digitallysigncommunicationsifserveragrees"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_digitallysigncommunicationsifserveragrees_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers","displayName":"Microsoft Network Client Send Unencrypted Password To Third Party SMB Servers","description":"Microsoft network client: Send unencrypted password to connect to third-party SMB servers If this security setting is enabled, the Server Message Block (SMB) redirector is allowed to send plaintext passwords to non-Microsoft SMB servers that do not support password encryption during authentication. Sending unencrypted passwords is a security risk. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkclient_sendunencryptedpasswordtothirdpartysmbservers_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_amountofidletimerequiredbeforesuspendingsession","displayName":"Microsoft Network Server Amount Of Idle Time Required Before Suspending Session","description":"Microsoft network server: Amount of idle time required before suspending a session This security setting determines the amount of continuous idle time that must pass in a Server Message Block (SMB) session before the session is suspended due to inactivity. Administrators can use this policy to control when a computer suspends an inactive SMB session. If client activity resumes, the session is automatically reestablished. For this policy setting, a value of 0 means to disconnect an idle session as quickly as is reasonably possible. The maximum value is 99999, which is 208 days; in effect, this value disables the policy. Default: This policy is not defined, which means that the system treats it as 15 minutes for servers and undefined for workstations.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_amountofidletimerequiredbeforesuspendingsession"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways","displayName":"Microsoft Network Server Digitally Sign Communications Always","description":"Microsoft network server: Digitally sign communications (always) This security setting determines whether packet signing is required by the SMB server component. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB client is permitted. If this setting is enabled, the Microsoft network server will not communicate with a Microsoft network client unless that client agrees to perform SMB packet signing. If this setting is disabled, SMB packet signing is negotiated between the client and server. Default: Disabled for member servers. Enabled for domain controllers. Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. On Windows 2000 and later, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. Similarly, if client-side SMB signing is required, that client will not be able to establish a session with servers that do not have packet signing enabled. By default, server-side SMB signing is enabled only on domain controllers. If server-side SMB signing is enabled, SMB packet signing will be negotiated with clients that have client-side SMB signing enabled. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. Important For this policy to take effect on computers running Windows 2000, server-side packet signing must also be enabled. To enable server-side SMB packet signing, set the following policy: Microsoft network server: Digitally sign communications (if server agrees) For Windows 2000 servers to negotiate signing with Windows NT 4.0 clients, the following registry value must be set to 1 on the Windows 2000 server: HKLM\\System\\CurrentControlSet\\Services\\lanmanserver\\parameters\\enableW9xsecuritysignature For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_digitallysigncommunicationsalways"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsalways_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees","displayName":"Microsoft Network Server Digitally Sign Communications If Client Agrees","description":"Microsoft network server: Digitally sign communications (if client agrees) This security setting determines whether the SMB server will negotiate SMB packet signing with clients that request it. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether the SMB server will negotiate SMB packet signing when an SMB client requests it. If this setting is enabled, the Microsoft network server will negotiate SMB packet signing as requested by the client. That is, if packet signing has been enabled on the client, packet signing will be negotiated. If this policy is disabled, the SMB client will never negotiate SMB packet signing. Default: Enabled on domain controllers only. Important For Windows 2000 servers to negotiate signing with Windows NT 4.0 clients, the following registry value must be set to 1 on the server running Windows 2000: HKLM\\System\\CurrentControlSet\\Services\\lanmanserver\\parameters\\enableW9xsecuritysignature Notes All Windows operating systems support both a client-side SMB component and a server-side SMB component. For Windows 2000 and above, enabling or requiring packet signing for client and server-side SMB components is controlled by the following four policy settings: Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side SMB component requires packet signing. Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the client-side SMB component has packet signing enabled. Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side SMB component requires packet signing. Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side SMB component has packet signing enabled. If both client-side and server-side SMB signing is enabled and the client establishes an SMB 1.0 connection to the server, SMB signing will be attempted. SMB packet signing can significantly degrade SMB performance, depending on dialect version, OS version, file sizes, processor offloading capabilities, and application IO behaviors. This setting only applies to SMB 1.0 connections. For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_digitallysigncommunicationsifclientagrees"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_digitallysigncommunicationsifclientagrees_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_disconnectclientswhenlogonhoursexpire","displayName":"Microsoft Network Server Disconnect Clients When Logon Hours Expire","description":"Microsoft network server: Disconnect clients when logon hours expire This security setting determines whether to disconnect users who are connected to the local computer outside their user account's valid logon hours. This setting affects the Server Message Block (SMB) component. When this policy is enabled, it causes client sessions with the SMB Service to be forcibly disconnected when the client's logon hours expire. If this policy is disabled, an established client session is allowed to be maintained after the client's logon hours have expired. Default on Windows Vista and above: Enabled. Default on Windows XP: Disabled\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_disconnectclientswhenlogonhoursexpire"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_microsoftnetworkserver_serverspntargetnamevalidationlevel","displayName":"Microsoft Network Server Server SPN Target Name Validation Level","description":"Microsoft network server: Server SPN target name validation level This policy setting controls the level of validation a computer with shared folders or printers (the server) performs on the service principal name (SPN) that is provided by the client computer when it establishes a session using the server message block (SMB) protocol. The server message block (SMB) protocol provides the basis for file and print sharing and other networking operations, such as remote Windows administration. The SMB protocol supports validating the SMB server service principal name (SPN) within the authentication blob provided by a SMB client to prevent a class of attacks against SMB servers referred to as SMB relay attacks. This setting will affect both SMB1 and SMB2. This security setting determines the level of validation a SMB server performs on the service principal name (SPN) provided by the SMB client when trying to establish a session to an SMB server. The options are: Off – the SPN is not required or validated by the SMB server from a SMB client. Accept if provided by client – the SMB server will accept and validate the SPN provided by the SMB client and allow a session to be established if it matches the SMB server’s list of SPN’s for itself. If the SPN does NOT match, the session request for that SMB client will be denied. Required from client - the SMB client MUST send a SPN name in session setup, and the SPN name provided MUST match the SMB server that is being requested to establish a connection. If no SPN is provided by client, or the SPN provided does not match, the session is denied. Default: Off All Windows operating systems support both a client-side SMB component and a server-side SMB component. This setting affects the server SMB behavior, and its implementation should be carefully evaluated and tested to prevent disruptions to file and print serving capabilities. Additional information on implementing and using this to secure your SMB servers can be found at the Microsoft website (https://go.microsoft.com/fwlink/?LinkId=144505).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#microsoftnetworkserver_serverspntargetnamevalidationlevel"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation","displayName":"Network Access Allow Anonymous SID Or Name Translation","description":"Network access: Allow anonymous SID/name translation This policy setting determines whether an anonymous user can request security identifier (SID) attributes for another user. If this policy is enabled, an anonymous user can request the SID attribute for another user. An anonymous user with knowledge of an administrator's SID could contact a computer that has this policy enabled and use the SID to get the administrator's name. This setting affects both the SID-to-name translation as well as the name-to-SID translation. If this policy setting is disabled, an anonymous user cannot request the SID attribute for another user. Default on workstations and member servers: Disabled. Default on domain controllers running Windows Server 2008 or later: Disabled. Default on domain controllers running Windows Server 2003 R2 or earlier: Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_allowanonymoussidornametranslation"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_allowanonymoussidornametranslation_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts","displayName":"Network Access Do Not Allow Anonymous Enumeration Of SAM Accounts","description":"Network access: Do not allow anonymous enumeration of SAM accounts This security setting determines what additional permissions will be granted for anonymous connections to the computer. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. This security option allows additional restrictions to be placed on anonymous connections as follows: Enabled: Do not allow enumeration of SAM accounts. This option replaces Everyone with Authenticated Users in the security permissions for resources. Disabled: No additional restrictions. Rely on default permissions. Default on workstations: Enabled. Default on server:Enabled. Important This policy has no impact on domain controllers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_donotallowanonymousenumerationofsamaccounts"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccounts_0","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares","displayName":"Network Access Do Not Allow Anonymous Enumeration Of Sam Accounts And Shares","description":"Network access: Do not allow anonymous enumeration of SAM accounts and shares This security setting determines whether anonymous enumeration of SAM accounts and shares is allowed. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. If you do not want to allow anonymous enumeration of SAM accounts and shares, then enable this policy. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_donotallowanonymousenumerationofsamaccountsandshares"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowanonymousenumerationofsamaccountsandshares_0","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_donotallowstorageofpasswordsandcredentialsfornetworkauthentication","displayName":"Network Access Do Not Allow Storage Of Passwords And Credentials For Network Authentication","description":"Network access: Do not allow storage of passwords and credentials for network authentication This security setting determines whether Credential Manager saves passwords and credentials for later use when it gains domain authentication. If you enable this setting, Credential Manager does not store passwords and credentials on the computer. If you disable or do not configure this policy setting, Credential Manager will store passwords and credentials on this computer for later use for domain authentication. Note: When configuring this security setting, changes will not take effect until you restart Windows. Default: Disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_donotallowstorageofpasswordsandcredentialsfornetworkauthentication"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_leteveryonepermissionsapplytoanonymoususers","displayName":"Network Access Let Everyone Permissions Apply To Anonymous Users","description":"Network access: Let Everyone permissions apply to anonymous users This security setting determines what additional permissions are granted for anonymous connections to the computer. Windows allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares. This is convenient, for example, when an administrator wants to grant access to users in a trusted domain that does not maintain a reciprocal trust. By Default, the Everyone security identifier (SID) is removed from the token created for anonymous connections. Therefore, permissions granted to the Everyone group do not apply to anonymous users. If this option is set, anonymous users can only access those resources for which the anonymous user has been explicitly given permission. If this policy is enabled, the Everyone SID is added to the token that is created for anonymous connections. In this case, anonymous users are able to access any resource for which the Everyone group has been given permissions. Default: Disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_leteveryonepermissionsapplytoanonymoususers"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_namedpipesthatcanbeaccessedanonymously","displayName":"Network Access Named Pipes That Can Be Accessed Anonymously","description":"Network access: Named pipes that can be accessed anonymously This security setting determines which communication sessions (pipes) will have attributes and permissions that allow anonymous access. Default: None.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_namedpipesthatcanbeaccessedanonymously"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_remotelyaccessibleregistrypaths","displayName":"Network Access Remotely Accessible Registry Paths","description":"Network access: Remotely accessible registry paths This security setting determines which registry keys can be accessed over the network, regardless of the users or groups listed in the access control list (ACL) of the winreg registry key. Default: System\\CurrentControlSet\\Control\\ProductOptions System\\CurrentControlSet\\Control\\Server Applications Software\\Microsoft\\Windows NT\\CurrentVersion Caution Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer. Note: This security setting is not available on earlier versions of Windows. The security setting that appears on computers running Windows XP, "Network access: Remotely accessible registry paths" corresponds to the "Network access: Remotely accessible registry paths and subpaths" security option on members of the Windows Server 2003 family. For more information, see Network access: Remotely accessible registry paths and subpaths.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_remotelyaccessibleregistrypaths"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_remotelyaccessibleregistrypathsandsubpaths","displayName":"Network Access Remotely Accessible Registry Paths And Subpaths","description":"Network access: Remotely accessible registry paths and subpaths This security setting determines which registry paths and subpaths can be accessed over the network, regardless of the users or groups listed in the access control list (ACL) of the winreg registry key. Default: System\\CurrentControlSet\\Control\\Print\\Printers System\\CurrentControlSet\\Services\\Eventlog Software\\Microsoft\\OLAP Server Software\\Microsoft\\Windows NT\\CurrentVersion\\Print Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows System\\CurrentControlSet\\Control\\ContentIndex System\\CurrentControlSet\\Control\\Terminal Server System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib System\\CurrentControlSet\\Services\\SysmonLog System\\CurrentControlSet\\Services\\CertSvc System\\CurrentControlSet\\Services\\Wins Caution Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer. Note: On Windows XP, this security setting was called \"Network access: Remotely accessible registry paths.\" If you configure this setting on a member of the Windows Server 2003 family that is joined to a domain, this setting is inherited by computers running Windows XP, but will appear as the \"Network access: Remotely accessible registry paths\" security option. For more information, see Network access: Remotely accessible registry paths and subpaths.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_remotelyaccessibleregistrypathsandsubpaths"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares","displayName":"Network Access Restrict Anonymous Access To Named Pipes And Shares","description":"Network access: Restrict anonymous access to Named Pipes and Shares When enabled, this security setting restricts anonymous access to shares and pipes to the settings for: Network access: Named pipes that can be accessed anonymously Network access: Shares that can be accessed anonymously Default: Enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_restrictanonymousaccesstonamedpipesandshares"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictanonymousaccesstonamedpipesandshares_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_restrictclientsallowedtomakeremotecallstosam","displayName":"Network Access Restrict Clients Allowed To Make Remote Calls To SAM","description":"Network access: Restrict clients allowed to make remote calls to SAM This policy setting allows you to restrict remote rpc connections to SAM. If not selected, the default security descriptor will be used. This policy is supported on at least Windows Server 2016.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_restrictclientsallowedtomakeremotecallstosam"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_sharesthatcanbeaccessedanonymously","displayName":"Network Access Shares That Can Be Accessed Anonymously","description":"Network access: Shares that can be accessed anonymously This security setting determines which network shares can accessed by anonymous users. Default: None specified.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_sharesthatcanbeaccessedanonymously"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networkaccess_sharingandsecuritymodelforlocalaccounts","displayName":"Network Access Sharing And Security Model For Local Accounts","description":"Network access: Sharing and security model for local accounts This security setting determines how network logons that use local accounts are authenticated. If this setting is set to Classic, network logons that use local account credentials authenticate by using those credentials. The Classic model allows fine control over access to resources. By using the Classic model, you can grant different types of access to different users for the same resource. If this setting is set to Guest only, network logons that use local accounts are automatically mapped to the Guest account. By using the Guest model, you can have all users treated equally. All users authenticate as Guest, and they all receive the same level of access to a given resource, which can be either Read-only or Modify. Default on domain computers: Classic. Default on stand-alone computers: Guest only Important With the Guest only model, any user who can access your computer over the network (including anonymous Internet users) can access your shared resources. You must use the Windows Firewall or another similar device to protect your computer from unauthorized access. Similarly, with the Classic model, local accounts must be password protected; otherwise, those user accounts can be used by anyone to access shared system resources. Note: This setting does not affect interactive logons that are performed remotely by using such services as Telnet or Remote Desktop Services. Remote Desktop Services was called Terminal Services in previous versions of Windows Server. This policy will have no impact on computers running Windows 2000. When the computer is not joined to a domain, this setting also modifies the Sharing and Security tabs in File Explorer to correspond to the sharing and security model that is being used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networkaccess_sharingandsecuritymodelforlocalaccounts"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemnullsessionfallback","displayName":"Network Security Allow Local System NULL Session Fallback","description":"Network security: Allow LocalSystem NULL session fallback Allow NTLM to fall back to NULL session when used with LocalSystem. The default is TRUE up to Windows Vista and FALSE in Windows 7.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_allowlocalsystemnullsessionfallback"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm","displayName":"Network Security Allow Local System To Use Computer Identity For NTLM","description":"Network security: Allow Local System to use computer identity for NTLM This policy setting allows Local System services that use Negotiate to use the computer identity when reverting to NTLM authentication. If you enable this policy setting, services running as Local System that use Negotiate will use the computer identity. This might cause some authentication requests between Windows operating systems to fail and log an error. If you disable this policy setting, services running as Local System that use Negotiate when reverting to NTLM authentication will authenticate anonymously. By default, this policy is enabled on Windows 7 and above. By default, this policy is disabled on Windows Vista. This policy is supported on at least Windows Vista or Windows Server 2008. Note: Windows Vista or Windows Server 2008 do not expose this setting in Group Policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_allowlocalsystemtousecomputeridentityforntlm"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowlocalsystemtousecomputeridentityforntlm_0","displayName":"Block","description":"Block","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests","displayName":"Network Security Allow PKU2U Authentication Requests","description":"Network security: Allow PKU2U authentication requests to this computer to use online identities. This policy will be turned off by default on domain joined machines. This would prevent online identities from authenticating to the domain joined machine.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_allowpku2uauthenticationrequests"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests_0","displayName":"Block","description":"Block","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_allowpku2uauthenticationrequests_1","displayName":"Allow","description":"Allow","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange","displayName":"Network Security Do Not Store LAN Manager Hash Value On Next Password Change","description":"Network security: Do not store LAN Manager hash value on next password change This security setting determines if, at the next password change, the LAN Manager (LM) hash value for the new password is stored. The LM hash is relatively weak and prone to attack, as compared with the cryptographically stronger Windows NT hash. Since the LM hash is stored on the local computer in the security database the passwords can be compromised if the security database is attacked. Default on Windows Vista and above: Enabled Default on Windows XP: Disabled. Important Windows 2000 Service Pack 2 (SP2) and above offer compatibility with authentication to previous versions of Windows, such as Microsoft Windows NT 4.0. This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional, Windows XP, and the Windows Server 2003 family to communicate with computers running Windows 95 and Windows 98.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_donotstorelanmanagerhashvalueonnextpasswordchange_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire","displayName":"Network Security Force Logoff When Logon Hours Expire","description":"Network security: Force logoff when logon hours expire This security setting determines whether to disconnect users who are connected to the local computer outside their user account's valid logon hours. This setting affects the Server Message Block (SMB) component. When this policy is enabled, it causes client sessions with the SMB server to be forcibly disconnected when the client's logon hours expire. If this policy is disabled, an established client session is allowed to be maintained after the client's logon hours have expired. Default: Enabled. Note: This security setting behaves as an account policy. For domain accounts, there can be only one account policy. The account policy must be defined in the Default Domain Policy, and it is enforced by the domain controllers that make up the domain. A domain controller always pulls the account policy from the Default Domain Policy Group Policy object (GPO), even if there is a different account policy applied to the organizational unit that contains the domain controller. By default, workstations and servers that are joined to a domain (for example, member computers) also receive the same account policy for their local accounts. However, local account policies for member computers can be different from the domain account policy by defining an account policy for the organizational unit that contains the member computers. Kerberos settings are not applied to member computers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_forcelogoffwhenlogonhoursexpire"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_forcelogoffwhenlogonhoursexpire_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel","displayName":"Network Security LAN Manager Authentication Level","description":"Network security LAN Manager authentication level This security setting determines which challenge/response authentication protocol is used for network logons. This choice affects the level of authentication protocol used by clients, the level of session security negotiated, and the level of authentication accepted by servers as follows: Send LM and NTLM responses: Clients use LM and NTLM authentication and never use NTLMv2 session security; domain controllers accept LM, NTLM, and NTLMv2 authentication. Send LM and NTLM - use NTLMv2 session security if negotiated: Clients use LM and NTLM authentication and use NTLMv2 session security if the server supports it; domain controllers accept LM, NTLM, and NTLMv2 authentication. Send NTLM response only: Clients use NTLM authentication only and use NTLMv2 session security if the server supports it; domain controllers accept LM, NTLM, and NTLMv2 authentication. Send NTLMv2 response only: Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it; domain controllers accept LM, NTLM, and NTLMv2 authentication. Send NTLMv2 response only\\refuse LM: Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it; domain controllers refuse LM (accept only NTLM and NTLMv2 authentication). Send NTLMv2 response only\\refuse LM and NTLM: Clients use NTLMv2 authentication only and use NTLMv2 session security if the server supports it; domain controllers refuse LM and NTLM (accept only NTLMv2 authentication). Important This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional, Windows XP Professional, and the Windows Server 2003 family to communicate with computers running Windows NT 4.0 and earlier over the network. For example, at the time of this writing, computers running Windows NT 4.0 SP4 and earlier did not support NTLMv2. Computers running Windows 95 and Windows 98 did not support NTLM. Default: Windows 2000 and windows XP: send LM and NTLM responses Windows Server 2003: Send NTLM response only Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: Send NTLMv2 response only","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_lanmanagerauthenticationlevel"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_0","displayName":"Send LM and NTLM responses","description":"Send LM and NTLM responses","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_1","displayName":"Send LM and NTLM-use NTLMv2 session security if negotiated","description":"Send LM and NTLM-use NTLMv2 session security if negotiated","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_2","displayName":"Send LM and NTLM responses only","description":"Send LM and NTLM responses only","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_3","displayName":"Send NTLMv2 responses only","description":"Send NTLMv2 responses only","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_4","displayName":"Send NTLMv2 responses only. Refuse LM","description":"Send NTLMv2 responses only. Refuse LM","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_lanmanagerauthenticationlevel_5","displayName":"Send NTLMv2 responses only. Refuse LM and NTLM","description":"Send NTLMv2 responses only. Refuse LM and NTLM","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_ldapclientsigningrequirements","displayName":"Network Security LDAP Client Signing Requirements","description":"Network security: LDAP client signing requirements This security setting determines the level of data signing that is requested on behalf of clients issuing LDAP BIND requests, as follows: None: The LDAP BIND request is issued with the options that are specified by the caller. Negotiate signing: If Transport Layer Security/Secure Sockets Layer (TLS\\SSL) has not been started, the LDAP BIND request is initiated with the LDAP data signing option set in addition to the options specified by the caller. If TLS\\SSL has been started, the LDAP BIND request is initiated with the options that are specified by the caller. Require signature: This is the same as Negotiate signing. However, if the LDAP server's intermediate saslBindInProgress response does not indicate that LDAP traffic signing is required, the caller is told that the LDAP BIND command request failed. Caution If you set the server to Require signature, you must also set the client. Not setting the client results in a loss of connection with the server. Note: This setting does not have any impact on ldap_simple_bind or ldap_simple_bind_s. No Microsoft LDAP clients that are shipped with Windows XP Professional use ldap_simple_bind or ldap_simple_bind_s to talk to a domain controller. Default: Negotiate signing.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_ldapclientsigningrequirements"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients","displayName":"Network Security Minimum Session Security For NTLMSSP Based Clients","description":"Network security: Minimum session security for NTLM SSP based (including secure RPC) clients This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: Require NTLMv2 session security: The connection will fail if NTLMv2 protocol is not negotiated. Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated. Default: Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. Windows 7 and Windows Server 2008 R2: Require 128-bit encryption","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_minimumsessionsecurityforntlmsspbasedclients"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_0","displayName":"None","description":"None","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_524288","displayName":"Require NTLMv2 session security","description":"Require NTLMv2 session security","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_536870912","displayName":"Require 128-bit encryption","description":"Require 128-bit encryption","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedclients_537395200","displayName":"Require NTLM and 128-bit encryption","description":"Require NTLM and 128-bit encryption","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers","displayName":"Network Security Minimum Session Security For NTLMSSP Based Servers","description":"Network security: Minimum session security for NTLM SSP based (including secure RPC) servers This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are: Require NTLMv2 session security: The connection will fail if message integrity is not negotiated. Require 128-bit encryption. The connection will fail if strong encryption (128-bit) is not negotiated. Default: Windows XP, Windows Vista, Windows 2000 Server, Windows Server 2003, and Windows Server 2008: No requirements. Windows 7 and Windows Server 2008 R2: Require 128-bit encryption","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_minimumsessionsecurityforntlmsspbasedservers"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_0","displayName":"None","description":"None","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_524288","displayName":"Require NTLMv2 session security","description":"Require NTLMv2 session security","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_536870912","displayName":"Require 128-bit encryption","description":"Require 128-bit encryption","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_minimumsessionsecurityforntlmsspbasedservers_537395200","displayName":"Require NTLM and 128-bit encryption","description":"Require NTLM and 128-bit encryption","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_addremoteserverexceptionsforntlmauthentication","displayName":"Network Security Restrict NTLM Add Remote Server Exceptions For NTLM Authentication","description":"Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication This policy setting allows you to create an exception list of remote servers to which clients are allowed to use NTLM authentication if the \"Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers\" policy setting is configured. If you configure this policy setting, you can define a list of remote servers to which clients are allowed to use NTLM authentication. If you do not configure this policy setting, no exceptions will be applied. The naming format for servers on this exception list is the fully qualified domain name (FQDN) or NetBIOS server name used by the application, listed one per line. To ensure exceptions the name used by all applications needs to be in the list, and to ensure an exception is accurate, the server name should be listed in both naming formats . A single asterisk (*) can be used anywhere in the string as a wildcard character.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_restrictntlm_addremoteserverexceptionsforntlmauthentication"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic","displayName":"Network Security Restrict NTLM Audit Incoming NTLM Traffic","description":"Network security: Restrict NTLM: Audit Incoming NTLM Traffic This policy setting allows you to audit incoming NTLM traffic. If you select \"Disable\", or do not configure this policy setting, the server will not log events for incoming NTLM traffic. If you select \"Enable auditing for domain accounts\", the server will log events for NTLM pass-through authentication requests that would be blocked when the \"Network Security: Restrict NTLM: Incoming NTLM traffic\" policy setting is set to the \"Deny all domain accounts\" option. If you select \"Enable auditing for all accounts\", the server will log events for all NTLM authentication requests that would be blocked when the \"Network Security: Restrict NTLM: Incoming NTLM traffic\" policy setting is set to the \"Deny all accounts\" option. This policy is supported on at least Windows 7 or Windows Server 2008 R2. Note: Audit events are recorded on this computer in the \"Operational\" Log located under the Applications and Services Log/Microsoft/Windows/NTLM.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_restrictntlm_auditincomingntlmtraffic"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_0","displayName":"Disable","description":"Disable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_1","displayName":"Enable auditing for domain accounts","description":"Enable auditing for domain accounts","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_auditincomingntlmtraffic_2","displayName":"Enable auditing for all accounts","description":"Enable auditing for all accounts","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic","displayName":"Network Security Restrict NTLM Incoming NTLM Traffic","description":"Network security: Restrict NTLM: Incoming NTLM traffic This policy setting allows you to deny or allow incoming NTLM traffic. If you select \"Allow all\" or do not configure this policy setting, the server will allow all NTLM authentication requests. If you select \"Deny all domain accounts,\" the server will deny NTLM authentication requests for domain logon and display an NTLM blocked error, but allow local account logon. If you select \"Deny all accounts,\" the server will deny NTLM authentication requests from incoming traffic and display an NTLM blocked error. This policy is supported on at least Windows 7 or Windows Server 2008 R2. Note: Block events are recorded on this computer in the \"Operational\" Log located under the Applications and Services Log/Microsoft/Windows/NTLM.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_restrictntlm_incomingntlmtraffic"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_0","displayName":"Allow all","description":"Allow all","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_1","displayName":"Deny all domain accounts","description":"Deny all domain accounts","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_incomingntlmtraffic_2","displayName":"Deny all accounts","description":"Deny all accounts","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers","displayName":"Network Security Restrict NTLM Outgoing NTLM Traffic To Remote Servers","description":"Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers This policy setting allows you to deny or audit outgoing NTLM traffic from this Windows 7 or this Windows Server 2008 R2 computer to any Windows remote server. If you select \"Allow all\" or do not configure this policy setting, the client computer can authenticate identities to a remote server by using NTLM authentication. If you select \"Audit all,\" the client computer logs an event for each NTLM authentication request to a remote server. This allows you to identify those servers receiving NTLM authentication requests from the client computer. If you select \"Deny all,\" the client computer cannot authenticate identities to a remote server by using NTLM authentication. You can use the \"Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication\" policy setting to define a list of remote servers to which clients are allowed to use NTLM authentication. This policy is supported on at least Windows 7 or Windows Server 2008 R2. Note: Audit and block events are recorded on this computer in the \"Operational\" Log located under the Applications and Services Log/Microsoft/Windows/NTLM.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_0","displayName":"Allow all","description":"Allow all","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_1","displayName":"Deny all domain accounts","description":"Deny all domain accounts","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_networksecurity_restrictntlm_outgoingntlmtraffictoremoteservers_2","displayName":"Deny all accounts","description":"Deny all accounts","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_recoveryconsole_allowautomaticadministrativelogon","displayName":"Recovery Console Allow Automatic Administrative Logon","description":"Recovery console: Allow automatic administrative logon This security setting determines if the password for the Administrator account must be given before access to the system is granted. If this option is enabled, the Recovery Console does not require you to provide a password, and it automatically logs on to the system. Default: This policy is not defined and automatic administrative logon is not allowed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#recoveryconsole_allowautomaticadministrativelogon"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_recoveryconsole_allowfloppycopyandaccesstoalldrivesandallfolders","displayName":"Recovery Console Allow Floppy Copy And Access To All Drives And All Folders","description":"Recovery console: Allow floppy copy and access to all drives and all folders Enabling this security option makes the Recovery Console SET command available, which allows you to set the following Recovery Console environment variables: AllowWildCards: Enable wildcard support for some commands (such as the DEL command). AllowAllPaths: Allow access to all files and folders on the computer. AllowRemovableMedia: Allow files to be copied to removable media, such as a floppy disk. NoCopyPrompt: Do not prompt when overwriting an existing file. Default: This policy is not defined and the recover console SET command is not available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#recoveryconsole_allowfloppycopyandaccesstoalldrivesandallfolders"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon","displayName":"Shutdown Allow System To Be Shut Down Without Having To Log On","description":"Shutdown: Allow system to be shut down without having to log on This security setting determines whether a computer can be shut down without having to log on to Windows. When this policy is enabled, the Shut Down command is available on the Windows logon screen. When this policy is disabled, the option to shut down the computer does not appear on the Windows logon screen. In this case, users must be able to log on to the computer successfully and have the Shut down the system user right before they can perform a system shutdown. Default on workstations: Enabled. Default on servers: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#shutdown_allowsystemtobeshutdownwithouthavingtologon"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_allowsystemtobeshutdownwithouthavingtologon_1","displayName":"Enabled (Allow system to be shut down without having to log on)","description":"Enabled (Allow system to be shut down without having to log on)","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile","displayName":"Shutdown Clear Virtual Memory Page File","description":"Shutdown: Clear virtual memory pagefile This security setting determines whether the virtual memory pagefile is cleared when the system is shut down. Virtual memory support uses a system pagefile to swap pages of memory to disk when they are not used. On a running system, this pagefile is opened exclusively by the operating system, and it is well protected. However, systems that are configured to allow booting to other operating systems might have to make sure that the system pagefile is wiped clean when this system shuts down. This ensures that sensitive information from process memory that might go into the pagefile is not available to an unauthorized user who manages to directly access the pagefile. When this policy is enabled, it causes the system pagefile to be cleared upon clean shutdown. If you enable this security option, the hibernation file (hiberfil.sys) is also zeroed out when hibernation is disabled. Default: Disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#shutdown_clearvirtualmemorypagefile"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_shutdown_clearvirtualmemorypagefile_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_systemcryptography_forcestrongkeyprotection","displayName":"System Cryptography Force Strong Key Protection","description":"System Cryptography: Force strong key protection for user keys stored on the computer This security setting determines if users' private keys require a password to be used. The options are: User input is not required when new keys are stored and used User is prompted when the key is first used User must enter a password each time they use a key For more information, see Public key infrastructure. Default: This policy is not defined.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#systemcryptography_forcestrongkeyprotection"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_systemobjects_requirecaseinsensitivityfornonwindowssubsystems","displayName":"System Objects Require Case Insensitivity For Non Windows Subsystems","description":"System objects: Require case insensitivity for non-Windows subsystems This security setting determines whether case insensitivity is enforced for all subsystems. The Win32 subsystem is case insensitive. However, the kernel supports case sensitivity for other subsystems, such as POSIX. If this setting is enabled, case insensitivity is enforced for all directory objects, symbolic links, and IO objects, including file objects. Disabling this setting does not allow the Win32 subsystem to become case sensitive. Default: Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#systemobjects_requirecaseinsensitivityfornonwindowssubsystems"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_systemobjects_strengthendefaultpermissionsofinternalsystemobjects","displayName":"System Objects Strengthen Default Permissions Of Internal System Objects","description":"System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links) This security setting determines the strength of the default discretionary access control list (DACL) for objects. Active Directory maintains a global list of shared system resources, such as DOS device names, mutexes, and semaphores. In this way, objects can be located and shared among processes. Each type of object is created with a default DACL that specifies who can access the objects and what permissions are granted. If this policy is enabled, the default DACL is stronger, allowing users who are not administrators to read shared objects but not allowing these users to modify shared objects that they did not create. Default: Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#systemobjects_strengthendefaultpermissionsofinternalsystemobjects"],"options":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation","displayName":"User Account Control Allow UI Access Applications To Prompt For Elevation","description":"User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop. This policy setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts used by a standard user. • Enabled: UIA programs, including Windows Remote Assistance, automatically disable the secure desktop for elevation prompts. If you do not disable the \"User Account Control: Switch to the secure desktop when prompting for elevation\" policy setting, the prompts appear on the interactive user's desktop instead of the secure desktop. • Disabled: (Default) The secure desktop can be disabled only by the user of the interactive desktop or by disabling the \"User Account Control: Switch to the secure desktop when prompting for elevation\" policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_allowuiaccessapplicationstopromptforelevation"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation_0","displayName":"disabled","description":"disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_allowuiaccessapplicationstopromptforelevation_1","displayName":"enabled (allow UIAccess applications to prompt for elevation without using the secure desktop)","description":"enabled (allow UIAccess applications to prompt for elevation without using the secure desktop)","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection","displayName":"User Account Control Behavior Of The Elevation Prompt For Administrator Protection (Windows Insiders only)","description":"User Account Control: Behavior of the elevation prompt for administrators running with Administrator protection. This policy setting controls the behavior of the elevation prompt for administrators. The options are: • Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged credentials. If the user enters valid credentials, the operation continues with the user's highest available privilege. • Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Allow changes or Don't allow. If the user selects Allow changes, the operation continues with the user's highest available privilege.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_behavioroftheelevationpromptforadministratorprotection"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection_1","displayName":"Prompt for credentials on the secure desktop","description":"Prompt for credentials on the secure desktop","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministratorprotection_2","displayName":"Prompt for consent on the secure desktop","description":"Prompt for consent on the secure desktop","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators","displayName":"User Account Control Behavior Of The Elevation Prompt For Administrators","description":"User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode This policy setting controls the behavior of the elevation prompt for administrators. The options are: • Elevate without prompting: Allows privileged accounts to perform an operation that requires elevation without requiring consent or credentials. Note: Use this option only in the most constrained environments. • Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a privileged user name and password. If the user enters valid credentials, the operation continues with the user's highest available privilege. • Prompt for consent on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. • Prompt for credentials: When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. • Prompt for consent: When an operation requires elevation of privilege, the user is prompted to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege. • Prompt for consent for non-Windows binaries: (Default) When an operation for a non-Microsoft application requires elevation of privilege, the user is prompted on the secure desktop to select either Permit or Deny. If the user selects Permit, the operation continues with the user's highest available privilege.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_behavioroftheelevationpromptforadministrators"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_0","displayName":"Elevate without prompting","description":"Elevate without prompting","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_1","displayName":"Prompt for credentials on the secure desktop","description":"Prompt for credentials on the secure desktop","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_2","displayName":"Prompt for consent on the secure desktop","description":"Prompt for consent on the secure desktop","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_3","displayName":"Prompt for credentials","description":"Prompt for credentials","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_4","displayName":"Prompt for consent","description":"Prompt for consent","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforadministrators_5","displayName":"Prompt for consent for non-Windows binaries","description":"Prompt for consent for non-Windows binaries","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers","displayName":"User Account Control Behavior Of The Elevation Prompt For Standard Users","description":"User Account Control: Behavior of the elevation prompt for standard users This policy setting controls the behavior of the elevation prompt for standard users. The options are: • Prompt for credentials: (Default) When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. • Automatically deny elevation requests: When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that is running desktops as standard user may choose this setting to reduce help desk calls. • Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_behavioroftheelevationpromptforstandardusers"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_0","displayName":"Automatically deny elevation requests","description":"Automatically deny elevation requests","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_1","displayName":"Prompt for credentials on the secure desktop","description":"Prompt for credentials on the secure desktop","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_behavioroftheelevationpromptforstandardusers_3","displayName":"Prompt for credentials","description":"Prompt for credentials","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation","displayName":"User Account Control Detect Application Installations And Prompt For Elevation","description":"User Account Control: Detect application installations and prompt for elevation This policy setting controls the behavior of application installation detection for the computer. The options are: Enabled: (Default) When an application installation package is detected that requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. Disabled: Application installation packages are not detected and prompted for elevation. Enterprises that are running standard user desktops and use delegated installation technologies such as Group Policy Software Installation or Systems Management Server (SMS) should disable this policy setting. In this case, installer detection is unnecessary.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_detectapplicationinstallationsandpromptforelevation"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_detectapplicationinstallationsandpromptforelevation_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated","displayName":"User Account Control Only Elevate Executable Files That Are Signed And Validated","description":"User Account Control: Only elevate executable files that are signed and validated This policy setting enforces public key infrastructure (PKI) signature checks for any interactive applications that request elevation of privilege. Enterprise administrators can control which applications are allowed to run by adding certificates to the Trusted Publishers certificate store on local computers. The options are: • Enabled: Enforces the PKI certification path validation for a given executable file before it is permitted to run. • Disabled: (Default) Does not enforce PKI certification path validation before a given executable file is permitted to run.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated_0","displayName":"Disabled: Does not enforce validation.","description":"Disabled: Does not enforce validation.","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateexecutablefilesthataresignedandvalidated_1","displayName":"Enabled: Enforces validation.","description":"Enabled: Enforces validation.","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations","displayName":"User Account Control Only Elevate UI Access Applications That Are Installed In Secure Locations","description":"User Account Control: Only elevate UIAccess applications that are installed in secure locations This policy setting controls whether applications that request to run with a User Interface Accessibility (UIAccess) integrity level must reside in a secure location in the file system. Secure locations are limited to the following: - …\\Program Files\\, including subfolders - …\\Windows\\system32\\ - …\\Program Files (x86)\\, including subfolders for 64-bit versions of Windows Note: Windows enforces a public key infrastructure (PKI) signature check on any interactive application that requests to run with a UIAccess integrity level regardless of the state of this security setting. The options are: • Enabled: (Default) If an application resides in a secure location in the file system, it runs only with UIAccess integrity. • Disabled: An application runs with UIAccess integrity even if it does not reside in a secure location in the file system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations_0","displayName":"Disabled: Application runs with UIAccess integrity even if it does not reside in a secure location.","description":"Disabled: Application runs with UIAccess integrity even if it does not reside in a secure location.","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_onlyelevateuiaccessapplicationsthatareinstalledinsecurelocations_1","displayName":"Enabled: Application runs with UIAccess integrity only if it resides in secure location.","description":"Enabled: Application runs with UIAccess integrity only if it resides in secure location.","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode","displayName":"User Account Control Run All Administrators In Admin Approval Mode","description":"User Account Control: Turn on Admin Approval Mode This policy setting controls the behavior of all User Account Control (UAC) policy settings for the computer. If you change this policy setting, you must restart your computer. The options are: • Enabled: (Default) Admin Approval Mode is enabled. This policy must be enabled and related UAC policy settings must also be set appropriately to allow the built-in Administrator account and all other users who are members of the Administrators group to run in Admin Approval Mode. • Disabled: Admin Approval Mode and all related UAC policy settings are disabled. Note: If this policy setting is disabled, the Security Center notifies you that the overall security of the operating system has been reduced.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_runalladministratorsinadminapprovalmode"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_runalladministratorsinadminapprovalmode_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation","displayName":"User Account Control Switch To The Secure Desktop When Prompting For Elevation","description":"User Account Control: Switch to the secure desktop when prompting for elevation This policy setting controls whether the elevation request prompt is displayed on the interactive user's desktop or the secure desktop. The options are: • Enabled: (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users. • Disabled: All elevation requests go to the interactive user's desktop. Prompt behavior policy settings for administrators and standard users are used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_switchtothesecuredesktopwhenpromptingforelevation_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode","displayName":"User Account Control Type Of Admin Approval Mode (Windows Insiders only)","description":"User Account Control: Configure type of Admin Approval Mode. This policy setting controls whether Administrator protection is applied to admin approval mode elevations. If you change this policy setting, you must restart your computer. This policy is only supported on Windows Desktop, not Server. The options are: • Admin Approval Mode is running in legacy mode (default). • Admin Approval Mode is running with Administrator protection.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_typeofadminapprovalmode"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode_1","displayName":"Legacy Admin Approval Mode","description":"Legacy Admin Approval Mode","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_typeofadminapprovalmode_2","displayName":"Admin Approval Mode with Administrator protection","description":"Admin Approval Mode with Administrator protection","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode","displayName":"User Account Control Use Admin Approval Mode","description":"User Account Control: Use Admin Approval Mode for the built-in Administrator account This policy setting controls the behavior of Admin Approval Mode for the built-in Administrator account. The options are: • Enabled: The built-in Administrator account uses Admin Approval Mode. By default, any operation that requires elevation of privilege will prompt the user to approve the operation. • Disabled: (Default) The built-in Administrator account runs all applications with full administrative privilege.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_useadminapprovalmode"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_useadminapprovalmode_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations","displayName":"User Account Control Virtualize File And Registry Write Failures To Per User Locations","description":"User Account Control: Virtualize file and registry write failures to per-user locations This policy setting controls whether application write failures are redirected to defined registry and file system locations. This policy setting mitigates applications that run as administrator and write run-time application data to %ProgramFiles%, %Windir%, %Windir%\\system32, or HKLM\\Software. The options are: • Enabled: (Default) Application write failures are redirected at run time to defined user locations for both the file system and registry. • Disabled: Applications that write data to protected locations fail.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalPoliciesSecurityOptions#useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations"],"options":[{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_localpoliciessecurityoptions_useraccountcontrol_virtualizefileandregistrywritefailurestoperuserlocations_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps","displayName":"Allow Custom SSPs and APs to be loaded into LSASS","description":"This policy controls the configuration under which LSASS loads custom SSPs and APs.\r\n\r\nIf you enable this setting or do not configure it, LSA allows custom SSPs and APs to be loaded.\r\n\r\nIf you disable this setting, LSA does not load custom SSPs and APs.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localsecurityauthority_allowcustomsspsaps_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess","displayName":"Configure Lsa Protected Process","description":"If you do not configure this policy and there is no current setting in the registry, LSA will run as protected process for all clean installed, HVCI capable, client SKUs. This configuration is not UEFI locked. This can be overridden if the policy is configured. If you configure and set this policy setting to 'Disabled', LSA will not run as a protected process. If you configure and set this policy setting to 'EnabledWithUEFILock', LSA will run as a protected process and this configuration is UEFI locked. If you configure and set this policy setting to 'EnabledWithoutUEFILock', LSA will run as a protected process and this configuration is not UEFI locked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LocalSecurityAuthority#configurelsaprotectedprocess"],"options":[{"id":"device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_0","displayName":"Disabled. Default value. LSA will not run as protected process.","description":"Disabled. Default value. LSA will not run as protected process.","helpText":null},{"id":"device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_1","displayName":"Enabled with UEFI lock. LSA will run as protected process and this configuration is UEFI locked.","description":"Enabled with UEFI lock. LSA will run as protected process and this configuration is UEFI locked.","helpText":null},{"id":"device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_2","displayName":"Enabled without UEFI lock. LSA will run as protected process and this configuration is not UEFI locked.","description":"Enabled without UEFI lock. LSA will run as protected process and this configuration is not UEFI locked.","helpText":null}]},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure","displayName":"Group Configuration","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"options":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup","displayName":"access group","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"options":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action","displayName":"Group and user action","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"options":[{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_add_update","displayName":"Add (Update)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_remove_update","displayName":"Remove (Update)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_add_restrict","displayName":"Add (Replace)","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc","displayName":"Local group","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"options":[{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_administrators","displayName":"Administrators","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_users","displayName":"Users","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_guests","displayName":"Guests","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_powerusers","displayName":"Power Users","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_remotedesktopusers","displayName":"Remote Desktop Users","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_remotemanagementusers","displayName":"Remote Management Users","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_users","displayName":"Selected user(s)","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"options":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype","displayName":"User selection type","description":"This Setting allows an administrator to manage local groups on a Device. Possible settings: 1. Update Group Membership: Update a group and add and/or remove members though the 'U' action. When using Update, existing group members that are not specified in the policy remain untouched. 2. Replace Group Membership: Restrict a group by replacing group membership through the 'R' action. When using Replace, existing group membership is replaced by the list of members specified in the add member section. This option works in the same way as a Restricted Group and any group members that are not specified in the policy are removed. Caution: If the same group is configured with both Replace and Update, then Replace will win.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localusersandgroups"],"options":[{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype_users","displayName":"Users/Groups","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype_manual","displayName":"Manual","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lockdown_allowedgeswipe","displayName":"Allow Edge Swipe","description":"Allows the user to invoke any system user interface by swiping in from any screen edge using touch. The easiest way to verify the policy is to restart the explorer process or to reboot after the policy is applied. And then try to swipe from the right edge of the screen. The desired result is for Action Center to not be invoked by the swipe. You can also enter tablet mode and attempt to swipe from the top of the screen to rearrange. That will also be disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-LockDown#allowedgeswipe"],"options":[{"id":"device_vendor_msft_policy_config_lockdown_allowedgeswipe_0","displayName":"Block","description":"Disallow edge swipe.","helpText":null},{"id":"device_vendor_msft_policy_config_lockdown_allowedgeswipe_1","displayName":"Allow","description":"Allow edge swipe.","helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode","displayName":"Specify server","description":"\r\nSpecifies how Microsoft Lync identifies the server.\r\n\r\nIf you enable this policy setting, you must specify the server name that Microsoft Lync uses.\r\n\r\nIf you disable this policy setting, Microsoft Lync uses a DNS lookup to identify the server.\r\n\r\nIf you do not configure this policy setting, the user can choose automatic configuration, or the user can specify the name of the server in Microsoft Lync user preferences. To set the user preferences, from the Microsoft Lync Tools menu, click Options, click the Personal tab, within the SIP Communications My Account area click Advanced, select Configure Settings, type the server name in the Server name field.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_l_serveraddressexternal_value","displayName":"DNS name of the external server (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfigurationmode_l_serveraddressinternal_value","displayName":"DNS name of the internal server (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues","displayName":"Additional server versions supported","description":"\r\nSpecify a semicolon separated list of server version names, e.g. RTC/2.9;RTC/3.0;RTC/4.0, to which Microsoft Lync allows logon in addition to the server versions that are supported by default. Space character is treated as part of the version string.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyconfiguredservercheckvalues_l_configuredservercheckvalues_value","displayName":"Server version names (semicolon separated list): (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing","displayName":"Disable automatic upload of sign-in failure logs","description":"\r\nUploads the sign-in failure logs to the Microsoft Lync Server automatically for analysis. No logs will be automatically uploaded if sign-in is successful.\r\n\r\nIf this policy is not configured, then the following happens: \r\nFor Lync Online Users: Sign-in failure logs are automatically uploaded.\r\nFor Lync On-Premise Users: A confirmation seeking consent from the user is shown before upload.\r\n\r\nWhen this is disabled, sign-in logs would be uploaded to the Microsoft Lync Server for both Lync On-Premise and Online users automatically.\r\n\r\nWhen this is enabled, sign-in logs will never be uploaded automatically.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableautomaticsendtracing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect","displayName":"Disable HTTP fallback for SIP connection","description":"Prevents from HTTP being used for SIP connection in case TLS or TCP fail.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablehttpconnect_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials","displayName":"Require logon credentials","description":"\r\nRequires the user to provide logon credentials for Microsoft Lync rather than automatically using the Windows credentials when Microsoft Lync authenticates the user using NTLM or Kerberos.\r\n\r\nIf you enable this policy setting, Microsoft Lync requires the user to provide logon credentials.\r\n\r\nIf you disable or do not configure this policy setting, Microsoft Lync authenticates the user based on the logon credentials for Windows.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisablentcredentials_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck","displayName":"Disable server version check","description":"Prevents Microsoft Lync from checking the server version before signing in.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policydisableservercheck_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload","displayName":"Enable using BITS to download Address Book Service files","description":"This policy allows Microsoft Lync to use BITS (Background Intelligent Transfer Service) to download the Address Book Services files.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablebitsforgaldownload_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode","displayName":"Configure SIP security mode","description":"\r\nWhen Lync connects to the server, it supports various authentication mechanisms. This policy allows the user to specify whether Digest and Basic authentication are supported.\r\n\r\nDisabled (default): NTLM/Kerberos/TLS-DSK/Digest/Basic\r\nEnabled:\r\n Authentication mechanisms: NTLM/Kerberos/TLS-DSK\r\n Gal Download: Requires HTTPS if user is not logged in as an internal user.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policyenablesiphighsecuritymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay","displayName":"Global Address Book Download Initial Delay","description":"\r\nWhen set, this will delay the initial download of the Global Address Book by a random number between 0 and the number of minutes specified after sign-in. When the value is 0, the download will begin immediately after sign-in. By default, the value is 60. This means that there will be a random delay between 0 and 60 minutes after sign-in before Lync begins to download the address book.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policygaldownloadinitialdelay_l_galdownloadinitialdelay_value","displayName":"Maximum possible number of minutes to delay download: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun","displayName":"Prevent users from running Microsoft Lync","description":"\r\nPrevents users from running Microsoft Lync.\r\n\r\nIf you enable this policy setting, users cannot run Microsoft Lync.\r\n\r\nIf you disable or do not configure this policy setting, users can run Microsoft Lync.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policypreventrun_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword","displayName":"Allow storage of user passwords","description":"\r\nAllows Microsoft Lync to store user passwords.\r\n\r\nIf you enable this policy setting, Microsoft Lync can store a password on request from the user.\r\n\r\nIf you disable this policy setting, Microsoft Lync cannot store a password.\r\n\r\nIf you do not configure this policy setting and the user logs on to a domain, Microsoft Lync does not store the password. If you do not configure this policy setting and the user does not log on to a domain (for example, if the user logs on to a workgroup), Microsoft Lync can store the password.\r\n\r\nNote: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysavepassword_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression","displayName":"Configure SIP compression mode","description":"\r\nDefines when to turn on SIP compression. Default: Based on adaptor speed.\r\n\r\nSetting this policy may cause an increase in sign-in time.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression","displayName":"Configure SIP compression mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_0","displayName":"Always disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_1","displayName":"Always enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_2","displayName":"Based on adaptor speed (default)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policysipcompression_l_policysipcompression_3","displayName":"Based on ping round-trip time","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata","displayName":"Trusted Domain List","description":"\r\nWhen Lync connects to an unknown domain, it needs explicit user consent. A dialog is shown asking the user for confirmation on whether it should continue.\r\n\r\nThis policy gives administrators the ability to provide trusted domain names. If a domain name is added to this list, Lync will trust that domain and will not show the dialog requesting permission. Multiple domain addresses as comma separated values can be provided.\r\n\r\nBy setting this policy, Lync will not explicitly trust the default domains specified below. It will exclusively trust the domain specified by the policy.\r\n\r\nSupported values:\r\n Not Configured (Default)/Disabled: By default the following domains will be trusted: \"lync.com, outlook.com, lync.glbdns.microsoft.com, and microsoftonline.com.\"\r\n Enabled: The list of domains to be trusted. For example: \"contoso.com, contoso.co.in\"\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_lync16v2~policy~l_lync~l_lyncconfiguration_l_policytrustmodeldata_l_trustmodeldata_value","displayName":"Trusted Domains (comma separated list): (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection","displayName":"Allow Offline Maps Download Over Metered Connection","description":"Allows the download and update of map data over metered connections. After the policy is applied, you can verify the settings in the user interface in System > Offline Maps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Maps#allowofflinemapsdownloadovermeteredconnection"],"options":[{"id":"device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_0","displayName":"Disabled. Force disable auto-update over metered connection.","description":"Disabled. Force disable auto-update over metered connection.","helpText":null},{"id":"device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_1","displayName":"Enabled. Force enable auto-update over metered connection.","description":"Enabled. Force enable auto-update over metered connection.","helpText":null},{"id":"device_vendor_msft_policy_config_maps_allowofflinemapsdownloadovermeteredconnection_65535","displayName":"Not configured. User's choice.","description":"Not configured. User's choice.","helpText":null}]},{"id":"device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate","displayName":"Enable Offline Maps Auto Update","description":"Disables the automatic download and update of map data. After the policy is applied, you can verify the settings in the user interface in System > Offline Maps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Maps#enableofflinemapsautoupdate"],"options":[{"id":"device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_0","displayName":"Disabled. Force off auto-update.","description":"Disabled. Force off auto-update.","helpText":null},{"id":"device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_1","displayName":"Enabled. Force on auto-update.","description":"Enabled. Force on auto-update.","helpText":null},{"id":"device_vendor_msft_policy_config_maps_enableofflinemapsautoupdate_65535","displayName":"Not configured. User's choice.","description":"Not configured. User's choice.","helpText":null}]},{"id":"device_vendor_msft_policy_config_memorydump_allowcrashdump","displayName":"Allow Crash Dump","description":"This policy setting decides if crash dump collection on the machine is allowed or not.\n\nSupported values:\n0 - Disable crash dump collection.\n1 (default) - Allow crash dump collection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_memorydump_allowcrashdump_0","displayName":"Block","description":"Disable crash dump collection.","helpText":null},{"id":"device_vendor_msft_policy_config_memorydump_allowcrashdump_1","displayName":"Allow","description":"Allow crash dump collection.","helpText":null}]},{"id":"device_vendor_msft_policy_config_memorydump_allowlivedump","displayName":"Allow Live Dump","description":"This policy setting decides if live dump collection on the machine is allowed or not.\n\nSupported values:\n0 - Disable live dump collection.\n1 (default) - Allow live dump collection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_memorydump_allowlivedump_0","displayName":"Block","description":"Disable live dump collection.","helpText":null},{"id":"device_vendor_msft_policy_config_memorydump_allowlivedump_1","displayName":"Allow","description":"Allow live dump collection.","helpText":null}]},{"id":"device_vendor_msft_policy_config_messaging_allowmessagesync","displayName":"Allow Message Sync","description":"This policy setting allows backup and restore of cellular text messages to Microsoft's cloud services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Messaging#allowmessagesync"],"options":[{"id":"device_vendor_msft_policy_config_messaging_allowmessagesync_0","displayName":"message sync is not allowed and cannot be changed by the user.","description":"message sync is not allowed and cannot be changed by the user.","helpText":null},{"id":"device_vendor_msft_policy_config_messaging_allowmessagesync_1","displayName":"message sync is allowed. The user can change this setting.","description":"message sync is allowed. The user can change this setting.","helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder","displayName":"Configure the location of the browser executable folder","description":"This policy configures WebView2 applications to use the WebView2 Runtime in the specified path. The folder should contain the following files: msedgewebview2.exe, msedge.dll, and so on.\r\n\r\nTo set the value for the folder path, provide a Value name and Value pair. Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications.\r\n\r\nExample value:\r\n\r\nName: *, Value: C:\\Program Files\\Microsoft Edge WebView2 Runtime Redistributable 85.0.541.0 x64","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc","displayName":"Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_browserexecutablefolder_browserexecutablefolderdesc_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference","displayName":"Set the release channel search order preference","description":"The default channel search order is WebView2 Runtime, Beta, Dev, and Canary.\r\n\r\nTo reverse the default search order, set this policy to 1.\r\n\r\nTo set the value for the release channel preference, provide a Value name and Value pair. Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications.\r\n\r\nExample value:\r\n\r\nName: *, Value: 1","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc","displayName":"Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v1~policy~microsoft_edge_webview2~webview2loaderoverridesettings_releasechannelpreference_releasechannelpreferencedesc_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service","description":"The Experimentation and Configuration Service is used to deploy Experimentation and Configuration payloads to the client.\r\n\r\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\r\n\r\nConfiguration payload consists of a list of recommended settings that Microsoft wants to deploy to optimize the user experience.\r\n\r\nConfiguration payload may also contain a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nIf you set this policy to 'FullMode', the full payload is downloaded from the Experimentation and Configuration Service. This includes both the experimentation and configuration payloads.\r\n\r\nIf you set this policy to 'ConfigurationsOnlyMode', only the configuration payload is downloaded.\r\n\r\nIf you set this policy to 'RestrictedMode', the communication with the Experimentation and Configuration Service is stopped completely. Microsoft does not recommend this setting.\r\n\r\nIf you don't configure this policy on a managed device, the behavior on Beta and Stable channels is the same as the 'ConfigurationsOnlyMode'. On Canary and Dev channels the behavior is the same as 'FullMode'.\r\n\r\nIf you don't configure this policy on an unmanaged device, the behavior is the same as the 'FullMode'.\r\n\r\nPolicy options mapping:\r\n\r\n* FullMode (2) = Retrieve configurations and experiments\r\n\r\n* ConfigurationsOnlyMode (1) = Retrieve configurations only\r\n\r\n* RestrictedMode (0) = Disable communication with the Experimentation and Configuration Service\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2","displayName":"Retrieve configurations and experiments","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1","displayName":"Retrieve configurations only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0","displayName":"Disable communication with the Experimentation and Configuration Service","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled","displayName":"Controls whether unload event handlers can be disabled.","description":"unload event handlers are being deprecated. Whether they fire depends on the unload Permissions-Policy.\r\nCurrently, they are allowed by policy by default. In the future they will gradually move to being disallowed by default and sites must explicitly enable them using Permissions-Policy headers.\r\nThis enterprise policy can be used to opt out of this gradual deprecation by forcing the default to stay enabled.\r\n\r\nPages might depend on unload event handlers to save data or signal the end of a user session to the server.\r\nThis is not recommended because it's unreliable and impacts performance by blocking use of BackForwardCache.\r\nRecommended alternatives exist, but the unload event has been used for a long time. Some applications might still rely on them.\r\n\r\nIf you disable this policy or don't configure it, unload event handlers will gradually be deprecated in-line with the deprecation rollout and sites which don't set Permissions-Policy header will stop firing `unload` events.\r\n\r\nIf you enable this policy then unload event handlers will continue to work by default.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_forcepermissionpolicyunloaddefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist","displayName":"HTTP Allowlist","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as '[*.]example.com') that will not be upgraded to HTTPS and will not show an error interstitial if HTTPS-First Mode is enabled. Organizations can use this policy to maintain access to servers that do not support HTTPS, without needing to disable \"AutomaticHttpsDefault\".\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase.\r\n\r\nBlanket host wildcards (i.e., \"*\" or \"[*]\") are not allowed. Instead, HTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their specific policies.\r\n\r\nNote: This policy does not apply to HSTS upgrades.\r\n\r\nExample value:\r\n\r\ntestserver.example.com\r\n[*.]example.org","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc","displayName":"HTTP Allowlist (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_httpallowlist_httpallowlistdesc_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed","displayName":"Allows enabling the feature NewBaseUrlInheritanceBehavior","description":"NewBaseUrlInheritanceBehavior is a Microsoft Edge feature that causes about:blank and about:srcdoc frames to consistently inherit their base url values via snapshots of their initiator's base url.\r\n\r\nIf you disable this policy, it prevents users or Microsoft Edge variations from enabling NewBaseUrlInheritanceBehavior, in case compatibility issues are discovered.\r\n\r\nIf you enable or don't configure this policy, it allows enabling NewBaseUrlInheritanceBehavior.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newbaseurlinheritancebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list","displayName":"Enable built-in PDF reader powered by Adobe Acrobat for WebView2","description":"This policy configures WebView2 applications to launch the new version of the PDF reader that's powered by Adobe Acrobat's PDF reader. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF file handling, and greater accessibility.\r\n\r\nIf this policy is specified for an application, it is possible that it may impact other related applications as well. The policy is applied to all WebView2s sharing the same WebView2 user data folder. These WebView2s could potentially belong to multiple applications if those applications, which are likely from the same product family, are designed to share the same user data folder.\r\n\r\nUse a name-value pair to enable the new PDF reader for the application. Set the name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. Set the Value to true to enable the new reader or set it to false to use the existing one.\r\n\r\nIf you enable this policy for the specified WebView2 applications, they will use the new Adobe Acrobat powered PDF reader to open all PDF files.\r\n\r\nIf you disable the policy for the specified WebView2 applications or don't configure it, they will use the existing PDF reader to open all PDF files.\r\n\r\nExample value:\r\n\r\n{\"name\": \"app1.exe\", \"value\": true}\r\n{\"name\": \"app_id_for_app2\", \"value\": true}\r\n{\"name\": \"*\", \"value\": false}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc","displayName":"Set value name to the Application User Model ID or the executable file name. You can use the \"*\" wildcard as value name to apply to all applications. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_newpdfreaderwebview2list_newpdfreaderwebview2listdesc_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors","description":"The X.509 key usage extension declares how the key in a certificate can be\r\nused. These instructions ensure certificates aren't used in an unintended\r\ncontext, which protects against a class of cross-protocol attacks on HTTPS and\r\nother protocols. HTTPS clients must verify that server certificates match the\r\nconnection's TLS parameters.\r\n\r\nIf this policy is enabled,\r\nMicrosoft Edge will perform this key\r\ncheck. This helps prevent attacks where an attacker manipulates the browser into\r\ninterpreting a key in ways that the certificate owner did not intend.\r\n\r\nIf this policy is set to disabled or not configured,\r\nMicrosoft Edge will skip this key check in\r\nHTTPS connections that negotiate TLS 1.2 and use an RSA certificate that\r\nchains to a local trust anchor. Examples of local trust anchors include\r\npolicy-provided or user-installed root certificates. In all other cases, the\r\ncheck is performed independent of this policy's setting.\r\n\r\nThis policy is available for administrators to preview the behavior of a\r\nfuture release, which will enable this check by default. At that point, this\r\npolicy will remain temporarily available for administrators that need more\r\ntime to update their certificates to meet the new RSA key usage requirements.\r\n\r\nConnections that fail this check will fail with the error\r\nERR_SSL_KEY_USAGE_INCOMPATIBLE. Sites that fail with this error likely have a\r\nmisconfigured certificate. Modern ECDHE_RSA cipher suites use the\r\n\"digitalSignature\" key usage option, while legacy RSA decryption cipher suites\r\nuse the \"keyEncipherment\" key usage option. If uncertain, administrators should\r\ninclude both in RSA certificates meant for HTTPS.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge_webview2v2~policy~microsoft_edge_webview2_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory","displayName":"Enable deleting browser and download history","description":"Enables deleting browser history and download history and prevents users from changing this setting.\r\n\r\nNote that even with this policy is disabled, the browsing and download history aren't guaranteed to be retained: users can edit or delete the history database files directly, and the browser itself may remove (based on expiration period) or archive any or all history items at any time.\r\n\r\nIf you enable this policy or don't configure it, users can delete the browsing and download history.\r\n\r\nIf you disable this policy, users can't delete browsing and download history.\r\n\r\nIf you enable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you enable both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how this policy is configured.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowdeletingbrowserhistory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs","displayName":"Allow file selection dialogs","description":"Allow access to local files by letting Microsoft Edge display file selection dialogs.\r\n\r\nIf you enable or don't configure this policy, users can open file selection dialogs as normal.\r\n\r\nIf you disable this policy, whenever the user performs an action that triggers a file selection dialog (like importing favorites, uploading files, or saving links), a message is displayed instead, and the user is assumed to have clicked Cancel on the file selection dialog.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_allowfileselectiondialogs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally","displayName":"Always open PDF files externally","description":"Disables the internal PDF viewer in Microsoft Edge.\r\n\r\nIf you enable this policy Microsoft Edge treats PDF files as downloads and lets users open them with the default application.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will open PDF files (unless the user disables it).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_alwaysopenpdfexternally_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue","displayName":"Set application locale","description":"Configures the application locale in Microsoft Edge and prevents users from changing the locale.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified locale. If the configured locale isn't supported, 'en-US' is used instead.\r\n\r\nIf you disable or don't configure this setting, Microsoft Edge uses either the user-specified preferred locale (if configured) or the fallback locale 'en-US'.\r\n\r\nExample value: en","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_applicationlocalevalue_applicationlocalevalue","displayName":"Application locale (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed","displayName":"Allow or block audio capture","description":"Allows you to set whether a user is prompted to grant a website access to their audio capture device. This policy applies to all URLs except for those configured in the 'AudioCaptureAllowedUrls' (Sites that can access audio capture devices without requesting permission) list.\r\n\r\nIf you enable this policy or don't configure it (the default setting), the user is prompted for audio capture access except from the URLs in the 'AudioCaptureAllowedUrls' list. These listed URLs are granted access without prompting.\r\n\r\nIf you disable this policy, the user is not prompted, and audio capture is accessible only to the URLs configured in 'AudioCaptureAllowedUrls'.\r\n\r\nThis policy affects all types of audio inputs, not only the built-in microphone.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls","displayName":"Sites that can access audio capture devices without requesting permission","description":"Specify websites, based on URL patterns, that can use audio capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to audio capture devices. Note, however, that the pattern \"*\", which matches any URL, is not supported by this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com/\r\nhttps://[*.]contoso.edu/","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_audiocaptureallowedurls_audiocaptureallowedurlsdesc","displayName":"Sites that can access audio capture devices without requesting permission (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled","displayName":"Enable AutoFill for addresses","description":"Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information.\r\n\r\nIf you disable this policy, AutoFill never suggests or fills in address information, nor does it save additional address information that the user might submit while browsing the web.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for addresses in the user interface.\r\n\r\nNote that if you disable this policy you also stop all activity for all web forms, except payment and password forms. No further entries are saved, and Microsoft Edge won't suggest or AutoFill any previous entries.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofilladdressenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled","displayName":"Enable AutoFill for payment instruments","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete payment instruments like credit or debit cards in web forms using previously stored information. This includes suggesting new payment instruments like Buy Now Pay Later (BNPL) in web forms and Express Checkout.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for payment instruments.\r\n\r\nIf you disable this policy, AutoFill never suggests, fills, or recommends new payment Instruments. Additionally, it won't save any payment instrument information that users submit while browsing the web.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autofillcreditcardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun","displayName":"Automatically import another browser's data and settings at first run","description":"If you enable this policy, all supported datatypes and settings from the specified browser will be silently and automatically imported at first run. During the First Run Experience, the import section will also be skipped.\r\n\r\nThe browser data from Microsoft Edge Legacy will always be silently migrated at the first run, irrespective of the value of this policy. You can use the following values for this policy:\r\n\r\n* 0 = Automatically imports all supported datatypes and settings from the default browser\r\n\r\n* 1 = Automatically imports all supported datatypes and settings from Internet Explorer\r\n\r\n* 2 = Automatically imports all supported datatypes and settings from Google Chrome\r\n\r\n* 3 = Automatically imports all supported datatypes and settings from Safari\r\n\r\n* 4 = Disables automatic import, and the import section of the first-run experience is skipped\r\n\r\n* 5 = Automatically imports all supported datatypes and settings from Mozilla Firefox\r\n\r\nIf this policy is set to the default value (0), then the datatypes corresponding to the default browser on the managed device will be imported.\r\n\r\nIf the browser specified as the value of this policy is not present in the managed device, Microsoft Edge will simply skip the import without any notification to the user.\r\n\r\nIf you set this policy to 'DisabledAutoImport' (4), the import section of the first-run experience is skipped entirely and Microsoft Edge doesn't import browser data and settings automatically.\r\n\r\nIf this policy is set to the value of Internet Explorer (1), the following datatypes will be imported from Internet Explorer:\r\n1. Favorites or bookmarks\r\n2. Saved passwords\r\n3. Search engines\r\n4. Browsing history\r\n5. Home page\r\n\r\nIf this policy is set to the value of Google Chrome (2), the following datatypes will be imported from Google Chrome:\r\n1. Favorites\r\n2. Saved passwords\r\n3. Addresses and more\r\n4. Payment info\r\n5. Browsing history\r\n6. Settings\r\n7. Pinned and Open tabs\r\n8. Extensions\r\n9. Cookies\r\n\r\nNote: For more details on what is imported from Google Chrome, please see https://go.microsoft.com/fwlink/?linkid=2120835\r\n\r\nIf this policy is set to the value of Safari (3), the following datatypes will be imported from Safari:\r\n1. Favorites or bookmarks\r\n2. Browsing history\r\n\r\nStarting with Microsoft Edge version 83, if this policy is set to the value of Mozilla Firefox (5), the following datatypes will be imported from Mozilla Firefox:\r\n1. Favorites or bookmarks\r\n2. Saved passwords\r\n3. Addresses and more\r\n4. Browsing History\r\n\r\nIf you want to restrict specific datatypes from getting imported on the managed devices, you can use this policy with other policies such as 'ImportAutofillFormData' (Allow importing of autofill form data), 'ImportBrowserSettings' (Allow importing of browser settings), 'ImportFavorites' (Allow importing of favorites), and etc.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun","displayName":"Automatically import another browser's data and settings at first run (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_0","displayName":"Automatically imports all supported datatypes and settings from the default browser","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_1","displayName":"Automatically imports all supported datatypes and settings from Internet Explorer","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_2","displayName":"Automatically imports all supported datatypes and settings from Google Chrome","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_3","displayName":"Automatically imports all supported datatypes and settings from Safari","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_autoimportatfirstrun_autoimportatfirstrun_4","displayName":"Disables automatic import, and the import section of the first-run experience is skipped","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled","displayName":"Continue running background apps after Microsoft Edge closes","description":"Allows Microsoft Edge processes to start at OS sign-in and keep running after the last browser window is closed. In this scenario, background apps and the current browsing session remain active, including any session cookies. An open background process displays an icon in the system tray and can always be closed from there.\r\n\r\nIf you enable this policy, background mode is turned on.\r\n\r\nIf you disable this policy, background mode is turned off.\r\n\r\nIf you don't configure this policy, background mode is initially turned off, and the user can configure its behavior in edge://settings/system.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_backgroundmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies","displayName":"Block third party cookies","description":"Block web page elements that aren't from the domain that's in the address bar from setting cookies.\r\n\r\nIf you enable this policy, web page elements that are not from the domain that is in the address bar can't set cookies\r\n\r\nIf you disable this policy, web page elements from domains other than in the address bar can set cookies.\r\n\r\nIf you don't configure this policy, third-party cookies are enabled but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_blockthirdpartycookies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled","displayName":"Enable profile creation from the Identity flyout menu or the Settings page","description":"Allows users to create new profiles, using the **Add profile** option.\r\nIf you enable this policy or don't configure it, Microsoft Edge allows users to use **Add profile** on the Identity flyout menu or the Settings page to create new profiles.\r\n\r\nIf you disable this policy, users cannot add new profiles from the Identity flyout menu or the Settings page.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browseraddprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled","displayName":"Enable guest mode","description":"Enable the option to allow the use of guest profiles in Microsoft Edge. In a guest profile, the browser doesn't import browsing data from existing profiles, and it deletes browsing data when all guest profiles are closed.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge lets users browse in guest profiles.\r\n\r\nIf you disable this policy, Microsoft Edge doesn't let users browse in guest profiles.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browserguestmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled","displayName":"Allow queries to a Browser Network Time service","description":"Prevents Microsoft Edge from occasionally sending queries to a browser network time service to retrieve an accurate timestamp.\r\n\r\nIf you disable this policy, Microsoft Edge will stop sending queries to a browser network time service.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will occasionally send queries to a browser network time service.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsernetworktimequeriesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin","displayName":"Browser sign-in settings","description":"Specify whether a user can sign into Microsoft Edge with their account and use account-related services like sync and single sign on. To control the availability of sync, use the 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) policy instead.\r\n\r\nIf you set this policy to 'Disable browser sign-in', make sure that you also set the 'NonRemovableProfileEnabled' (Configure whether a user always has a default profile automatically signed in with their work or school account) policy to disabled because 'NonRemovableProfileEnabled' disables the creation of an automatically signed in browser profile. If both policies are set, Microsoft Edge will use the 'Disable browser sign-in' policy and behave as if 'NonRemovableProfileEnabled' is set to disabled.\r\n\r\nIf you set this policy to 'Enable browser sign-in' (1), users can sign into the browser. Signing into the browser doesn't mean that sync is turned on by default; the user must separately opt-in to use this feature.\r\n\r\nIf you set this policy to 'Force browser sign-in' (2) users must sign into a profile to use the browser. By default, this will allow the user to choose whether they want to sync to their account, unless sync is disabled by the domain admin or with the 'SyncDisabled' policy. The default value of 'BrowserGuestModeEnabled' (Enable guest mode) policy is set to false.\r\n\r\nIf you don't configure this policy users can decide if they want to enable the browser sign-in option and use it as they see fit.\r\n\r\n* 0 = Disable browser sign-in\r\n\r\n* 1 = Enable browser sign-in\r\n\r\n* 2 = Force users to sign-in to use the browser","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin","displayName":"Browser sign-in settings (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_0","displayName":"Disable browser sign-in","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_1","displayName":"Enable browser sign-in","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_browsersignin_browsersignin_2","displayName":"Force users to sign-in to use the browser","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled","displayName":"Use built-in DNS client","description":"Controls whether to use the built-in DNS client.\r\n\r\nThis does not affect which DNS servers are used; just the software stack which is used to communicate with them. For example if the operating system is configured to use an enterprise DNS server, that same server would be used by the built-in DNS client. It is however possible that the built-in DNS client will address servers in different ways by using more modern DNS-related protocols such as DNS-over-TLS.\r\n\r\nIf you enable this policy, the built-in DNS client is used, if it's available.\r\n\r\nIf you disable this policy, the client is never used.\r\n\r\nIf you don't configure this policy, the built-in DNS client is enabled by default on MacOS, and users can change whether to use the built-in DNS client by editing edge://flags or by specifying a command-line flag.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_builtindnsclientenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes","description":"Disables enforcement of Certificate Transparency requirements for a list of subjectPublicKeyInfo hashes.\r\n\r\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they were not properly publicly disclosed to still be used for Enterprise hosts.\r\n\r\nTo disable Certificate Transparency enforcement when this policy is set, one of the following sets of conditions must be met:\r\n1. The hash is of the server certificate's subjectPublicKeyInfo.\r\n2. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, that CA certificate is constrained via the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName contains an organizationName attribute.\r\n3. The hash is of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, the CA certificate has one or more organizationName attributes in the certificate Subject, and the server's certificate contains the same number of organizationName attributes, in the same order, and with byte-for-byte identical values.\r\n\r\nA subjectPublicKeyInfo hash is specified by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\r\n\r\nIf you disable this policy or don't configure it, any certificate that's required to be disclosed via Certificate Transparency will be treated as untrusted if it's not disclosed according to the Certificate Transparency policy.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforcas_certificatetransparencyenforcementdisabledforcasdesc","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas","displayName":"Disable Certificate Transparency enforcement for a list of legacy certificate authorities (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 131.\r\n\r\nDisables enforcing Certificate Transparency requirements for a list of legacy certificate authorities (Cas).\r\n\r\nThis policy lets you disable Certificate Transparency disclosure requirements for certificate chains that contain certificates with one of the specified subjectPublicKeyInfo hashes. This allows certificates that would otherwise be untrusted because they were not properly publicly disclosed, continue to be used for enterprise hosts.\r\n\r\nIn order for Certificate Transparency enforcement to be disabled, you must set the hash to a subjectPublicKeyInfo appearing in a CA certificate that is recognized as a legacy certificate authority (CA). A legacy CA is a CA that has been publicly trusted by default by one or more operating systems supported by Microsoft Edge.\r\n\r\nYou specify a subjectPublicKeyInfo hash by concatenating the hash algorithm name, the \"/\" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is \"sha256\".\r\n\r\nIf you don't configure this policy, any certificate that's required to be disclosed via Certificate Transparency will be treated as untrusted if it isn't disclosed according to the Certificate Transparency policy.\r\n\r\nThis policy is obsolete because the feature to disable Certificate Transparency enforcement for legacy certificates has been removed.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforlegacycas_certificatetransparencyenforcementdisabledforlegacycasdesc","displayName":"Disable Certificate Transparency enforcement for a list of legacy certificate authorities (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls","displayName":"Disable Certificate Transparency enforcement for specific URLs","description":"Disables enforcing Certificate Transparency requirements for the listed URLs.\r\n\r\nThis policy lets you not disclose certificates for the hostnames in the specified URLs via Certificate Transparency. This lets you use certificates that would otherwise be untrusted, because they weren't properly publicly disclosed, but it makes it harder to detect mis-issued certificates for those hosts.\r\n\r\nForm your URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322. Because certificates are valid for a given hostname, independent of the scheme, port, or path, only the hostname part of the URL is considered. Wildcard hosts are not supported.\r\n\r\nIf you don't configure this policy, any certificate that should be disclosed via Certificate Transparency is treated as untrusted if it's not disclosed.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\n.contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_certificatetransparencyenforcementdisabledforurls_certificatetransparencyenforcementdisabledforurlsdesc","displayName":"Disable Certificate Transparency enforcement for specific URLs (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled","displayName":"Enable component updates in Microsoft Edge","description":"If you enable or don't configure this policy, component updates are enabled in Microsoft Edge.\r\n\r\nIf you disable this policy or set it to false, component updates are disabled for all components in Microsoft Edge.\r\n\r\nHowever, some components are exempt from this policy. This includes any component that doesn't contain executable code, that doesn't significantly alter the behavior of the browser, or that's critical for security. That is, updates that are deemed \"critical for security\" are still applied even if you disable this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_componentupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack","displayName":"Configure Do Not Track","description":"Specify whether to send Do Not Track requests to websites that ask for tracking info. Do Not Track requests let the websites you visit know that you don't want your browsing activity to be tracked. By default, Microsoft Edge doesn't send Do Not Track requests, but users can turn on this feature to send them.\r\n\r\nIf you enable this policy, Do Not Track requests are always sent to websites asking for tracking info.\r\n\r\nIf you disable this policy, requests are never sent.\r\n\r\nIf you don't configure this policy, users can choose whether to send these requests.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configuredonottrack_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech","displayName":"Configure Online Text To Speech","description":"Set whether the browser can leverage Online Text to Speech voice fonts, part of Azure Cognitive Services. These voice fonts are higher quality than the pre-installed system voice fonts.\r\n\r\nIf you enable or don't configure this policy, web-based applications that use the SpeechSynthesis API can use Online Text to Speech voice fonts.\r\n\r\nIf you disable this policy, the voice fonts aren't available.\r\n\r\nRead more about this feature here:\r\nSpeechSynthesis API: https://go.microsoft.com/fwlink/?linkid=2110038\r\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2110141","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_configureonlinetexttospeech_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability","displayName":"Control where developer tools can be used","description":"Control where developer tools can be used.\r\n\r\nIf you set this policy to 'DeveloperToolsDisallowedForForceInstalledExtensions' (0, the default), users can access the developer tools and the JavaScript console in general, but not in the context of extensions installed by enterprise policy.\r\n\r\nIf you set this policy to 'DeveloperToolsAllowed' (1), users can access the developer tools and the JavaScript console in all contexts, including extensions installed by enterprise policy.\r\n\r\nIf you set this policy to 'DeveloperToolsDisallowed' (2), users can't access the developer tools or inspect website elements. Keyboard shortcuts and menu or context menu entries that open the developer tools or the JavaScript Console are disabled.\r\n\r\n* 0 = Block the developer tools on extensions installed by enterprise policy, allow in other contexts\r\n\r\n* 1 = Allow using the developer tools\r\n\r\n* 2 = Don't allow using the developer tools","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability","displayName":"Control where developer tools can be used (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_0","displayName":"Block the developer tools on extensions installed by enterprise policy, allow in other contexts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_1","displayName":"Allow using the developer tools","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_developertoolsavailability_developertoolsavailability_2","displayName":"Don't allow using the developer tools","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis","displayName":"Disable support for 3D graphics APIs","description":"Prevent web pages from accessing the graphics processing unit (GPU). Specifically, web pages can't access the WebGL API and plug-ins can't use the Pepper 3D API.\r\n\r\nIf you don't configure or disable this policy, it potentially allows web pages to use the WebGL API and plug-ins to use the Pepper 3D API. Microsoft Edge might, by default, still require command line arguments to be passed in order to use these APIs.\r\n\r\nIf 'HardwareAccelerationModeEnabled' (Use hardware acceleration when available) policy is set to false, the setting for 'Disable3DAPIs' policy is ignored - it's the equivalent of setting 'Disable3DAPIs' policy to true.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disable3dapis_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots","displayName":"Disable taking screenshots","description":"Controls if users can take screenshots of the browser page.\r\n\r\nIf enabled, user can't take screenshots by using keyboard shortcuts or extension APIs.\r\n\r\nIf disabled or don't configure this policy, users can take screenshots.\r\n\r\nPlease note this policy controls screenshots taken from within the browser itself. Even if you enable this policy, users might still be able to take screenshots using some method outside of the browser (like using an operating system feature or another application).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_disablescreenshots_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir","displayName":"Set disk cache directory","description":"Configures the directory to use to store cached files.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified the '--disk-cache-dir' flag. To avoid data loss or other unexpected errors, don't configure this policy to a volume's root directory or to a directory used for other purposes, because Microsoft Edge manages its contents.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables you can use when specifying directories and paths.\r\n\r\nIf you don't configure this policy, the default cache directory is used, and users can override that default with the '--disk-cache-dir' command line flag.\r\n\r\nExample value: ${user_home}/Edge_cache","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachedir_diskcachedir","displayName":"Set disk cache directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize","displayName":"Set disk cache size, in bytes","description":"Configures the size of the cache, in bytes, used to store files on the disk.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided cache size regardless of whether the user has specified the '--disk-cache-size' flag. The value specified in this policy isn't a hard boundary but rather a suggestion to the caching system; any value below a few megabytes is too small and will be rounded up to a reasonable minimum.\r\n\r\nIf you set the value of this policy to 0, the default cache size is used, and users can't change it.\r\n\r\nIf you don't configure this policy, the default size is used, but users can override it with the '--disk-cache-size' flag.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_diskcachesize_diskcachesize","displayName":"Set disk cache size: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory","displayName":"Set download directory","description":"Configures the directory to use when downloading files.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified one or chosen to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\r\n\r\nIf you set an invalid path, Microsoft Edge will default to the user's default download directory.\r\n\r\nIf the folder specified by the path doesn't exist, the download will trigger a prompt that asks the user where they want to save their download.\r\n\r\nExample value: \r\n Linux-based OSes (including Mac): /home/${user_name}/Downloads\r\n Windows: C:\\Users\\${user_name}\\Downloads","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloaddirectory_downloaddirectory","displayName":"Set download directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'Block dangerous downloads' (1) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings.\r\n\r\nSet 'Block potentially dangerous downloads' (2) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous downloads.\r\n\r\nSet 'Block all downloads' (3) to block all downloads.\r\n\r\nIf you don't configure this policy or set the 'No special restrictions' (0) option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\n* 0 = No special restrictions\r\n\r\n* 1 = Block dangerous downloads\r\n\r\n* 2 = Block potentially dangerous downloads\r\n\r\n* 3 = Block all downloads","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1","displayName":"Block dangerous downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2","displayName":"Block potentially dangerous downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled","displayName":"Allows users to edit favorites","description":"Enable this policy to let users add, remove, and modify favorites. This is the default behavior if you don't configure the policy.\r\n\r\nDisable this policy to stop users from adding, removing, or modifying favorites. They can still use existing favorites.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_editfavoritesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures","displayName":"Re-enable deprecated web platform features for a limited time","description":"Specify a list of deprecated web platform features to temporarily re-enable.\r\n\r\nThis policy lets you re-enable deprecated web platform features for a limited time. Features are identified by a string tag.\r\n\r\nIf you don't configure this policy, if the list is empty, or if a feature doesn't match one of the supported string tags, all deprecated web platform features remain disabled.\r\n\r\nWhile the policy itself is supported on the above platforms, the feature it's enabling might not be available on all of those platforms. Not all deprecated Web Platform features can be re-enabled. Only those explicitly listed below can be re-enabled, and only for a limited period of time, which differs per feature. You can review the intent behind the Web Platform feature changes at https://bit.ly/blinkintents.\r\n\r\nThe general format of the string tag is [DeprecatedFeatureName]_EffectiveUntil[yyyymmdd].\r\n\r\n* \"ExampleDeprecatedFeature_EffectiveUntil20080902\" = Enable ExampleDeprecatedFeature API through 2008/09/02\r\n\r\nExample value:\r\n\r\nExampleDeprecatedFeature_EffectiveUntil20080902","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledeprecatedwebplatformfeatures_enabledeprecatedwebplatformfeaturesdesc","displayName":"Re-enable deprecated web platform features for a limited time (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload","displayName":"Enable Domain Actions Download from Microsoft (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nAlthough this policy is used to enable/disable download of the domain actions list, it doesn't always achieve the desired state. The Experimentation and Configuration Service, which handles the download, has its own group policy to configure what is downloaded from the service. To avoid conflicting states, this policy is being deprecated and will be obsolete in milestone 85 onward. Please use the 'ExperimentationAndConfigurationServiceControl' (Control communication with the Experimentation and Configuration Service) policy instead.\r\n\r\nIn Microsoft Edge, Domain Actions represent a series of compatibility features that help the browser work correctly on the web.\r\n\r\nMicrosoft keeps a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken due to the new User Agent string on Microsoft Edge. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nWhen the browser starts up and then periodically afterwards, the browser will contact the Experimentation and Configuration Service that contains the most up to date list of compatibility actions to perform. This list is saved locally after it is first retrieved so that subsequent requests will only update the list if the server's copy has changed.\r\n\r\nIf you enable this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.\r\n\r\nIf you disable this policy, the list of Domain Actions will no longer be downloaded from the Experimentation and Configuration Service.\r\n\r\nIf you don't configure this policy, the list of Domain Actions will continue to be downloaded from the Experimentation and Configuration Service.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enabledomainactionsdownload_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks","displayName":"Enable online OCSP/CRL checks","description":"Online revocation checks don't provide a significant security benefit and are disabled by default.\r\n\r\nIf you enable this policy, Microsoft Edge will perform soft-fail, online OCSP/CRL checks. \"Soft fail\" means that if the revocation server can't be reached, the certificate will be considered valid.\r\n\r\nIf you disable the policy or don't configure it, Microsoft Edge won't perform online revocation checks.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_enableonlinerevocationchecks_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service","description":"In Microsoft Edge, the Experimentation and Configuration Service is used to deploy Experimentation and Configuration payload.\r\n\r\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\r\n\r\nConfiguration payload consists of a list of settings that Microsoft wants to deploy to Microsoft Edge to optimize user experience. For example, configuration payload may specify how often Microsoft Edge sends requests to the Experimentation and Configuration Service to retrieve the newest payload.\r\n\r\nAdditionaly, configuration payload may also contain a list of actions to take on certain domains for compatibility reasons. For example, the browser may override the User Agent string on a website if that website is broken due to the new User Agent string on Microsoft Edge. Each of these actions is intended to be temporary while Microsoft tries to resolve the issue with the site owner.\r\n\r\nIf you set this policy to \"Retrieve configurations and experiments\" mode, the full payload is downloaded from the Experimentation and Configuration Service. This includes both the experimentation and configuration payloads.\r\n\r\nIf you set this policy to \"Retrieve configurations only\" mode, only the configuration payload is delivered.\r\n\r\nIf you set this policy to \"Disable communication with the Experimentation and Configuration Service\" mode, the communication with the Experimentation and Configuration Service is stopped completely.\r\n\r\nIf you don't configure this policy, on a managed device on Stable and Beta channels the behavior is the same as the \"Retrieve configurations only\" mode.\r\n\r\nIf you don't configure this policy, on an unmanaged device the behavior is the same as the \"Retrieve configurations and experiments\" mode.\r\n\r\n* 0 = Disable communication with the Experimentation and Configuration Service\r\n\r\n* 1 = Retrieve configurations only\r\n\r\n* 2 = Retrieve configurations and experiments","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol","displayName":"Control communication with the Experimentation and Configuration Service (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_2","displayName":"Retrieve configurations and experiments","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_1","displayName":"Retrieve configurations only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_experimentationandconfigurationservicecontrol_experimentationandconfigurationservicecontrol_0","displayName":"Disable communication with the Experimentation and Configuration Service","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled","displayName":"Enable favorites bar","description":"Enables or disables the favorites bar.\r\n\r\nIf you enable this policy, users will see the favorites bar.\r\n\r\nIf you disable this policy, users won't see the favorites bar.\r\n\r\nIf this policy is not configured, then the user can decide to use the favorites bar or not.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_favoritesbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch","displayName":"Enforce Bing SafeSearch","description":"Ensure that queries in Bing web search are done with SafeSearch set to the value specified. Users can't change this setting.\r\n\r\nIf you configure this policy to \"Off\", SafeSearch in Bing search falls back to the bing.com value.\r\n\r\nIf you configure this policy to \"Moderate\", the moderate setting is used in SafeSearch. The moderate setting filters adult videos and images but not text from search results.\r\n\r\nIf you configure this policy to \"Strict\", the strict setting in SafeSearch is used. The strict setting filters adult text, images, and videos.\r\n\r\nIf you disable this policy or don't configure it, SafeSearch in Bing search isn't enforced, and users can set the value they want on bing.com.\r\n\r\n* 0 = Don't configure search restrictions in Bing\r\n\r\n* 1 = Configure moderate search restrictions in Bing\r\n\r\n* 2 = Configure strict search restrictions in Bing","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch","displayName":"Enforce Bing SafeSearch (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_0","displayName":"Don't configure search restrictions in Bing","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_1","displayName":"Configure moderate search restrictions in Bing","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcebingsafesearch_forcebingsafesearch_2","displayName":"Configure strict search restrictions in Bing","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles","displayName":"Enable use of ephemeral profiles","description":"Controls whether user profiles are switched to ephemeral mode. An ephemeral profile is created when a session begins, is deleted when the session ends, and is associated with the user's original profile.\r\n\r\nIf you enable this policy, profiles run in ephemeral mode. This lets users work from their own devices without saving browsing data to those devices. If you enable this policy as an OS policy (by using GPO on Windows, for example), it applies to every profile on the system.\r\n\r\nIf you disable this policy or don't configure it, users get their regular profiles when they sign in to the browser.\r\n\r\nIn ephemeral mode, profile data is saved on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies, and web databases aren't saved after the browser is closed. This doesn't prevent a user from manually downloading any data to disk, or from saving pages or printing them. If the user has enabled sync, all data is preserved in their sync accounts just like with regular profiles. Users can also use InPrivate browsing in ephemeral mode unless you explicitly disable this.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceephemeralprofiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch","displayName":"Enforce Google SafeSearch","description":"Forces queries in Google Web Search to be performed with SafeSearch set to active, and prevents users from changing this setting.\r\n\r\nIf you enable this policy, SafeSearch in Google Search is always active.\r\n\r\nIf you disable this policy or don't configure it, SafeSearch in Google Search isn't enforced.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forcegooglesafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode","description":"Enforces a minimum Restricted Mode on YouTube and prevents users from picking a less restricted mode.\r\n\r\nSet to Strict (2) to enforce Strict Restricted Mode on YouTube.\r\n\r\nSet to Moderate (1) to enforce the user to only use Moderate Restricted Mode and Strict Restricted Mode on YouTube. They can't disable Restricted Mode.\r\n\r\nSet to Off (0) or don't configure this policy to not enforce Restricted Mode on YouTube. External policies such as YouTube policies might still enforce Restricted Mode.\r\n\r\n* 0 = Do not enforce Restricted Mode on YouTube\r\n\r\n* 1 = Enforce at least Moderate Restricted Mode on YouTube\r\n\r\n* 2 = Enforce Strict Restricted Mode for YouTube","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_0","displayName":"Do not enforce Restricted Mode on YouTube","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_1","displayName":"Enforce at least Moderate Restricted Mode on YouTube","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_forceyoutuberestrict_forceyoutuberestrict_2","displayName":"Enforce Strict Restricted Mode for YouTube","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed","displayName":"Allow full screen mode","description":"Set the availability of full screen mode - all Microsoft Edge UI is hidden and only web content is visible.\r\n\r\nIf you enable this policy or don't configure it, the user, apps, and extensions with appropriate permissions can enter full screen mode.\r\n\r\nIf you disable this policy, users, apps, and extensions can't enter full screen mode.\r\n\r\nOpening Microsoft Edge in kiosk mode using the command line is unavailable when full screen mode is disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_fullscreenallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled","displayName":"Use hardware acceleration when available","description":"Specify to use hardware acceleration, if it's available. If you enable this policy or don't configure it, hardware acceleration is enabled unless a GPU feature is explicitly blocked.\r\n\r\nIf you disable this policy, hardware acceleration is disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_hardwareaccelerationmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata","displayName":"Allow importing of autofill form data","description":"Allows users to import autofill form data from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import autofill data is automatically selected.\r\n\r\nIf you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.\r\n\r\nIf you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS) and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importautofillformdata_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites","displayName":"Allow importing of favorites","description":"Allows users to import favorites from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, favorites aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (on macOS) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importfavorites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory","displayName":"Allow importing of browsing history","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.\r\n\r\nIf you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhistory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage","displayName":"Allow importing of home page settings","description":"Allows users to import their home page setting from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import the home page setting is automatically selected.\r\n\r\nIf you disable this policy, the home page setting isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, the home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports the home page setting on first run, but users can select or clear the **home page** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo","displayName":"Allow importing of payment info","description":"Allows users to import payment info from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\r\n\r\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importpaymentinfo_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords","displayName":"Allow importing of saved passwords","description":"Allows users to import saved passwords from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import saved passwords is automatically selected.\r\n\r\nIf you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsavedpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine","displayName":"Allow importing of search engine settings","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\r\n\r\nIf you enable, this policy, the option to import search engine settings is automatically selected.\r\n\r\nIf you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_importsearchengine_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability","displayName":"Configure InPrivate mode availability","description":"Specifies whether the user can open pages in InPrivate mode in Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Enabled' (0), users can open pages in InPrivate mode.\r\n\r\nSet this policy to 'Disable' (1) to stop users from using InPrivate mode.\r\n\r\nSet this policy to 'Forced' (2) to always use InPrivate mode.\r\n\r\n* 0 = InPrivate mode available\r\n\r\n* 1 = InPrivate mode disabled\r\n\r\n* 2 = InPrivate mode forced","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability","displayName":"Configure InPrivate mode availability (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_0","displayName":"InPrivate mode available","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_1","displayName":"InPrivate mode disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_inprivatemodeavailability_inprivatemodeavailability_2","displayName":"InPrivate mode forced","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel","displayName":"Configure Internet Explorer integration","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210\r\n\r\n* 0 = None\r\n\r\n* 1 = Internet Explorer mode\r\n\r\n* 2 = Internet Explorer 11","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel","displayName":"Configure Internet Explorer integration (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_1","displayName":"Internet Explorer mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_internetexplorerintegrationlevel_internetexplorerintegrationlevel_2","displayName":"Internet Explorer 11","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins","displayName":"Enable site isolation for specific origins","description":"Specify origins to run in isolation, in their own process.\r\nThis policy also isolates origins named by subdomains - for example, specifying https://contoso.com/ will cause https://foo.contoso.com/ to be isolated as part of the https://contoso.com/ site.\r\nIf the policy is enabled, each of the named origins in a comma-separated list will run in its own process.\r\nIf you disable this policy, then both the 'IsolateOrigins' and 'SitePerProcess' features are disabled. Users can still enable 'IsolateOrigins' policy manually, via command line flags.\r\nIf you don't configure the policy, the user can change this setting.\r\n\r\nExample value: https://contoso.com/,https://fabrikam.com/","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_isolateorigins_isolateorigins","displayName":"Enable site isolation for specific origins (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites","displayName":"Configure favorites","description":"Configures a list of managed favorites.\r\n\r\nThe policy creates a list of favorites. Each favorite contains the keys \"name\" and \"url,\" which hold the favorite's name and its target. You can configure a subfolder by defining a favorites without an \"url\" key but with an additional \"children\" key that contains a list of favorites as defined above (some of which may be folders again). Microsoft Edge amends incomplete URLs as if they were submitted via the Address Bar, for example \"microsoft.com\" becomes \"https://microsoft.com/\".\r\n\r\nThese favorites are placed in a folder that can't be modified by the user (but the user can choose to hide it from the favorites bar). By default the folder name is \"Managed favorites\" but you can change it by adding to the list of favorites a dictionary containing the key \"toplevel_name\" with the desired folder name as the value.\r\n\r\nManaged favorites are not synced to the user account and can't be modified by extensions.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"toplevel_name\": \"My managed favorites folder\"\r\n }, \r\n {\r\n \"url\": \"microsoft.com\", \r\n \"name\": \"Microsoft\"\r\n }, \r\n {\r\n \"url\": \"bing.com\", \r\n \"name\": \"Bing\"\r\n }, \r\n {\r\n \"name\": \"Microsoft Edge links\", \r\n \"children\": [\r\n {\r\n \"url\": \"www.microsoftedgeinsider.com\", \r\n \"name\": \"Microsoft Edge Insiders\"\r\n }, \r\n {\r\n \"url\": \"www.microsoft.com/windows/microsoft-edge\", \r\n \"name\": \"Microsoft Edge\"\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedfavorites_managedfavorites","displayName":"Configure favorites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines","displayName":"Manage Search Engines","description":"Lets you configure a list of up to 10 search engines, one of which must be marked as the default search engine.\r\nYou do not need to specify the encoding. Starting in Microsoft Edge 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge 80.\r\n\r\nStarting in Microsoft Edge 83, you can enable search engine discovery with the allow_search_engine_discovery optional parameter. This parameter must be the first item in the list. If allow_search_engine_discovery is not specified, search engine discovery will be disabled by default.\r\n\r\nIf you enable this policy, users can't add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.\r\n\r\nIf you disable or don't configure this policy, users can modify the search engines list as desired.\r\n\r\nIf the 'DefaultSearchProviderSearchURL' (Default search provider search URL) policy is set, this policy (ManagedSearchEngines) is ignored. The user must restart their browser to finish applying this policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"allow_search_engine_discovery\": true\r\n }, \r\n {\r\n \"is_default\": true, \r\n \"suggest_url\": \"https://www.example1.com/qbox?query={searchTerms}\", \r\n \"search_url\": \"https://www.example1.com/search?q={searchTerms}\", \r\n \"name\": \"Example1\", \r\n \"keyword\": \"example1.com\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example2.com/qbox?query={searchTerms}\", \r\n \"image_search_url\": \"https://www.example2.com/images/detail/search?iss=sbiupload\", \r\n \"name\": \"Example2\", \r\n \"keyword\": \"example2.com\", \r\n \"image_search_post_params\": \"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}\", \r\n \"search_url\": \"https://www.example2.com/search?q={searchTerms}\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example3.com/qbox?query={searchTerms}\", \r\n \"image_search_url\": \"https://www.example3.com/images/detail/search?iss=sbiupload\", \r\n \"name\": \"Example3\", \r\n \"keyword\": \"example3.com\", \r\n \"encoding\": \"UTF-8\", \r\n \"search_url\": \"https://www.example3.com/search?q={searchTerms}\"\r\n }, \r\n {\r\n \"search_url\": \"https://www.example4.com/search?q={searchTerms}\", \r\n \"name\": \"Example4\", \r\n \"keyword\": \"example4.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_managedsearchengines_managedsearchengines","displayName":"Manage Search Engines (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy","displayName":"Maximum number of concurrent connections to the proxy server","description":"Specifies the maximum number of simultaneous connections to the proxy server.\r\n\r\nSome proxy servers can't handle a high number of concurrent connections per client - you can solve this by setting this policy to a lower value.\r\n\r\nThe value of this policy should be lower than 100 and higher than 6. The default value is 32.\r\n\r\nSome web apps are known to consume many connections with hanging GETs - lowering the maximum connections below 32 may lead to browser networking hangs if too many of these kind of web apps are open.\r\n\r\nIf you don't configure this policy, the default value (32) is used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_maxconnectionsperproxy_maxconnectionsperproxy","displayName":"Maximum number of concurrent connections to the proxy server: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips","displayName":"Allow Google Cast to connect to Cast devices on all IP addresses","description":"Enable this policy to let Google Cast connect to Cast devices on all IP addresses, not just RFC1918/RFC4193 private addresses.\r\n\r\nDisable this policy to restrict Google Cast to Cast devices on RFC1918/RFC4193 private addresses.\r\n\r\nIf you don't configure this policy, Google Cast connects to Cast devices on RFC1918/RFC4193 private addresses only, unless you enable the CastAllowAllIPs feature.\r\n\r\nIf the 'EnableMediaRouter' (Enable Google Cast) policy is disabled, then this policy has no effect.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_mediaroutercastallowallips_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled","displayName":"Enable usage and crash-related data reporting","description":"This policy enables reporting of usage and crash-related data about Microsoft Edge to Microsoft.\r\n\r\nEnable this policy to send reporting of usage and crash-related data to Microsoft. Disable this policy to not send the data to Microsoft. In both cases, users can't change or override the setting.\r\n\r\nOn Windows 10, Beta and Stable channels, if you don’t configure this policy, Microsoft Edge will default to the Windows diagnostic data setting. If you enable this policy, Microsoft Edge will only send usage data if the Windows Diagnostic data setting is set to Enhanced or Full. If you disable this policy, Microsoft Edge will not send usage data. Crash-related data is sent based on the Windows Diagnostic data setting. Learn more about Windows Diagnostic data settings at https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 10, Canary and Dev channels, this policy controls sending usage data. If this policy is not configured, Microsoft Edge will default to the user's preference. Crash-related data is sent based on the Windows Diagnostic data setting. Learn more about Windows Diagnostic data settings: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 7, 8, and macOS, this policy controls sending usage and crash-related data. If you don’t configure this policy, Microsoft Edge will default to the user's preference.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_metricsreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions","displayName":"Enable network prediction","description":"Enables network prediction and prevents users from changing this setting.\r\n\r\nThis controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.\r\n\r\nIf you don't configure this policy, network prediction is enabled but the user can change it.\r\n\r\n* 0 = Predict network actions on any network connection\r\n\r\n* 2 = Don't predict network actions on any network connection","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions","displayName":"Enable network prediction (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_networkpredictionoptions_networkpredictionoptions_2","displayName":"Don't predict network actions on any network connection","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin","displayName":"Control where security restrictions on insecure origins apply","description":"Specifies a list of origins (URLs) or hostname patterns (like \"*.contoso.com\") for which security restrictions on insecure origins don't apply.\r\n\r\nThis policy lets you specify allowed origins for legacy applications that can't deploy TLS or set up a staging server for internal web development so that developers can test out features requiring secure contexts without having to deploy TLS on the staging server. This policy also prevents the origin from being labeled \"Not Secure\" in the omnibox.\r\n\r\nSetting a list of URLs in this policy has the same effect as setting the command-line flag '--unsafely-treat-insecure-origin-as-secure' to a comma-separated list of the same URLs. If you enable this policy, it overrides the command-line flag.\r\n\r\nFor more information on secure contexts, see https://www.w3.org/TR/secure-contexts/.\r\n\r\nExample value:\r\n\r\nhttp://testserver.contoso.com/\r\n*.contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_overridesecurityrestrictionsoninsecureorigin_overridesecurityrestrictionsoninsecureorigindesc","displayName":"Control where security restrictions on insecure origins apply (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled","displayName":"Enable Proactive Authentication","description":"Lets you configure whether to turn on Proactive Authentication.\r\n\r\nIf you enable this policy, Microsoft Edge tries to proactively authenticate the signed-in user with Microsoft services. At regular intervals, Microsoft Edge checks with an online service for an updated manifest that contains the configuration that governs how to do this.\r\n\r\nIf you disable this policy, Microsoft Edge doesn't try to proactively authenticate the signed-in user with Microsoft services. Microsoft Edge no longer checks with an online service for an updated manifest that contains the configuration for doing this.\r\n\r\nIf you don't configure this policy, Proactive Authentication is turned on.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_proactiveauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled","displayName":"Enable full-tab promotional content (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nControl the presentation of full-tab promotional or educational content. This setting controls the presentation of welcome pages that help users sign into Microsoft Edge, choose their default browser, or learn about product features.\r\n\r\nIf you enable this policy (set it true) or don't configure it, Microsoft Edge can show full-tab content to users to provide product information.\r\n\r\nIf you disable (set to false) this policy, Microsoft Edge can't show full-tab content to users.\r\n\r\nThis is deprecated - use ShowRecommendationsEnabled instead.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promotionaltabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation","displayName":"Ask where to save downloaded files","description":"Set whether to ask where to save a file before downloading it.\r\n\r\nIf you enable this policy, the user is asked where to save each file before downloading; if you don't configure it, files are saved automatically to the default location, without asking the user.\r\n\r\nIf you don't configure this policy, the user will be able to change this setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_promptfordownloadlocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed","displayName":"Allow QUIC protocol","description":"Allows use of the QUIC protocol in Microsoft Edge.\r\n\r\nIf you enable this policy or don't configure it, the QUIC protocol is allowed.\r\n\r\nIf you disable this policy, the QUIC protocol is blocked.\r\n\r\nQUIC is a transport layer network protocol that can improve performance of web applications that currently use TCP.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_quicallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended","displayName":"Set application locale","description":"Configures the application locale in Microsoft Edge and prevents users from changing the locale.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified locale. If the configured locale isn't supported, 'en-US' is used instead.\r\n\r\nIf you disable or don't configure this setting, Microsoft Edge uses either the user-specified preferred locale (if configured) or the fallback locale 'en-US'.\r\n\r\nExample value: en","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_applicationlocalevalue_recommended_applicationlocalevalue","displayName":"Application locale (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended","displayName":"Enable AutoFill for addresses","description":"Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information.\r\n\r\nIf you disable this policy, AutoFill never suggests or fills in address information, nor does it save additional address information that the user might submit while browsing the web.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for addresses in the user interface.\r\n\r\nNote that if you disable this policy you also stop all activity for all web forms, except payment and password forms. No further entries are saved, and Microsoft Edge won't suggest or AutoFill any previous entries.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofilladdressenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended","displayName":"Enable AutoFill for credit cards","description":"Enables Microsoft Edge's AutoFill feature and lets users auto complete credit card information in web forms using previously stored information.\r\n\r\nIf you disable this policy, AutoFill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.\r\n\r\nIf you enable this policy or don't configure it, users can control AutoFill for credit cards.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_autofillcreditcardenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended","displayName":"Continue running background apps after Microsoft Edge closes","description":"Allows Microsoft Edge processes to start at OS sign-in and keep running after the last browser window is closed. In this scenario, background apps and the current browsing session remain active, including any session cookies. An open background process displays an icon in the system tray and can always be closed from there.\r\n\r\nIf you enable this policy, background mode is turned on.\r\n\r\nIf you disable this policy, background mode is turned off.\r\n\r\nIf you don't configure this policy, background mode is initially turned off, and the user can configure its behavior in edge://settings/system.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_backgroundmodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended","displayName":"Block third party cookies","description":"Block web page elements that aren't from the domain that's in the address bar from setting cookies.\r\n\r\nIf you enable this policy, web page elements that are not from the domain that is in the address bar can't set cookies\r\n\r\nIf you disable this policy, web page elements from domains other than in the address bar can set cookies.\r\n\r\nIf you don't configure this policy, third-party cookies are enabled but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_blockthirdpartycookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended","displayName":"Set download directory","description":"Configures the directory to use when downloading files.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory regardless of whether the user has specified one or chosen to be prompted for download location every time. See https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nIf you disable or don't configure this policy, the default download directory is used, and the user can change it.\r\n\r\nIf you set an invalid path, Microsoft Edge will default to the user's default download directory.\r\n\r\nIf the folder specified by the path doesn't exist, the download will trigger a prompt that asks the user where they want to save their download.\r\n\r\nExample value: \r\n Linux-based OSes (including Mac): /home/${user_name}/Downloads\r\n Windows: C:\\Users\\${user_name}\\Downloads","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloaddirectory_recommended_downloaddirectory","displayName":"Set download directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'Block dangerous downloads' (1) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings.\r\n\r\nSet 'Block potentially dangerous downloads' (2) to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous downloads.\r\n\r\nSet 'Block all downloads' (3) to block all downloads.\r\n\r\nIf you don't configure this policy or set the 'No special restrictions' (0) option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\n* 0 = No special restrictions\r\n\r\n* 1 = Block dangerous downloads\r\n\r\n* 2 = Block potentially dangerous downloads\r\n\r\n* 3 = Block all downloads","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block dangerous downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block potentially dangerous downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended","displayName":"Enable favorites bar","description":"Enables or disables the favorites bar.\r\n\r\nIf you enable this policy, users will see the favorites bar.\r\n\r\nIf you disable this policy, users won't see the favorites bar.\r\n\r\nIf this policy is not configured, then the user can decide to use the favorites bar or not.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_favoritesbarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended","displayName":"Allow importing of autofill form data","description":"Allows users to import autofill form data from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import autofill data is automatically selected.\r\n\r\nIf you disable this policy, autofill form data isn't imported at first run, and users can't import it manually.\r\n\r\nIf you don't configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS) and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importautofillformdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended","displayName":"Allow importing of favorites","description":"Allows users to import favorites from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, favorites aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (on macOS) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importfavorites_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended","displayName":"Allow importing of browsing history","description":"Allows users to import their browsing history from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browsing history data isn't imported at first run, and users can’t import this data manually.\r\n\r\nIf you don’t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importhistory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended","displayName":"Allow importing of payment info","description":"Allows users to import payment info from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, payment info isn’t imported at first run, and users can’t import it manually.\r\n\r\nIf you don’t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.\r\n\r\n**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importpaymentinfo_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended","displayName":"Allow importing of saved passwords","description":"Allows users to import saved passwords from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the option to manually import saved passwords is automatically selected.\r\n\r\nIf you disable this policy, saved passwords aren't imported on first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsavedpasswords_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended","displayName":"Allow importing of search engine settings","description":"Allows users to import search engine settings from another browser into Microsoft Edge.\r\n\r\nIf you enable, this policy, the option to import search engine settings is automatically selected.\r\n\r\nIf you disable this policy, search engine settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_importsearchengine_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended","displayName":"Enable network prediction","description":"Enables network prediction and prevents users from changing this setting.\r\n\r\nThis controls DNS prefetching, TCP and SSL preconnection, and prerendering of web pages.\r\n\r\nIf you don't configure this policy, network prediction is enabled but the user can change it.\r\n\r\n* 0 = Predict network actions on any network connection\r\n\r\n* 2 = Don't predict network actions on any network connection","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions","displayName":"Enable network prediction (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_networkpredictionoptions_recommended_networkpredictionoptions_2","displayName":"Don't predict network actions on any network connection","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended","displayName":"Enable resolution of navigation errors using a web service","description":"Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.\r\n\r\nIf you enable this policy, a web service is used for network connectivity tests.\r\n\r\nIf you disable this policy, Microsoft Edge uses native APIs to try to resolve network connectivity and navigation issues.\r\n\r\n**Note**: Except on Windows 8 and later versions of Windows, Microsoft Edge *always* uses native APIs to resolve connectivity issues.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Use a web service to help resolve navigation errors** toggle, which the user can switch on or off. Be aware that if you have enabled this policy (ResolveNavigationErrorsUseWebService), the **Use a web service to help resolve navigation errors** setting is turned on, but the user can't change the setting by using the toggle. If you have disabled this policy, the **Use a web service to help resolve navigation errors** setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_resolvenavigationerrorsusewebservice_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended","displayName":"Enable search suggestions","description":"Enables web search suggestions in Microsoft Edge's Address Bar and Auto-Suggest List and prevents users from changing this policy.\r\n\r\nIf you enable this policy, web search suggestions are used.\r\n\r\nIf you disable this policy, web search suggestions are never used, however local history and local favorites suggestions still appear. If you disable this policy, neither the typed characters, nor the URLs visited will be included in telemetry to Microsoft.\r\n\r\nIf this policy is left not set, search suggestions are enabled but the user can change that.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_searchsuggestenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended","displayName":"Disable synchronization of data using Microsoft sync services","description":"Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.\r\n\r\nIf you don't set this policy or apply it as recommended, users will be able to turn sync on or off. If you apply this policy as mandatory, users will not be able to turn sync on.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_syncdisabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended","displayName":"Enable Translate","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge offers translation functionality to the user by showing an integrated translate flyout when appropriate, and a translate option on the right-click context menu.\r\n\r\nDisable this policy to disable all built-in translate features.\r\n\r\nIf you don't configure the policy, users can choose whether to use the translation functionality or not.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended_translateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended","displayName":"Register protocol handlers","description":"Register a list of protocol handlers. Set the protocol property to the scheme (like 'mailto') and the url property to the URL pattern of the application that handles the scheme. The pattern can include a '%s', which will be replaced by the handled URL.\r\n\r\nYou can recommend a specific value for this policy, but you can't require that your users use it.\r\n\r\nThe protocol handlers registered by policy are merged with any handlers registered by the user, and both are available for use. The user can override the protocol handlers installed by policy by installing a new default handler, but they can't remove a protocol handler registered by policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://mail.contoso.com/mail/?extsrc=mailto&url=%s\", \r\n \"default\": true, \r\n \"protocol\": \"mailto\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_registeredprotocolhandlers","displayName":"Register protocol handlers (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended","displayName":"Enable saving passwords to the password manager","description":"Enable Microsoft Edge to save user passwords.\r\n\r\nIf you enable this policy, users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically.\r\n\r\nIf you disable this policy, users can't save new passwords, but they can still use previously saved passwords.\r\n\r\nIf you enable or disable this policy, users can't change or override it in Microsoft Edge. If you don't configure it, users can save passwords, as well as turn this feature off.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended","displayName":"Print headers and footers","description":"Force 'headers and footers' to be on or off in the printing dialog.\r\n\r\nIf you don't configure this policy, users can decide whether to print headers and footers.\r\n\r\nIf you disable this policy, users can't print headers and footers.\r\n\r\nIf you enable this policy, users always print headers and footers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printheaderfooter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended","displayName":"Set the system default printer as the default printer","description":"Tells Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer.\r\n\r\nIf you disable this policy or don't configure it, Print Preview uses the most recently used printer as the default destination choice.\r\n\r\nIf you enable this policy, Print Preview uses the OS system default printer as the default destination choice.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended","displayName":"Configure Microsoft Defender SmartScreen","description":"This policy setting lets you configure whether to turn on Microsoft Defender SmartScreen. Microsoft Defender SmartScreen provides warning messages to help protect your users from potential phishing scams and malicious software. By default, Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you enable this setting, Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended","displayName":"Set the new tab page as the home page","description":"Configures the default home page in Microsoft Edge. You can set the home page to a URL you specify or to the new tab page.\r\n\r\nIf you enable this policy, the new tab page is always used for the home page, and the home page URL location is ignored.\r\n\r\nIf you disable this policy, the user's home page can't be the new tab page, unless the URL is set to 'edge://newtab'.\r\n\r\nIf not configured users can choose whether the new tab page is their home page.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepageisnewtabpage_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended","displayName":"Configure the home page URL","description":"Configures the default home page URL in Microsoft Edge.\r\n\r\nThe home page is the page opened by the Home button. The pages that open on startup are controlled by the 'RestoreOnStartup' (Action to take on startup) policies.\r\n\r\nYou can either set a URL here or set the home page to open the new tab page. If you select to open the new tab page, then this policy doesn't take effect.\r\n\r\nIf you enable this policy, users can't change their home page URL, but they can choose to use the new tab page as their home page.\r\n\r\nIf you disable or don't configure this policy, users can choose their own home page, as long as the 'HomepageIsNewTabPage' (Set the new tab page as the home page) policy isn't enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\nExample value: https://www.contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_homepagelocation_recommended_homepagelocation","displayName":"Home page URL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended","displayName":"Configure the new tab page URL","description":"Configures the default URL for the new tab page.\r\n\r\nThis policy determines the page that's opened when new tabs are created (including when new windows are opened). It also affects the startup page if that's set to open to the new tab page.\r\n\r\nThis policy doesn't determine which page opens on startup; that's controlled by the 'RestoreOnStartup' (Action to take on startup) policy. It also doesn’t affect the home page if that’s set to open to the new tab page.\r\n\r\nIf you don't configure this policy, the default new tab page is used.\r\n\r\nIf you configure this policy *and* the 'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience) policy, this policy has precedence.\r\n\r\nIf an invalid URL is provided, new tabs will open about://blank.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://www.fabrikam.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_newtabpagelocation_recommended_newtabpagelocation","displayName":"New tab page URL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'Open new tab' (5).\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'Restore the last session' (1). The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'Open a list of URLs' (4).\r\n\r\nDisabling this setting is equivalent to leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\n* 1 = Restore the last session\r\n\r\n* 4 = Open a list of URLs\r\n\r\n* 5 = Open a new tab","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup","displayName":"Action to take on startup (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended","displayName":"Sites to open when the browser starts","description":"Specify a list of websites to open automatically when the browser starts. If you don't configure this policy, no site is opened on startup.\r\n\r\nThis policy only works if you also set the 'RestoreOnStartup' (Action to take on startup) policy to 'Open a list of URLs' (4).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\nhttps://www.fabrikam.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_restoreonstartupurls_recommended_restoreonstartupurlsdesc","displayName":"Sites to open when the browser starts (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended","displayName":"Show Home button on toolbar","description":"Shows the Home button on Microsoft Edge's toolbar.\r\n\r\nEnable this policy to always show the Home button. Disable it to never show the button.\r\n\r\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_recommended~startup_recommended_showhomebutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification","displayName":"Notify a user that a browser restart is recommended or required for pending updates","description":"Notify users that they need to restart Microsoft Edge to apply a pending update.\r\n\r\nIf you don't configure this policy, Microsoft Edge adds a recycle icon at the far right of the top menu bar to prompt users to restart the browser to apply the update.\r\n\r\nIf you enable this policy and set it to 'Recommended' (1), a recurring warning prompts users that a restart is recommended. Users can dismiss this warning and defer the restart.\r\n\r\nIf you set the policy to 'Required' (2), a recurring warning prompts users that the browser will be restarted automatically as soon as a notification period passes. The default period is seven days. You can configure this period with the 'RelaunchNotificationPeriod' (Set the time period for update notifications) policy.\r\n\r\nThe user's session is restored when the browser restarts.\r\n\r\n* 1 = Recommended - Show a recurring prompt to the user indicating that a restart is recommended\r\n\r\n* 2 = Required - Show a recurring prompt to the user indicating that a restart is required","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification","displayName":"Notify a user that a browser restart is recommended or required for pending updates (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_1","displayName":"Recommended - Show a recurring prompt to the user indicating that a restart is recommended","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotification_relaunchnotification_2","displayName":"Required - Show a recurring prompt to the user indicating that a restart is required","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod","displayName":"Set the time period for update notifications","description":"Allows you to set the time period, in milliseconds, over which users are notified that Microsoft Edge must be relaunched or that a Microsoft Edge OS device must be restarted to apply a pending update.\r\n\r\nOver this time period, the user will be repeatedly informed of the need for an update. For Microsoft Edge OS devices, a restart notification appears in the system tray according to the RelaunchHeadsUpPeriod policy. For Microsoft Edge browsers, the app menu changes to indicate that a relaunch is needed once one third of the notification period passes. This notification changes color once two thirds of the notification period passes, and again once the full notification period has passed. The additional notifications enabled by the 'RelaunchNotification' (Notify a user that a browser restart is recommended or required for pending updates) policy follow this same schedule.\r\n\r\nIf not set, the default period of 604800000 milliseconds (one week) is used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_relaunchnotificationperiod_relaunchnotificationperiod","displayName":"Set the time period for update notifications: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors","displayName":"Specify if online OCSP/CRL checks are required for local trust anchors","description":"Control whether online revocation checks (OCSP/CRL checks) are required. If Microsoft Edge can't get revocation status information, these certificates are treated as revoked (\"hard-fail\").\r\n\r\nIf you enable this policy, Microsoft Edge always performs revocation checking for server certificates that successfully validate and are signed by locally-installed CA certificates.\r\n\r\nIf you don't configure or disable this policy, then Microsoft Edge uses the existing online revocation checking settings.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_requireonlinerevocationchecksforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice","displayName":"Enable resolution of navigation errors using a web service","description":"Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi.\r\n\r\nIf you enable this policy, a web service is used for network connectivity tests.\r\n\r\nIf you disable this policy, Microsoft Edge uses native APIs to try to resolve network connectivity and navigation issues.\r\n\r\n**Note**: Except on Windows 8 and later versions of Windows, Microsoft Edge *always* uses native APIs to resolve connectivity issues.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Use a web service to help resolve navigation errors** toggle, which the user can switch on or off. Be aware that if you have enabled this policy (ResolveNavigationErrorsUseWebService), the **Use a web service to help resolve navigation errors** setting is turned on, but the user can't change the setting by using the toggle. If you have disabled this policy, the **Use a web service to help resolve navigation errors** setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_resolvenavigationerrorsusewebservice_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern","displayName":"Restrict which accounts can be used to sign in to Microsoft Edge","description":"Determines which accounts can be used to sign in to the Microsoft Edge account that's chosen during the Sync opt-in flow.\r\n\r\nYou can configure this policy to match multiple accounts using a Perl style regular expression for the pattern. If a user tries to sign in to the browser with an account whose username doesn't match this pattern, they are blocked and will get the appropriate error message. Note that pattern matches are case sensitive. For more information about the regular expression rules that are used, refer to https://go.microsoft.com/fwlink/p/?linkid=2133903.\r\n\r\nIf you don't configure this policy or leave it blank, users can use any account to sign in to Microsoft Edge.\r\n\r\nNote that signed-in profiles with a username that doesn't match this pattern will be signed out after this policy is enabled.\r\n\r\nExample value: .*@contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_restrictsignintopattern_restrictsignintopattern","displayName":"Restrict which accounts can be used as Microsoft Edge primary accounts (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode","displayName":"Extend Adobe Flash content setting to all content","description":"If you enable this policy, all Adobe Flash content embedded in websites that are set to allow Adobe Flash in the content settings -- either by the user or by enterprise policy -- will run. This includes content from other origins and/or small content.\r\n\r\nTo control which websites are allowed to run Adobe Flash, see the specifications in the 'DefaultPluginsSetting' (Default Adobe Flash setting), 'PluginsAllowedForUrls' (Allow the Adobe Flash plug-in on specific sites), and 'PluginsBlockedForUrls' (Block the Adobe Flash plug-in on specific sites) policies.\r\n\r\nIf you disable this policy or don't configure it, Adobe Flash content from other origins (from sites that aren't specified in the three policies mentioned immediately above) or small content might be blocked.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_runallflashinallowmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled","displayName":"Disable saving browser history","description":"Disables saving browser history and prevents users from changing this setting.\r\n\r\nIf you enable this policy, browsing history isn't saved. This also disables tab syncing.\r\n\r\nIf you disable this policy or don't configure it, browsing history is saved.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_savingbrowserhistorydisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled","displayName":"Enable search suggestions","description":"Enables web search suggestions in Microsoft Edge's Address Bar and Auto-Suggest List and prevents users from changing this policy.\r\n\r\nIf you enable this policy, web search suggestions are used.\r\n\r\nIf you disable this policy, web search suggestions are never used, however local history and local favorites suggestions still appear. If you disable this policy, neither the typed characters, nor the URLs visited will be included in telemetry to Microsoft.\r\n\r\nIf this policy is left not set, search suggestions are enabled but the user can change that.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_searchsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation","displayName":"Websites or domains that don't need permission to use direct Security Key attestation","description":"Specifies websites and domains that don't need explicit user permission when attestation certificates from security keys are requested. Additionally, a signal is sent to the security key indicating that it can use individual attestation. Without this, users are prompted each time a site requests attestation of security keys.\r\n\r\nSites (like https://contoso.com/some/path) only match as U2F appIDs. Domains (like contoso.com) only match as webauthn RP IDs. To cover both U2F and webauthn APIs for a given site, you need to list both the appID URL and domain.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_securitykeypermitattestation_securitykeypermitattestationdesc","displayName":"Websites or domains that don't need permission to use direct Security Key attestation (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer","displayName":"Send all intranet sites to Internet Explorer","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendintranettointernetexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices","displayName":"Send site information to improve Microsoft services","description":"This policy enables sending info about websites visited in Microsoft Edge to Microsoft to improve services like search.\r\n\r\nEnable this policy to send info about websites visited in Microsoft Edge to Microsoft. Disable this policy to not send info about websites visited in Microsoft Edge to Microsoft. In both cases, users can't change or override the setting.\r\n\r\nOn Windows 10, Beta and Stable if this policy is not configured, Microsoft Edge will default to the Windows diagnostic data setting. If this policy is enabled Microsoft Edge will only send info about websites visited in Microsoft Edge if the Windows Diagnostic data setting is set to Full. If this policy is disabled Microsoft Edge will not send info about websites visited. Learn more about Windows Diagnostic data settings: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nOn Windows 10, Canary and Dev channels, this policy controls sending info about websites visited. If this policy is not configured, Microsoft Edge will default to the user’s preference.\r\n\r\nOn Windows 7, 8, and Mac this policy controls sending info about websites visited. If this policy is not configured, Microsoft Edge will default to the user’s preference.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sendsiteinfotoimproveservices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar","displayName":"Show Microsoft Office shortcut in favorites bar","description":"Specifies whether to include a shortcut to Office.com in the favorites bar. For users signed into Microsoft Edge the shortcut takes users to their Microsoft Office apps and docs.\r\n\r\nIf this policy is enabled or not configure, users can choose whether to see the shortcut by changing the toggle in the favorites bar context menu.\r\n\r\nIf the policy is disabled, the shortcut won't be shown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_showofficeshortcutinfavoritesbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess","displayName":"Enable site isolation for every site","description":"\r\nThe 'SitePerProcess' policy can be used to prevent users from opting out of the default behavior of isolating all sites. Note that you can also use the 'IsolateOrigins' (Enable site isolation for specific origins) policy to isolate additional, finer-grained origins.\r\nIf you enable this policy, users can't opt out of the default behavior where each site runs in its own process.\r\nIf you disable or don’t configure this policy, a user can opt out of site isolation. (For example, by using \"Disable site isolation\" entry in edge://flags.) Disabling the policy or not configuring the policy doesn't turn off Site Isolation.\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_siteperprocess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled","displayName":"Enable spellcheck","description":"If you enable or don't configure this policy, the user can use spellcheck.\r\n\r\nIf you disable this policy, the user can't use spellcheck and the 'SpellcheckLanguage' (Enable specific spellcheck languages) and 'SpellcheckLanguageBlocklist' (Force disable spellcheck languages) policies are also disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage","displayName":"Enable specific spellcheck languages","description":"Enables different languages for spellcheck. Any language that you specify that isn't recognized is ignored.\r\n\r\nIf you enable this policy, spellcheck is enabled for the languages specified, as well as any languages the user has enabled.\r\n\r\nIf you don't configure or disable this policy, there's no change to the user's spellcheck preferences.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is disabled, this policy will have no effect.\r\n\r\nIf a language is included in both the 'SpellcheckLanguage' and the 'SpellcheckLanguageBlocklist' (Force disable spellcheck languages) policy, the spellcheck language is enabled.\r\n\r\nThe supported languages are: af, bg, ca, cs, cy, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_spellchecklanguage_spellchecklanguagedesc","displayName":"Enable specific spellcheck languages (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed","displayName":"Allow users to proceed from the HTTPS warning page","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\r\n\r\nIf you enable or don't configure (default) this policy, users can click through these warning pages.\r\n\r\nIf you disable this policy, users are blocked from clicking through any warning page.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslerroroverrideallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin","displayName":"Minimum TLS version enabled","description":"Sets the minimum supported version of SSL. If you don't configure this policy, Microsoft Edge uses a default minimum version, TLS 1.0.\r\n\r\nIf you enable this policy, you can set the minimum version to one of the following values: \"tls1\", \"tls1.1\" or \"tls1.2\". When set, Microsoft Edge won't use any version of SSL/TLS lower than the specified version. Any unrecognized value is ignored.\r\n\r\n* \"tls1\" = TLS 1.0\r\n\r\n* \"tls1.1\" = TLS 1.1\r\n\r\n* \"tls1.2\" = TLS 1.2\r\n\r\nExample value: tls1","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin","displayName":"Minimum SSL version enabled (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1","displayName":"TLS 1.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.1","displayName":"TLS 1.1","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_sslversionmin_sslversionmin_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning","displayName":"Suppress the unsupported OS warning","description":"Suppresses the warning that appears when Microsoft Edge is running on a computer or operating system that is no longer supported.\r\n\r\nIf this policy is false or unset, the warnings will appear on such unsupported computers or operating systems.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_suppressunsupportedoswarning_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled","displayName":"Disable synchronization of data using Microsoft sync services","description":"Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.\r\n\r\nIf you don't set this policy or apply it as recommended, users will be able to turn sync on or off. If you apply this policy as mandatory, users will not be able to turn sync on.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_syncdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled","displayName":"Configure tab lifecycles","description":"The tab lifecycles feature reclaims CPU and memory associated with running tabs that haven't been used in a long time, by first throttling, then freezing, and finally discarding them.\r\n\r\nIf you disable this policy, the tab lifecycles feature is disabled, and all tabs are left running normally.\r\n\r\nIf you enable or don't configure this policy, the tab lifecycles feature is enabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_tablifecyclesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled","displayName":"Enable ending processes in the Browser task manager","description":"If you enable or don't configure this policy, users can end processes in the Browser task manager. If you disable it, users can't end processes, and the End process button is disabled in the Browser task manager.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_taskmanagerendprocessenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled","displayName":"Enable Translate","description":"Enables the integrated Microsoft translation service on Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge offers translation functionality to the user by showing an integrated translate flyout when appropriate, and a translate option on the right-click context menu.\r\n\r\nDisable this policy to disable all built-in translate features.\r\n\r\nIf you don't configure the policy, users can choose whether to use the translation functionality or not.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_translateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist","displayName":"Define a list of allowed URLs","description":"Allow access to the listed URLs, as exceptions to the URL block list.\r\n\r\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nYou can use this policy to open exceptions to restrictive block lists. For example, you can include '*' in the block list to block all requests, and then use this policy to allow access to a limited list of URLs. You can use this policy to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths.\r\n\r\nThe most specific filter determines if a URL is blocked or allowed. The allowed list takes precedence over the block list.\r\n\r\nThis policy is limited to 1000 entries; subsequent entries are ignored.\r\n\r\nIf you don't configure this policy, there are no exceptions to the block list in the 'URLBlocklist' (Block access to a list of URLs) policy.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlallowlist_urlallowlistdesc","displayName":"Define a list of allowed URLs (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist","displayName":"Block access to a list of URLs","description":"Define a list of sites, based on URL patterns, that are blocked (your users can't load them).\r\n\r\nFormat the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nYou can define exceptions in the 'URLAllowlist' (Define a list of allowed URLs) policy. These policies are limited to 1000 entries; subsequent entries are ignored.\r\n\r\nNote that blocking internal 'edge://*' URLs isn't recommended - this may lead to unexpected errors.\r\n\r\nThis policy doesn't prevent the page from updating dynamically through JavaScript. For example, if you block 'contoso.com/abc', users might still be able to visit 'contoso.com' and click on a link to visit 'contoso.com/abc', as long as the page doesn't refresh.\r\n\r\nIf you don't configure this policy, no URLs are blocked.\r\n\r\nExample value:\r\n\r\ncontoso.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_urlblocklist_urlblocklistdesc","displayName":"Block access to a list of URLs (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir","displayName":"Set the user data directory","description":"Set the directory to use for storing user data.\r\n\r\nIf you enable this policy, Microsoft Edge uses the specified directory regardless of whether the user has set the '--user-data-dir' command-line flag.\r\n\r\nIf you don't enable this policy, the default profile path is used, but the user can override it by using the '--user-data-dir' flag. Users can find the directory for the profile at edge://version/ under profile path.\r\n\r\nTo avoid data loss or other errors, don't configure this policy to a volume's root directory or to a directory that's used for other purposes, because Microsoft Edge manages its contents.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables that can be used.\r\n\r\nExample value: ${users}/${user_name}/Edge","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userdatadir_userdatadir","displayName":"Set the user data directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed","displayName":"Allow user feedback","description":"Microsoft Edge uses the Edge Feedback feature (enabled by default) to allow users to send feedback, suggestions or customer surveys and to report any issues with the browser. Also, by default, users can't disable (turn off) the Edge Feedback feature.\r\n\r\nIf you enable this policy or don't configure it, users can invoke Edge Feedback.\r\n\r\nIf you disable this policy, users can't invoke Edge Feedback.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_userfeedbackallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed","displayName":"Allow or block video capture","description":"Control whether sites can capture video.\r\n\r\nIf enabled or not configured (default), the user will be asked about video capture access for all sites except those with URLs configured in the 'VideoCaptureAllowedUrls' (Sites that can access video capture devices without requesting permission) policy list, which will be granted access without prompting.\r\n\r\nIf you disable this policy, the user isn't prompted, and video capture is only available to URLs configured in 'VideoCaptureAllowedUrls' policy.\r\n\r\nThis policy affects all types of video inputs, not only the built-in camera.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls","displayName":"Sites that can access video capture devices without requesting permission","description":"Specify websites, based on URL patterns, that can use video capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to video capture devices. Note, however, that the pattern \"*\", which matches any URL, is not supported by this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com/\r\nhttps://[*.]contoso.edu/","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_videocaptureallowedurls_videocaptureallowedurlsdesc","displayName":"Sites that can access video capture devices without requesting permission (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies","displayName":"Allow WebDriver to Override Incompatible Policies (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\n\r\nThis policy was removed in M83, because it is not necessary anymore as\r\nWebDriver is now compatible with all existing policies.\r\n\r\nThis policy allows users of the WebDriver feature to override\r\npolicies which can interfere with its operation.\r\n\r\nCurrently this policy disables 'SitePerProcess' (Enable site isolation for every site) and 'IsolateOrigins' (Enable site isolation for specific origins) policies.\r\n\r\nIf the policy is enabled, WebDriver will be able to override incomaptible\r\npolicies.\r\nIf the policy is disabled or not configured, WebDriver will not be allowed\r\nto override incompatible policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webdriveroverridesincompatiblepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling","displayName":"Restrict exposure of local IP address by WebRTC","description":"Allows you to set whether or not WebRTC exposes the user's local IP address.\r\n\r\nIf you set this policy to \"AllowAllInterfaces\" ('default') or \"AllowPublicAndPrivateInterfaces\" ('default_public_and_private_interfaces'), WebRTC exposes the local IP address.\r\n\r\nIf you set this policy to \"AllowPublicInterfaceOnly\" ('default_public_interface_only') or \"DisableNonProxiedUdp\" ('disable_non_proxied_udp'), WebRTC doesn't expose the local IP address.\r\n\r\nIf you don't set this policy, or if you disable it, WebRTC exposes the local IP address.\r\n\r\n * 'default' = Allow all interfaces. This exposes the local IP address.\r\n * 'default_public_and_private_interfaces' = Allow public and private interfaces over http default route. This exposes the local IP address.\r\n * 'default_public_interface_only' = Allow public interface over http default route. This doesn't expose the local IP address.\r\n * 'disable_non_proxied_udp' = Use TCP unless proxy server supports UDP. This doesn't expose the local IP address.\r\n\r\nExample value: default","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling","displayName":"Restrict exposure of localhost IP address by WebRTC (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default","displayName":"Allow all interfaces. This exposes the local IP address","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_and_private_interfaces","displayName":"Allow public and private interfaces over http default route. This exposes the local IP address","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_default_public_interface_only","displayName":"Allow public interface over http default route. This doesn't expose the local IP address","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtclocalhostiphandling_webrtclocalhostiphandling_disable_non_proxied_udp","displayName":"Use TCP unless proxy server supports UDP. This doesn't expose the local IP address","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC","description":"Restricts the UDP port range used by WebRTC to a specified port interval (endpoints included).\r\n\r\nBy configuring this policy, you specify the range of local UDP ports that WebRTC can use.\r\n\r\nIf you don't configure this policy, or if you set it to an empty string or invalid port range, WebRTC can use any available local UDP port.\r\n\r\nExample value: 10000-11999","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_webrtcudpportrange_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled","displayName":"Set WPAD optimization","description":"Allows you to turn off WPAD (Web Proxy Auto-Discovery) optimization in Microsoft Edge.\r\n\r\nIf you disable this policy, WPAD optimization is disabled, which makes the browser wait longer for DNS-based WPAD servers.\r\n\r\nIf you enable or don't configure the policy, WPAD optimization is enabled.\r\n\r\nIndependent of whether or how this policy is enabled, the WPAD optimization setting cannot be changed by users.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge_wpadquickcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls","displayName":"Automatically select client certificates for these sites","description":"Specify a list of sites, based on URL patterns, for which Microsoft Edge should automatically select a client certificate, if the site requests one.\r\n\r\nThe value must be an array of stringified JSON dictionaries. Each dictionary must have the form { \"pattern\": \"$URL_PATTERN\", \"filter\" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts from which client certificates the browser will automatically select. Independent of the filter, only certificates will be selected that match the server's certificate request. For example, if $FILTER has the form { \"ISSUER\": { \"CN\": \"$ISSUER_CN\" } }, additionally only client certificates are selected that are issued by a certificate with the CommonName $ISSUER_CN. If $FILTER contains an \"ISSUER\" and a \"SUBJECT\" section, a client certificate must satisfy both conditions to be selected. If $FILTER specifies an organization (\"O\"), a certificate must have at least one organization which matches the specified value to be selected. If $FILTER specifies an organization unit (\"OU\"), a certificate must have at least one organization unit which matches the specified value to be selected. If $FILTER is the empty dictionary {}, the selection of client certificates is not additionally restricted.\r\n\r\nIf you don't configure this policy, auto-selection isn't done for any site.\r\n\r\nExample value:\r\n\r\n{\"pattern\":\"https://www.contoso.com\",\"filter\":{\"ISSUER\":{\"CN\":\"certificate issuer name\", \"L\": \"certificate issuer location\", \"O\": \"certificate issuer org\", \"OU\": \"certificate issuer org unit\"}, \"SUBJECT\":{\"CN\":\"certificate subject name\", \"L\": \"certificate subject location\", \"O\": \"certificate subject org\", \"OU\": \"certificate subject org unit\"}}}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_autoselectcertificateforurls_autoselectcertificateforurlsdesc","displayName":"Automatically select client certificates for these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls","displayName":"Allow cookies on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to set cookies.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultCookiesSetting' (Configure cookies) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nSee the 'CookiesBlockedForUrls' (Block cookies on specific sites) and 'CookiesSessionOnlyForUrls' (Limit cookies from specific websites to the current session) policies for more information.\r\n\r\nNote there cannot be conflicting URL patterns set between these three policies:\r\n\r\n- 'CookiesBlockedForUrls'\r\n\r\n- CookiesAllowedForUrls\r\n\r\n- 'CookiesSessionOnlyForUrls'\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesallowedforurls_cookiesallowedforurlsdesc","displayName":"Allow cookies on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls","displayName":"Block cookies on specific sites","description":"Define a list of sites, based on URL patterns, that can't set cookies.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultCookiesSetting' (Configure cookies) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nSee the 'CookiesAllowedForUrls' (Allow cookies on specific sites) and 'CookiesSessionOnlyForUrls' (Limit cookies from specific websites to the current session) policies for more information.\r\n\r\nNote there cannot be conflicting URL patterns set between these three policies:\r\n\r\n- CookiesBlockedForUrls\r\n\r\n- 'CookiesAllowedForUrls'\r\n\r\n- 'CookiesSessionOnlyForUrls'\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiesblockedforurls_cookiesblockedforurlsdesc","displayName":"Block cookies on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls","displayName":"Limit cookies from specific websites to the current session","description":"Cookies created by websites that match a URL pattern you define are deleted when the session ends (when the window closes).\r\n\r\nCookies created by websites that don't match the pattern are controlled by the 'DefaultCookiesSetting' (Configure cookies) policy (if set) or by the user's personal configuration. This is also the default behavior if you don't configure this policy.\r\n\r\nIf Microsoft Edge is running in background mode, the session might not close when the last window is closed, meaning the cookies won't be cleared when the window closes. See the 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about configuring what happens when Microsoft Edge runs in background mode.\r\n\r\nYou can also use the 'CookiesAllowedForUrls' (Allow cookies on specific sites) and 'CookiesBlockedForUrls' (Block cookies on specific sites) policies to control which websites can create cookies.\r\n\r\nNote there cannot be conflicting URL patterns set between these three policies:\r\n\r\n- 'CookiesBlockedForUrls'\r\n\r\n- 'CookiesAllowedForUrls'\r\n\r\n- CookiesSessionOnlyForUrls\r\n\r\nIf you set the 'RestoreOnStartup' (Action to take on startup) policy to restore URLs from previous sessions, this policy is ignored, and cookies are stored permanently for those sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_cookiessessiononlyforurls_cookiessessiononlyforurlsdesc","displayName":"Limit cookies from specific websites to the current session (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting","displayName":"Configure cookies","description":"Control whether websites can create cookies on the user's device. This policy is all or nothing - you can let all websites create cookies, or no websites create cookies. You can't use this policy to enable cookies from specific websites.\r\n\r\nSet the policy to 'SessionOnly' (4) to clear cookies when the session closes. If Microsoft Edge is running in background mode, the session might not close when the last window is closed, meaning the cookies won't be cleared when the window closes. See 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about configuring what happens when Microsoft Edge runs in background mode.\r\n\r\nIf you don't configure this policy, the default 'AllowCookies' (1) is used, and users can change this setting in Microsoft Edge Settings. (If you don't want users to be able to change this setting, set the policy.)\r\n\r\n* 1 = Let all sites create cookies\r\n\r\n* 2 = Don't let any site create cookies\r\n\r\n* 4 = Keep cookies for the duration of the session","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting","displayName":"Configure cookies (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_1","displayName":"Let all sites create cookies","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_2","displayName":"Don't let any site create cookies","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultcookiessetting_defaultcookiessetting_4","displayName":"Keep cookies for the duration of the session","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting","displayName":"Default geolocation setting","description":"Set whether websites can track users' physical locations. You can allow tracking by default (1), deny it by default (2), or ask the user each time a website requests their location (3).\r\n\r\nIf you don't configure this policy, 'AskGeolocation' policy is used and the user can change it.\r\n\r\n* 1 = Allow sites to track users' physical location\r\n\r\n* 2 = Don't allow any site to track users' physical location\r\n\r\n* 3 = Ask whenever a site wants to track users' physical location","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting","displayName":"Default geolocation setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_1","displayName":"Allow sites to track users' physical location","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_2","displayName":"Don't allow any site to track users' physical location","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_3","displayName":"Ask whenever a site wants to track users' physical location","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting","displayName":"Default images setting","description":"Set whether websites can display images. You can allow images on all sites (1) or block them on all sites (2).\r\n\r\nIf you don't configure this policy, images are allowed by default, and the user can change this setting.\r\n\r\n* 1 = Allow all sites to show all images\r\n\r\n* 2 = Don't allow any site to show images","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting","displayName":"Default images setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_1","displayName":"Allow all sites to show all images","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultimagessetting_defaultimagessetting_2","displayName":"Don't allow any site to show images","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting","displayName":"Default JavaScript setting","description":"Set whether websites can run JavaScript. You can allow it for all sites (1) or block it for all sites (2).\r\n\r\nIf you don't configure this policy, all sites can run JavaScript by default, and the user can change this setting.\r\n\r\n* 1 = Allow all sites to run JavaScript\r\n\r\n* 2 = Don't allow any site to run JavaScript","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting","displayName":"Default JavaScript setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_1","displayName":"Allow all sites to run JavaScript","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_2","displayName":"Don't allow any site to run JavaScript","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting","displayName":"Default notification setting","description":"Set whether websites can display desktop notifications. You can allow them by default (1), deny them by default (2), or have the user be asked each time a website wants to show a notification (3).\r\n\r\nIf you don't configure this policy, notifications are allowed by default, and the user can change this setting.\r\n\r\n* 1 = Allow sites to show desktop notifications\r\n\r\n* 2 = Don't allow any site to show desktop notifications\r\n\r\n* 3 = Ask every time a site wants to show desktop notifications","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting","displayName":"Default notification setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_1","displayName":"Allow sites to show desktop notifications","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_2","displayName":"Don't allow any site to show desktop notifications","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultnotificationssetting_defaultnotificationssetting_3","displayName":"Ask every time a site wants to show desktop notifications","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting","displayName":"Default Adobe Flash setting","description":"Determines whether websites that aren't covered by 'PluginsAllowedForUrls' (Allow the Adobe Flash plug-in on specific sites) or 'PluginsBlockedForUrls' (Block the Adobe Flash plug-in on specific sites) can automatically run the Adobe Flash plug-in. You can select 'BlockPlugins' (2) to block Adobe Flash on all sites, or you can select 'ClickToPlay' (3) to let Adobe Flash run but require the user to click the placeholder to start it. In any case, the 'PluginsAllowedForUrls' and 'PluginsBlockedForUrls' policies take precedence over 'DefaultPluginsSetting'.\r\n\r\nAutomatic playback is only allowed for domains explicitly listed in the 'PluginsAllowedForUrls' policy. If you want to enable automatic playback for all sites, consider adding http://* and https://* to this list.\r\n\r\nIf you don't configure this policy, the user can change this setting manually.\r\n\r\n* 2 = Block the Adobe Flash plug-in\r\n\r\n* 3 = Click to play\r\n\r\nThe former '1' option set allow-all, but this functionality is now only handled by the 'PluginsAllowedForUrls' policy. Existing policies using '1' will operate in Click-to-play mode.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting","displayName":"Default Adobe Flash setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_2","displayName":"Block the Adobe Flash plugin","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpluginssetting_defaultpluginssetting_3","displayName":"Click to play","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting","displayName":"Default pop-up window setting","description":"Set whether websites can show pop-up windows. You can allow them on all websites (1) or block them on all sites (2).\r\n\r\nIf you don't configure this policy, pop-up windows are blocked by default, and users can change this setting.\r\n\r\n* 1 = Allow all sites to show pop-ups\r\n\r\n* 2 = Don't allow any site to show pop-up windows","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting","displayName":"Default pop-up window setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_1","displayName":"Allow all sites to show pop-ups","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultpopupssetting_defaultpopupssetting_2","displayName":"Do not allow any site to show popups","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API","description":"Control whether websites can access nearby Bluetooth devices. You can completely block access or require the site to ask the user each time it wants to access a Bluetooth device.\r\n\r\nIf you don't configure this policy, the default value (3, meaning users are asked each time) is used and users can change it.\r\n\r\n* 2 = Don't allow any site to request access to Bluetooth devices by using the Web Bluetooth API\r\n\r\n* 3 = Allow sites to ask the user to grant access to a nearby Bluetooth device","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_2","displayName":"Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_3","displayName":"Allow sites to ask the user to grant access to a nearby Bluetooth device","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API","description":"Set whether websites can access connected USB devices. You can completely block access or ask the user each time a website wants to get access to connected USB devices.\r\n\r\nYou can override this policy for specific URL patterns by using the 'WebUsbAskForUrls' (Allow WebUSB on specific sites) and 'WebUsbBlockedForUrls' (Block WebUSB on specific sites) policies.\r\n\r\nIf you don't configure this policy, sites can ask users whether they can access the connected USB devices (3) by default, and users can change this setting.\r\n\r\n* 2 = Don't allow any site to request access to USB devices via the WebUSB API\r\n\r\n* 3 = Allow sites to ask the user to grant access to a connected USB device","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_2","displayName":"Do not allow any site to request access to USB devices via the WebUSB API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_3","displayName":"Allow sites to ask the user to grant access to a connected USB device","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls","displayName":"Allow images on these sites","description":"Define a list of sites, based on URL patterns, that can display images.\r\n\r\nIf you don't configure this policy, the global default value is used for all sites either from the 'DefaultImagesSetting' (Default images setting) policy (if set) or the user's personal configuration.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesallowedforurls_imagesallowedforurlsdesc","displayName":"Allow images on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls","displayName":"Block images on specific sites","description":"Define a list of sites, based on URL patterns, that aren't allowed to display images.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultImagesSetting' (Default images setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_imagesblockedforurls_imagesblockedforurlsdesc","displayName":"Block images on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls","displayName":"Allow JavaScript on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to run JavaScript.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultJavaScriptSetting' (Default JavaScript setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptallowedforurls_javascriptallowedforurlsdesc","displayName":"Allow JavaScript on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls","displayName":"Block JavaScript on specific sites","description":"Define a list of sites, based on URL patterns, that aren't allowed to run JavaScript.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultJavaScriptSetting' (Default JavaScript setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_javascriptblockedforurls_javascriptblockedforurlsdesc","displayName":"Block JavaScript on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls","displayName":"Allow notifications on specific sites","description":"Define a list of sites, based on URL patterns, that can display notifications.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultNotificationsSetting' (Default notification setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsallowedforurls_notificationsallowedforurlsdesc","displayName":"Allow notifications on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls","displayName":"Block notifications on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from displaying notifications.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultNotificationsSetting' (Default notification setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_notificationsblockedforurls_notificationsblockedforurlsdesc","displayName":"Block notifications on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls","displayName":"Allow the Adobe Flash plug-in on specific sites","description":"Define a list of sites, based on URL patterns, that can run the Adobe Flash plug-in.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPluginsSetting' (Default Adobe Flash setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsallowedforurls_pluginsallowedforurlsdesc","displayName":"Allow the Adobe Flash plug-in on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls","displayName":"Block the Adobe Flash plug-in on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from running Adobe Flash.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPluginsSetting' (Default Adobe Flash setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_pluginsblockedforurls_pluginsblockedforurlsdesc","displayName":"Block the Adobe Flash plug-in on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls","displayName":"Allow pop-up windows on specific sites","description":"Define a list of sites, based on URL patterns, that can open pop-up windows.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPopupsSetting' (Default pop-up window setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsallowedforurls_popupsallowedforurlsdesc","displayName":"Allow pop-up windows on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls","displayName":"Block pop-up windows on specific sites","description":"Define a list of sites, based on URL patterns, that are blocked from opening pop-up windows.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultPopupsSetting' (Default pop-up window setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_popupsblockedforurls_popupsblockedforurlsdesc","displayName":"Block pop-up windows on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls","displayName":"Grant access to specific sites to connect to specific USB devices","description":"Allows you to set a list of urls that specify which sites will automatically be granted permission to access a USB device with the given vendor and product IDs. Each item in the list must contain both devices and urls in order for the policy to be valid. Each item in devices can contain a vendor ID and product ID field. Any ID that is omitted is treated as a wildcard with one exception, and that exception is that a product ID cannot be specified without a vendor ID also being specified. Otherwise, the policy will not be valid and will be ignored.\r\n\r\nThe USB permission model uses the URL of the requesting site (\"requesting URL\") and the URL of the top-level frame site (\"embedding URL\") to grant permission to the requesting URL to access the USB device. The requesting URL may be different than the embedding URL when the requesting site is loaded in an iframe. Therefore, the \"urls\" field can contain up to two URL strings delimited by a comma to specify the requesting and embedding URL respectively. If only one URL is specified, then access to the corresponding USB devices will be granted when the requesting site's URL matches this URL regardless of embedding status. The URLs in \"urls\" must be valid URLs, otherwise the policy will be ignored.\r\n\r\nIf this policy is left not set, the global default value will be used for all sites either from the 'DefaultWebUsbGuardSetting' (Control use of the WebUSB API) policy if it is set, or the user's personal configuration otherwise.\r\n\r\nURL patterns in this policy should not clash with the ones configured via 'WebUsbBlockedForUrls' (Block WebUSB on specific sites). If there is a clash, this policy will take precedence over 'WebUsbBlockedForUrls' and 'WebUsbAskForUrls' (Allow WebUSB on specific sites).\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://contoso.com\", \r\n \"https://fabrikam.com\"\r\n ], \r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234, \r\n \"product_id\": 5678\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusballowdevicesforurls_webusballowdevicesforurls","displayName":"Grant access to specific sites to connect to specific USB devices (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls","displayName":"Allow WebUSB on specific sites","description":"Define a list of sites, based on URL patterns, that can ask the user for access to a USB device.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultWebUsbGuardSetting' (Control use of the WebUSB API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'WebUsbBlockedForUrls' (Block WebUSB on specific sites) policy - you can't both allow and block a URL.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbaskforurls_webusbaskforurlsdesc","displayName":"Allow WebUSB on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls","displayName":"Block WebUSB on specific sites","description":"Define a list of sites, based on URL patterns, that can't ask the user to grant them access to a USB device.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultWebUsbGuardSetting' (Control use of the WebUSB API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nURL patterns in this policy can't conflict with those configured in the 'WebUsbAskForUrls' (Allow WebUSB on specific sites) policy. You can't both allow and block a URL.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~contentsettings_webusbblockedforurls_webusbblockedforurlsdesc","displayName":"Block WebUSB on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled","displayName":"Enable the default search provider","description":"Enables the ability to use a default search provider.\r\n\r\nIf you enable this policy, a user can search for a term by typing in the address bar (as long as what they type isn't a URL).\r\n\r\nYou can specify the default search provider to use by enabling the rest of the default search policies. If these are left empty (not configured) or configured incorrectly, the user can choose the default provider.\r\n\r\nIf you disable this policy, the user can't search from the address bar.\r\n\r\nIf you enable or disable this policy, users can't change or override it.\r\n\r\nIf you don't configure this policy, the default search provider is enabled, and the user can choose the default search provider and set the search provider list.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings","displayName":"Default search provider encodings","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are tried in the order provided.\r\n\r\nThis policy is optional. If not configured, the default, UTF-8, is used.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderencodings_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\r\n\r\nThis policy is optional. If you don't configure it, image search isn't available.\r\n\r\nSpecify Bing's Image Search URL as:\r\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\r\n\r\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\r\n\r\nSee 'DefaultSearchProviderImageURLPostParams' (Parameters for an image URL that uses POST) policy to finish configuring image search.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: https://search.contoso.com/searchbyimage/upload","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurl_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it’s replaced with real image thumbnail data. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nSpecify Bing's Image Search URL Post Params as:\r\n'imageBin={google:imageThumbnailBase64}'.\r\n\r\nSpecify Google's Image Search URL Post Params as:\r\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\r\n\r\nIf you don’t set this policy, image search requests are sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderimageurlpostparams_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword","displayName":"Default search provider keyword","description":"Specifies the keyword, which is the shortcut used in the Address Bar to trigger the search for this provider.\r\n\r\nThis policy is optional. If you don't configure it, no keyword activates the search provider.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchproviderkeyword_defaultsearchproviderkeyword","displayName":"Default search provider keyword (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername","displayName":"Default search provider name","description":"Specifies the name of the default search provider.\r\n\r\nIf you enable this policy, you set the name of the default search provider.\r\n\r\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\r\n\r\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidername_defaultsearchprovidername","displayName":"Default search provider name (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl","displayName":"Default search provider search URL","description":"Specifies the URL of the search engine used for a default search. The URL contains the string '{searchTerms}', which is replaced at query time by the terms the user is searching for.\r\n\r\nSpecify Bing's search URL as:\r\n\r\n'{bing:baseURL}search?q={searchTerms}'.\r\n\r\nSpecify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nThis policy is required when you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) policy; if you don't enable the latter policy, this policy is ignored.\r\n\r\nExample value: https://search.contoso.com/search?q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersearchurl_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions","description":"Specifies the URL for the search engine used to provide search suggestions. The URL contains the string '{searchTerms}', which is replaced at query time by the text the user has entered so far.\r\n\r\nThis policy is optional. If you don't configure it, users won't see search suggestions; they will see suggestions from their browsing history and favorites.\r\n\r\nBing's suggest URL can be specified as:\r\n\r\n'{bing:baseURL}qbox?query={searchTerms}'.\r\n\r\nGoogle's suggest URL can be specified as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nExample value: https://search.contoso.com/suggest?q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~defaultsearchprovider_defaultsearchprovidersuggesturl_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes","displayName":"Configure allowed extension types","description":"Controls which extension types can be installed and limits runtime access.\r\n\r\nThis setting defines the allowed types of extensions and which hosts they can interact with. The value is a list of strings, each of which should be one of the following: \"extension\", \"theme\", \"user_script\", and \"hosted_app\". See the Microsoft Edge extensions documentation for more information on these types.\r\n\r\nNote that this policy also affects extensions to be force-installed by using 'ExtensionInstallForcelist' (Control which extensions are installed silently) policy.\r\n\r\nIf you enable this policy, only extensions that match a type in the list are installed.\r\n\r\nIf you don't configure this policy, no restrictions on the acceptable extension types are enforced.\r\n\r\nExample value:\r\n\r\nhosted_app","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionallowedtypes_extensionallowedtypesdesc","displayName":"Types of extensions/apps that are allowed to be installed (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist","displayName":"Allow specific extensions to be installed","description":"By default, all extensions are allowed. However, if you block all extensions by setting the 'ExtensionInstallBlockList' policy to \"*,\" users can only install extensions defined in this policy.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallallowlist_extensioninstallallowlistdesc","displayName":"Extension IDs to exempt from the block list (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist","displayName":"Control which extensions cannot be installed","description":"List specific extensions that users can NOT install in Microsoft Edge. When you deploy this policy, any extensions on this list that were previously installed will be disabled, and the user won't be able to enable them. If you remove an item from the list of blocked extensions, that extension is automatically re-enabled anywhere it was previously installed.\r\n\r\nUse \"*\" to block all extensions that aren't explicitly listed in the allow list.\r\n\r\nIf you don't configure this policy, users can install any extension in Microsoft Edge.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallblocklist_extensioninstallblocklistdesc","displayName":"Extension IDs the user should be prevented from installing (or * for all) (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist","displayName":"Control which extensions are installed silently","description":"Specifies extensions that are installed silently, without user interaction, and that the users can't uninstall or disable (\"force-installed\"). All permissions requested by the extensions are granted implicitly, without user interaction, including any additional permissions requested by future versions of the extension. Furthermore, permissions are granted for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These two APIs are only available to extensions that are force-installed.)\r\n\r\nThis policy takes precedence over a potentially conflicting 'ExtensionInstallBlocklist' (Control which extensions cannot be installed) policy. When you take an extension off of the force-installed list it's automatically uninstalled by Microsoft Edge.\r\n\r\nFor Windows devices that aren't joined to a Microsoft Active Directory domain, forced installation is limited to extensions available in the Microsoft Store.\r\n\r\nNote that users can modify the source code of any extension by using Developer Tools, potentially rendering the extension dysfunctional. If this is a concern, set the 'DeveloperToolsAvailability' (Control where developer tools can be used) policy.\r\n\r\nUse the following format to add an extension to the list:\r\n\r\n[extensionID];[updateURL]\r\n\r\n- extensionID - the 32-letter string found on edge://extensions when in developer mode.\r\n\r\n- updateURL (optional) is the address of the Update Manifest XML document for the app or extension, as described at https://go.microsoft.com/fwlink/?linkid=2095043. If you don't set the updateURL, the Microsoft Store update URL is used (currently https://edge.microsoft.com/extensionwebstorebase/v1/crx). Note that the update URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL indicated in the extension's manifest.\r\n\r\nFor example, gggmmkjegpiggikcnhidnjjhmicpibll;https://edge.microsoft.com/extensionwebstorebase/v1/crx installs the Microsoft Online app from the Microsoft Store \"update\" URL. For more information about hosting extensions, see: https://go.microsoft.com/fwlink/?linkid=2095044.\r\n\r\nIf you don't configure this policy, no extensions are installed automatically, and users can uninstall any extension in Microsoft Edge.\r\n\r\nNote that this policy doesn't apply to InPrivate mode.\r\n\r\nExample value:\r\n\r\ngbchcmhmhahfdphkhkmpfmihenigjmpp;https://edge.microsoft.com/extensionwebstorebase/v1/crx\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallforcelist_extensioninstallforcelistdesc","displayName":"Extension/App IDs and update URLs to be silently installed (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources","displayName":"Configure extension and user script install sources","description":"Define URLs that can install extensions and themes.\r\n\r\nBy default, users have to download a *.crx file for each extension or script they want to install, and then drag it onto the Microsoft Edge settings page. This policy lets specific URLs use install the extension or script for the user.\r\n\r\nEach item in this list is an extension-style match pattern (see https://go.microsoft.com/fwlink/?linkid=2095039). Users can easily install items from any URL that matches an item in this list. Both the location of the *.crx file and the page where the download is started from (in other words, the referrer) must be allowed by these patterns.\r\n\r\nThe 'ExtensionInstallBlocklist' (Control which extensions cannot be installed) policy takes precedence over this policy. Any extensions that's on the block list won't be installed, even if it comes from a site on this list.\r\n\r\nExample value:\r\n\r\nhttps://corp.contoso.com/*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensioninstallsources_extensioninstallsourcesdesc","displayName":"URL patterns to allow extension, app, and user script installs from (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings","displayName":"Configure extension management settings","description":"Configures extension management settings for Microsoft Edge.\r\n\r\nThis policy controls multiple settings, including settings controlled by any existing extension-related policies. This policy overrides any legacy policies if both are set.\r\n\r\nThis policy maps an extension ID or an update URL to its configuration. With an extension ID, the configuration is applied only to the specified extension. Set a default configuration for the special ID \"*\", to apply to all extensions that aren't specifically listed in this policy. With an update URL, the configuration is applied to all extensions with the exact update URL stated in manifest of this extension, as described at https://go.microsoft.com/fwlink/?linkid=2095043.\r\n\r\nExample value:\r\n\r\n{\r\n \"abcdefghijklmnopabcdefghijklmnop\": {\r\n \"blocked_permissions\": [\r\n \"history\"\r\n ], \r\n \"installation_mode\": \"allowed\", \r\n \"minimum_version_required\": \"1.0.1\"\r\n }, \r\n \"bcdefghijklmnopabcdefghijklmnopa\": {\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.contoso.com\"\r\n ], \r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ], \r\n \"update_url\": \"https://contoso.com/update_url\", \r\n \"runtime_allowed_hosts\": [\r\n \"*://good.contoso.com\"\r\n ], \r\n \"installation_mode\": \"force_installed\"\r\n }, \r\n \"cdefghijklmnopabcdefghijklmnopab\": {\r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"installation_mode\": \"blocked\"\r\n }, \r\n \"*\": {\r\n \"blocked_permissions\": [\r\n \"downloads\", \r\n \"bookmarks\"\r\n ], \r\n \"installation_mode\": \"blocked\", \r\n \"runtime_blocked_hosts\": [\r\n \"*://*.contoso.com\"\r\n ], \r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"allowed_types\": [\r\n \"hosted_app\"\r\n ], \r\n \"runtime_allowed_hosts\": [\r\n \"*://good.contoso.com\"\r\n ], \r\n \"install_sources\": [\r\n \"https://company-intranet/apps\"\r\n ]\r\n }, \r\n \"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd\": {\r\n \"blocked_install_message\": \"Custom error message.\", \r\n \"installation_mode\": \"blocked\"\r\n }, \r\n \"fghijklmnopabcdefghijklmnopabcde\": {\r\n \"blocked_install_message\": \"Custom removal message.\", \r\n \"installation_mode\": \"removed\"\r\n }, \r\n \"update_url:https://www.contoso.com/update.xml\": {\r\n \"blocked_permissions\": [\r\n \"wallpaper\"\r\n ], \r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ], \r\n \"installation_mode\": \"allowed\"\r\n }\r\n}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~extensions_extensionsettings_extensionsettings","displayName":"Configure extension management settings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter","displayName":"Enable Google Cast","description":"Enable this policy to enable Google Cast. Users will be able to launch it from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.\r\n\r\nDisable this policy to disable Google Cast.\r\n\r\nBy default, Google Cast is enabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_enablemediarouter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar","displayName":"Show the cast icon in the toolbar","description":"Set this policy to true to show the Cast toolbar icon on the toolbar or the overflow menu. Users won't be able to remove it.\r\n\r\nIf you don't configure this policy or if you disable it, users can pin or remove the icon by using its contextual menu.\r\n\r\nIf you've also set the 'EnableMediaRouter' (Enable Google Cast) policy to false, then this policy is ignored, and the toolbar icon isn't shown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~googlecast_showcasticonintoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt","displayName":"Allow cross-origin HTTP Basic Auth prompts","description":"Controls whether third-party sub-content on a page can open an HTTP Basic Auth dialog box.\r\n\r\nTypically, this is disabled as a phishing defense. If you don't configure this policy, it's disabled and third-party sub-content can't open a HTTP Basic Auth dialog box.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_allowcrossoriginauthprompt_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist","displayName":"Specifies a list of servers that Microsoft Edge can delegate user credentials to","description":"Configure the list of servers that Microsoft Edge can delegate to.\r\n\r\nSeparate multiple server names with commas. Wildcards (*) are allowed.\r\n\r\nIf you don't configure this policy Microsoft Edge won't delegate user credentials even if a server is detected as Intranet.\r\n\r\nExample value: contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authnegotiatedelegateallowlist_authnegotiatedelegateallowlist","displayName":"Specifies a list of servers that Microsoft Edge can delegate user credentials to (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes","displayName":"Supported authentication schemes","description":"Specifies which HTTP authentication schemes are supported.\r\n\r\nYou can configure the policy by using these values: 'basic', 'digest', 'ntlm', and 'negotiate'. Separate multiple values with commas.\r\n\r\nIf you don't configure this policy, all four schemes are used.\r\n\r\nExample value: basic,digest,ntlm,negotiate","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authschemes_authschemes","displayName":"Supported authentication schemes (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist","displayName":"Configure list of allowed authentication servers","description":"Specifies which servers to enable for integrated authentication. Integrated authentication is only enabled when Microsoft Edge receives an authentication challenge from a proxy or from a server in this list.\r\n\r\nSeparate multiple server names with commas. Wildcards (*) are allowed.\r\n\r\nIf you don't configure this policy, Microsoft Edge tries to detect if a server is on the intranet - only then will it respond to IWA requests. If the server is on the internet, IWA requests from it are ignored by Microsoft Edge.\r\n\r\nExample value: *contoso.com,contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_authserverallowlist_authserverallowlist","displayName":"Configure list of allowed authentication servers (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup","displayName":"Disable CNAME lookup when negotiating Kerberos authentication","description":"Determines whether the generated Kerberos SPN is based on the canonical DNS name (CNAME) or on the original name entered.\r\n\r\nIf you enable this policy, CNAME lookup is skipped and the server name (as entered) is used.\r\n\r\nIf you disable this policy or don't configure it, the canonical name of the server is used. This is determined through CNAME lookup.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_disableauthnegotiatecnamelookup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport","displayName":"Include non-standard port in Kerberos SPN","description":"Specifies whether the generated Kerberos SPN should include a non-standard port.\r\n\r\nIf you enable this policy, and a user includes a non-standard port (a port other than 80 or 443) in a URL, that port is included in the generated Kerberos SPN.\r\n\r\nIf you don't configure or disable this policy, the generated Kerberos SPN won't include a port in any case.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~httpauthentication_enableauthnegotiateport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist","displayName":"Control which native messaging hosts users can use","description":"List specific native messaging hosts that users can use in Microsoft Edge.\r\n\r\nBy default, all native messaging hosts are allowed. If you set the 'NativeMessagingBlocklist' (Configure native messaging block list) policy to *, all native messaging hosts are blocked, and only native messaging hosts listed in here are loaded.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingallowlist_nativemessagingallowlistdesc","displayName":"Names of the native messaging hosts to exempt from the block list (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist","displayName":"Configure native messaging block list","description":"Specifies which native messaging hosts that shouldn't be used.\r\n\r\nUse '*' to block all native messaging hosts unless they are explicitly listed in the allow list.\r\n\r\nIf you don't configure this policy, Microsoft Edge will load all installed native messaging hosts.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessagingblocklist_nativemessagingblocklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts","displayName":"Allow user-level native messaging hosts (installed without admin permissions)","description":"Enables user-level installation of native messaging hosts.\r\n\r\nIf you disable this policy, Microsoft Edge will only use native messaging hosts installed on the system level.\r\n\r\nBy default, if you don't configure this policy, Microsoft Edge will allow usage of user-level native messaging hosts.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~nativemessaging_nativemessaginguserlevelhosts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled","displayName":"Enable saving passwords to the password manager","description":"Enable Microsoft Edge to save user passwords.\r\n\r\nIf you enable this policy, users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically.\r\n\r\nIf you disable this policy, users can't save new passwords, but they can still use previously saved passwords.\r\n\r\nIf you enable or disable this policy, users can't change or override it in Microsoft Edge. If you don't configure it, users can save passwords, as well as turn this feature off.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordmanagerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL","description":"Configures the change password URL (HTTP and HTTPS schemes only).\r\n\r\nPassword protection service will send users to this URL to change their password after seeing a warning in the browser.\r\n\r\nIf you enable this policy, then password protection service sends users to this URL to change their password.\r\n\r\nIf you disable this policy or don't configure it, then password protection service will not redirect users to a change password URL.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://contoso.com/change_password.html","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionchangepasswordurl_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls","displayName":"Configure the list of enterprise login URLs where password protection service should capture fingerprint of password","description":"Configure the list of enterprise login URLs (HTTP and HTTPS schemes only) where Microsoft Edge should capture the fingerprint of passwords and use it for password reuse detection.\r\n\r\nIf you enable this policy, the password protection service captures fingerprints of passwords on the defined URLs.\r\n\r\nIf you disable this policy or don't configure it, no password fingerprints are captured.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com/login.html\r\nhttps://login.contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionloginurls_passwordprotectionloginurlsdesc","displayName":"Configure the list of enterprise login URLs where password protection service should capture fingerprint of password (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger","displayName":"Configure password protection warning trigger","description":"Allows you to control when to trigger password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.\r\n\r\nYou can use the 'PasswordProtectionLoginURLs' (Configure the list of enterprise login URLs where password protection service should capture fingerprint of password) and 'PasswordProtectionChangePasswordURL' (Configure the change password URL) policies to configure which passwords to protect.\r\n\r\nExemptions: Passwords for the sites listed in 'PasswordProtectionLoginURLs' and 'PasswordProtectionChangePasswordURL', as well as for the sites listed in 'SmartScreenAllowListDomains' (Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings), will not trigger a password-protection warning.\r\n\r\nSet to 'PasswordProtectionWarningOff' (0) to not show password protection warningss.\r\n\r\nSet to 'PasswordProtectionWarningOnPasswordReuse' (1) to show password protection warnings when the user reuses their protected password on a non-allowlisted site.\r\n\r\nIf you disable or don't configure this policy, then the warning trigger is not shown.\r\n\r\n* 0 = Password protection warning is off.\r\n\r\n* 1 = Password protection warning is triggered by password reuse.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger","displayName":"Configure password protection warning trigger (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_0","displayName":"Password protection warning is off","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~passwordmanager_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_1","displayName":"Password protection warning is triggered by password reuse","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection","displayName":"Default printer selection rules","description":"Overrides Microsoft Edge default printer selection rules. This policy determines the rules for selecting the default printer in Microsoft Edge, which happens the first time a user tries to print a page.\r\n\r\nWhen this policy is set, Microsoft Edge tries to find a printer that matches all of the specified attributes and uses it as default printer. If there are multiple printers that meet the criteria, the first printer that matches is used.\r\n\r\nIf you don't configure this policy or no matching printers are found within the timeout, the printer defaults to the built-in PDF printer or no printer, if the PDF printer isn't available.\r\n\r\nThe value is parsed as a JSON object, conforming to the following schema: { \"type\": \"object\", \"properties\": { \"idPattern\": { \"description\": \"Regular expression to match printer id.\", \"type\": \"string\" }, \"namePattern\": { \"description\": \"Regular expression to match printer display name.\", \"type\": \"string\" } } }\r\n\r\nOmitting a field means all values match; for example, if you don't specify connectivity Print Preview starts discovering all kinds of local printers. Regular expression patterns must follow the JavaScript RegExp syntax and matches are case sensitive.\r\n\r\nExample value: { \"idPattern\": \".*public\", \"namePattern\": \".*Color\" }","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_defaultprinterselection_defaultprinterselection","displayName":"Default printer selection rules (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter","displayName":"Print headers and footers","description":"Force 'headers and footers' to be on or off in the printing dialog.\r\n\r\nIf you don't configure this policy, users can decide whether to print headers and footers.\r\n\r\nIf you disable this policy, users can't print headers and footers.\r\n\r\nIf you enable this policy, users always print headers and footers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printheaderfooter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled","displayName":"Enable printing","description":"Enables printing in Microsoft Edge and prevents users from changing this setting.\r\n\r\nIf you enable this policy or don't configure it, users can print.\r\n\r\nIf you disable this policy, users can't print from Microsoft Edge. Printing is disabled in the wrench menu, extensions, JavaScript applications, and so on. Users can still print from plug-ins that bypass Microsoft Edge while printing. For example, certain Adobe Flash applications have the print option in their context menu, which isn't covered by this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter","displayName":"Set the system default printer as the default printer","description":"Tells Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer.\r\n\r\nIf you disable this policy or don't configure it, Print Preview uses the most recently used printer as the default destination choice.\r\n\r\nIf you enable this policy, Print Preview uses the OS system default printer as the default destination choice.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_printpreviewusesystemdefaultprinter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog","displayName":"Print using system print dialog","description":"Shows the system print dialog instead of print preview.\r\n\r\nIf you enable this policy, Microsoft Edge opens the system print dialog instead of the built-in print preview when a user prints a page.\r\n\r\nIf you don't configure or disable this policy, print commands trigger the Microsoft Edge print preview screen.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~printing_usesystemprintdialog_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist","displayName":"Configure proxy bypass rules","description":"Defines a list of hosts for which Microsoft Edge bypasses any proxy.\r\n\r\nThis policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' (Configure proxy server settings) policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\r\n\r\nIf you enable this policy, you can create a list of hosts for which Microsoft Edge doesn't use a proxy.\r\n\r\nIf you don't configure this policy, no list of hosts is created for which Microsoft Edge bypasses a proxy. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\r\n\r\nFor more detailed examples go to https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nExample value: https://www.contoso.com, https://www.fabrikam.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxybypasslist_proxybypasslist","displayName":"Comma-separated list of proxy bypass rules (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode","displayName":"Configure proxy server settings","description":"Specify the proxy server settings used by Microsoft Edge. If you enable this policy, users can't change the proxy settings.\r\n\r\nIf you choose to never use a proxy server and to always connect directly, all other options are ignored.\r\n\r\nIf you choose to use system proxy settings, all other options are ignored.\r\n\r\nIf you choose to auto detect the proxy server, all other options are ignored.\r\n\r\nIf you choose fixed server proxy mode, you can specify further options in 'ProxyServer' (Configure address or URL of proxy server) and 'Comma-separated list of proxy bypass rules'.\r\n\r\nIf you choose to use a .pac proxy script, you must specify the URL to the script in 'URL to a proxy .pac file'.\r\n\r\nFor detailed examples, go to https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nIf you enable this policy, Microsoft Edge will ignore all proxy-related options specified from the command line.\r\n\r\nIf you don't configure this policy users can choose their own proxy settings.\r\n\r\n* \"direct\" = Never use a proxy\r\n\r\n* \"auto_detect\" = Auto detect proxy settings\r\n\r\n* \"pac_script\" = Use a .pac proxy script\r\n\r\n* \"fixed_servers\" = Use fixed proxy servers\r\n\r\n* \"system\" = Use system proxy settings\r\n\r\nExample value: direct","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode","displayName":"Configure proxy server settings (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_direct","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_auto_detect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_pac_script","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_fixed_servers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxymode_proxymode_system","displayName":"Use system proxy settings","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl","displayName":"Set the proxy .pac file URL","description":"Specifies the URL for a proxy auto-config (PAC) file.\r\n\r\nThis policy is applied only if you selected 'Use a .pac proxy script' in the 'ProxyMode' (Configure proxy server settings) policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\r\n\r\nIf you enable this policy, you can specify the URL for a PAC file, which defines how the browser automatically chooses the appropriate proxy server for fetching a particular website.\r\n\r\nIf you disable or don't configure this policy, no PAC file is specified. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\r\n\r\nFor detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nExample value: https://internal.contoso.com/example.pac","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxypacurl_proxypacurl","displayName":"Set the proxy .pac file URL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver","displayName":"Configure address or URL of proxy server","description":"Specifies the URL of the proxy server.\r\n\r\nThis policy is applied only if you have selected 'Use fixed proxy servers' in the 'ProxyMode' (Configure proxy server settings) policy. If you selected any other mode for configuring proxy policies, don't enable or configure this policy.\r\n\r\nIf you enable this policy, the proxy server configured by this policy will be used for all URLs.\r\n\r\nIf you disable or don't configure this policy, users can choose their own proxy settings while in this proxy mode. Leave this policy unconfigured if you've specified any other method for setting proxy policies.\r\n\r\nFor more options and detailed examples, see https://go.microsoft.com/fwlink/?linkid=2094936.\r\n\r\nExample value: 123.123.123.123:8080","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxyserver_proxyserver","displayName":"Configure address or URL of proxy server (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings","displayName":"Proxy settings","description":"Configures the proxy settings for Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge ignores all proxy-related options specified from the command line.\r\n\r\nIf you don't configure this policy, users can choose their own proxy settings.\r\n\r\nThis policy overrides the following individual policies:\r\n\r\n'ProxyMode' (Configure proxy server settings)\r\n'ProxyPacUrl' (Set the proxy .pac file URL)\r\n'ProxyServer' (Configure address or URL of proxy server)\r\n'ProxyBypassList' (Configure proxy bypass rules)\r\n\r\nThe ProxyMode field lets you specify the proxy server used by Microsoft Edge and prevents users from changing proxy settings.\r\n\r\nThe ProxyPacUrl field is a URL to a proxy .pac file.\r\n\r\nThe ProxyServer field is a URL for the proxy server.\r\n\r\nThe ProxyBypassList field is a list of proxy hosts that Microsoft Edge bypasses.\r\n\r\nIf you choose the 'direct' value as 'ProxyMode', a proxy is never used and all other fields are ignored.\r\n\r\nIf you choose the 'system' value as 'ProxyMode', the systems's proxy is used and all other fields are ignored.\r\n\r\nIf you choose the 'auto_detect' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'fixed_server' value as 'ProxyMode', the 'ProxyServer' and 'ProxyBypassList' fields are used.\r\n\r\nIf you choose the 'pac_script' value as 'ProxyMode', the 'ProxyPacUrl' and 'ProxyBypassList' fields are used.\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"direct\", \r\n \"ProxyPacUrl\": \"https://internal.site/example.pac\", \r\n \"ProxyServer\": \"123.123.123.123:8080\", \r\n \"ProxyBypassList\": \"https://www.example1.com,https://www.example2.com,https://internalsite/\"\r\n}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~proxy_proxysettings_proxysettings","displayName":"Proxy settings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride","displayName":"Prevent bypassing Microsoft Defender SmartScreen prompts for sites","description":"This policy setting lets you decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites.\r\n\r\nIf you enable this setting, users can't ignore Microsoft Defender SmartScreen warnings and they are blocked from continuing to the site.\r\n\r\nIf you disable or don't configure this setting, users can ignore Microsoft Defender SmartScreen warnings and continue to the site.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverride_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles","displayName":"Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads","description":"This policy lets you determine whether users can override Microsoft Defender SmartScreen warnings about unverified downloads.\r\n\r\nIf you enable this policy, users in your organization can't ignore Microsoft Defender SmartScreen warnings, and they're prevented from completing the unverified downloads.\r\n\r\nIf you disable or don't configure this policy, users can ignore Microsoft Defender SmartScreen warnings and complete unverified downloads.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_preventsmartscreenpromptoverrideforfiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains","displayName":"Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings","description":"Configure the list of Microsoft Defender SmartScreen trusted domains. This means:\r\nMicrosoft Defender SmartScreen won't check for potentially malicious resources like phishing software and other malware if the source URLs match these domains.\r\nThe Microsoft Defender SmartScreen download protection service won't check downloads hosted on these domains.\r\n\r\nIf you enable this policy, Microsoft Defender SmartScreen trusts these domains.\r\nIf you disable or don't set this policy, default Microsoft Defender SmartScreen protection is applied to all resources.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\nAlso note that this policy does not apply if your organization has enabled Microsoft Defender Advanced Threat Protection. You must configure your allow and block lists in Microsoft Defender Security Center instead.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenallowlistdomains_smartscreenallowlistdomainsdesc","displayName":"Configure the list of domains for which SmartScreen won't trigger warnings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled","displayName":"Configure Microsoft Defender SmartScreen","description":"This policy setting lets you configure whether to turn on Microsoft Defender SmartScreen. Microsoft Defender SmartScreen provides warning messages to help protect your users from potential phishing scams and malicious software. By default, Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you enable this setting, Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~smartscreen_smartscreenenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage","displayName":"Set the new tab page as the home page","description":"Configures the default home page in Microsoft Edge. You can set the home page to a URL you specify or to the new tab page.\r\n\r\nIf you enable this policy, the new tab page is always used for the home page, and the home page URL location is ignored.\r\n\r\nIf you disable this policy, the user's home page can't be the new tab page, unless the URL is set to 'edge://newtab'.\r\n\r\nIf not configured users can choose whether the new tab page is their home page.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepageisnewtabpage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation","displayName":"Configure the home page URL","description":"Configures the default home page URL in Microsoft Edge.\r\n\r\nThe home page is the page opened by the Home button. The pages that open on startup are controlled by the 'RestoreOnStartup' (Action to take on startup) policies.\r\n\r\nYou can either set a URL here or set the home page to open the new tab page. If you select to open the new tab page, then this policy doesn't take effect.\r\n\r\nIf you enable this policy, users can't change their home page URL, but they can choose to use the new tab page as their home page.\r\n\r\nIf you disable or don't configure this policy, users can choose their own home page, as long as the 'HomepageIsNewTabPage' (Set the new tab page as the home page) policy isn't enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\nExample value: https://www.contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_homepagelocation_homepagelocation","displayName":"Home page URL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites","displayName":"Hide the default top sites from the new tab page","description":"Hides the default top sites from the new tab page in Microsoft Edge.\r\n\r\nIf you set this policy to true, the default top site tiles are hidden.\r\n\r\nIf you set this policy to false or don't configure it, the default top site tiles remain visible.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagehidedefaulttopsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation","displayName":"Configure the new tab page URL","description":"Configures the default URL for the new tab page.\r\n\r\nThis policy determines the page that's opened when new tabs are created (including when new windows are opened). It also affects the startup page if that's set to open to the new tab page.\r\n\r\nThis policy doesn't determine which page opens on startup; that's controlled by the 'RestoreOnStartup' (Action to take on startup) policy. It also doesn’t affect the home page if that’s set to open to the new tab page.\r\n\r\nIf you don't configure this policy, the default new tab page is used.\r\n\r\nIf you configure this policy *and* the 'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience) policy, this policy has precedence.\r\n\r\nIf an invalid URL is provided, new tabs will open about://blank.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value: https://www.fabrikam.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_newtabpagelocation_newtabpagelocation","displayName":"New tab page URL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'Open new tab' (5).\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'Restore the last session' (1). The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'Open a list of URLs' (4).\r\n\r\nDisabling this setting is equivalent to leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\n* 1 = Restore the last session\r\n\r\n* 4 = Open a list of URLs\r\n\r\n* 5 = Open a new tab","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup","displayName":"Action to take on startup (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls","displayName":"Sites to open when the browser starts","description":"Specify a list of websites to open automatically when the browser starts. If you don't configure this policy, no site is opened on startup.\r\n\r\nThis policy only works if you also set the 'RestoreOnStartup' (Action to take on startup) policy to 'Open a list of URLs' (4).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\nhttps://www.fabrikam.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_restoreonstartupurls_restoreonstartupurlsdesc","displayName":"Sites to open when the browser starts (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton","displayName":"Show Home button on toolbar","description":"Shows the Home button on Microsoft Edge's toolbar.\r\n\r\nEnable this policy to always show the Home button. Disable it to never show the button.\r\n\r\nIf you don't configure the policy, users can choose whether to show the home button.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edge~policy~microsoft_edge~startup_showhomebutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known or potentially dangerous downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockAllDownloads' to block all downloads.\r\n\r\nSet 'BlockMaliciousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.\r\n\r\nIf you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\nPolicy options mapping:\r\n\r\n* DefaultDownloadSecurity (0) = No special restrictions\r\n\r\n* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types\r\n\r\n* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types\r\n\r\n* BlockAllDownloads (3) = Block all downloads\r\n\r\n* BlockMaliciousDownloads (4) = Block malicious downloads\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_2","displayName":"Block potentially dangerous or unwanted downloads and dangerous file types","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_downloadrestrictions_downloadrestrictions_4","displayName":"Block malicious downloads","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions","description":"Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.\r\n\r\nSet 'BlockDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known or potentially dangerous downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockPotentiallyDangerousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.\r\n\r\nSet 'BlockAllDownloads' to block all downloads.\r\n\r\nSet 'BlockMaliciousDownloads' to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.\r\n\r\nIf you don't configure this policy or set the 'DefaultDownloadSecurity' option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.\r\n\r\nNote that these restrictions apply to downloads from web page content, as well as the 'download link...' context menu option. These restrictions don't apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.\r\n\r\nPolicy options mapping:\r\n\r\n* DefaultDownloadSecurity (0) = No special restrictions\r\n\r\n* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types\r\n\r\n* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types\r\n\r\n* BlockAllDownloads (3) = Block all downloads\r\n\r\n* BlockMaliciousDownloads (4) = Block malicious downloads\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block potentially dangerous or unwanted downloads and dangerous file types","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgeupdates.2~policy~microsoft_edge_recommended_downloadrestrictions_recommended_downloadrestrictions_4","displayName":"Block malicious downloads","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled","displayName":"Configure if the ads transparency feature is enabled","description":"Lets you decide whether the ads transparency feature is enabled. This behavior only applies to the \"balanced\" mode of tracking prevention, and does not impact \"basic\" or \"strict\" modes. Your users' tracking prevention level can be configured using the 'TrackingPrevention' (Block tracking of users' web-browsing activity) policy. AdsTransparencyEnabled will only have an effect if 'TrackingPrevention' is set to TrackingPreventionBalanced or is not configured.\r\n\r\nIf you enable or don't configure this policy, transparency metadata provided by ads will be available to the user when the feature is active.\r\n\r\nWhen the feature is enabled, Tracking Prevention will enable exceptions for the associated ad providers that have met Microsoft's privacy standards.\r\n\r\nIf you disable this policy, Tracking Prevention will not adjust its behavior even when transparency metadata is provided by ads.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_adstransparencyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled","displayName":"Hide restore pages dialog after browser crash","description":"This policy gives an option to hide the \"Restore pages\" dialog after Microsoft Edge has crashed. The \"Restore pages\" dialog gives users the option to restore the pages that were previously open before Microsoft Edge crashed.\r\n\r\nIf you enable this policy, the \"Restore pages\" dialog will not be shown. In the event of a crash, Microsoft Edge will not restore previous tabs and will start the session with a new tab page.\r\n\r\nIf you disable or don't set this policy, the \"Restore pages\" dialog will be shown.\r\n\r\nIf you set this policy, do not set the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) or 'SavingBrowserHistoryDisabled' (Disable saving browser history) policy since that prevents history from being saved which also disables the dialog.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_hiderestoredialogenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode","displayName":"Secure mode and Certificate-based Digital Signature validation in native PDF reader","description":"The policy enables Digital Signature validation for PDF files in a secure environment, which shows the correct validation status of the signatures.\r\n\r\nIf you enable this policy, PDF files with Certificate-based digital signatures are opened with an option to view and verify the validity of the signatures with high security.\r\n\r\nIf you disable or don't configure this policy, the capability to view and verify the signature will not be available.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_pdfsecuremode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates","displayName":"Prompt the user to select a certificate when multiple certificates match","description":"This policy controls whether the user is prompted to select a client certificate when more than one certificate matches 'AutoSelectCertificateForUrls' (Automatically select client certificates for these sites).\r\nIf this policy is set to True, the user is prompted to select a client certificate whenever the auto-selection policy matches multiple certificates.\r\nIf this policy is set to False or not set, the user may only be prompted when no certificate matches the auto-selection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge_promptonmultiplematchingcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting","displayName":"Control use of the WebHID API","description":"Setting the policy to 3 lets websites ask for access to HID devices. Setting the policy to 2 denies access to HID devices.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.\r\n\r\nThis policy can be overridden for specific url patterns using the 'WebHidAskForUrls' (Allow the WebHID API on these sites) and 'WebHidBlockedForUrls' (Block the WebHID API on these sites) policies.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockWebHid (2) = Do not allow any site to request access to HID devices via the WebHID API\r\n\r\n* AskWebHid (3) = Allow sites to ask the user to grant access to a HID device\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting","displayName":"Control use of the WebHID API (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_2","displayName":"Do not allow any site to request access to HID devices via the WebHID API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_3","displayName":"Allow sites to ask the user to grant access to a HID device","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls","displayName":"Allow the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\r\n\r\n * 'WebHidBlockedForUrls' (Block the WebHID API on these sites) (if there is a match),\r\n\r\n * 'DefaultWebHidGuardSetting' (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns must not conflict with 'WebHidBlockedForUrls'. Neither policy takes precedence if a URL matches both patterns.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidaskforurls_webhidaskforurlsdesc","displayName":"Allow the WebHID API on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls","displayName":"Block the WebHID API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns that don't match the policy, the following values are applied in order of precedence:\r\n\r\n * 'WebHidAskForUrls' (Allow the WebHID API on these sites) (if there is a match),\r\n\r\n * 'DefaultWebHidGuardSetting' (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns can't conflict with 'WebHidAskForUrls'. Neither policy takes precedence if a URL matches both patterns.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev100~policy~microsoft_edge~contentsettings_webhidblockedforurls_webhidblockedforurlsdesc","displayName":"Block the WebHID API on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts","displayName":"Configure the list of commands for which to disable keyboard shortcuts","description":"Configure the list of Microsoft Edge commands for which to disable keyboard shortcuts.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2186950 for a list of possible commands to disable.\r\n\r\nIf you enable this policy, commands in the 'disabled' list will no longer be activated by keyboard shortcuts.\r\n\r\nIf you disable this policy, all keyboard shortcuts behave as usual.\r\n\r\nNote: Disabling a command will only remove its shortcut mapping. Commands in the 'disabled' list will still function if accessed via browser UI.\r\n\r\nExample value:\r\n\r\n{\r\n \"disabled\": [\r\n \"new_tab\",\r\n \"fullscreen\"\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"disabled\": [\"new_tab\", \"fullscreen\"]}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_configurekeyboardshortcuts_configurekeyboardshortcuts","displayName":"Configure the list of commands for which to disable keyboard shortcuts (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled","displayName":"Allow features to download assets from the Asset Delivery Service","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\r\nThese assets can be config files or Machine Learning models that power the features that use this service.\r\n\r\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\r\n\r\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_edgeassetdeliveryserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas","displayName":"Allow Save page as in Internet Explorer mode","description":"This policy enables 'Save page as' functionality in Internet Explorer mode.\r\nUsers can use this option to save the current page in the browser. When a user re-opens a saved page, it will be loaded in the default browser.\r\n\r\nIf you enable this policy, the \"Save page as\" option will be clickable in \"More tools\".\r\n\r\nIf you disable or don't configure this policy, users can't select the \"Save page as\" option in \"More tools\".\r\n\r\nNote: To make the \"Ctrl+S\" shortcut work, users must enable the Internet Explorer policy, 'Enable extended hot key in Internet Explorer mode'.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_internetexplorermodeenablesavepageas_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended","displayName":"Allow features to download assets from the Asset Delivery Service","description":"The Asset Delivery Service is a general pipeline used to deliver assets to the Microsoft Edge Clients.\r\nThese assets can be config files or Machine Learning models that power the features that use this service.\r\n\r\nIf you enable or don't configure this policy, features can download assets from the Asset Delivery Service.\r\n\r\nIf you disable this policy, features won't be able to download assets needed for them to run correctly.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_edgeassetdeliveryserviceenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended","displayName":"Allow users to configure Site safety services (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy is obselete as the feature is being removed after Microsoft Edge version 127.\r\n\r\nThis policy disables site safety services from showing top site info in the page info dialog.\r\n\r\nIf you enable this policy or don't configure it, the top site info will be shown.\r\n\r\nIf you disable this policy, the top site info will not be shown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended_sitesafetyservicesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended","displayName":"Configure default state of Allow extensions from other stores setting","description":"This policy allows you to control the default state of the Allow extensions from other stores setting.\r\nThis policy can't be used to stop installation of extensions from other stores such as Chrome Web Store.\r\nTo stop installation of extensions from other stores, use the Extension Settings policy: https://go.microsoft.com/fwlink/?linkid=2187098.\r\n\r\nWhen enabled, Allow extensions from other stores will be turned on. So, users won't have to turn on the flag manually\r\nwhile installing extensions from other supported stores such as Chrome Web Store. However a user can override this setting.\r\nIf the user has already turned on the setting and then turned it off, this setting may not work.\r\nIf the Admin first sets the policy as Enabled, but then changes it to not configured or disabled, it will have no impact on\r\nuser settings and the setting will remain as it is.\r\n\r\nWhen disabled or not configured, the user can manage the Allow extensions from other store setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_recommended~extensions_recommended_controldefaultstateofallowextensionfromotherstoressettingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled","displayName":"Allow users to configure Site safety services (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy is obselete as the feature is being removed after Microsoft Edge version 127.\r\n\r\nThis policy disables site safety services from showing top site info in the page info dialog.\r\n\r\nIf you enable this policy or don't configure it, the top site info will be shown.\r\n\r\nIf you disable this policy, the top site info will not be shown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge_sitesafetyservicesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled","displayName":"Default Profile Setting Enabled","description":"Configuring this policy will let you set a default profile in Microsoft Edge to be used when opening the browser rather than the last profile used. This policy won't affect when \"--profile-directory\" parameter has been specified. Set the value to \"Default\" to refer to the default profile. The value is case sensitive.\r\nThe value of the policy is the name of the profile (case sensitive) and can be configured with string that is the name of a specific profile.\r\nThe value \"Edge Kids Mode\" and \"Guest Profile\" are considered not useful values because they not supposed to be a default profile.\r\nThis policy won't impact the following scenarios:\r\n 1) Settings specified in \"Profile preferences for sites\" in \"Profile preferences\"\r\n 2) Links opening from Outlook and Teams.\r\n\r\nThe following statements are under the condition of not specify the \"--profile-directory\" and configured value is not \"Edge Kids Mode\" or \"Guest Profile\":\r\nIf you enable this policy and configure it with a specific profile name and the specified profile can be found, Microsoft Edge will use the specified profile when launching and the setting of \"Default profile for external link\" is changed to the specified profile name and greyed out.\r\nIf you enable this policy and configure it with a specific profile name but it can't be found, the policy will behave like it's never been set before.\r\nIf you enable this policy, but don't configure or disable it, the policy will behave like it's never been set before.\r\n\r\nExample value: Default","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~identity_edgedefaultprofileenabled_edgedefaultprofileenabled","displayName":"Default Profile Setting Enabled (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled","displayName":"Swipe gestures in Microsoft Edge kiosk mode enabled","description":"This policy only applies to Microsoft Edge kiosk mode.\r\n\r\nIf you enable this policy or don't configure it, swipe gestures will behave as expected.\r\n\r\nIf you disable this policy, the user will not be able to use swipe gestures (for example navigate forwards and backwards, refresh page).\r\n\r\nFor detailed information on configuring kiosk mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev101~policy~microsoft_edge~kioskmode_kioskswipegesturesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled","displayName":"Enable the network service sandbox","description":"This policy controls whether or not the network service process runs sandboxed.\r\nIf this policy is enabled, the network service process will run sandboxed.\r\nIf this policy is disabled, the network service process will run unsandboxed. This leaves users open to additional security risks related to running the network service unsandboxed.\r\nIf this policy is not set, the default configuration for the network sandbox will be used. This may vary depending on Microsoft Edge release, currently running field trials, and platform.\r\nThis policy is intended to give enterprises flexibility to disable the network sandbox if they use third party software that interferes with the network service sandbox.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_networkservicesandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled","displayName":"Allow users to access the Outlook menu","description":"This policy is used to manage access to the Outlook menu from Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, users can access the Outlook menu.\r\nIf you disable this policy, users can't access the Outlook menu.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_outlookhubmenuenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended","displayName":"Allow users to access the Outlook menu","description":"This policy is used to manage access to the Outlook menu from Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, users can access the Outlook menu.\r\nIf you disable this policy, users can't access the Outlook menu.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_recommended_outlookhubmenuenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled","displayName":"Control Javascript setTimeout() function minimum timeout (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nWhen the policy is set to Enabled, the Javascript setTimeout() with a timeout of 0ms will no longer be fixed to 1ms to schedule timer-based callbacks.\r\nWhen the policy is set to Disabled, the Javascript setTimeout() with a timeout of 0ms will be fixed to 1ms to schedule timer-based callbacks.\r\nWhen the policy is unset, use the browser's default behavior for setTimeout() function.\r\n\r\nThis is a web standards compliancy feature, but it may change task ordering on a web page, leading to unexpected behavior on sites that are dependent on a certain ordering.\r\nIt also may affect sites with a lot of setTimeout()s with a timeout of 0ms usage. For example, increasing CPU load.\r\n\r\nFor users where this policy is unset, Microsoft Edge Stable will roll out the change gradually on the stable channel.\r\n\r\nThis is a temporary policy that is planned to be removed in Microsoft Edge Stable 105.\r\nThis deadline may be extended if there is a need for enterprises.\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_settimeoutwithout1msclampenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled","displayName":"Control the User-Agent Client Hints GREASE Update feature","description":"The User-Agent GREASE specification recommends the inclusion of additional GREASE characters beyond the current semicolon and space, and recommends that the arbitrary version number be varied over time.\r\n\r\nWhen enabled, the User-Agent Client Hints GREASE Update feature aligns the User-Agent GREASE algorithm with the latest version from the specification. The updated specification may break some websites that restrict the characters that requests may contain. For more information, see the following specification: https://wicg.github.io/ua-client-hints/#grease\r\n\r\nIf this policy is enabled or not configured, the User-Agent GREASE algorithm from the specification will be used. If the policy is disabled, the prior User-Agent GREASE algorithm will be used.\r\n\r\nThis policy is a temporary measure and will be removed in a future release.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge_useragentclienthintsgreaseupdateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins","displayName":"List of origins that allow all HTTP authentication","description":"Set this policy to specify which origins allow all the HTTP authentication schemes Microsoft Edge supports regardless of the 'AuthSchemes' (Supported authentication schemes) policy.\r\n\r\nFormat the origin pattern according to this format (https://support.google.com/chrome/a?p=url_blocklist_filter_format). Up to 1,000 exceptions can be defined in 'AllHttpAuthSchemesAllowedForOrigins' (List of origins that allow all HTTP authentication).\r\nWildcards are allowed for the whole origin or parts of the origin. Parts include the scheme, host, or port.\r\n\r\nExample value:\r\n\r\n*.example.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev102~policy~microsoft_edge~httpauthentication_allhttpauthschemesallowedfororigins_allhttpauthschemesallowedfororiginsdesc","displayName":"List of origins that allow all HTTP authentication (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay","displayName":"Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer","description":"Lets you display zoom in IE Mode tabs similar to how it was displayed in Internet Explorer, where the DPI scale of the display is factored in.\r\n\r\nFor example, if you have a page zoomed to 200% on a 100 DPI scale display and you change the display to 150 DPI, Microsoft Edge would still display the zoom as 200%. However, Internet Explorer factors in the DPI scale and displays 300%.\r\n\r\nIf you enable this policy, zoom values will be displayed with the DPI scale included for IE Mode tabs.\r\n\r\nIf you disable or don't configure this policy, zoom values will be displayed without DPI scale included for IE Mode tabs","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_internetexplorerzoomdisplay_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed","displayName":"Live captions allowed","description":"Allow users to turn the Live captions feature on or off.\r\n\r\nLive captions is an accessibility feature that converts speech from the audio that plays in Microsoft Edge in to text and shows this text in a separate window. The entire process happens on the device and no audio or caption text ever leaves the device.\r\n\r\nNote: This feature is not generally available. Clients that have the 'ExperimentationAndConfigurationServiceControl' (Control communication with the Experimentation and Configuration Service) policy set to 'FullMode' may receive the feature before broad availability. Broad availability will be announced via Microsoft Edge release notes.\r\n\r\nIf you enable or don't configure this policy, users can turn this feature on or off at edge://settings/accessibility.\r\n\r\nIf you disable this policy, users will not be able to turn this accessibility feature on. If speech recognition files have been downloaded previously, they will be deleted from the device in 30 days. We recommend avoiding this option unless it's needed in your environment.\r\n\r\nIf users choose to turn on Live captions, speech recognition files (approximately 100 megabytes) will be downloaded to the device on first run and then periodically to improve performance and accuracy. These files will be deleted after 30 days.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_livecaptionsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled","displayName":"Origin-keyed agent clustering enabled by default","description":"The Origin-Agent-Cluster: HTTP header controls whether a document is isolated in an origin-keyed agent cluster or in a site-keyed agent cluster. This has security implications because an origin-keyed agent cluster allows isolating documents by origin. The consequence of this for developers is that the document.domain accessor can no longer be set when origin-keyed agent clustering is enabled.\r\n\r\nIf you enable or don't configure this policy, documents without the Origin-Agent-Cluster: header will be assigned to origin-keyed agent clustering by default. On these documents, the document.domain accessor will not be settable.\r\n\r\nIf you disable this policy, documents without the Origin-Agent-Cluster: header will be assigned to site-keyed agent clusters by default. On these documents, the document.domain accessor will be settable.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2191896 for additional details.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge_originagentclusterdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled","displayName":"Guided Switch Enabled","description":"Allows Microsoft Edge to prompt the user to switch to the appropriate profile when Microsoft Edge detects that a link is a personal or work link.\r\n\r\nIf you enable this policy, you'll be prompted to switch to another account if the current profile doesn't work for the requesting link.\r\n\r\nIf you disable this policy, you won't be prompted to switch to another account when there's a profile and link mismatch.\r\n\r\nIf this policy isn't configured, guided switch is turned on by default. A user can override this value in the browser settings.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev103~policy~microsoft_edge~identity_guidedswitchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace","description":"Setting the policy on Microsoft Edge turns on the restricted sign-in feature in Google Workspace and prevents users from changing this setting. Users can only access Google tools using accounts from the specified domains. To allow gmail or googlemail accounts, add consumer_accounts to the list of domains. This policy is based on the Chrome policy of the same name.\r\n\r\nIf you don't provide a domain name or leave this policy unset, users can access Google Workspace with any account.\r\n\r\nUsers cannot change or override this setting.\r\n\r\nNote: This policy causes the X-GoogApps-Allowed-Domains header to be appended to all HTTP and HTTPS requests to all google.com domains, as described in https://go.microsoft.com/fwlink/?linkid=2197973.\r\n\r\nExample value: example.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_alloweddomainsforapps_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled","displayName":"Get user confirmation before closing a browser window with multiple tabs","description":"This policy lets you configure whether users see a confirmation dialog before closing a browser window with multiple tabs. This dialog asks users to confirm that the browser window can be closed.\r\n\r\nIf you enable this policy, users will be presented with a confirmation dialog when closing a browser window with multiple tabs.\r\n\r\nIf you disable or don't configure this policy, a browser window with multiple tabs will close immediately without user confirmation.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_askbeforecloseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting","displayName":"Configure browser process code integrity guard setting","description":"This policy controls the use of code integrity guard in the browser process, which only allows Microsoft signed binaries to load.\r\n\r\nSetting this policy to Enabled will enable code integrity guard in the browser process.\r\n\r\nSetting this policy to Disabled, or if the policy is not set, will prevent the browser from enabling code integrity guard in the browser process.\r\n\r\nThe policy value Audit (1) is obsolete as of version 110. Setting this value is equivalent to the Disabled value.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances that enrolled for device management.\r\n\r\nThis policy will only take effect on Windows 10 RS2 and above.\r\n\r\nPolicy options mapping:\r\n\r\n* Disabled (0) = Do not enable code integrity guard in the browser process.\r\n\r\n* Audit (1) = Enable code integrity guard audit mode in the browser process.\r\n\r\n* Enabled (2) = Enable code integrity guard enforcement in the browser process.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting","displayName":"Configure browser process code integrity guard setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_0","displayName":"Do not enable code integrity guard in the browser process.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_1","displayName":"Enable code integrity guard audit mode in the browser process.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_browsercodeintegritysetting_browsercodeintegritysetting_2","displayName":"Enable code integrity guard enforcement in the browser process.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled","displayName":"Double Click feature in Microsoft Edge enabled (only available in China)","description":"This policy lets you configure the double click feature in Microsoft Edge.\r\n\r\nDouble Click lets users close a tab by double clicking the left mouse button.\r\n\r\nIf you enable or don't configure this policy, you can use the double click feature to close a tab on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the double click feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_doubleclickclosetabenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled","displayName":"Enable Drop feature in Microsoft Edge","description":"This policy lets you configure the Drop feature in Microsoft Edge.\r\n\r\nDrop lets users send messages or files to themselves.\r\n\r\nIf you enable or don't configure this policy, you can use the Drop feature in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Drop feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_edgeedropenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch","displayName":"Allow import of data from other browsers on each Microsoft Edge launch","description":"If you enable this policy, users will see a prompt to import their browsing data from other browsers on each Microsoft Edge launch.\r\n\r\nIf you disable this policy, users will never see a prompt to import their browsing data from other browsers on each Microsoft Edge launch.\r\n\r\nIf the policy is left unconfigured, users can activate this feature from a Microsoft Edge prompt or from the Settings page.\r\n\r\nNote: A similar policy named 'AutoImportAtFirstRun' (Automatically import another browser's data and settings at first run) exists. This policy should be used if you want to import supported data from other browsers only once while setting up your device.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_importoneachlaunch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled","displayName":"XFA support in native PDF reader enabled","description":"Lets the Microsoft Edge browser enable XFA (XML Forms Architecture) support in the native PDF reader and allows users to open XFA PDF files in the browser.\r\n\r\nIf you enable this policy, XFA support in the native PDF reader will be enabled.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not enable XFA support in the native PDF reader.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_pdfxfaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu","displayName":"Enables Microsoft Edge mini menu","description":"Enables Microsoft Edge mini menu on websites and PDFs. The mini menu is triggered on text selection and has basic actions like copy and smart actions like definitions.\r\n\r\nIf you enable or don't config this policy, selecting text on websites and PDFs will show the Microsoft Edge mini menu.\r\n\r\nIf you disable this policy, the Microsoft Edge mini menu will not be shown when text on websites and PDFs is selected.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_quicksearchshowminimenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended","displayName":"Get user confirmation before closing a browser window with multiple tabs","description":"This policy lets you configure whether users see a confirmation dialog before closing a browser window with multiple tabs. This dialog asks users to confirm that the browser window can be closed.\r\n\r\nIf you enable this policy, users will be presented with a confirmation dialog when closing a browser window with multiple tabs.\r\n\r\nIf you disable or don't configure this policy, a browser window with multiple tabs will close immediately without user confirmation.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_askbeforecloseenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended","displayName":"Enables Microsoft Edge mini menu","description":"Enables Microsoft Edge mini menu on websites and PDFs. The mini menu is triggered on text selection and has basic actions like copy and smart actions like definitions.\r\n\r\nIf you enable or don't config this policy, selecting text on websites and PDFs will show the Microsoft Edge mini menu.\r\n\r\nIf you disable this policy, the Microsoft Edge mini menu will not be shown when text on websites and PDFs is selected.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_recommended_quicksearchshowminimenu_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled","displayName":"Text prediction enabled by default","description":"The Microsoft Turing service uses natural language processing to generate predictions for long-form editable text fields on web pages.\r\n\r\nIf you enable or don't configure this policy, text predictions will be provided for eligible text fields.\r\n\r\nIf you disable this policy, text predictions will not be provided in eligible text fields. Sites may still provide their own text predictions.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge_textpredictionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled","displayName":"Restrict the length of passwords that can be saved in the Password Manager","description":"Make Microsoft Edge restrict the length of usernames and/or passwords that can be saved in the Password Manager.\r\n\r\nIf you enable this policy, Microsoft Edge will not let the user save credentials with usernames and/or passwords longer than 256 characters.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will let the user save credentials with arbitrarily long usernames and/or passwords.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev104~policy~microsoft_edge~passwordmanager_passwordmanagerrestrictlengthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Microsoft Defender SmartScreen warnings.\r\n\r\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent file type extension-based download warnings on swf, exe, and jnlp extensions for *.contoso.com domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\r\n\r\n[\r\n { \"file_extension\": \"jnlp\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"swf\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://contoso.com\",\r\n \"contoso2.com\"\r\n ],\r\n \"file_extension\": \"jnlp\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"swf\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_exemptfiletypedownloadwarnings_exemptfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload","displayName":"Wait for Internet Explorer mode tabs to completely unload before ending the browser session","description":"This policy causes Microsoft Edge to continue running until all Internet Explorer tabs have completely finished unloading. This allows Internet Explorer plugins like ActiveX controls to perform additional critical work even after the browser has been closed. However, this can cause stability and performance issues, and Microsoft Edge processes may remain active in the background with no visible windows if the webpage or plugin prevents Internet Explorer from unloading. This policy should only be used if your organization depends on a plugin that requires this behavior.\r\n\r\nIf you enable this policy, Microsoft Edge will always wait for Internet Explorer mode tabs to fully unload before ending the browser session.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not always wait for Internet Explorer mode tabs to fully unload before ending the browser session.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2174004","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_internetexplorerintegrationalwayswaitforunload_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled","displayName":"Spell checking provided by Microsoft Editor","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages.\r\n\r\nIf you enable or don't configure this policy, Microsoft Editor spell check can be used for eligible text fields.\r\n\r\nIf you disable this policy, spell check can only be provided by local engines that use platform or Hunspell services. The results from these engines might be less informative than the results Microsoft Editor can provide.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is set to disabled, or the user disables spell checking in the settings page, this policy will have no effect.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorproofingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled","displayName":"Synonyms are provided when using Microsoft Editor spell checker","description":"The Microsoft Editor service provides enhanced spell and grammar checking for editable text fields on web pages, and synonyms can be suggested as an integrated feature.\r\n\r\nIf you enable this policy, Microsoft Editor spell checker will provide synonyms for suggestions for misspelled words.\r\n\r\nIf you disable or don't configure this policy, Microsoft Editor spell checker will not provide synonyms for suggestions for misspelled words.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy or the 'MicrosoftEditorProofingEnabled' (Spell checking provided by Microsoft Editor) policy are set to disabled, or the user disables spell checking or chooses not to use Microsoft Editor spell checker in the settings page, this policy will have no effect.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_microsofteditorsynonymsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users","description":"If FriendlyURLs are enabled, Microsoft Edge will compute additional representations of the URL and place them on the clipboard.\r\n\r\nThis policy configures what format will be pasted when the user pastes in external applications, or inside Microsoft Edge without the 'Paste as' context menu item.\r\n\r\nIf configured, this policy makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu will not be available.\r\n\r\n* Not configured = The user will be able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\r\n\r\n* 1 = No additional formats will be stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature will be disabled.\r\n\r\n* 3 = The user will get a friendly URL whenever they paste into surfaces that accept rich text. The plain URL will still be available for non-rich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\r\n\r\n* 4 = (Not currently used)\r\n\r\nThe richer formats may not be well-supported in some paste destinations and/or websites. In these scenarios, the plain URL option is recommended when configuring this policy.\r\n\r\nThe recommended policy is available in Microsoft Edge 105 or later.\r\n\r\nPolicy options mapping:\r\n\r\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\r\n\r\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.\r\n\r\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_1","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_3","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_recommended_configurefriendlyurlformat_recommended_configurefriendlyurlformat_4","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled","displayName":"JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because it is a temporary policy for web standards compliance. It won't work in Microsoft Edge as soon as version 107.\r\nIf you enable this policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4ms, will not be clamped. This improves short horizon performance, but websites abusing the API will still eventually have their setTimeout usages clamped.\r\nIf you disable or don't configure policy, the JavaScript setTimeout and setInterval, with an interval smaller than 4ms, will be clamped.\r\n\r\nThis is a web standards compliancy feature that may change task ordering on a web page, leading to unexpected behavior on sites that are dependent on a certain ordering.\r\nIt also may affect sites with a lot of usage of a timeout of 0ms for setTimeout. For example, increasing CPU load.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev105~policy~microsoft_edge_unthrottlednestedtimeoutenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture","displayName":"Always use the OS capture engine to avoid issues with capturing Internet Explorer mode tabs","description":"Configure this policy to control whether Microsoft Edge will use the \"OS capture engine\" or the \"Browser capture engine\" when capturing browser windows in the same process using the screen-share APIs.\r\n\r\nYou should configure this policy if you want to capture the contents of Internet Explorer mode tabs. However, enabling this policy may negatively impact performance when capturing browser windows in the same process.\r\n\r\nThis policy only affects window capture, not tab capture. The contents of Internet Explorer mode tabs will not be captured when you choose to capture only a single tab, even if you configure this policy.\r\n\r\nIf you enable this policy, Microsoft Edge will always use the OS capture engine for window capture. Internet Explorer mode tabs will have their contents captured.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the Browser capture engine for browser windows in the same process. Internet Explorer mode tabs in these windows will not have their contents captured.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2174004","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_internetexplorerintegrationalwaysuseoscapture_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended","displayName":"Efficiency mode enabled","description":"Enables efficiency mode which helps extend battery life by saving computer resources. By default, efficiency mode is enabled for devices with a battery and disabled otherwise.\r\n\r\nIf you enable this policy, efficiency mode will become active according to the setting chosen by the user. You can configure the efficiency mode setting using the 'EfficiencyMode' (Configure when efficiency mode should become active) policy. If the device does not have a battery, efficiency mode will always be active.\r\n\r\nIf you disable this policy, efficiency mode will never become active. The 'EfficiencyMode' and 'EfficiencyModeOnPowerEnabled' (Enable efficiency mode when the device is connected to a power source) policies will have no effect.\r\n\r\nIf you don't configure this policy, efficiency mode will be enabled for devices with a battery and disabled otherwise. Users can choose the efficiency mode option they want in edge://settings/system.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended","displayName":"Enable efficiency mode when the device is connected to a power source","description":"Allows efficiency mode to become active when the device is connected to a power source. On devices with no battery, this policy has no effect.\r\n\r\nIf you enable this policy, efficiency mode will become active when the device is connected to a power source.\r\n\r\nIf you disable or don't configure this policy, efficiency mode will never become active when the device is connected to a power source.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge_recommended~performance_recommended_efficiencymodeonpowerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled","displayName":"Efficiency mode enabled","description":"Enables efficiency mode which helps extend battery life by saving computer resources. By default, efficiency mode is enabled for devices with a battery and disabled otherwise.\r\n\r\nIf you enable this policy, efficiency mode will become active according to the setting chosen by the user. You can configure the efficiency mode setting using the 'EfficiencyMode' (Configure when efficiency mode should become active) policy. If the device does not have a battery, efficiency mode will always be active.\r\n\r\nIf you disable this policy, efficiency mode will never become active. The 'EfficiencyMode' and 'EfficiencyModeOnPowerEnabled' (Enable efficiency mode when the device is connected to a power source) policies will have no effect.\r\n\r\nIf you don't configure this policy, efficiency mode will be enabled for devices with a battery and disabled otherwise. Users can choose the efficiency mode option they want in edge://settings/system.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled","displayName":"Enable efficiency mode when the device is connected to a power source","description":"Allows efficiency mode to become active when the device is connected to a power source. On devices with no battery, this policy has no effect.\r\n\r\nIf you enable this policy, efficiency mode will become active when the device is connected to a power source.\r\n\r\nIf you disable or don't configure this policy, efficiency mode will never become active when the device is connected to a power source.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~performance_efficiencymodeonpowerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault","displayName":"Print PDF as Image Default","description":"Controls if Microsoft Edge makes the Print as image option the default when printing PDFs.\r\n\r\nIf you enable this policy, Microsoft Edge will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not default to setting the Print as image option in the Print Preview when printing a PDF.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev106~policy~microsoft_edge~printing_printpdfasimagedefault_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet","displayName":"Enhanced Security Mode configuration for Intranet zone sites","description":"Microsoft Edge will apply Enhanced Security Mode on Intranet zone sites by default. This may lead to Intranet zone sites acting in an unexpected manner.\r\n\r\nIf you enable this policy, Microsoft Edge won't apply Enhanced Security Mode on Intranet zone sites.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will apply Enhanced Security Mode on Intranet zone sites.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_enhancesecuritymodebypassintranet_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled","displayName":"Re-enable the Event.path API until Microsoft Edge version 115","description":"Starting in Microsoft Edge version 109, the non-standard API Event.path will be removed to improve web compatibility. This policy re-enables the API until version 115.\r\n\r\nIf you enable this policy, the Event.path API will be available.\r\n\r\nIf you disable this policy, the Event.path API will be unavailable.\r\n\r\nIf this policy is not set, the Event.path API will be in the following default states: available before version 109, and unavailable in version 109 to version 114.\r\n\r\nThis policy will be made obsolete after Microsoft Edge version 115.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_eventpathenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed","displayName":"Allow local MHTML files to open automatically in Internet Explorer mode","description":"This policy controls whether local mht or mhtml files launched from the command line can open automatically in Internet Explorer mode based on the file content without specifying the --ie-mode-file-url command line.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'\r\nand\r\n'InternetExplorerIntegrationLocalFileAllowed' (Allow launching of local files in Internet Explorer mode) is enabled or not configured.\r\n\r\nIf you enable or don't configure this policy, local mht or mhtml files can launch in Microsoft Edge or Internet Explorer mode to best view the file.\r\n\r\nIf you disable this policy, local mht or mhtml files will launch in Microsoft Edge.\r\n\r\nNote that if you use the --ie-mode-file-url command line argument for launching local mht or mhtml files, it takes precedence over how you configured this policy.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_internetexplorerintegrationlocalmhtfileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended","displayName":"Performance Detector Enabled","description":"The performance detector detects tab performance issues and recommends actions to fix the performance issues.\r\n\r\nIf you enable or don't configure this policy, performance detector is turned on.\r\n\r\nIf you disable this policy, performance detector is turned off.\r\n\r\nThe user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about performance detector: https://aka.ms/EdgePerformanceDetector","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_recommended~performance_recommended_performancedetectorenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled","displayName":"Web Select Enabled","description":"Web select lets users select and copy web content while preserving its formatting when pasted in most cases. It also allows more targeted selection on some web elements, such as copying a single column in a table.\r\n\r\nIf you enable or don't configure this policy, Web select is available through the right click context menu and the CTRL+SHIFT+X keyboard shortcut.\r\n\r\nIf you disable this policy, Web select won't be available.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_webselectenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess","displayName":"Force WebSQL to be enabled","description":"WebSQL is on by default as of Microsoft Edge version 101, but can be disabled via a Microsoft Edge flag.\r\nIf you enable this policy, WebSQL cannot be disabled.\r\nIf you disable or don't configure this policy, WebSQL can be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlaccess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled","displayName":"Force WebSQL in non-secure contexts to be enabled (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because it is a temporary policy to support WebSQL in non-secure contexts. It won't work in Microsoft Edge as soon as version 110.\r\nIf you enable this policy, WebSQL in non-secure contexts will be enabled.\r\nIf you disable or don't configure this policy, WebSQL in non-secure contexts will follow the default settings of the broser.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge_websqlnonsecurecontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled","displayName":"Enable Workspaces","description":"Microsoft Edge Workspaces helps improve productivity for users in your organization.\r\n\r\nIf you enable this policy, users will be able to access the Microsoft Edge Workspaces feature.\r\nIf you disable or don't configure this policy, users will not be able to access the Microsoft Edge Workspaces feature.\r\n\r\nTo learn more about the feature, see https://go.microsoft.com/fwlink/?linkid=2209950","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~edgeworkspaces_edgeworkspacesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled","displayName":"Enable the linked account feature","description":"Microsoft Edge guides a user to the account management page where they can link a Microsoft Account (MSA) to an Azure Active Directory (Azure AD) account.\r\n\r\nIf you enable or don't configure this policy, linked account information will be shown on a flyout. When the Azure AD profile doesn't have a linked account it will show \"Add account\".\r\n\r\nIf you disable this policy, linked accounts will be turned off and no extra information will be shown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~identity_linkedaccountenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled","displayName":"Performance Detector Enabled","description":"The performance detector detects tab performance issues and recommends actions to fix the performance issues.\r\n\r\nIf you enable or don't configure this policy, performance detector is turned on.\r\n\r\nIf you disable this policy, performance detector is turned off.\r\n\r\nThe user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about performance detector: https://aka.ms/EdgePerformanceDetector","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~performance_performancedetectorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled","displayName":"Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured","description":"If you enable this policy, users are allowed to add and remove their own URLs to open when starting Edge while maintaining the admin specified mandatory list of sites specified by setting 'RestoreOnStartup' (Action to take on startup) policy to open a list of URLS and providing the list of sites in the 'RestoreOnStartupURLs' (Sites to open when the browser starts) policy.\r\n\r\nIf you disable or don't configure this policy, there is no change to how the 'RestoreOnStartup' and 'RestoreOnStartupURLs' policies work.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev107~policy~microsoft_edge~startup_restoreonstartupuserurlsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting","displayName":"Set the default \"share additional operating system region\" setting","description":"This policy controls the default value for the \"share additional operating system region\" setting in Microsoft Edge.\r\n\r\nThe \"share additional operating system region\" Microsoft Edge setting controls whether the OS Regional format setting will be shared with the web through the default JavaScript locale. If shared, websites will be able to query the OS Regional format using JavaScript code, for example; \"Intl.DateTimeFormat().resolvedOptions().locale\". The default value for the setting is \"Limited\".\r\n\r\nIf you set this policy to \"Limited\", the OS Regional format will only be shared if its language part matches the Microsoft Edge display language.\r\n\r\nIf you set this policy to \"Always\", the OS Regional format will always be shared. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. For example, if a website uses the JavaScript default locale to format dates, the names of the days and months can be displayed in one language while the surrounding text is displayed in another language.\r\n\r\nIf you set this policy to \"Never\", the OS Regional format will never be shared.\r\n\r\nExample 1: In this example the OS Regional format is set to \"en-GB\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Limited\", or \"Always\".\r\n\r\nExample 2: In this example the OS Regional format is set to \"es-MX\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Always\" but will not if the policy is set to \"Limited\".\r\n\r\nFor more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2222282\r\n\r\nPolicy options mapping:\r\n\r\n* Limited (0) = Limited\r\n\r\n* Always (1) = Always share the OS Regional format\r\n\r\n* Never (2) = Never share the OS Regional format\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting","displayName":"'Set the default \"share additional operating system region\" setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_0","displayName":"Limited","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_1","displayName":"Always share the OS Regional format","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_defaultshareadditionalosregionsetting_defaultshareadditionalosregionsetting_2","displayName":"Never share the OS Regional format","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled","displayName":"TLS Encrypted ClientHello Enabled","description":"Encrypted ClientHello (ECH) is an extension to TLS that encrypts the sensitive fields of ClientHello to improve privacy.\r\n\r\nIf ECH is enabled, Microsoft Edge might or might not use ECH depending on server support, the availability of the HTTPS DNS record, or the rollout status.\r\n\r\nIf you enable or do not configure this policy, Microsoft Edge will follow the default rollout process for ECH.\r\n\r\nIf this policy is disabled, Microsoft Edge will not enable ECH.\r\n\r\nBecause ECH is an evolving protocol, Microsoft Edge's implementation is subject to change.\r\n\r\nAs such, this policy is a temporary measure to control the initial experimental implementation. It will be replaced with final controls as the protocol finalizes.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_encryptedclienthelloenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended","displayName":"Set the default \"share additional operating system region\" setting","description":"This policy controls the default value for the \"share additional operating system region\" setting in Microsoft Edge.\r\n\r\nThe \"share additional operating system region\" Microsoft Edge setting controls whether the OS Regional format setting will be shared with the web through the default JavaScript locale. If shared, websites will be able to query the OS Regional format using JavaScript code, for example; \"Intl.DateTimeFormat().resolvedOptions().locale\". The default value for the setting is \"Limited\".\r\n\r\nIf you set this policy to \"Limited\", the OS Regional format will only be shared if its language part matches the Microsoft Edge display language.\r\n\r\nIf you set this policy to \"Always\", the OS Regional format will always be shared. This value could cause unexpected website behavior if the OS Regional format language is different from the Microsoft Edge display language. For example, if a website uses the JavaScript default locale to format dates, the names of the days and months can be displayed in one language while the surrounding text is displayed in another language.\r\n\r\nIf you set this policy to \"Never\", the OS Regional format will never be shared.\r\n\r\nExample 1: In this example the OS Regional format is set to \"en-GB\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Limited\", or \"Always\".\r\n\r\nExample 2: In this example the OS Regional format is set to \"es-MX\" and the browser display language is set to \"en-US\". Then the OS Regional format will be shared if the policy is set to \"Always\" but will not if the policy is set to \"Limited\".\r\n\r\nFor more information about this setting, see https://go.microsoft.com/fwlink/?linkid=2222282\r\n\r\nPolicy options mapping:\r\n\r\n* Limited (0) = Limited\r\n\r\n* Always (1) = Always share the OS Regional format\r\n\r\n* Never (2) = Never share the OS Regional format\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting","displayName":"'Set the default \"share additional operating system region\" setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_0","displayName":"Limited","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_1","displayName":"Always share the OS Regional format","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge_recommended_defaultshareadditionalosregionsetting_recommended_defaultshareadditionalosregionsetting_2","displayName":"Never share the OS Regional format","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled","displayName":"Hide App Launcher on Microsoft Edge new tab page","description":"By default, the App Launcher is shown every time a user opens a new tab page.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge new tab page and App Launcher is there for users.\r\n\r\nIf you disable this policy, App Launcher doesn't appear and users won't be able to launch M365 apps from Microsoft Edge new tab page via the App Launcher.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev108~policy~microsoft_edge~startup_newtabpageapplauncherenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls","displayName":"Allow clipboard use on specific sites","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\r\n\r\nSetting the policy lets you create a list of URL patterns that specify which sites can use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users will still be able to paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\r\n\r\nLeaving the policy unset means 'DefaultClipboardSetting' (Default clipboard site permission) applies for all sites if it's set. If it isn't set, the user's personal setting applies.\r\n\r\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardallowedforurls_clipboardallowedforurlsdesc","displayName":"Allow clipboard use on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls","displayName":"Block clipboard use on specific sites","description":"Configure the list of URL patterns that specify which sites can use the clipboard site permission.\r\n\r\nSetting the policy lets you create a list of URL patterns that specify sites that can't use the clipboard site permission. This doesn't include all clipboard operations on origins that match the patterns. For example, users will still be able to paste using keyboard shortcuts because this isn't controlled by the clipboard site permission.\r\n\r\nLeaving the policy unset means 'DefaultClipboardSetting' (Default clipboard site permission) applies for all sites if it's set. If it isn't set, the user's personal setting applies.\r\n\r\nFor more information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_clipboardblockedforurls_clipboardblockedforurlsdesc","displayName":"Block clipboard use on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting","displayName":"Default clipboard site permission","description":"This policy controls the default value for the clipboard site permission.\r\n\r\nSetting the policy to 2 blocks sites from using the clipboard site permission.\r\n\r\nSetting the policy to 3 or leaving it unset lets the user change the setting and decide if the clipboard APIs are available when a site wants to use an API.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'ClipboardAllowedForUrls' (Allow clipboard use on specific sites) and 'ClipboardBlockedForUrls' (Block clipboard use on specific sites) policies.\r\n\r\nThis policy only affects clipboard operations controlled by the clipboard site permission and doesn't affect sanitized clipboard writes or trusted copy and paste operations.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockClipboard (2) = Do not allow any site to use the clipboard site permission\r\n\r\n* AskClipboard (3) = Allow sites to ask the user to grant the clipboard site permission\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting","displayName":"Default clipboard site permission (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_2","displayName":"Do not allow any site to use the clipboard site permission","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_defaultclipboardsetting_defaultclipboardsetting_3","displayName":"Allow sites to ask the user to grant the clipboard site permission","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled","displayName":"Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 114.\r\n\r\nWhen this policy is set to enabled, Microsoft Edge will perform verification of server certificates using the built-in certificate verifier with the Microsoft Root Store as the source of public trust.\r\n\r\nWhen this policy is set to disabled, Microsoft Edge will use the system certificate verifier and system root certificates.\r\n\r\nWhen this policy is not set, the Microsoft Root Store or system provided roots may be used.\r\n\r\nThis policy is planned to be removed in Microsoft Edge version\r\n121 for Android devices when support for using the platform supplied roots is planned to be removed.\r\n\r\nThis policy was removed in Microsoft Edge version 115 for\r\nMicrosoft Windows and macOS,\r\nMicrosoft Edge version 120 for\r\nLinux, and\r\nMicrosoft Edge version 121 for\r\nAndroid\r\nwhen support for using the platform supplied certificate verifier and roots was removed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge_microsoftrootstoreenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls","displayName":"Allow listed sites to connect to any HID device","description":"This setting allows you to list sites which are automatically granted permission to access all available devices.\r\n\r\nThe URLs must be valid or the policy is ignored. Only the origin (scheme, host and port) of the URL is evaluated.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nThis policy overrides 'DefaultWebHidGuardSetting' (Control use of the WebHID API), 'WebHidAskForUrls' (Allow the WebHID API on these sites), 'WebHidBlockedForUrls' (Block the WebHID API on these sites) and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://microsoft.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowalldevicesforurls_webhidallowalldevicesforurlsdesc","displayName":"Allow listed sites to connect to any HID device (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls","displayName":"Allow listed sites connect to specific HID devices","description":"This setting lets you list the URLs that specify which sites are automatically granted permission to access a HID device with the given vendor and product IDs.\r\n\r\nSetting the policy Each item in the list requires both devices and urls fields for the item to be valid, otherwise the item is ignored.\r\n\r\n * Each item in the devices field must have a vendor_id and may have a product_id field.\r\n\r\n * Omitting the product_id field will create a policy matching any device with the specified vendor ID.\r\n\r\n * An item which has a product_id field without a vendor_id field is invalid and is ignored.\r\n\r\nIf you don't set this policy, that means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nURLs in this policy shouldn't conflict with those configured through 'WebHidBlockedForUrls' (Block the WebHID API on these sites). If they do, this policy takes precedence over 'WebHidBlockedForUrls'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://microsoft.com\",\r\n \"https://chromium.org\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdevicesforurls_webhidallowdevicesforurls","displayName":"Allow listed sites connect to specific HID devices (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage","description":"This setting allows you to list the URLs that specify which sites are automatically granted permission to access a HID device containing a top-level collection with the given HID usage.\r\n\r\nEach item in the list requires both usages and urls fields for the policy to be valid.\r\n\r\n * Each item in the usages field must have a usage_page and may have a usage field.\r\n\r\n * Omitting the usage field will create a policy matching any device containing a top-level collection with a usage from the specified usage page.\r\n\r\n * An item which has a usage field without a usage_page field is invalid and is ignored.\r\n\r\nIf you don't set this policy, that means 'DefaultWebHidGuardSetting' (Control use of the WebHID API) applies, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy.\r\n\r\nURLs in this policy shouldn't conflict with those configured through 'WebHidBlockedForUrls' (Block the WebHID API on these sites). If they do, this policy takes precedence over 'WebHidBlockedForUrls'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://microsoft.com\",\r\n \"https://chromium.org\"\r\n ],\r\n \"usages\": [\r\n {\r\n \"usage\": 5678,\r\n \"usage_page\": 1234\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev109~policy~microsoft_edge~contentsettings_webhidallowdeviceswithhidusagesforurls_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled","displayName":"Save and fill memberships","description":"This policy lets you decide whether users can have their membership info (for example, program name and membership number) automatically saved and used to fill form fields while using Microsoft Edge. By default, users can choose whether to enable it or not.\r\n\r\nIf you enable this policy, users can only have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you don't configure this policy, users can choose whether to have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you disable this policy, users can't have their membership info automatically saved and used to fill form fields while using Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_autofillmembershipsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended","displayName":"Save and fill memberships","description":"This policy lets you decide whether users can have their membership info (for example, program name and membership number) automatically saved and used to fill form fields while using Microsoft Edge. By default, users can choose whether to enable it or not.\r\n\r\nIf you enable this policy, users can only have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you don't configure this policy, users can choose whether to have their membership info automatically saved and used to fill form fields while using Microsoft Edge.\r\n\r\nIf you disable this policy, users can't have their membership info automatically saved and used to fill form fields while using Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_autofillmembershipsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended","displayName":"Search Filters Enabled","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions will be shown.\r\n\r\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\r\n\r\nIf you disable this policy, the autosuggestion dropdown won't display the ribbon of available filters.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended_searchfiltersenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended","displayName":"Configure the sticky print preview settings","description":"Configuring this policy sets the print preview settings as the most recent choice in Print Preview instead of the default print preview settings.\r\n\r\nEach item of this policy expects a boolean:\r\n\r\nLayout specifies if the webpage layout should be kept sticky or not in print preview settings. If we set this to True the webpage layout uses the recent choice otherwise it will set to default value.\r\n\r\nSize specifies if the page size should be kept sticky or not in print preview settings. If we set this to True the page size uses the recent choice otherwise it will set to default value.\r\n\r\nScale Type specifies if the scaling percentage and scale type should be kept sticky or not in print preview settings. If we set this to True the scale percentage and scale type both uses the recent choice oherwise it will set to default value.\r\n\r\nMargins specifies if the page margin should be kept sticky or not in print preview settings. If we set this to True the page margins uses the recent choice otherwise it will set to default value.\r\n\r\nIf you enable this policy, the selected values will use the most recent choice in Print Preview.\r\n\r\nIf you disable or don't configure this policy, print preview settings will not be impacted.\r\n\r\nExample value:\r\n\r\n{\r\n \"layout\": false,\r\n \"margins\": true,\r\n \"scaleType\": false,\r\n \"size\": true\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"layout\": false, \"margins\": true, \"scaleType\": false, \"size\": true}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_recommended~printing_recommended_printpreviewstickysettings_recommended_printpreviewstickysettings","displayName":"Configure the sticky print preview settings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled","displayName":"Search Filters Enabled","description":"Lets you filter your autosuggestions by selecting a filter from the search filters ribbon. For example, if you select the \"Favorites\" filter, only favorites suggestions will be shown.\r\n\r\nIf you enable or don't configure this policy, the autosuggestion dropdown defaults to displaying the ribbon of available filters.\r\n\r\nIf you disable this policy, the autosuggestion dropdown won't display the ribbon of available filters.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchfiltersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled","displayName":"Search in Sidebar enabled","description":"Search in Sidebar allows users to open search result in sidebar (including sidebar search for Progressive Web Apps).\r\n\r\nIf you configure this policy to 'EnableSearchInSidebar' or don't configure it, Search in sidebar will be enabled.\r\n\r\nIf you configure this policy to 'DisableSearchInSidebarForKidsMode', Search in sidebar will be disabled when in Kids mode. Some methods that would normally invoke sidebar search will invoke a traditional search instead.\r\n\r\nIf you configure this policy to 'DisableSearchInSidebar', Search in sidebar will be disabled. Some methods that would normally invoke sidebar search will invoke a traditional search instead.\r\n\r\nPolicy options mapping:\r\n\r\n* EnableSearchInSidebar (0) = Enable search in sidebar\r\n\r\n* DisableSearchInSidebarForKidsMode (1) = Disable search in sidebar for Kids Mode\r\n\r\n* DisableSearchInSidebar (2) = Disable search in sidebar\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled","displayName":"Search in Sidebar enabled (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_0","displayName":"Enable search in sidebar","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_1","displayName":"Disable search in sidebar for Kids Mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge_searchinsidebarenabled_searchinsidebarenabled_2","displayName":"Disable search in sidebar","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls","displayName":"Allow multiple automatic downloads in quick succession on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to perform multiple successive automatic downloads.\r\nIf you don't configure this policy, 'DefaultAutomaticDownloadsSetting' (Default automatic downloads setting) applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\r\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsallowedforurls_automaticdownloadsallowedforurlsdesc","displayName":"Allow multiple automatic downloads in quick succession on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls","displayName":"Block multiple automatic downloads in quick succession on specific sites","description":"Define a list of sites, based on URL patterns, where multiple successive automatic downloads aren't allowed.\r\nIf you don't configure this policy, 'DefaultAutomaticDownloadsSetting' (Default automatic downloads setting) applies for all sites, if it's set. If it isn't set, then the user's personal setting applies.\r\nFor more detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com\r\n[*.]contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_automaticdownloadsblockedforurls_automaticdownloadsblockedforurlsdesc","displayName":"Block multiple automatic downloads in quick succession on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting","displayName":"Default automatic downloads setting","description":"Administrators can use this policy to control whether websites can perform multiple downloads successively. Individual site behavior can be managed using the AutomaticDownloadsAllowedForUrls and AutomaticDownloadsBlockedForUrls policies.\r\n\r\nDefault behavior:\r\n\r\n- A user gesture is required for each additional download.\r\n\r\n- Users can modify their browser settings to disable successive downloads.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowAutomaticDownloads (1) = Allow all websites to perform multiple downloads without requiring a user gesture between each download.\r\n\r\n* BlockAutomaticDownloads (2) = Prevent all websites from performing multiple downloads, even after a user gesture.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting","displayName":"Default automatic downloads setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_1","displayName":"Allow all websites to perform automatic downloads","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~contentsettings_defaultautomaticdownloadssetting_defaultautomaticdownloadssetting_2","displayName":"Don't allow any website to perform automatic downloads","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings","displayName":"Configure navigation settings per groups of URLs in Microsoft Edge Workspaces","description":"This setting lets you to define groups of URLs, and apply specific Microsoft Edge Workspaces navigation settings to each group.\r\n\r\nIf this policy is configured, Microsoft Edge Workspaces will use the configured settings when deciding whether and how to share navigations among collaborators in a Microsoft Edge Workspace.\r\n\r\nIf this policy is not configured, Microsoft Edge Workspaces will use only default and internally configured navigation settings.\r\n\r\nFor more information about configuration options, see https://go.microsoft.com/fwlink/?linkid=2218655\r\n\r\nNote, format url_patterns according to https://go.microsoft.com/fwlink/?linkid=2095322. You can configure the url_regex_patterns in this policy to match multiple URLs using a Perl style regular expression for the pattern. Note that pattern matches are case sensitive. For more information about the regular expression rules that are used, refer to https://go.microsoft.com/fwlink/p/?linkid=2133903.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"navigation_options\": {\r\n \"do_not_send_to\": true,\r\n \"remove_all_query_parameters\": true\r\n },\r\n \"url_patterns\": [\r\n \"https://contoso.com\",\r\n \"https://www.fabrikam.com\",\r\n \".exact.hostname.com\"\r\n ]\r\n },\r\n {\r\n \"navigation_options\": {\r\n \"query_parameters_to_remove\": [\r\n \"username\",\r\n \"login_hint\"\r\n ]\r\n },\r\n \"url_patterns\": [\r\n \"https://adatum.com\"\r\n ]\r\n },\r\n {\r\n \"navigation_options\": {\r\n \"do_not_send_from\": true,\r\n \"prefer_initial_url\": true\r\n },\r\n \"url_regex_patterns\": [\r\n \"\\\\Ahttps://.*?tafe\\\\..*?trs.*?\\\\.fabrikam.com/Sts\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~edgeworkspaces_workspacesnavigationsettings_workspacesnavigationsettings","displayName":"Configure navigation settings per groups of URLs in Microsoft Edge Workspaces (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled","displayName":"Enable Grammar Tools feature within Immersive Reader in Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 125.\r\n\r\nThis policy is obsoleted because Grammar Tools is deprecated from Edge. This policy won't work in Microsoft Edge version 126. Enables the Grammar Tools feature within Immersive Reader in Microsoft Edge.\r\nThis helps improve reading comprehension by splitting words into syllables and highlighting nouns, verbs, adverbs, and adjectives.\r\n\r\nIf you enable this policy or don't configure it, the Grammar Tools option shows up within Immersive Reader.\r\nIf you disable this policy, users can't access the Grammar Tools feature within Immersive Reader.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereadergrammartoolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled","displayName":"Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 126.\r\n\r\nThis Policy is obsoleted because Picture Dictionary is deprecated from Edge as of Sept, 2023. This policy won't work in Microsoft Edge Version 127. Enables the Picture Dictionary feature within Immersive Reader in Microsoft Edge.\r\nThis feature helps in reading comprehension by letting a user to click on any single word and see an illustration related to the meaning.\r\n\r\nIf you enable this policy or don't configure it, the Picture Dictionary option shows up within Immersive Reader.\r\nIf you disable this policy, users can't access the Picture Dictionary feature within Immersive Reader.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~immersivereader_immersivereaderpicturedictionaryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings","displayName":"Configure the sticky print preview settings","description":"Configuring this policy sets the print preview settings as the most recent choice in Print Preview instead of the default print preview settings.\r\n\r\nEach item of this policy expects a boolean:\r\n\r\nLayout specifies if the webpage layout should be kept sticky or not in print preview settings. If we set this to True the webpage layout uses the recent choice otherwise it will set to default value.\r\n\r\nSize specifies if the page size should be kept sticky or not in print preview settings. If we set this to True the page size uses the recent choice otherwise it will set to default value.\r\n\r\nScale Type specifies if the scaling percentage and scale type should be kept sticky or not in print preview settings. If we set this to True the scale percentage and scale type both uses the recent choice oherwise it will set to default value.\r\n\r\nMargins specifies if the page margin should be kept sticky or not in print preview settings. If we set this to True the page margins uses the recent choice otherwise it will set to default value.\r\n\r\nIf you enable this policy, the selected values will use the most recent choice in Print Preview.\r\n\r\nIf you disable or don't configure this policy, print preview settings will not be impacted.\r\n\r\nExample value:\r\n\r\n{\r\n \"layout\": false,\r\n \"margins\": true,\r\n \"scaleType\": false,\r\n \"size\": true\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"layout\": false, \"margins\": true, \"scaleType\": false, \"size\": true}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev110~policy~microsoft_edge~printing_printpreviewstickysettings_printpreviewstickysettings","displayName":"Configure the sticky print preview settings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled","displayName":"Clear history for IE and IE mode every time you exit","description":"This policy controls whether browsing history is deleted from Internet Explorer and Internet Explorer mode every time Microsoft Edge is closed.\r\n\r\nUsers can configure this setting in the 'Clear browsing data for Internet Explorer' option in the Privacy, search, and services menu of Settings.\r\n\r\nIf you enable this policy, on browser exit Internet Explorer browsing history will be cleared.\r\n\r\nIf you disable or do not configure this policy, Internet Explorer browsing history will not be cleared on browser exit.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_internetexplorermodecleardataonexitenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled","displayName":"Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled","description":"The policy lets Microsoft Edge launch the new version of the built-in PDF reader that's powered by Adobe Acrobat's PDF rendering engine. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF handling, and greater accessibility.\r\n\r\nIf you enable this policy, Microsoft Edge will use the new Adobe Acrobat powered built-in PDF reader to open all PDF files.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the existing PDF reader to open all PDF files.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_newpdfreaderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended","displayName":"Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled","description":"The policy lets Microsoft Edge launch the new version of the built-in PDF reader that's powered by Adobe Acrobat's PDF rendering engine. The new PDF reader ensures that there's no loss of functionality and delivers an enhanced PDF experience. This experience includes richer rendering, improved performance, strong security for PDF handling, and greater accessibility.\r\n\r\nIf you enable this policy, Microsoft Edge will use the new Adobe Acrobat powered built-in PDF reader to open all PDF files.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the existing PDF reader to open all PDF files.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_recommended_newpdfreaderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed","displayName":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context","description":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context. A SharedArrayBuffer is a binary data buffer that can be used to create views on shared memory. SharedArrayBuffers have a memory access vulnerability in several popular CPUs.\r\n\r\nIf you enable this policy, sites are allowed to use SharedArrayBuffers with no restrictions.\r\n\r\nIf you disable or don't configure this policy, sites are allowed to use SharedArrayBuffers only when cross-origin isolated.\r\n\r\nMicrosoft Edge will require cross-origin isolation when using SharedArrayBuffers from Microsoft Edge 91 onward for Web Compatibility reasons.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_sharedarraybufferunrestrictedaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton","displayName":"Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription","description":"This policy lets the native PDF viewer in Microsoft Edge show a button that lets a user looking for advanced digital document features to discover and subscribe to premium offerings. This is done via the Acrobat extension.\r\n\r\nIf you enable or don't configure this policy, the button will show up on the native PDF viewer in Microsoft Edge. A user will be able to buy Adobe subscription to access their premium offerings.\r\n\r\nIf you disable this policy, the button won't be visible on the native PDF viewer in Microsoft Edge. A user won't be able to discover Adobe's advanced PDF tools or buy their subscriptions.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev111~policy~microsoft_edge_showacrobatsubscriptionbutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled","displayName":"Enable CryptoWallet feature (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 128.\r\n\r\nThis policy is obsoleted because this feature will no longer be supported, starting in Microsoft Edge 128. There is no replacement for this policy.\r\n Enables CryptoWallet feature in Microsoft Edge.\r\n\r\n If you enable this policy or don't configure it, users can use CryptoWallet feature which allows users to securely store, manage and transact digital assets such as Bitcoin, Ethereum and other cryptocurrencies. Therefore, Microsoft Edge may access Microsoft servers to communicate with the web3 world during the use of the CryptoWallet feature.\r\n\r\n If you disable this policy, users can't use CryptoWallet feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_cryptowalletenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled","displayName":"Mouse Gesture Enabled","description":"This policy lets you configure the Mouse Gesture feature in Microsoft Edge.\r\n\r\nThis feature provides an easy way for users to complete tasks like scroll forward or backward, open new tab, refresh page, etc. They can finish a task by pressing and holding the mouse right button to draw certain patterns on a webpage, instead of clicking the buttons or using keyboard shortcuts.\r\n\r\nIf you enable or don't configure this policy, you can use the Mouse Gesture feature on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Mouse Gesture feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev112~policy~microsoft_edge_mousegestureenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled","displayName":"Enable Read Aloud feature in Microsoft Edge","description":"Enables the Read Aloud feature within Microsoft Edge.\r\nUsing this feature, users can listen to the content on the web page. This enables users to multi-task or improve their reading comprehension by hearing content at their own pace.\r\n\r\nIf you enable this policy or don't configure it, the Read Aloud option shows up in the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.\r\nIf you disable this policy, users can't access the Read Aloud feature from the address bar, right click context menu, more menu, on the PDF toolbar, and within Immersive Reader.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_readaloudenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview","displayName":"Restore PDF view","description":"Enables PDF View Recovery in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy Microsoft Edge will recover the last state of PDF view and land users to the section where they ended reading in the last session.\r\n\r\nIf you disable this policy Microsoft Edge will recover the last state of PDF view and land users at the start of the PDF file.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_restorepdfview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled","displayName":"Enable tab organization suggestions","description":"This policy controls whether Microsoft Edge can use its tab organization service to help name or suggest tab groups to increase productivity.\r\n\r\nIf you enable or don't configure this policy, when a user creates a tab group or activates certain \"Group Similar Tabs\" features Microsoft Edge sends tab data to its tab organization service. This data includes URLs, page titles, and existing group information. The service uses this data to return suggestions for better groupings and group names.\r\n\r\nIf you disable this policy, no data will be sent to the tab organization service. Microsoft Edge won't suggest group names when a group is created and certain \"Group Similar Tabs\" features that rely on the service won't be available.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev113~policy~microsoft_edge_tabservicesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled","displayName":"Enables default browser settings campaigns","description":"This policy enables the default browser settings campaign. If a user clicks to accept the campaign, their default browser and/or default search engine will be changed to Microsoft Edge and Microsoft Bing, respectively. If the user dismisses the campaign, the user's browser settings will remain unchanged.\r\n\r\nIf you enable or don't configure this policy, users will be prompted to set Microsoft Edge as the default browser and Microsoft Bing as the default search engine, if they do not have those browser settings.\r\n\r\nIf you disable this policy, users will not be prompted to set Microsoft Edge as the default browser, or to set Microsoft Bing as the default search engine.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_defaultbrowsersettingscampaignenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled","displayName":"Enable Discover access to page contents for AAD profiles (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nThis policy has been obsoleted as of Edge 127. Two new Edge Policies have taken its place. Those policies are CopilotPageContext (Control Copilot access to page contents for AAD profiles), and CopilotCDPPageContext (Control Copilot with Commercial Data Protection access to page contents for AAD profiles).\r\n\r\nThis policy did not allow for separate control of Copilot and Copilot with Commercial Data Protection. The new policies allow separate control of these versions of Copilot. The new policies also allow admins to force-enable Copilot access to Edge page contents by enabling the policy, whereas DiscoverPageContextEnabled only allowed force-disabling of Copilot page access.\r\n\r\nThis policy controls Discover access to page contents for AAD profiles. Discover is an extension that hosts Bing Chat. In order to summarize pages and interact with text selections, it needs to be able to access the page contents. When enabled, page contents will be sent to Bing. This policy does not affect MSA profiles.\r\n\r\nIf you enable or don't configure this policy, Discover will have access to page contents.\r\n\r\nIf you disable this policy, Discover will not be able to access page contents.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_discoverpagecontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled","displayName":"Determines whether the built-in certificate verifier will enforce constraints encoded into trust anchors loaded from the platform trust store (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 127.\r\n\r\nX.509 certificates may encode constraints, such as Name Constraints, in extensions in the certificate. RFC 5280 specifies that enforcing such constraints on trust anchor certificates is optional.\r\n\r\nStarting in Microsoft Edge 112, such constraints in certificates loaded from the platform certificate store will now be enforced.\r\n\r\nThis policy exists as a temporary opt-out in case an enterprise encounters issues with the constraints encoded in their private roots. In that case this policy may be used to temporarily disable enforcement of the constraints while correcting the certificate issues.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will enforce constraints encoded into trust anchors loaded from the platform trust store.\r\n\r\nIf you disable this policy, Microsoft Edge will not enforce constraints encoded into trust anchors loaded from the platform trust store.\r\n\r\nThis policy has no effect if the 'MicrosoftRootStoreEnabled' (Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates) policy is disabled.\r\n\r\nThis policy was removed in Microsoft Edge version 128. Starting with that version, constraints in trust anchors are always enforced.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_enforcelocalanchorconstraintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton","displayName":"Show Downloads button on the toolbar","description":"Set this policy to always show the Downloads button on the toolbar.\r\n\r\nIf you enable this policy, the Downloads button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure the policy, the Downloads button isn't shown on the toolbar by default. Users can toggle the Downloads button in edge://settings/appearance.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_showdownloadstoolbarbutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled","displayName":"Standalone Sidebar Enabled","description":"Standalone Sidebar is an optional mode for the Sidebar in Microsoft Edge. When this mode is activated by a user, the Sidebar appears in a fixed position on the Microsoft Windows desktop, and is hidden from the browser application frame.\r\n\r\nIf you enable or don't configure this policy, users will have the ability to activate the Standalone Sidebar.\r\nIf you disable this policy, options to activate Standalone Sidebar will be hidden or made unavailable. Note that blocking 'HubsSidebarEnabled' (Show Hubs Sidebar) will also prevent users from accessing Standalone Sidebar.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev114~policy~microsoft_edge_standalonehubssidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled","displayName":"Compose is enabled for writing on the web","description":"This policy lets you configure Compose in Microsoft Edge. Compose provides help for writing with AI-generated text, which lets the user get ideas for writing. This includes elaborating on text, re-writing, changing tone, formatting the text, and more.\r\n\r\nIf you enable or don't configure this policy, Compose can provide text generation for eligible fields, which are text editable and don't have an autocomplete attribute.\r\n\r\nIf you disable this policy, Compose will not be able to provide text generation for eligible fields. Compose will still be available for prompt-based text generation through the sidebar and must be managed with either 'EdgeDiscoverEnabled' (Discover feature In Microsoft Edge) policy or 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_composeinlineenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled","displayName":"Manage the indicator UI of the Enhanced Security Mode (ESM) feature in Microsoft Edge","description":"This policy lets you manage whether the indicator User Interface (UI) for enhanced security mode is shown or not when ESM is turned on.\r\n\r\nIf you enable or don't configure this policy, the indicator UI is on.\r\n\r\nIf you disable this policy, the indicator UI is off.\r\n\r\nNote: If this policy is used, only the indicator User Interface experience is supressed - ESM is still turned on. For more information, see the 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) policy.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeindicatoruienabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled","displayName":"Manage opt-out user experience for Enhanced Security Mode (ESM) in Microsoft Edge (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy lets you manage whether the opt-out user experience for enhanced security mode is presented when ESM is turned on for Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, the UI for the opt-out user experience is on.\r\n\r\nIf you disable this policy, the UI for the opt-out user experience is off.\r\n\r\nNote: If this policy is used, only the User Interface for the opt-out experience is supressed - ESM is still turned on. For more information, see the 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) policy.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895.\r\n\r\nAfter careful evaluation, we have determined that this experimental opt-out UX is not required. As a result, this policy will be deprecated and stop working after Edge version 130.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_enhancesecuritymodeoptoutuxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended","displayName":"Wallet Donation Enabled","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\r\n\r\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\r\n\r\nIf you disable this policy, users can't use the Wallet Donation feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_recommended_walletdonationenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled","displayName":"Search for image enabled","description":"This policy lets you configure the Image Search feature in the right-click context menu.\r\n\r\nIf you enable or don't configure this policy, then the \"Search the web for image\" option will be visible in the context menu.\r\n\r\nIf you disable this policy, then the \"Search the web for image\" will not be visible in the context menu.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_searchforimageenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled","displayName":"Wallet Donation Enabled","description":"The Wallet Donation feature in Microsoft Edge allows users to view their donation summary, explore Nonprofit organizations (NPOs), donate to an NPO, manage their monthly donations, and view their donation history.\r\n\r\nIf you enable or don't configure this policy, users can use the Wallet Donation feature.\r\n\r\nIf you disable this policy, users can't use the Wallet Donation feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge_walletdonationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled","displayName":"Microsoft Edge management enabled","description":"Microsoft Edge management service in Microsoft 365 Admin Center lets you set policy and manage users through a Microsoft Edge focused cloud-based management experience. This policy lets you control whether Microsoft Edge management is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will attempt to connect to the Microsoft Edge management service to download and apply policy assigned to the Azure AD account of the user.\r\n\r\nIf you disable this policy, Microsoft Edge will not attempt to connect to the Microsoft Edge management service.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken","displayName":"Microsoft Edge management enrollment token","description":"Microsoft Edge management service in Microsoft 365 Admin Center lets you set policy and manage users through a Microsoft Edge focused cloud-based management experience. This policy lets you specify an enrollment token that's used to register with Microsoft Edge management service and deploy the associated policies. The user must be signed into Microsoft Edge with a valid work or school account otherwise Microsoft Edge will not download the policy.\r\n\r\nIf you enable this policy, Microsoft Edge will attempt to use the specified enrollment token to register with the Microsoft Edge management service and download the published policy.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not attempt to connect to the Microsoft Edge management service.\r\n\r\nExample value: RgAAAACBbzoQDmUrRfq3WeKUoFeEBwBOqK2QPYsBT5V3lQFoKND-AAAAAAEVAAAOqK2QPYvBT5V4lQFoKMD-AAADTXvzAAAA0","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementenrollmenttoken_edgemanagementenrollmenttoken","displayName":"Microsoft Edge management enrollment token (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled","displayName":"Microsoft Edge management extensions feedback enabled","description":"This setting controls whether Microsoft Edge sends data about blocked extensions to the Microsoft Edge management service.\r\n\r\nThe 'EdgeManagementEnabled' policy must also be enabled for this setting to take effect.\r\n\r\nIf you enable this policy, Microsoft Edge will send data to the Microsoft Edge service when a user tries to install a blocked extension.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge won't send any data to the Microsoft Edge service about blocked extensions.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev115~policy~microsoft_edge~manageability_edgemanagementextensionsfeedbackenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended","displayName":"Pin browser essentials toolbar button","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\r\n\r\nWhen the button is pinned, it will always appear on the toolbar.\r\n\r\nWhen the button isn't pinned, it will only appear when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\r\n\r\nIf you enable or don't configure this policy, the Browser essentials button will be pinned on the toolbar.\r\n\r\nIf you disable this policy, the Browser essentials button won't be pinned on the toolbar.\r\n\r\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_recommended~performance_recommended_pinbrowseressentialstoolbarbutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed","displayName":"Allows enabling throttling of non-visible, cross-origin iframes (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 123.\r\n\r\nThrottling of cross-origin frames that are display:none and non-visible is a feature designed to make cross-process and same-process cross-origin iframes consistent in their rendering behavior. For more details on cross-process vs. same-process throttling, refer to https://go.microsoft.com/fwlink/?linkid=2239564.\r\n\r\nThis enterprise policy exists to allow administrators to control whether their users are able to turn the additional throttling on or not.\r\n\r\nIf you enable or don't configure this policy, users can opt-in to throttling.\r\n\r\nIf you disable this policy, users can't enable throttling.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge_throttlenonvisiblecrossoriginiframesallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting","displayName":"Default setting for third-party storage partitioning","description":"This policy controls whether third-party storage partitioning is allowed by default.\r\n\r\nIf this policy is set to 1 - AllowPartitioning, or unset, third-party storage partitioning will be allowed by default. This default may be overridden for specific top-level origins by other means.\r\n\r\nIf this policy is set to 2 - BlockPartitioning, third-party storage partitioning will be disabled for all contexts.\r\n\r\nUse ThirdPartyStoragePartitioningBlockedForOrigins to disable third-party storage partitioning for specific top-level origins.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowPartitioning (1) = Allow third-party storage partitioning by default.\r\n\r\n* BlockPartitioning (2) = Disable third-party storage partitioning.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting","displayName":"Default setting for third-party storage partitioning (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_1","displayName":"Let third-party storage partitioning to be enabled.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_2","displayName":"Block third-party storage partitioning from being enabled.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins","displayName":"Disable third-party storage partitioning for specific top-level origins","description":"This policy lets you set a list of URL patterns that specify top-level origins for which third-party storage partitioning (partitioning of cross-origin iframe storage) should be disabled.\r\n\r\nIf this policy isn't set or a top-level origin doesn't match one of the URL patterns, then the value from 'DefaultThirdPartyStoragePartitioningSetting' (Default setting for third-party storage partitioning) will be used.\r\n\r\nNote that the patterns you list are treated as origins, not URLs, so you shouldn't specify a path. For detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~contentsettings_thirdpartystoragepartitioningblockedfororigins_thirdpartystoragepartitioningblockedfororiginsdesc","displayName":"Block third-party storage partitioning for these origins (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton","displayName":"Pin browser essentials toolbar button","description":"This policy lets you configure whether to pin the Browser essentials button on the toolbar.\r\n\r\nWhen the button is pinned, it will always appear on the toolbar.\r\n\r\nWhen the button isn't pinned, it will only appear when there's an alert. An example of this kind of alert is the performance detector alert that indicates the browser is using high CPU or memory.\r\n\r\nIf you enable or don't configure this policy, the Browser essentials button will be pinned on the toolbar.\r\n\r\nIf you disable this policy, the Browser essentials button won't be pinned on the toolbar.\r\n\r\nLearn more about browser essentials: https://go.microsoft.com/fwlink/?linkid=2240439","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev116~policy~microsoft_edge~performance_pinbrowseressentialstoolbarbutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications","displayName":"Allows system notifications","description":"Lets you use system notifications instead of Microsoft Edge's embedded Message Center on Windows and Linux.\r\n\r\nIf set to True or not set, Microsoft Edge is allowed to use system notifications.\r\n\r\nIf set to False, Microsoft Edge will not use system notifications. Microsoft Edge's embedded Message Center will be used as a fallback.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_allowsystemnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled","displayName":"Edge Wallet E-Tree Enabled","description":"The Edge Wallet E-Tree feature in Microsoft Edge allows users to plant a E-Tree for their own.\r\n\r\nIf you enable or don't configure this policy, users can use the Edge Wallet E-Tree feature.\r\n\r\nIf you disable this policy, users can't use the Edge Wallet E-Tree feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_edgewalletetreeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed","displayName":"Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode","description":"This policy controls whether MHT or MHTML files that are downloaded from the web are automatically opened in Internet Explorer mode.\r\n\r\nIf you enable this policy, the MHT or MHTML files that are downloaded from the web can be opened in both Microsoft Edge and Internet Explorer mode to provide the best user experience.\r\n\r\nIf you disable or don't configure this policy, MHT or MHTML files that are downloaded from the web won't automatically open in Internet Explorer mode.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_internetexplorerintegrationzoneidentifiermhtfileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended","displayName":"Edge Wallet E-Tree Enabled","description":"The Edge Wallet E-Tree feature in Microsoft Edge allows users to plant a E-Tree for their own.\r\n\r\nIf you enable or don't configure this policy, users can use the Edge Wallet E-Tree feature.\r\n\r\nIf you disable this policy, users can't use the Edge Wallet E-Tree feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended_edgewalletetreeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended","displayName":"Enable Gamer Mode","description":"Microsoft Edge Gamer Mode allows gamers to personalize their browser with gaming themes and gives them the option of enabling Efficiency Mode for PC gaming, the Gaming feed on new tabs, sidebar apps for gamers, and more.\r\n\r\nIf you enable or don't configure this policy, users can opt into Gamer Mode.\r\nIf you disable this policy, Gamer Mode will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_recommended~edgegames_recommended_gamermodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed","displayName":"Enable the Search bar","description":"Enables the search bar. When enabled, users can use the search bar to search the web from their desktop or from an application. The search bar provides a search box, powered by Edge default search engine, that shows web suggestions and opens all web searches in Microsoft Edge. The search bar can be launched from the \"More tools\" menu or jump list in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy:\r\nThe search bar will be automatically enabled for all profiles.\r\nThe option to enable the search bar at startup will be toggled on if the 'SearchbarIsEnabledOnStartup' (Allow the Search bar at Windows startup) policy is enabled.\r\nIf the 'SearchbarIsEnabledOnStartup' is disabled or not configured, the option to enable the search bar at startup will be toggled off.\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge \"More tools\" menu. Users can launch the search bar from \"More tools\".\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge jump list menu. Users can launch the search bar from the Microsoft Edge jump list menu.\r\nThe search bar can be turned off by the \"Quit\" option in the System tray or by closing the search bar from the 3 dot menu. The search bar will be restarted on system reboot if auto-start is enabled.\r\n\r\n\r\nIf you disable this policy:\r\nThe search bar will be disabled for all profiles.\r\nThe option to launch the search bar from Microsoft Edge \"More tools\" menu will be disabled.\r\nThe option to launch the search bar from Microsoft Edge jump list menu will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup","displayName":"Allow the Search bar at Windows startup","description":"Allows the Search bar to start running at Windows startup.\r\n\r\nIf you enable:\r\n The Search bar will start running at Windows startup by default.\r\n If the Search bar is disabled via 'SearchbarAllowed' (Enable the Search bar) policy, this policy will not start the Search bar on Windows startup.\r\n\r\nIf you disable this policy:\r\n The Search bar will not start at Windows startup for all profiles.\r\n The option to start the search bar at Windows startup will be disabled and toggled off in search bar settings.\r\n\r\nIf you don't configure the policy:\r\n The Search bar will not start at Windows startup for all profiles.\r\n The option to start the search bar at Windows startup will be toggled off in search bar settings.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_searchbarisenabledonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails","displayName":"Show thumbnail images for browsing history","description":"This policy lets you configure whether the history thumbnail feature collects and saves images for the sites you visit. When enabled, this feature makes it easier to identify sites when you hover over your history results.\r\nIf you don't configure this policy, the thumbnail feature is turned on after a user visits the history hub twice in the past 7 days.\r\nIf you enable this policy, the history thumbnail collects and saves images for visited sites.\r\nIf you disable this policy, the history thumbnail doesn't collect and save images for visited sites.\r\nWhen the feature is disabled, existing images are deleted on a per user basis, and the feature no longer collects or saves images when a site is visited.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_showhistorythumbnails_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled","displayName":"Enable split screen feature in Microsoft Edge","description":"This policy lets you configure the split screen feature in Microsoft Edge. This feature lets a user open two web pages in one tab.\r\n\r\nIf you enable or don't configure this policy, users can use the split screen feature in Microsoft Edge.\r\n\r\nIf you disable this policy, users can't use the split screen feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_splitscreenenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled","displayName":"Enable upload files from mobile in Microsoft Edge desktop","description":"This policy lets you configure the \"Upload from mobile\" feature in Microsoft Edge.\r\n\r\nUpload from mobile lets users select file from mobile devices to desktop when user upload file in a webpage in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, you can use the Upload from mobile feature in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Upload from mobile feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge_uploadfromphoneenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled","displayName":"Enable Gamer Mode","description":"Microsoft Edge Gamer Mode allows gamers to personalize their browser with gaming themes and gives them the option of enabling Efficiency Mode for PC gaming, the Gaming feed on new tabs, sidebar apps for gamers, and more.\r\n\r\nIf you enable or don't configure this policy, users can opt into Gamer Mode.\r\nIf you disable this policy, Gamer Mode will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev117~policy~microsoft_edge~edgegames_gamermodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled","displayName":"Control the behavior for the cancel dialog produced by the beforeunload event","description":"This policy provides a temporary opt-out for two related fixes to the behavior of the confirmation dialog that’s shown by the beforeunload event.\r\n\r\nWhen this policy is Enabled, the new (correct) behavior will be used.\r\nWhen this policy is Disabled, the old (legacy) behavior will be used.\r\nWhen this policy is left not set, the default behavior will be used.\r\nNote: This policy is a temporary workaround and will be removed in a future release.\r\n\r\nNew and correct behavior: In `beforeunload`, calling `event.preventDefault()` will trigger the confirmation dialog. Setting `event.returnValue` to the empty string won’t trigger the confirmation dialog.\r\n\r\nOld and legacy behavior: In `beforeunload`, calling `event.preventDefault()` won’t trigger the confirmation dialog. Setting `event.returnValue` to the empty string will trigger the confirmation dialog.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_beforeunloadeventcancelbypreventdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient","displayName":"Forces Microsoft Edge to use its built-in WNS push client to connect to the Windows Push Notification Service.","description":"In some environments, the Windows OS client can't connect to the Windows Push Notification Service (WNS). For these environments, you can use the Microsoft Edge built-in WNS push client, which may be able to connect successfully.\r\n\r\nIf enabled, Microsoft Edge will use its built-in WNS push client to connect to WNS.\r\n\r\nIf disabled or not configured, Microsoft Edge will use the Windows OS client to connect to the Windows Push Notification Service. This is the default setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcebuiltinpushmessagingclient_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled","displayName":"Controls whether unload event handlers can be disabled.","description":"unload event handlers are being deprecated. Whether they fire depends on the unload Permissions-Policy.\r\nCurrently, they are allowed by policy by default. In the future they will gradually move to being disallowed by default and sites must explicitly enable them using Permissions-Policy headers.\r\nThis enterprise policy can be used to opt out of this gradual deprecation by forcing the default to stay enabled.\r\n\r\nPages might depend on unload event handlers to save data or signal the end of a user session to the server.\r\nThis is not recommended because it's unreliable and impacts performance by blocking use of BackForwardCache.\r\nRecommended alternatives exist, but the unload event has been used for a long time. Some applications might still rely on them.\r\n\r\nIf you disable this policy or don't configure it, unload event handlers will gradually be deprecated in-line with the deprecation rollout and sites which don't set Permissions-Policy header will stop firing `unload` events.\r\n\r\nIf you enable this policy then unload event handlers will continue to work by default.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_forcepermissionpolicyunloaddefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled","displayName":"Enable Picture in Picture overlay feature on supported webpages in Microsoft Edge","description":"This policy lets you configure the Picture in Picture floating overlay button in Microsoft Edge.\r\n\r\nThe Picture in Picture floating overlay button lets user to watch videos in a floating window on top of other windows.\r\n\r\nIf you enable or don't configure this policy, you can use the Picture in Picture floating overlay button in Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Picture in Picture floating overlay button in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_pictureinpictureoverlayenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended","displayName":"Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes","description":"When this policy is enabled, the passwords saved with Edge Password Manager are exempted from deletion when the browser closes. This policy is only effective when:\r\n- The 'Passwords' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy ClearBrowsingDataOnExit is enabled\r\n\r\nIf you enable this policy, passwords won't be cleared when the browser closes.\r\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_recommended~passwordmanager_recommended_passworddeleteonbrowsercloseenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled","displayName":"Control the new behavior for event dispatching on disabled form controls","description":"Event dispatching on disabled form controls is being changed in Edge to improve compatibility with other browsers and to improve the developer experience.\r\n\r\nWith this change, MouseEvents get dispatched on disabled form control elements. Exceptions for this behavior are click, mouseup, and mousedown. Some examples of the new events are mousemove, mouseenter, and mouseleave.\r\n\r\nThis change also truncates the event path of click, mouseup, and mousedown when they’re dispatched on children of disabled form controls. These events aren’t dispatched on the disabled form control or any of its ancestors.\r\n\r\nNote: This new behavior might break some websites.\r\n\r\nIf this policy is enabled or left not set, the new behavior will be used.\r\n\r\nIf this policy is disabled, the old behavior will be used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge_sendmouseeventsdisabledformcontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled","displayName":"Data URL support for SVGUseElement","description":"This policy enables Data URL support for SVGUseElement, which will be disabled\r\nby default starting in Edge stable version 119.\r\nIf this policy is Enabled, Data URLs will keep working in SVGUseElement.\r\nIf this policy is Disabled or left not set, Data URLs won't work in SVGUseElement.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~contentsettings_dataurlinsvguseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled","displayName":"Enable compression dictionary transport support","description":"This feature enables the use of dictionary-specific content encodings in the Accept-Encoding request header (\"sbr\" and \"zst-d\") when dictionaries are available for use.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will accept web contents using the compression dictionary transport feature.\r\n\r\nIf you disable this policy, Microsoft Edge will turn off the compression dictionary transport feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~network_compressiondictionarytransportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled","displayName":"Prevent passwords from being deleted if any Edge settings is enabled to delete browsing data when Microsoft Edge closes","description":"When this policy is enabled, the passwords saved with Edge Password Manager are exempted from deletion when the browser closes. This policy is only effective when:\r\n- The 'Passwords' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy ClearBrowsingDataOnExit is enabled\r\n\r\nIf you enable this policy, passwords won't be cleared when the browser closes.\r\nIf you disable or don't configure this policy, the user's personal configuration is used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~passwordmanager_passworddeleteonbrowsercloseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings","displayName":"Disable SmartScreen AppRep based warnings for specified file types on specified domains","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from SmartScreen AppRep warnings. For example, if the \"vbe\" extension is associated with \"website1.com\", users would not see a SmartScreen AppRep warning when downloading \"vbe\" files from \"website1.com\", but may see a download warning when downloading \"vbe\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to file type extension-based security warnings and mixed-content download warnings.\r\n\r\nIf you disable this policy or don't configure it, files that trigger SmartScreen AppRep download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so \"vbe\" should be used instead of \".vbe\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent SmartScreen AppRep warnings on msi, exe, and vbe extensions for *.contoso.com domains. It may show the user a SmartScreen AppRep warning on any other domain for exe and msi files, but not for vbe files.\r\n\r\n[\r\n { \"file_extension\": \"msi\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"vbe\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of SmartScreen AppRep download warnings for \"vbe\" files for all domains, applying suppression of such warnings for all domains is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://contoso.com\",\r\n \"contoso2.com\"\r\n ],\r\n \"file_extension\": \"msi\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"vbe\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~smartscreen_exemptsmartscreendownloadwarnings_exemptsmartscreendownloadwarnings","displayName":"Disable SmartScreen AppRep based warnings for specified file types on specified domains (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled","displayName":"Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page","description":"By default, there are two Bing chat entry-points on new tab page. One is inside the new tab page search box, and one is in the Bing Autosuggest drawer on-click.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge Enterprise new tab page and the Bing chat entry-points are there for users.\r\n\r\nIf you disable this policy, Bing chat entry-points don't appear on the new tab page.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagebingchatenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled","displayName":"Hide the company logo on the Microsoft Edge new tab page","description":"By default, the company logo is shown on the new tab page if the company logo is configured in Admin Portal.\r\n\r\nIf you enable or don't configure this policy, there is no change on the Microsoft Edge new tab page and the company logo is there for users.\r\n\r\nIf you disable this policy, the company logo doesn't appear on Microsoft Edge new tab page.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev118~policy~microsoft_edge~startup_newtabpagecompanylogoenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended","displayName":"Allow the use of your organization's branding assets from Microsoft Entra on the profile-related UI of a work profile","description":"Allow the use of your organization's branding assets from Entra, if any, on the profile-related UI of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\r\n\r\nIf you enable this policy, your organization's branding assets from Entra will be used.\r\n\r\nIf you disable or don't configure this policy, your organization's branding assets from Entra won't be used.\r\n\r\nFor more information about configuring your organization's branding assets on Entra, please visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge_recommended_organizationalbrandingonworkprofileuienabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile","displayName":"Switch intranet sites to a work profile","description":"Allows Microsoft Edge to switch to the appropriate profile when Microsoft Edge detects that a URL is the intranet.\r\n\r\nIf you enable or don't configure this policy, navigations to intranet URLs will switch to the most recently used work profile if one exists.\r\n\r\nIf you disable this policy, navigations to intranet URLs will remain in the current browser profile.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchintranetsitestoworkprofile_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile","displayName":"Switch sites on the IE mode site list to a work profile","description":"Allows Microsoft Edge to switch to the appropriate profile when navigating to a site that matches an entry on the IE mode site list. Only sites that specify IE mode or Edge mode will be switched to the work profile.\r\n\r\nIf you enable or don't configure this policy, navigations to URLs matching a site on the IE mode site list will switch to the most recently used work profile if one exists.\r\n\r\nIf you disable this policy, navigations to URLs matching a site on the IE mode site list will remain in the current browser profile.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~identity_switchsitesoniemodesitelisttoworkprofile_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy","displayName":"Microsoft Edge management service policy overrides platform policy.","description":"If you enable this policy, the cloud-based Microsoft Edge management service policy takes precedence if it conflicts with platform policy.\r\n\r\nIf you disable or don't configure this policy, platform policy takes precedence if it conflicts with the cloud-based Microsoft Edge management service policy.\r\n\r\nThis mandatory policy affects machine scope cloud-based Microsoft Edge management policies.\r\n\r\nMachine policies apply to all edge browser instances regardless of the user who is logged in.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementpolicyoverridesplatformpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy","displayName":"Allow cloud-based Microsoft Edge management service user policies to override local user policies.","description":"If you enable this policy, cloud-based Microsoft Edge management service user policies takes precedence if it conflicts with local user policy.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge management service user policies will take precedence.\r\n\r\nThe policy can be combined with 'EdgeManagementPolicyOverridesPlatformPolicy' (Microsoft Edge management service policy overrides platform policy.). If both policies are enabled, all cloud-based Microsoft Edge management service policies will take precedence over conflicting local service policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev119~policy~microsoft_edge~manageability_edgemanagementuserpolicyoverridescloudmachinepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled","displayName":"Edge 3P SERP Telemetry Enabled","description":"Edge3P Telemetry in Microsoft Edge captures the searches user does on third party search providers without identifying the person or the device and captures only if the user has consented to this collection of data. User can turn off the collection at any time in the browser settings.\r\n\r\nIf you enable or don't configure this policy, Edge 3P SERP Telemetry feature will be enabled.\r\n\r\nIf you disable this policy, Edge 3P SERP Telemetry feature will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_edge3pserptelemetryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended","displayName":"Edge 3P SERP Telemetry Enabled","description":"Edge3P Telemetry in Microsoft Edge captures the searches user does on third party search providers without identifying the person or the device and captures only if the user has consented to this collection of data. User can turn off the collection at any time in the browser settings.\r\n\r\nIf you enable or don't configure this policy, Edge 3P SERP Telemetry feature will be enabled.\r\n\r\nIf you disable this policy, Edge 3P SERP Telemetry feature will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_edge3pserptelemetryenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended","displayName":"Allow your organization's logo from Microsoft Entra to be overlaid on the Microsoft Edge app icon of a work profile","description":"Allow your organization's logo from Entra, if any, to be overlaid on the Microsoft Edge app icon of a profile that's signed in with an Entra ID (formerly known as Azure Active Directory) account. This requires a browser restart to take effect.\r\n\r\nIf you enable this policy, your organization's logo from Entra will be used.\r\n\r\nIf you disable or don't configure this policy, your organization's logo from Entra won't be used.\r\n\r\nFor more information about configuring your organization's logo on Entra, please visit https://go.microsoft.com/fwlink/?linkid=2254514.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended_organizationlogooverlayonappiconenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended","displayName":"Configure the automatic profile switching site list","description":"Set this policy to control which profiles Microsoft Edge will use to open sites in. Switching configurations for sites listed in this policy take precedence over other heuristics Microsoft Edge uses for switching sites but note that sites not listed on this policy are still subject to switching by those heuristics. If this policy is not configured, Microsoft Edge will continue using its heuristics to automatically switch sites.\r\n\r\nThis policy maps a URL hostname to a profile that it should be opened in.\r\n\r\nThe 'site' field should take the form of a URL hostname.\r\n\r\nThe 'profile' field can take one of the following values:\r\n- 'Work': The most recently used Microsoft Entra signed-in profile will be used to open 'site'.\r\n- 'Personal': The most recently used MSA signed-in profile will be used to open 'site'.\r\n- 'No preference': The currently used profile will be used to open 'site'.\r\n- Wildcard email address: This takes the form of '*@contoso.com'. A profile whose username ends with the contents following the '*' will be used to open 'site'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"site\": \"work.com\",\r\n \"profile\": \"Work\"\r\n },\r\n {\r\n \"site\": \"personal.com\",\r\n \"profile\": \"Personal\"\r\n },\r\n {\r\n \"site\": \"nopreference.com\",\r\n \"profile\": \"No preference\"\r\n },\r\n {\r\n \"site\": \"contoso.com\",\r\n \"profile\": \"*@contoso.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~identity_recommended_automaticprofileswitchingsitelist_recommended_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended","displayName":"Configure auto discard sleeping tabs","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab will need to be reloaded.\r\n\r\nIf the 'SleepingTabsEnabled' (Configure sleeping tabs) policy is enabled, then this feature will be enabled by default.\r\n\r\nIf the 'SleepingTabsEnabled' is disabled, then this feature will be disabled by default and cannot be enabled.\r\n\r\nIf enabled, idle background tabs will be discarded after 1.5 days.\r\n\r\nIf disabled, idle background tab will not be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_recommended~sleepingtabs_recommended_autodiscardsleepingtabsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings","displayName":"Web App management settings","description":"This policy allows an admin to specify settings for installed web apps. This policy maps a Web App ID to its specific setting. A default configuration can be set using the special ID *, which applies to all web apps without a custom configuration in this policy.\r\n\r\n- The manifest_id field is the Manifest ID for the Web App.\r\nSee https://developer.chrome.com/blog/pwa-manifest-id/\r\nfor instructions on how to determine the Manifest ID for an installed web app.\r\n- The run_on_os_login field specifies if a web app can be run during OS login.\r\nIf this field is set to blocked, the web app will not run during OS login and the user will not be able to enable this later.\r\nIf this field is set to run_windowed, the web app will run during OS login and the user won't be able to disable this later.\r\nIf this field is set to allowed, the user will be able to configure the web app to run at OS login.\r\nThe default policy configuration only allows the allowed and blocked values.\r\n- (Starting with Microsoft Edge version 120) The prevent_close_after_run_on_os_login field specifies if a web app can be prevented from closing in any way.\r\nFor example, by the user, by task manager, or by web APIs. This behavior can only be enabled if run_on_os_login is set to run_windowed.\r\nIf the app is already running, this setting will only take effect after the app is restarted.\r\nIf this field isn't defined, users can close the app.\r\n(This is currently not supported in Microsoft Edge.)\r\n- (Since version 118) The force_unregister_os_integration field specifies if all OS integration for a web app, that is, shortcuts, file handlers, protocol handlers and so on will be removed or not.\r\nIf an app is already running, this property will come into effect after the app restarts.\r\nThis should be used with caution, since it can override any OS integration that is set automatically during the startup of the web applications system. This currently only works on Windows, Mac and Linux platforms.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://bar.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foobar.example/index.html\",\r\n \"run_on_os_login\": \"run_windowed\",\r\n \"prevent_close_after_run_on_os_login\": true\r\n },\r\n {\r\n \"manifest_id\": \"*\",\r\n \"run_on_os_login\": \"blocked\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"force_unregister_os_integration\": true\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge_webappsettings_webappsettings","displayName":"Web App management settings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list","description":"Set this policy to control which profiles Microsoft Edge will use to open sites in. Switching configurations for sites listed in this policy take precedence over other heuristics Microsoft Edge uses for switching sites but note that sites not listed on this policy are still subject to switching by those heuristics. If this policy is not configured, Microsoft Edge will continue using its heuristics to automatically switch sites.\r\n\r\nThis policy maps a URL hostname to a profile that it should be opened in.\r\n\r\nThe 'site' field should take the form of a URL hostname.\r\n\r\nThe 'profile' field can take one of the following values:\r\n- 'Work': The most recently used Microsoft Entra signed-in profile will be used to open 'site'.\r\n- 'Personal': The most recently used MSA signed-in profile will be used to open 'site'.\r\n- 'No preference': The currently used profile will be used to open 'site'.\r\n- Wildcard email address: This takes the form of '*@contoso.com'. A profile whose username ends with the contents following the '*' will be used to open 'site'.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"site\": \"work.com\",\r\n \"profile\": \"Work\"\r\n },\r\n {\r\n \"site\": \"personal.com\",\r\n \"profile\": \"Personal\"\r\n },\r\n {\r\n \"site\": \"nopreference.com\",\r\n \"profile\": \"No preference\"\r\n },\r\n {\r\n \"site\": \"contoso.com\",\r\n \"profile\": \"*@contoso.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~identity_automaticprofileswitchingsitelist_automaticprofileswitchingsitelist","displayName":"Configure the automatic profile switching site list (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled","displayName":"Configure auto discard sleeping tabs","description":"Setting this policy enables inactive (sleeping) tabs to be automatically discarded after 1.5 days of inactivity. This is done to save memory. When the user switches back to a discarded tab, the tab will need to be reloaded.\r\n\r\nIf the 'SleepingTabsEnabled' (Configure sleeping tabs) policy is enabled, then this feature will be enabled by default.\r\n\r\nIf the 'SleepingTabsEnabled' is disabled, then this feature will be disabled by default and cannot be enabled.\r\n\r\nIf enabled, idle background tabs will be discarded after 1.5 days.\r\n\r\nIf disabled, idle background tab will not be discarded after 1.5 days. Tabs can still be discarded for other reasons if this policy is disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev120~policy~microsoft_edge~sleepingtabs_autodiscardsleepingtabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly","displayName":"Force Windows executable Native Messaging hosts to launch directly","description":"This policy controls whether native host executables launch directly on Windows.\r\n\r\nIf you enable this policy, Microsoft Edge is forced to launch native messaging hosts implemented as executables directly.\r\n\r\nIf you disable this policy, Microsoft Edge will launch hosts using cmd.exe as an intermediary process.\r\n\r\nIf you don't configure this policy, Microsoft Edge will decide which approach to use based on a progressive rollout from the legacy behavior to the Launch Directly behavior, guided by ecosystem compatibility.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_nativehostsexecutableslaunchdirectly_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled","displayName":"Enable post-quantum key agreement for TLS","description":"This policy configures whether Microsoft Edge will offer a post-quantum key agreement algorithm in TLS. This lets supporting servers protect user traffic from being decrypted by quantum computers.\r\n\r\nIf you enable this policy, Microsoft Edge will offer a post-quantum key agreement in TLS connections. TLS connections will be protected from quantum computers when communicating with compatible servers.\r\n\r\nIf you disable this policy, Microsoft Edge will not offer a post-quantum key agreement in TLS connections. User traffic will be unprotected from decryption by quantum computers.\r\n\r\nIf you don't configure this policy, Microsoft Edge will follow the default rollout process for offering a post-quantum key agreement.\r\n\r\nOffering a post-quantum key agreement is backwards-compatible. Existing TLS servers and networking middleware are expected to ignore the new option and continue selecting previous options.\r\n\r\nHowever, devices that don't implement TLS correctly may malfunction when offered the new option. For example, they might disconnect in response to unrecognized options or the resulting larger messages. These devices are not post-quantum-ready and will interfere with an enterprise's post-quantum transition. If this issue is encountered, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Microsoft Edge. You can enable it to test for issues and you can disable it while you resolve issues.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge_postquantumkeyagreementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery","displayName":"Disable DIAL protocol for cast device discovery","description":"Enable this policy to disable the DIAL (Discovery And Launch) protocol for cast device discovery. (If EnableMediaRouter is disabled, this policy will have no effect).\r\n\r\nEnable this policy to disable DIAL protocol.\r\n\r\nBy default, Cast device discovery will use DIAL protocol.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~googlecast_edgedisabledialprotocolforcastdiscovery_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled","displayName":"Enable Related Website Sets","description":"This policy lets you control the enablement of the Related Website Sets feature. Related Website Sets (RWS) is a way for an organisation to declare relationships among sites, so that Microsoft Edge allows limited third-party cookie access for specific purposes across those sites.\r\n\r\nIf this policy set to True or unset, the Related Website Sets feature is enabled.\r\n\r\nIf this policy is set to False, the Related Website Sets feature is disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets.","description":"This policy provides a way to override the list of sets Microsoft Edge uses for Related Website Sets\r\n\r\nEach set in the browser's list of Related Website Sets must meet the requirements of a Related Website Set. A Related Website Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all its ccTLD variants. See https://github.com/WICG/first-party-sets for more information on how Microsoft Edge uses Related Website Sets.\r\n\r\n\r\nAll sites in a Related Website Set must be a registrable domain served over HTTPS. Each site in a Related Website Set must also be unique, which means a site can't be listed more than once in a Related Website Set.\r\n\r\nWhen this policy is given an empty dictionary, Microsoft Edge uses the public list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the replacements list, if a site is also present on a Related Website Set in the browser's list, then that site will be removed from the browser's Related Website Set. After this, the policy's Related Website Set will be added to the Microsoft Edge's list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the additions list, if a site is also present on a Related Website Set in Microsoft Edge's list, then the browser's Related Website Set will be updated so that the new Related Website Set can be added to the browser's list. After the browser's list has been updated, the policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nThe browser's list of Related Website Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site can't be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) aren't supported as a policy value, or as a value within any Related Website Set in these lists.\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"additions\": [{\"associatedSites\": [\"https://associate2.test\"], \"ccTLDs\": {\"https://associate2.test\": [\"https://associate2.com\"]}, \"primary\": \"https://primary2.test\", \"serviceSites\": [\"https://associate2-content.test\"]}], \"replacements\": [{\"associatedSites\": [\"https://associate1.test\"], \"ccTLDs\": {\"https://associate1.test\": [\"https://associate1.co.uk\"]}, \"primary\": \"https://primary1.test\", \"serviceSites\": [\"https://associate1-content.test\"]}]}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~relatedwebsitesets_relatedwebsitesetsoverrides_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride","displayName":"Prevent bypassing Edge Website Typo Protection prompts for sites","description":"This policy setting lets you decide whether users can override the Edge Website Typo Protection warnings about potential typosquatting websites.\r\n\r\nIf you enable this setting, users can't ignore Edge Website Typo Protection warnings and they are blocked from continuing to the site.\r\n\r\nIf you disable or don't configure this setting, users can ignore Edge Website Typo Protection warnings and continue to the site.\r\n\r\nThis will only take effect when TyposquattingCheckerEnabled policy is not set or set to enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_preventtyposquattingpromptoverride_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains","displayName":"Configure the list of domains for which Edge Website Typo Protection won't trigger warnings","description":"Configure the list of Edge Website Typo Protection trusted domains. This means:\r\nEdge Website Typo Protection won't check for potentially malicious typosquatting websites.\r\n\r\nIf you enable this policy, Edge Website Typo Protection trusts these domains.\r\nIf you disable or don't set this policy, default Edge Website Typo Protection protection is applied to all resources.\r\n\r\nThis will only take effect when TyposquattingCheckerEnabled policy is not set or set to enabled.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10/11 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.\r\nAlso note that this policy does not apply if your organization has enabled Microsoft Defender for Endpoint. You must configure your allow and block lists in Microsoft 365 Defender portal using Indicators (Settings > Endpoints > Indicators).\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev121~policy~microsoft_edge~typosquattingchecker_typosquattingallowlistdomains_typosquattingallowlistdomainsdesc","displayName":"Configure the list of domains for which Edge Website Typo Protection won't trigger warnings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled","displayName":"Enables DALL-E themes generation","description":"This policy lets you generate browser themes using DALL-E and apply them to Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, the AI generated themes will be enabled.\r\n\r\nIf you disable this policy, the AI generated themes will be disabled for your organization.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_aigenthemesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass","displayName":"Allow users to bypass Enhanced Security Mode","description":"Microsoft Edge will let users bypass Enhanced Security Mode on a site via Settings page or PageInfo flyout. This policy lets you configure whether users can bypass Enhanced Security Mode.\r\n\r\nIf you disable this policy, Microsoft Edge won't allow users to bypass Enhanced Security Mode.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will allow users to bypass Enhanced Security Mode.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_enhancesecuritymodeallowuserbypass_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled","displayName":"Super Drag Drop Enabled","description":"This policy lets you configure the Super Drag Drop feature in Microsoft Edge.\r\n\r\nWith this feature, users can drag a link or text from a webpage and drop it onto the same page. They can then either open the URL in a new tab or search the text using the default search engine.\r\n\r\nIf you enable or don't configure this policy, you can use the Super Drag Drop feature on Microsoft Edge.\r\n\r\nIf you disable this policy, you can't use the Super Drag Drop feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_superdragdropenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled","displayName":"URL reporting in Edge diagnostic data enabled","description":"Controls sending URLs of pages visited and per-page usage in the Microsoft Edge optional diagnostics data to Microsoft to help make browsing and search better. This also includes identifiers and usage diagnostics of other browser components that can modify or provide content, such as extensions.\r\n\r\nThis policy is applicable only if the 'DiagnosticData' (Send required and optional diagnostic data about browser usage) setting is set to 'OptionalData'. See the description of 'DiagnosticData' for more information on how Microsoft Edge diagnostic data levels are set.\r\n\r\nIf you enable or don't configure this setting, URLs are provided in optional diagnostic data.\r\n\r\nIf you disable this setting, URLs are not reported in optional diagnostic data.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev122~policy~microsoft_edge_urldiagnosticdataenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors","description":"The X.509 key usage extension declares how the key in a certificate can be\r\nused. These instructions ensure certificates aren't used in an unintended\r\ncontext, which protects against a class of cross-protocol attacks on HTTPS and\r\nother protocols. HTTPS clients must verify that server certificates match the\r\nconnection's TLS parameters.\r\n\r\nIf this policy is enabled,\r\nMicrosoft Edge will perform this key\r\ncheck. This helps prevent attacks where an attacker manipulates the browser into\r\ninterpreting a key in ways that the certificate owner did not intend.\r\n\r\nIf this policy is set to disabled or not configured,\r\nMicrosoft Edge will skip this key check in\r\nHTTPS connections that negotiate TLS 1.2 and use an RSA certificate that\r\nchains to a local trust anchor. Examples of local trust anchors include\r\npolicy-provided or user-installed root certificates. In all other cases, the\r\ncheck is performed independent of this policy's setting.\r\n\r\nThis policy is available for administrators to preview the behavior of a\r\nfuture release, which will enable this check by default. At that point, this\r\npolicy will remain temporarily available for administrators that need more\r\ntime to update their certificates to meet the new RSA key usage requirements.\r\n\r\nConnections that fail this check will fail with the error\r\nERR_SSL_KEY_USAGE_INCOMPATIBLE. Sites that fail with this error likely have a\r\nmisconfigured certificate. Modern ECDHE_RSA cipher suites use the\r\n\"digitalSignature\" key usage option, while legacy RSA decryption cipher suites\r\nuse the \"keyEncipherment\" key usage option. If uncertain, administrators should\r\ninclude both in RSA certificates meant for HTTPS.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins","displayName":"Allow screen capture without prior user gesture","description":"For security reasons, the\r\ngetDisplayMedia() web API requires\r\na prior user gesture (\"transient activation\") to be called or the API will\r\nfail.\r\n\r\nWhen this policy is configured, admins can specify origins on which this API\r\ncan be called without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, see\r\nhttps://go.microsoft.com/fwlink/?linkid=2095322. Note: * is not an accepted\r\nvalue for this policy.\r\n\r\nIf this policy is not configured, all origins require a prior user gesture to\r\ncall this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge_screencapturewithoutgestureallowedfororigins_screencapturewithoutgestureallowedfororiginsdesc","displayName":"Allow screen capture without prior user gesture (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting","description":"Setting the policy to \"BlockWindowManagement\" (value 2) automatically denies the window management permission to sites by default. This limits the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nSetting the policy to \"AskWindowManagement\" (value 3) by default prompts the user when the window management permission is requested. If users allow the permission, it extends the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nNot configuring the policy means the \"AskWindowManagement\" policy applies, but users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockWindowManagement (2) = Denies the Window Management permission on all sites by default\r\n\r\n* AskWindowManagement (3) = Ask every time a site wants obtain the Window Management permission\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_2","displayName":"Denies the Window Management permission on all sites by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_3","displayName":"Ask every time a site wants obtain the Window Management permission","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls","displayName":"Allow Window Management permission on specified sites","description":"Lets you configure a list of site url patterns that specify sites which will automatically grant the window management permission. This extends the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy isn't configured for a site, then the policy from 'DefaultWindowManagementSetting' (Default Window Management permission setting) applies to the site, if configured. Otherwise the permission will follow the browser's defaults and let users choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementallowedforurls_windowmanagementallowedforurlsdesc","displayName":"Allow Window Management permission on specified sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls","displayName":"Block Window Management permission on specified sites","description":"Lets you configure a list of site url patterns that specify sites which will automatically deny the window management permission. This limits the ability of sites to see information about the device's screens. This information can be used to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed. This policy only matches based on site origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy isn't configured for a site, then the policy from 'DefaultWindowManagementSetting' (Default Window Management permission setting) applies to the site, if configured. Otherwise the permission will follow the browser's defaults and let users choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~contentsettings_windowmanagementblockedforurls_windowmanagementblockedforurlsdesc","displayName":"Block Window Management permission on specified sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist","displayName":"Blocklist for extension install types","description":"The blocklist controls which extension install types are disallowed.\r\n\r\nSetting the \"command_line\" will block an extension from being loaded from command line.\r\n\r\nPolicy options mapping:\r\n\r\n* command_line (command_line) = Blocks extensions from being loaded from command line\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\ncommand_line","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensioninstalltypeblocklist_extensioninstalltypeblocklistdesc","displayName":"Blocklist for extension install types (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability","description":"Control if Manifest v2 extensions can be used by browser.\r\n\r\nManifest v2 extensions support will be deprecated and all extensions need to be migrated to v3 in the future. More information about, and the timeline of the migration has not been established.\r\n\r\nIf the policy is set to Default or not set, v2 extension loading is decided by browser. This will follow the preceding timeline when it's established.\r\n\r\nIf the policy is set to Disable, v2 extensions installation are blocked, and existing ones are disabled. This option is going to be treated the same as if the policy is unset after v2 support is turned off by default.\r\n\r\nIf the policy is set to Enable, v2 extensions are allowed. The option is going to be treated the same as if the policy isn't set before v2 support is turned off by default.\r\n\r\nIf the policy is set to EnableForForcedExtensions, force installed v2 extensions are allowed. This includes extensions that are listed by 'ExtensionInstallForcelist' (Control which extensions are installed silently) or 'ExtensionSettings' (Configure extension management settings) with installation_mode \"force_installed\" or \"normal_installed\". All other v2 extensions are disabled. The option is always available regardless of the manifest migration state.\r\n\r\nExtensions availabilities are still controlled by other policies.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default browser behavior\r\n\r\n* Disable (1) = Manifest v2 is disabled\r\n\r\n* Enable (2) = Manifest v2 is enabled\r\n\r\n* EnableForForcedExtensions (3) = Manifest v2 is enabled for forced extensions only\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_0","displayName":"Default browser behavior","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_1","displayName":"Manifest v2 is disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_2","displayName":"Manifest v2 is enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev123~policy~microsoft_edge~extensions_extensionmanifestv2availability_extensionmanifestv2availability_3","displayName":"Manifest v2 is enabled for forced extensions only","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext","displayName":"Control Copilot with Commercial Data Protection access to page context for Microsoft Entra ID profiles (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 132.\r\n\r\nThis policy has been obsoleted as of Edge 133. Instead of this obsolete policy, we recommend using 'EdgeEntraCopilotPageContext' (Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane).\r\n\r\nThis policy controls access to page contents for Copilot with Commercial Data Protection in the Edge sidebar. This policy applies only to Microsoft Entra ID profiles. To summarize pages and interact with text selections, it needs to be able to access the page contents. This policy does not apply to MSA profiles. This policy doesn't control access for Copilot without Commercial Data Protection. Access for Copilot without Commercial Data Protection is controlled by the policy CopilotPageContext.\r\n\r\nIf you enable this policy, Copilot with Commercial Data Protection will have access to page context.\r\n\r\nIf you don't configure this policy, a user can enable access to page context for Copilot with Commercial Data Protection using the setting toggle in Edge.\r\n\r\nIf you disable this policy, Copilot with Commercial Data Protection will not be able to access page context.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotcdppagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext","displayName":"Control Copilot access to page context for Microsoft Entra ID profiles","description":"This policy controls access to page contents for Copilot in the Microsoft Edge sidebar when users are logged into their MSA Copilot account. This policy applies only to Microsoft Entra ID Microsoft Edge profiles. To summarize pages and interact with text selections, it needs to be able to access the page contents. This policy does not apply to MSA Microsoft Edge profiles. This policy doesn't control access for Copilot with enterprise data protection (EDP). Access for Copilot with enterprise data protection (EDP) is controlled by the 'EdgeEntraCopilotPageContext' (Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane) policy.\r\n\r\nIf you enable this policy, Copilot will have access to page content when logged in with Entra ID.\r\n\r\nIf this policy is not configured, the default behavior for non-EU countries is that access is initially enabled. For EU countries, the default behavior is that access is initially disabled. In both cases, if the policy is not configured, users can enable or disable Copilot's access to page content using the setting toggle in Microsoft Edge.\r\n\r\nIf you disable this policy, Copilot will not be able to access page context.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_copilotpagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled","displayName":"Enable deprecated/removed Mutation Events (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy provides a temporary opt-in back to a deprecated and removed set of platform events named Mutation Events.\r\n\r\nIf you enable this policy, mutation events will continue to be fired, even if they've been disabled by default for normal web users.\r\n\r\nIf you disable or don't configure this policy, these events will not be fired.\r\n\r\nThis policy is a temporary workaround, and enterprises should still work to remove their dependencies on these mutation events.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev124~policy~microsoft_edge_mutationeventsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled","displayName":"Enable the Designer for Image Editor feature","description":"Lets users access and use the Designer for Image Editor feature to edit an image they select.\r\n\r\nIf you enable or don't configure this policy, users can access and use the Designer for Image Editor feature in Microsoft Edge.\r\n\r\nIf you disable this policy, users can't access and use the Designer for Image Editor feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_imageeditorserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled","displayName":"Enable QR Code Generator","description":"This policy enables the QR Code generator feature in Microsoft Edge.\r\n\r\nIf you enable this policy or don't configure it, the QR Code Generator feature is enabled.\r\n\r\nIf you disable this policy, the QR Code Generator feature is disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge_qrcodegeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled","displayName":"Enable zstd content encoding support","description":"This feature enables advertising \"zstd\" support in the Accept-Encoding request header and support for decompressing zstd web content.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will accept server responses compressed with zstd.\r\n\r\nIf you disable this policy, the zstd content encoding feature will not be advertised or supported when processing server responses.\r\n\r\nThis policy is temporary and will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev125~policy~microsoft_edge~network_zstdcontentencodingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive","displayName":"Keep the active Microsoft Edge window with an Internet Explorer mode tab always in the foreground.","description":"This policy controls whether to always keep the active Microsoft Edge window with an Internet Explorer mode tab in the foreground.\r\n\r\nIf you enable this policy, the active Microsoft Edge window with an Internet Explorer mode tab will always be in the foreground.\r\n\r\nIf you disable or don't configure this policy, the active Microsoft Edge window with an Internet Explorer mode tab will not be kept in the foreground.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge_internetexplorersetforegroundwhenactive_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled","displayName":"Enable proactive authentication","description":"This policy controls the proactive authentication in Microsoft Edge, that connects the signed-in user identity with Microsoft Bing, MSN and Copilot services for a smooth and consistent sign-in experience.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge authentication requests are automatically sent to the services using the account that is signed-in to the browser.\r\n\r\nIf you disable this policy, Microsoft Edge does not send authentications requests to these services and users will need to manually sign-in.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev126~policy~microsoft_edge~identity_proactiveauthworkflowenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled","displayName":"Controls whether the deprecated :--foo syntax for CSS custom state is enabled (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 132.\r\n\r\nThe :--foo syntax for the CSS custom state feature is being changed to :state(foo) in Microsoft Edge in order to comply with changes that have been made in Firefox and Safari. This policy lets the deprecated syntax to be used until Stable 132.\r\n\r\nThis deprecation might break some Microsoft Edge-only websites that use the deprecated :--foo syntax.\r\n\r\nIf you enable this policy, the deprecated syntax will be enabled.\r\n\r\nIf you disable this policy or don't set it, the deprecated syntax will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_csscustomstatedeprecatedsyntaxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist","displayName":"Control which apps cannot be opened in Microsoft Edge sidebar","description":"Define a list of sites, based on URL patterns, that cannot be opened in sidebar.\r\n\r\nIf you don't configure this policy, a user can open any app in sidebar.\r\n\r\nIf the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy is disabled, this list isn't used and no sidebar can be opened.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.\r\n\r\nNote: A blocklist value of '*' means all apps are blocked unless they are explicitly listed in the 'EdgeSidebarAppUrlHostAllowList' (Allow specific apps to be opened in Microsoft Edge sidebar) policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev127~policy~microsoft_edge_edgesidebarappurlhostblocklist_edgesidebarappurlhostblocklistdesc","displayName":"Control which apps cannot be opened in Microsoft Edge sidebar (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled","displayName":"Enable Application Bound Encryption","description":"Enabling this policy or leaving it unset binds the encryption keys used for local data storage to Microsoft Edge whenever possible.\r\n\r\nDisabling this policy has a detrimental effect on Microsoft Edge's security because unknown and potentially hostile apps can retrieve the encryption keys used to secure data.\r\n\r\nOnly turn off this policy if there are compatibility issues, such as scenarios where other applications need legitimate access to Microsoft Edge's data. Encrypted user data is expected to be fully portable between different computers or the integrity and location of Microsoft Edge's executable files isn’t consistent.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128.1~policy~microsoft_edge_applicationboundencryptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings","displayName":"Dynamic Code Settings","description":"This policy controls the dynamic code settings for Microsoft Edge.\r\n\r\nDisabling dynamic code improves the security of Microsoft Edge by preventing potentially hostile dynamic code and third-party code from making changes to Microsoft Edge's behavior. However this might cause compatibility issues with third-party software that must run in the browser process.\r\n\r\nIf you set this policy to 0 (the default) or leave unset, then Microsoft Edge will use the default settings.\r\n\r\nIf you set this policy to 1 – (EnabledForBrowser) then the Microsoft Edge browser process is prevented from creating dynamic code.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default dynamic code settings\r\n\r\n* EnabledForBrowser (1) = Prevent the browser process from creating dynamic code\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings","displayName":"Dynamic Code Settings (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_0","displayName":"Default dynamic code settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_dynamiccodesettings_dynamiccodesettings_1","displayName":"Prevent the browser process from creating dynamic code","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled","displayName":"Enable open in sidebar","description":"Allow/Disallow user open a website or an app to the sidebar.\r\n\r\nIf you enable or don't configure this policy, users will be able to access the feature.\r\nIf you disable this policy, users will not be able to access the feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgeopeninsidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled","displayName":"Enable sidebar customize","description":"Allow/Disallow to use sidebar customize.\r\n\r\nIf you enable or don't configure this policy, users will be able to access sidebar customize.\r\nIf you disable this policy, users will not be able to access the sidebar customize.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_edgesidebarcustomizeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled","displayName":"Enable keyboard focusable scrollers","description":"This policy provides a temporary opt-out for the new keyboard focusable scrollers behavior.\r\n\r\nWhen this policy is Enabled or unset, scrollers without focusable children are keyboard focusable by default.\r\n\r\nWhen this policy is Disabled, scrollers are not keyboard focusable by default.\r\n\r\nThis policy is a temporary workaround and will be removed in Edge Stable 135.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_keyboardfocusablescrollersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended","displayName":"Enable insecure download warnings","description":"Enables warnings when potentially dangerous content is downloaded over HTTP.\r\n\r\nIf you enable or don't configure this policy, when a user tries to download potentially dangerous content from an HTTP site, the user will receive a UI warning, such as \"Insecure download blocked.\" The user will still have an option to proceed and download the item.\r\n\r\nIf you disable this policy, the warnings for insecure downloads will be suppressed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge_recommended~downloads_recommended_showdownloadsinsecurewarningsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled","displayName":"Enable insecure download warnings","description":"Enables warnings when potentially dangerous content is downloaded over HTTP.\r\n\r\nIf you enable or don't configure this policy, when a user tries to download potentially dangerous content from an HTTP site, the user will receive a UI warning, such as \"Insecure download blocked.\" The user will still have an option to proceed and download the item.\r\n\r\nIf you disable this policy, the warnings for insecure downloads will be suppressed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~downloads_showdownloadsinsecurewarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page","description":"Control if users can turn on Developer Mode on edge://extensions.\r\n\r\nIf the policy isn't set, users can turn on developer mode on the extension page unless DeveloperToolsAvailability policy is set to DeveloperToolsDisallowed (2).\r\nIf the policy is set to Allow (0), users can turn on developer mode on the extensions page.\r\nIf the policy is set to Disallow (1), users cannot turn on developer mode on the extensions page.\r\n\r\nIf this policy is set, DeveloperToolsAvailability can no longer control extensions developer mode.\r\n\r\nPolicy options mapping:\r\n\r\n* Allow (0) = Allow the usage of developer mode on extensions page\r\n\r\n* Disallow (1) = Do not allow the usage of developer mode on extensions page\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_0","displayName":"Allow the usage of developer mode on extensions page","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_1","displayName":"Do not allow the usage of developer mode on extensions page","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls","displayName":"Configure a list of origins that grant an extended background lifetime to connecting extensions.","description":"Extensions that connect to one of these origins will keep running as long as the port is connected.\r\nIf unset, the policy's default values are used. These are the app origins that offer SDKs that are known to not offer the possibility to restart a closed connection to a previous state:\r\n- Smart Card Connector\r\n- Citrix Receiver (stable, beta, back-up)\r\n- VMware Horizon (stable, beta)\r\n\r\nIf set, the default value list is extended with the newly configured values. The defaults and policy-provided entries will grant the exception to the connecting extensions, as long as the port is connected.\r\n\r\nExample value:\r\n\r\nchrome-extension://abcdefghijklmnopabcdefghijklmnop/\r\nchrome-extension://bcdefghijklmnopabcdefghijklmnopa/","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev128~policy~microsoft_edge~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_extensionextendedbackgroundlifetimeforportconnectionstourlsdesc","displayName":"Configure a list of origins that grant an extended background lifetime to connecting extensions. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled","displayName":"Enable Printing LPAC Sandbox","description":"Setting this policy to Enabled or leaving it unset enables the LPAC Sandbox for printing services when the system configuration supports it.\r\n\r\nSetting this policy to Disabled has a detrimental effect on Microsoft Edge's security because services used for printing might run in a weaker sandbox configuration.\r\n\r\nOnly turn this policy off if there are compatibility issues with third party software that prevent printing services from operating correctly inside the LPAC Sandbox.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev129~policy~microsoft_edge~printing_printinglpacsandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext","displayName":"Control Copilot access to Microsoft Edge page content for Entra account user profiles when using Copilot in the Microsoft Edge sidepane","description":"This policy controls whether Copilot in the Microsoft Edge sidepane can access Microsoft Edge page content. This includes page summarization and similar contextual queries sent to Copilot.\r\n\r\nThis policy only applies to users who are signed in to Microsoft Edge with their Entra account and are using Copilot in the sidepane. This policy applies to all Copilot products in the Microsoft Edge sidepane - namely, Microsoft 365 Copilot Business Chat and Microsoft Copilot with enterprise data protection (EDP).\r\n\r\nIf you enable this policy, Copilot will be able to access Microsoft Edge page content when users ask a contextual query to Copilot in the Microsoft Edge sidepane.\r\n\r\nIf you disable this policy, Copilot will not be able to access Microsoft Edge page content.\r\n\r\nIf you don't configure this policy, the default behavior is as follows:\r\n\r\n- For non-EU countries, access is enabled by default.\r\n\r\n- For EU countries, access is disabled by default.\r\n\r\n- In both cases, if the policy is not configured, users can enable or disable Copilot access to Microsoft Edge page content using the toggle in Microsoft Edge settings.\r\n\r\nExceptions to the preceding behavior include when a page is protected using data loss prevention (DLP) measures. In that case, Copilot will not be able to access Microsoft Edge page content even when this policy is enabled. This behavior is to ensure the integrity of DLP.\r\n\r\nLearn more about Copilot's data usage and consent at https://go.microsoft.com/fwlink/?linkid=2288056","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge_edgeentracopilotpagecontext_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled","displayName":"Extensions Performance Detector enabled","description":"This policy controls if users can access the Extensions Performance Detector Recommended Action feature in Browser Essentials. This feature alerts extension users if their extensions are causing performance regressions in the browser and allows them to take action to resolve the issue.\r\n\r\nIf you enable or don't configure this policy, users will receive Extensions Performance Detector notifications from Browser Essentials. When there is an active alert, users will be able to view the impact of extensions on their browser's performance and make an informed decision to disable impacting extensions. The detector will exclude browser-managed extensions, such as Google Docs offline, component extensions, and organization-managed extensions (ie. extensions that cannot be disabled).\r\n\r\nIf you disable this policy, users will not receive notifications or be able to view the Extensions Performance Detector Recommended Action.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev130~policy~microsoft_edge~performance_extensionsperformancedetectorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist","displayName":"Allow specific apps to be opened in Microsoft Edge sidebar","description":"Define a list of sites, based on URL patterns, that are not subject to the 'EdgeSidebarAppUrlHostBlockList' (Control which apps cannot be opened in Microsoft Edge sidebar).\r\n\r\nIf you don't configure this policy, a user can open any app in sidebar except the urls listed in 'EdgeSidebarAppUrlHostBlockList'.\r\n\r\nIf you configure this policy, the apps listed in the allow list could be opened in sidebar even if they are listed in the block list.\r\n\r\nBy default, all apps are allowed. However, if you prohibited apps by policy, you can use the list of allowed apps to change that policy.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2281313.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev131~policy~microsoft_edge_edgesidebarappurlhostallowlist_edgesidebarappurlhostallowlistdesc","displayName":"Allow specific apps to be opened in Microsoft Edge sidebar (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled","displayName":"Machine learning powered autofill suggestions","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and will not be used elsewhere.\r\n\r\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\r\n\r\nIf you disable this policy, machine learning powered autofill suggestions will not be shown, and autofill will no longer use cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_edgeautofillmlenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed","displayName":"Live translation allowed","description":"Allow users to turn the Realtime Video Translation feature on or off.\r\n\r\nThis feature allows videos being watched to be translated to the selected language in real time or live. Users need to click the translate icon that appears when they hover over a video to get started.\r\n\r\nThis is the on-device feature and none of the audio, data or even translated audio leave the device.\r\n\r\nIf you enable or don't configure this policy, users can turn this feature on or off in edge://settings/languages.\r\nIf you disable this policy, users will not be able to turn this feature on. If user has been using the feature already and policy gets disabled, the feature related files downloaded previously, will be deleted from the device after 30 days. We recommend not to disable the policy, unless it is needed in your environment.\r\n\r\nIf users enable this feature, the feature related files (approximately 200 megabytes) will be downloaded to the device on the first run and periodically thereafter to enhance performance and accuracy. These files will be deleted 30 days after their last use.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_livetranslationallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled","displayName":"Personalize my top sites in Customize Sidebar enabled by default","description":"This policy controls whether Microsoft Edge browser be allowed to use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you enable this policy, Microsoft Edge will use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you disable this policy, Microsoft Edge will not use the browsing history to personalize the top sites in the customize sidebar page.\r\n\r\nIf you don't configure this policy, the default behavior is to use the browsing history to personalize the top sites in the customize sidebar page.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_personalizetopsitesincustomizesidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended","displayName":"Machine learning powered autofill suggestions","description":"Allows ML technology to predict and fill in forms and text fields for better browsing. Your personal data is secure and will not be used elsewhere.\r\n\r\nIf you enable this policy or don't configure it, users can benefit from machine learning powered autofill suggestions, which improve efficiency by offering more accurate, context aware form recommendations based on historical autofill data.\r\n\r\nIf you disable this policy, machine learning powered autofill suggestions will not be shown, and autofill will no longer use cloud-based machine learning models to enhance form filling with smarter, context aware suggestions. Instead, autofill will rely on basic form data without the benefits of machine learning.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_recommended_edgeautofillmlenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled","displayName":"Controls whether the new HTML parser behavior for the element. This policy supports the old HTML parser behavior until M136.\r\n\r\nIf this policy is enabled or unset, the HTML parser will allow additional tags inside the element.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge_selectparserrelaxationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls","displayName":"Allow automatic full screen on specified sites","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or it will\r\nfail. Users' personal settings may allow certain origins to call this API\r\nwithout a prior user gesture.\r\n\r\nThis policy supersedes users' personal settings and allows matching origins to\r\ncall the API without a prior user gesture.\r\n\r\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\nWildcards (*) are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy or user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenallowedforurls_automaticfullscreenallowedforurlsdesc","displayName":"Allow automatic full screen on specified sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls","displayName":"Block automatic full screen on specified sites","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or it will\r\nfail. Users' personal settings may allow certain origins to call this API\r\nwithout a prior user gesture.\r\n\r\nThis policy supersedes users' personal settings and blocks matching origins\r\nfrom calling the API without a prior user gesture.\r\n\r\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\nWildcards (*) are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy or user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~contentsettings_automaticfullscreenblockedforurls_automaticfullscreenblockedforurlsdesc","displayName":"Block automatic full screen on specified sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model","description":"Configure how Microsoft Edge downloads the foundational GenAI model and uses it for inference locally.\r\n\r\nWhen the policy is set to Allowed (0) or not set, the model is downloaded automatically, and used for inference.\r\n\r\nWhen the policy is set to Disabled (1), the model will not be downloaded.\r\n\r\nModel downloading can also be disabled by ComponentUpdatesEnabled.\r\n\r\nPolicy options mapping:\r\n\r\n* Allowed (0) = Downloads model automatically\r\n\r\n* Disabled (1) = Do not download model\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_0","displayName":"Downloads model automatically","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_1","displayName":"Do not download model","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled","displayName":"Enable IPv6 reachability check override","description":"This policy enables an override of the IPv6 reachability check. When overridden, the\r\nsystem will always query AAAA records when resolving host names. It applies to\r\nall users and interfaces on the device.\r\n\r\nIf you enable this policy, the IPv6 reachability check will be overridden.\r\n\r\nIf you disable or don't configure this policy, the IPv6 reachability check will not be overridden.\r\nThe system only queries AAAA records when it is reachable to a global IPv6 host.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~network_ipv6reachabilityoverrideenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled","displayName":"Enable deleting undecryptable passwords","description":"This policy controls whether the built-in password manager can delete undecryptable passwords from its database. This is required to restore the full functionality of the built-in password manager, but it may include a permanent data loss. Undecryptable password values will not become decryptable on their own.\r\n\r\nIf fixing them is possible, it usually requires complex user actions.\r\n\r\nEnabling this policy or leaving it unset means that users with undecryptable passwords saved to the built-in password manager will lose them. Passwords that are still in a working state will remain untouched.\r\n\r\nDisabling this policy means users will have their password manager data untouched, but will experience a broken password manager functionality.\r\n\r\nIf the policy is set, users can't override it in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~passwordmanager_deletingundecryptablepasswordsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash","displayName":"View XFA-based PDF files using IE Mode for allowed file hash.","description":"XFA is a legacy technology that is deprecated by its original creators. It is not an ISO standard and as such, doesn't align with the modern web architecture. Continued use poses potential risks and vulnerabilities. For more information, see - 'ViewXFAPDFInIEModeAllowedOrigins' (View XFA-based PDF files using IE Mode for allowed file origin.).\r\n\r\nIf you enable this policy, you can configure the list of base64 encoded SHA256 file hashes for which XFA PDF files will automatically open in Microsoft Edge using IE Mode.\r\n\r\nIf you disable or don't configure this policy, XFA PDFs won't be considered for opening via IE mode except the files from file origin mentioned in Policy 'ViewXFAPDFInIEModeAllowedOrigins'\r\n\r\nFor more information, see - [Get-FileHash](https://go.microsoft.com/fwlink/?linkid=2294823), [Dot Net Convert API](https://go.microsoft.com/fwlink/?linkid=2294913).\r\n\r\nExample value:\r\n\r\npZGm1Av0IEBKARczz7exkNYsZb8LzaMrV7J32a2fFG4=\r\nnFeL0Q+9HX7WFI3RsmSDFTlUtrbclXH67MTdXDwWuu4=","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedfilehash_viewxfapdfiniemodeallowedfilehashdesc","displayName":"View XFA-based PDF files using IE Mode for allowed file hash. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins","displayName":"View XFA-based PDF files using IE Mode for allowed file origin.","description":"Internet Explorer (IE) mode uses the Adobe Acrobat Active-X PDF Plugin to open XFA-based PDF files. This policy will only work if the Active-X plugin is already on the user's device, it's not installed as part of this policy.\r\n\r\nIt's important to note that XFA is a legacy technology that is deprecated by its original creators. It is not an ISO standard and as such, doesn't align with the modern web architecture. Continued use poses potential risks and vulnerabilities.\r\n\r\nGiven the deprecated status of XFA technology and the lack of any investment by its creators, we strongly recommend that you start planning your transition to a more advanced HTML\\PDF form-based solutions.\r\n\r\nIn the interim, this policy provides a workaround for users to view XFA PDF in Microsoft Edge.\r\n\r\nIf you enable this policy, you can configure the list of origins from which XFA PDF files will be automatically opened in Microsoft Edge using IE Mode.\r\n\r\nIf you disable or don't configure the policy, XFA PDFs won't be considered for opening via Internet Explorer mode.\r\n\r\nFor detailed information on valid URL patterns, see - https://go.microsoft.com/fwlink/?linkid=2095322\r\n\r\nAlternatively, 'ViewXFAPDFInIEModeAllowedFileHash' (View XFA-based PDF files using IE Mode for allowed file hash.) can also be used to configure list of file hashes instead of URL origins, which will enable those files to be automatically opened in Microsoft Edge using IE Mode.\r\n\r\nExample value:\r\n\r\nhttps://contesso.sharepoint.com/accounts/\r\nhttps://contesso.sharepoint.com/transport/\r\nfile://account_forms/","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev132~policy~microsoft_edge~pdf_viewxfapdfiniemodeallowedorigins_viewxfapdfiniemodeallowedoriginsdesc","displayName":"View XFA-based PDF files using IE Mode for allowed file origin. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_additionalsearchboxenabled","displayName":"Enable additional search box in browser","description":"A search box is an additional text input field located next to the address bar in a web browser. It allows users to perform web searches directly from the browser interface.\r\n\r\nIf you enable or don't configure this policy, the search box will be visible and available for use.\r\nUsers can toggle the search box in Edge Settings page edge://settings/appearance#SearchBoxInToolbar.\r\n\r\nIf you disable this policy, search box will not be visible, and users will have to use the address bar or navigate to a search engine to perform web searches.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_additionalsearchboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_additionalsearchboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts","displayName":"Allow Web Authentication requests on sites with broken TLS certificates.","description":"If you enable this policy, Microsoft Edge will allow Web Authentication requests on websites that have TLS certificates with errors (i.e. websites considered not secure).\r\n\r\nIf you disable or don't configure this policy, the default behavior of blocking such requests will apply.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_allowwebauthnwithbrokentlscerts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist","displayName":"Control which apps are forced to be shown in Microsoft Edge sidebar","description":"Define a list of sites, based on URL, that are forced to be shown in sidebar.\r\n\r\nIf you don't configure this policy, no app is forced to be shown in sidebar.\r\n\r\nIf the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy is disabled, this list isn't used and no sidebar can be shown.\r\n\r\nFor detailed information about valid url, see https://go.microsoft.com/fwlink/?linkid=2281313.\r\n\r\nNote: URL patterns are not supported in this policy. You should provide the exact URL of the app.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_edgesidebarappurlhostforcelist_edgesidebarappurlhostforcelistdesc","displayName":"Control which apps are forced to be shown in Microsoft Edge sidebar (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist","displayName":"HTTP Allowlist","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as '[*.]example.com') that will not be upgraded to HTTPS and will not show an error interstitial if HTTPS-First Mode is enabled. Organizations can use this policy to maintain access to servers that do not support HTTPS, without needing to disable 'AutomaticHttpsDefault' (Configure Automatic HTTPS).\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase.\r\n\r\nBlanket host wildcards (i.e., \"*\" or \"[*]\") are not allowed. Instead, HTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their specific policies.\r\n\r\nNote: This policy does not apply to HSTS upgrades.\r\n\r\nExample value:\r\n\r\ntestserver.example.com\r\n[*.]example.org","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_httpallowlist_httpallowlistdesc","displayName":"HTTP Allowlist (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled","displayName":"Use out-of-process iframe PDF Viewer","description":"Determines whether the PDF viewer in Microsoft Edge uses an out-of-process iframe (OOPIF).\r\nThis will be the new PDF viewer architecture going forward, as it is simpler in design and makes adding new features easier. The current GuestView PDF viewer, which relies on an outdated and overly complex architecture, is being deprecated.\r\n\r\nWhen this policy is set to Enabled or not set, Microsoft Edge will use the OOPIF PDF viewer architecture. Once Enabled or not set, the default behavior will be decided by Microsoft Edge.\r\n\r\nWhen this policy is set to Disabled, Microsoft Edge will strictly use the existing GuestView PDF viewer. This approach embeds a web page with its own separate frame tree into another web page.\r\n\r\nThis policy will be removed in the future, after the OOPIF PDF viewer feature has fully rolled out.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge_pdfvieweroutofprocessiframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates.","description":"Setting the policy to All (0) or leaving it unset lets users edit trust settings for all CA certificates, remove user-imported certificates, and import certificates using Certificate Manager. Setting the policy to UserOnly (1) lets users manage only user-imported certificates, but not change trust settings of built-in certificates. Setting it to None (2) lets users view (not manage) CA certificates.\r\n\r\nPolicy options mapping:\r\n\r\n* All (0) = Allow users to manage all certificates\r\n\r\n* UserOnly (1) = Allow users to manage user certificates\r\n\r\n* None (2) = Disallow users from managing certificates\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates. (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_0","displayName":"Allow users to manage all certificates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_1","displayName":"Allow users to manage user certificates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_2","displayName":"Disallow users from managing certificates","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates","displayName":"TLS server certificates that should be trusted by Microsoft Edge","description":"This policy enables a list of TLS certificates that should be trusted by Microsoft Edge for server authentication.\r\nCertificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificates_cacertificatesdesc","displayName":"TLS server certificates that should be trusted by Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints","description":"This policy enables a list of TLS certificates that should be trusted by Microsoft Edge for server authentication, with constraints added outside the certificate. If no constraint of a certain type is present, then any name of that type is allowed.\r\nCertificates should be base64-encoded. At least one constraint must be specified for each certificate.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"certificate\": \"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\",\r\n \"constraints\": {\r\n \"permitted_dns_names\": [\r\n \"example.org\"\r\n ],\r\n \"permitted_cidrs\": [\r\n \"10.1.1.0/24\"\r\n ]\r\n }\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cacertificateswithconstraints_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Microsoft Edge for server authentication with constraints (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates","displayName":"TLS certificates that should be distrusted by Microsoft Edge for server authentication","description":"This policy enables defining a list of certificate public keys that should be distrusted by Microsoft Edge for TLS server\r\nauthentication.\r\n\r\nThe policy value is a list of base64-encoded X.509 certificates. Any\r\ncertificate with a matching SPKI (SubjectPublicKeyInfo) will be distrusted.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cadistrustedcertificates_cadistrustedcertificatesdesc","displayName":"TLS certificates that should be distrusted by Microsoft Edge for server authentication (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication","description":"This policy enables defining a list of certificates that are not trusted or distrusted in Microsoft Edge\r\nbut can be used as hints for path-building. Certificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_cahintcertificates_cahintcertificatesdesc","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled","displayName":"Use user-added TLS certificates from platform trust stores for server authentication","description":"If enabled (or unset), user-added TLS certificates from platform trust stores will be used in path-building for TLS server authentication.\r\n\r\nIf disabled, user-added TLS certificates from platform trust stores will not be used in path-building for TLS server authentication.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~certificatemanagement_caplatformintegrationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_seamlesswebtobrowsersigninenabled","displayName":"Seamless Web To Browser Sign-in Enabled","description":"This policy only takes effect when the 'WebToBrowserSignInEnabled' (Web To Browser Sign-in Enabled) is enabled.\r\nIf you enable this policy and set this policy to True, users cannot turn off Seamless Web to Browser Sign-in feature from \"Automatic sign in on Microsoft Edge\" setting on Microsoft Edge profile settings page and that toggle will be greyed out.\r\nIf you enable this policy and set this policy to False, users cannot turn on Seamless Web to Browser Sign-in feature from \"Automatic sign in on Microsoft Edge\" setting on Microsoft Edge profile settings page and that toggle will be greyed out.\r\nIf you enable this policy but not configured or disabled, users can turn on/off Seamless Web to Browser Sign-in feature from settings by themselves.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_seamlesswebtobrowsersigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_seamlesswebtobrowsersigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled","displayName":"Web To Browser Sign-in Enabled","description":"Allow user to sign in to the same account in Microsoft Edge when a user signs in to a Microsoft website.\r\nIf this policy is enabled or not configured, user are able to get sign in CTA or seamless sign in experience(if 'SeamlessWebToBrowserSignInEnabled' (Seamless Web To Browser Sign-in Enabled) is enabled) when user sign in on Microsoft website.\r\nIf this policy is disabled, user will not get sign in CTA or seamless sign in experience when user sign in on Microsoft website.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~identity_webtobrowsersigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled","displayName":"DataURL Whitespace Preservation for all media types","description":"This policy provides a temporary opt-out for changes to how Edge handles whitepsace in data URLS.\r\nPreviously, whitespace would be kept only if the top level media type was text or contained the media type string xml.\r\nNow, whitespace will be preserved in all data URLs, regardless of media type.\r\n\r\nIf this policy is left unset or is set to True, the new behavior is enabled.\r\n\r\nWhen this policy is set to False, the old behavior is enabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev133~policy~microsoft_edge~network_dataurlwhitespacepreservationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled","displayName":"Enable Work Search suggestions in the address bar","description":"Enables the display of relevant workplace suggestions in the address bar’s suggestion dropdown when users type a query in the address bar.\r\n\r\nIf this policy is enabled or not configured, users can view internal work-related suggestions, such as bookmarks, files, and people results powered by Microsoft 365, in the Microsoft Edge address bar suggestion dropdown. To access these results, users must be signed into Microsoft Edge with their Entra ID account associated with that organization.\r\n\r\nIf this policy is disabled, users will not see internal workplace results in the Microsoft Edge address bar suggestion dropdown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_addressbarworksearchresultsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerprotectionenabled_recommended","displayName":"Configure Edge Scareware Blocker Protection","description":"This policy setting allows administrators to control whether Microsoft Edge enables the Scareware Blocker, an AI-powered feature that provides warning messages to help protect users from potential tech scams.\r\n\r\nIf this policy is enabled, Edge Scareware Blocker will warn users of potential tech scams.\r\n\r\nIf this policy is disabled, Edge Scareware Blocker will not warn users of potential tech scams.\r\n\r\nIf this policy is not configured, Edge Scareware Blocker will not warn users of potential tech scams, but users can choose warnings in settings.\r\n\r\nBy configuring this policy, administrators determine whether users receive proactive scam warnings or must manually enable them.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerprotectionenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerprotectionenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled","displayName":"Allow ServiceWorker to control srcdoc iframes","description":"https://github.com/w3c/ServiceWorker/issues/765 asks srcdoc iframe with the \"allow-same-origin\" sandbox attribute to be under ServiceWorker control.\r\n\r\nBy default (if left unset) or when set to Enabled, Microsoft Edge makes srcdoc iframes with \"allow-same-origin\" sandbox attributes to be under ServiceWorker control.\r\n\r\nSetting the policy to Disabled prevents ServiceWorker control over srcdoc iframes.\r\n\r\nThis policy is temporary and planned for deprecation in 2026.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_serviceworkertocontrolsrcdociframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled","displayName":"Make SharedWorker blob URL behavior aligned with the specification","description":"According to Service Worker specification\r\nhttps://w3c.github.io/ServiceWorker/#control-and-use-worker-client, workers\r\nshould inherit controllers for blob URLs. Currently, only DedicatedWorkers\r\ninherit the controller, while SharedWorkers do not.\r\n\r\nEnabled/Unset: Microsoft Edge inherits\r\nthe controller for SharedWorker blob URLs, aligning with the specification.\r\n\r\nDisabled: Behavior remains unchanged, not aligning with the specification.\r\n\r\nThis policy is temporary and will be removed in a future update.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_sharedworkerbloburlfixenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled","displayName":"Enable adaptive buffering for Web Audio","description":"This policy determines whether the browser enables adaptive buffering\r\nfor Web Audio. Adaptive buffering can reduce audio glitches but may\r\nincrease latency to varying degrees.\r\n\r\nEnabled: The browser will always use adaptive buffering.\r\nDisabled or Not Set: The browser will automatically decide during the\r\n feature launch process whether to use adaptive buffering.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge_webaudiooutputbufferingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout","displayName":"Delay before running idle actions","description":"Triggers an action when the computer is idle.\r\n\r\nIf you set this policy, it specifies the length of time without user input (in minutes) before the browser runs actions configured via the IdleTimeoutActions policy.\r\n\r\nIf you not set this policy, no action will be ran.\r\n\r\nThe minimum threshold is 1 minute.\r\n\r\n\"User input\" is defined by Operating System APIs, and includes things like moving the mouse or typing on the keyboard.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeout_idletimeout","displayName":"Delay before running idle actions: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions","displayName":"Actions to run when the computer is idle","description":"List of actions to run when the timeout from the IdleTimeout policy is reached.\r\n\r\nIf the IdleTimeout policy is unset, this policy has no effect.\r\n\r\nWhen the timeout from the IdleTimeout policy is reached, the browser runs the actions configured in this policy.\r\n\r\nIf you do not set this policy or no actions are selected, the IdleTimeout policy has no effect.\r\n\r\nSupported actions are:\r\n\r\n'close_browsers': close all browser windows and PWAs for this profile.\r\n\r\n'reload_pages': reload all webpages. For some pages, the user may be prompted for confirmation first.\r\n\r\n'clear_browsing_history', 'clear_download_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', 'clear_autofill', 'clear_site_settings': clear the corresponding browsing data.\r\n\r\nSetting 'clear_browsing_history', 'clear_password_signing', 'clear_autofill', and 'clear_site_settings' will disable sync for the respective data types if neither `Chrome Sync` is disabled by setting the SyncDisabled policy nor BrowserSignin is disabled.\r\n\r\nPolicy options mapping:\r\n\r\n* close_browsers (close_browsers) = Close Browsers\r\n\r\n* clear_browsing_history (clear_browsing_history) = Clear Browsing History\r\n\r\n* clear_download_history (clear_download_history) = Clear Download History\r\n\r\n* clear_cookies_and_other_site_data (clear_cookies_and_other_site_data) = Clear Cookies and Other Site Data\r\n\r\n* clear_cached_images_and_files (clear_cached_images_and_files) = Clear Cached Images and Files\r\n\r\n* clear_password_signin (clear_password_signin) = Clear Password Signin\r\n\r\n* clear_autofill (clear_autofill) = Clear Autofill\r\n\r\n* clear_site_settings (clear_site_settings) = Clear Site Settings\r\n\r\n* reload_pages (reload_pages) = Reload Pages\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nclose_browsers","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~browseridle_idletimeoutactions_idletimeoutactionsdesc","displayName":"Actions to run when the computer is idle (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with more advanced JavaScript optimizations enabled.\r\n\r\nDisabling JavaScript optimizations (by setting this policy's value to 2) will mean that Microsoft Edge may render web content more slowly.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'JavaScriptOptimizerAllowedForSites' (Allow JavaScript optimization on these sites) and 'JavaScriptOptimizerBlockedForSites' (Block JavaScript optimizations on these sites) policies.\r\n\r\nIf you don't configure this policy, JavaScript optimizations are enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowJavaScriptOptimizer (1) = Enable advanced JavaScript optimizations on all sites\r\n\r\n* BlockJavaScriptOptimizer (2) = Disable advanced JavaScript optimizations on all sites\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_1","displayName":"Enable advanced JavaScript optimizations on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_2","displayName":"Disable advanced JavaScript optimizations on all sites","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites","displayName":"Allow JavaScript optimization on these sites","description":"Allows you to set a list of site url patterns that specify sites for which advanced JavaScript optimizations are enabled.\r\n\r\nFor detailed information on valid site url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the 'JavaScriptOptimizerAllowedForSites' (Allow JavaScript optimization on these sites) policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript optimizations enabled, but fabrikam.com will use the policy from 'DefaultJavaScriptOptimizerSetting' (Control use of JavaScript optimizers), if set, or default to JavaScript optimizations enabled. Blocklist entries have higher priority than allowlist entries, which in turn have higher priority than the configured default value.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptOptimizerSetting' applies to the site, if set, otherwise Javascript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerallowedforsites_javascriptoptimizerallowedforsitesdesc","displayName":"Allow JavaScript optimization on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites","displayName":"Block JavaScript optimizations on these sites","description":"Allows you to set a list of site url patterns that specify sites for which advanced JavaScript optimizations are disabled.\r\n\r\nDisabling JavaScript optimizations will mean that Microsoft Edge may render web content more slowly.\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the 'JavaScriptOptimizerBlockedForSites' (Block JavaScript optimizations on these sites) policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript optimizations disabled, but fabrikam.com will use the policy from 'DefaultJavaScriptOptimizerSetting' (Control use of JavaScript optimizers), if set, or default to JavaScript optimizations enabled. Blocklist entries have higher priority than allowlist entries, which in turn have higher priority than the configured default value.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptOptimizerSetting' applies to the site, if set, otherwise JavaScript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~contentsettings_javascriptoptimizerblockedforsites_javascriptoptimizerblockedforsitesdesc","displayName":"Block JavaScript optimizations on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed","displayName":"Out-of-process print drivers allowed","description":"This policy determines whether Microsoft Edge handles interactions with printer drivers through a separate service process.\r\n\r\nUsing a service process for tasks like querying available printers, retrieving print driver settings, and submitting documents to local printers improves browser stability and prevents UI freezing during Print Preview.\r\n\r\nEnabled or Not Set: Microsoft Edge will use a separate service process for these printing tasks.\r\n\r\nDisabled: Microsoft Edge will perform these printing tasks within the browser process.\r\n\r\nNote: This policy will be deprecated in the future once the transition to out-of-process print drivers is fully implemented.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~printing_oopprintdriversallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled","displayName":"Configure Edge Scareware Blocker Protection","description":"This policy setting allows administrators to control whether Microsoft Edge enables the Scareware Blocker, an AI-powered feature that provides warning messages to help protect users from potential tech scams.\r\n\r\nIf this policy is enabled, Edge Scareware Blocker will warn users of potential tech scams.\r\n\r\nIf this policy is disabled, Edge Scareware Blocker will not warn users of potential tech scams.\r\n\r\nIf this policy is not configured, Edge Scareware Blocker will not warn users of potential tech scams, but users can choose warnings in settings.\r\n\r\nBy configuring this policy, administrators determine whether users receive proactive scam warnings or must manually enable them.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev134~policy~microsoft_edge~scarewareblocker_scarewareblockerprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled","displayName":"Enable Microsoft Bing trending suggestions in the address bar","description":"This policy controls whether Microsoft Bing trending suggestions appear in the address bar’s suggestion dropdown when users click the address bar while on a New Tab Page.\r\n\r\nIf this policy is enabled or not configured, Microsoft Bing trending suggestions will appear in the address bar suggestion dropdown.\r\n\r\nIf this policy is disabled, Microsoft Edge will not display Microsoft Bing trending suggestions when users click the address bar.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_addressbartrendingsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories","displayName":"Configure Web Content Filtering","description":"You can configure this policy to block certain categories of URLs. Blocking a category prevents users in specified device groups from accessing URLs associated with the category.\r\n\r\nThe list of possible categories, their Category String, and their description are detailed at https://go.microsoft.com/fwlink/?linkid=2249965\r\n\r\nTo block a category, add the Category String of the category to the following List of blocked categories If you leave this policy unset or disable the policy, no URLs will be blocked.\r\n\r\nIf you want to block a specific URL without blocking an entire category, add the URL to the list of blocked URLs using the 'URLBlocklist' (Block access to a list of URLs) policy.\r\n\r\nIf you want a specific URL in a blocked category to be accessible, add the URL to the list of allowed URLs using the 'URLAllowlist' (Define a list of allowed URLs) policy.\r\n\r\nThis Web Content Filtering policy only works on Microsoft Edge on Windows 10 devices or above.\r\n\r\nPolicy options mapping:\r\n\r\n* chat (chat) = Chat\r\n\r\n* child_abuse_images (child_abuse_images) = Child Abuse Images\r\n\r\n* criminal_activity (criminal_activity) = Criminal Activity\r\n\r\n* download_sites (download_sites) = Download Sites\r\n\r\n* gambling (gambling) = Gambling\r\n\r\n* games (games) = Games\r\n\r\n* hacking (hacking) = Hacking\r\n\r\n* hate_and_intolerance (hate_and_intolerance) = Hate and Intolerance\r\n\r\n* illegal_drug (illegal_drug) = Illegal Drug\r\n\r\n* illegal_software (illegal_software) = Illegal Software\r\n\r\n* image_sharing (image_sharing) = Image Sharing\r\n\r\n* instant_messaging (instant_messaging) = Instant Messaging\r\n\r\n* nudity (nudity) = Nudity\r\n\r\n* peer_to_peer (peer_to_peer) = Peer to Peer\r\n\r\n* pornography_or_sexually_explicit (pornography_or_sexually_explicit) = Pornography or Sexually Explicit\r\n\r\n* professional_networking (professional_networking) = Professional Networking\r\n\r\n* self_harm (self_harm) = Self Harm\r\n\r\n* sex_education (sex_education) = Sex Education\r\n\r\n* social_networking (social_networking) = Social Networking\r\n\r\n* streaming_and_downloads (streaming_and_downloads) = Streaming Media and Downloads\r\n\r\n* tasteless (tasteless) = Tasteless\r\n\r\n* violence (violence) = Violence\r\n\r\n* weapons (weapons) = Weapons\r\n\r\n* web_based_email (web_based_email) = Web Based Email\r\n\r\n* none (none) = None\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\ngambling\r\nstreaming_and_downloads\r\ngames","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge_webcontentfilteringblockedcategories_webcontentfilteringblockedcategoriesdesc","displayName":"List of blocked categories (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage","displayName":"Manage Blob URL Partitioning During Fetching and Navigation","description":"This policy controls whether Blob URLs are partitioned during fetching and navigation.\r\nIf this policy is set to Enabled or not set, Blob URLs will be partitioned.\r\nIf this policy is set to Disabled, Blob URLs won't be partitioned. This is the Blob URL behavior prior to\r\nMicrosoft Edge version 135.\r\n\r\nIf storage partitioning is disabled for a given top-level origin by either\r\nThirdPartyStoragePartitioningBlockedForOrigins\r\nor DefaultThirdPartyStoragePartitioningSetting,\r\nthen Blob URLs will also not be partitioned.\r\n\r\nThe policy is scheduled to be available through Microsoft Edge version 140. After this\r\nversion, the policy will be removed, and Microsoft Edge will no longer support unpartitioned\r\nblob storage.\r\n\r\nFor detailed information on third-party storage partitioning, please see https://github.com/privacycg/storage-partitioning.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~contentsettings_partitionedbloburlusage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor","displayName":"Set the company logo backplate color on the new tab page.","description":"By default, the new tab page sets the company logo backplate color to the neutralStrokeActive (#cecece) constant.\r\n\r\nYou can configure this policy with a color hex code to change the company logo backplate color on the new tab page.\r\n\r\nIf this policy is not configured, the default neutralStrokeActive (#cecece) color will be used as the backplate color.\r\n\r\nExample value: #cecece","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~startup_newtabpagecompanylogobackplatecolor_newtabpagecompanylogobackplatecolor","displayName":"Set the company logo backplate color on the new tab page. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl","displayName":"WebRTC IP Handling Policy for URL Patterns","description":"Controls which IP addresses and network interfaces WebRTC can use\r\nwhen establishing connections for specific URL patterns.\r\n\r\nHow It Works:\r\nAccepts a list of URL patterns, each paired with a handling type.\r\nWebRTC evaluates patterns sequentially; the first match determines the handling type.\r\nIf no match is found, WebRTC defaults to the WebRtcLocalhostIpHandling WebRtcLocalhostIpHandling. policy.\r\nThis policy applies only to origins—URL path components are ignored.\r\nWildcards (*) are supported in URL patterns.\r\n\r\nSupported Handling Values:\r\ndefault – Uses all available network interfaces.\r\ndefault_public_and_private_interfaces – WebRTC uses all public and private interfaces.\r\ndefault_public_interface_only – WebRTC uses only public interfaces.\r\ndisable_non_proxied_udp – WebRTC uses UDP SOCKS proxying or falls back to TCP proxying.\r\n\r\nMore Information:\r\nValid input patterns: https://go.microsoft.com/fwlink/?linkid=2095322\r\nHandling types: https://tools.ietf.org/html/rfc8828.html#section-5.2\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.example.com\",\r\n \"handling\": \"default_public_and_private_interfaces\"\r\n },\r\n {\r\n \"url\": \"https://[*.]example.edu\",\r\n \"handling\": \"default_public_interface_only\"\r\n },\r\n {\r\n \"url\": \"*\",\r\n \"handling\": \"disable_non_proxied_udp\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev135~policy~microsoft_edge~webrtc_webrtciphandlingurl_webrtciphandlingurl","displayName":"WebRTC IP Handling Policy for URL Patterns (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled","displayName":"Enable automatic HTTPS upgrades","description":"As of Microsoft Edge version 120, Microsoft Edge tries to upgrade HTTP navigations to HTTPS whenever possible to improve security. Navigations to captive portals, IP addresses, and non-unique hostnames are excluded from automatic upgrades.\r\n\r\nIf this policy is enabled or not configured, automatic HTTPS upgrades are turned on by default.\r\n\r\nIf this policy is disabled, Microsoft Edge won't attempt to upgrade HTTP connections to HTTPS.\r\n\r\nTo exempt specific hostnames or hostname patterns from being upgraded, use the HttpAllowlist policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge_httpsupgradesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled","displayName":"Enable exporting saved passwords from Password Manager","description":"This policy controls whether the Export Password button in edge://wallet/passwords is enabled.\r\n\r\nIf enabled or not configured, users can export saved passwords.\r\nIf disabled, the Export Password button is unavailable, preventing password exports.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~passwordmanager_passwordexportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled","displayName":"Controls the display of the profile button label for the work or school profile","description":"Controls whether the label for the work or school profile type is shown in the profile button.\r\n\r\nThis policy does not apply when the OrganizationalBrandingOnWorkProfileUIEnabled policy is enabled.\r\n\r\nIf you enable this policy, the label for the work or school profile type appears in the profile button.\r\n\r\nIf you disable this policy or leave it not configured, the label is not shown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev136~policy~microsoft_edge~profile_profiletypeinprofilebuttonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector","displayName":"Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when data is entered in Microsoft Edge from the clipboard or by drag and dropping web content.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\n5. minimum_data_size\r\nSpecifies the minimum size (in bytes) that the entered data must meet or exceed to be scanned.\r\nDefault: 100 bytes if the field is not set.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"minimum_data_size\": 100,\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onbulkdataentryenterpriseconnector_onbulkdataentryenterpriseconnector","displayName":"Configuration policy for bulk data entry for Microsoft Edge for Business Data Loss Prevention Connectors (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector","displayName":"Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when a file is attached to Microsoft Edge.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"malware\"\r\n ],\r\n \"url_list\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onfileattachedenterpriseconnector_onfileattachedenterpriseconnector","displayName":"Configuration policy for files attached for Microsoft Edge for Business Data Loss Prevention Connectors (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector","displayName":"Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors","description":"List of Microsoft Edge for Business Data Loss Prevention Connectors services settings to be applied when a page or file is printed from Microsoft Edge.\r\n\r\nConnector Fields\r\n\r\n1. url_list,\r\ntags,\r\nenable,\r\ndisable\r\nThese fields determine whether the connector sends data for analysis when content is entered on a specific page, and which tags to include in the analysis request.\r\nA tag associated with an enable pattern is included in the request if the page URL matches the pattern—unless a corresponding disable pattern also matches.\r\nAnalysis is triggered if at least one tag is included in the request.\r\n\r\n2. service_provider\r\nIdentifies the analysis service provider the configuration applies to.\r\n\r\n3. block_until_verdict\r\nIf set to 1, Microsoft Edge waits for a response from the analysis service before giving the page access to the data.\r\nAny other integer value allows the page to access the data immediately.\r\n\r\n4. default_action\r\nIf set to block, Microsoft Edge denies page access to the data if an error occurs while contacting the analysis service.\r\nAny other value permits the page to access the data.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2320413.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"block_until_verdict\": 0,\r\n \"default_action\": \"allow\",\r\n \"disable\": [\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.us.com\"\r\n ]\r\n }\r\n ],\r\n \"enable\": [\r\n {\r\n \"tags\": [\r\n \"dlp\"\r\n ],\r\n \"url_list\": [\r\n \"*.them.com\",\r\n \"*.others.com\"\r\n ]\r\n }\r\n ],\r\n \"service_provider\": \"local_system_agent\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_onprintenterpriseconnector_onprintenterpriseconnector","displayName":"Configuration policy for print for Microsoft Edge for Business Data Loss Prevention Connectors (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications.","description":"This policy defines a list of allowed HTTPS origins for remote desktop client applications that initiate WebAuthn API requests from a browsing session on a remote host.\r\n\r\nOrigins specified in this policy can request WebAuthn authentication for Relying Party IDs (RP IDs) they would not typically be authorized to claim.\r\n\r\nOnly HTTPS origins are supported. Wildcards are not permitted. Entries that do not\r\nmeet these requirements will be ignored.\r\n\r\nFor more information about the WebAuthn Remote Desktop Support feature, please see https://github.com/w3c/webauthn/wiki/Explainer:-Remote-Desktop-Support/a4e158c569f456c759d0ddd294a9015bd4d4eb9a.\r\n\r\nExample value:\r\n\r\nhttps://server:8080/","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge_webauthenticationremotedesktopallowedorigins_webauthenticationremotedesktopallowedoriginsdesc","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge~network_happyeyeballsv3enabled","displayName":"Use the Happy Eyeballs V3 algorithm for connection attempts","description":"Controls whether Microsoft Edge uses the Happy Eyeballs V3 algorithm to optimize connection attempts. This algorithm improves reliability and performance in dual-stack (IPv4/IPv6) networks by racing connection attempts across IP versions and HTTP protocols (e.g., HTTP/3 vs. others). For more details, see https://datatracker.ietf.org/doc/draft-pauly-happy-happyeyeballs-v3.\r\n\r\nEnabled or not configured: Uses the algorithm for connection attempts.\r\n\r\nDisabled: Disables the algorithm.\r\n\r\nNote: This policy supports dynamic refresh.\r\n\r\nImportant: This policy is temporary and will be removed in a future version.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge~network_happyeyeballsv3enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev137~policy~microsoft_edge~network_happyeyeballsv3enabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled","displayName":"Allow pages to use the built-in AI APIs.","description":"Use this policy to control whether websites can access the built-in AI APIs, including the LanguageModel API, Summarization API, Writer API, and Rewriter API.\r\n\r\nEnable this policy to allow pages to use the APIs. If you don’t configure this policy, the APIs are still allowed.\r\n\r\nDisable this policy to block access to the APIs. The APIs will return an error when used.\r\n\r\nFor more information, see https://github.com/webmachinelearning/writing-assistance-apis/blob/main/README.md.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_builtinaiapisenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_edgehistoryaisearchenabled","displayName":"Control access to AI-enhanced search in History","description":"This policy controls whether users can use AI-enhanced search in their browsing history in Microsoft Edge.\r\n\r\nWhen enabled or not configured, users can search using synonyms, natural language phrases, and minor spelling errors to find previously visited pages.\r\n\r\nWhen disabled, users can only perform exact match (verbatim) searches in their history.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_edgehistoryaisearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_edgehistoryaisearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled","displayName":"Allow SpeculationRules prefetch for ServiceWorker-controlled URLs","description":"Controls whether SpeculationRules prefetch requests are allowed for\r\nServiceWorker-controlled URLs.\r\n\r\nStarting with Microsoft Edge version 138,\r\nprefetch requests to ServiceWorker-controlled URLs are allowed by default when\r\nthe PrefetchServiceWorker feature is enabled.\r\n\r\nIf this policy is enabled or not configured, that default behavior is used.\r\n\r\nTo restore the legacy behavior from versions prior to 138, where prefetch requests\r\nto ServiceWorker-controlled URLs were blocked, set this policy to disabled.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_prefetchwithserviceworkerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_recommended~identity_recommended_edgeopenexternallinkswithprimaryworkprofileenabled_recommended","displayName":"Use Primary Work Profile as default to open external links","description":"This policy controls whether Microsoft Edge uses the Primary Work Profile as the default profile when opening external links.\r\n1. On Windows, the Primary Work Profile refers to the profile signed in with the Entra ID account used to enroll the device.\r\n2. On macOS and Linux, the Primary Work Profile is the only profile signed in with an Entra ID account. If multiple profiles are signed in with Entra ID accounts, the Primary Work Profile setting does not apply.\r\n\r\nPolicy behavior:\r\n1. If enabled or not configured, Microsoft Edge will use the Primary Work Profile as the default for opening external links.\r\n2. If disabled, the last used profile becomes the default for opening external links.\r\n\r\nNote: This policy does not override the following scenarios:\r\n1. If the EdgeDefaultProfileEnabled policy is set, it takes precedence over this policy.\r\n2. External links opened from Outlook or Microsoft Teams may be configured to launch in a specific profile, which can override the Primary Work Profile setting.\r\n3. If the user sets a preference for \"Default profile for external links\" in Profile preferences, that setting will take effect.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_recommended~identity_recommended_edgeopenexternallinkswithprimaryworkprofileenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_recommended~identity_recommended_edgeopenexternallinkswithprimaryworkprofileenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_tls13earlydataenabled","displayName":"Control whether TLS 1.3 Early Data is enabled in Microsoft Edge","description":"This policy controls whether TLS 1.3 Early Data is enabled in Microsoft Edge.\r\n\r\nTLS 1.3 Early Data is an extension that allows an HTTP request to be sent in parallel with the TLS handshake. When enabled and supported by the server, this can improve page load performance.\r\n\r\nEnabled – Microsoft Edge enables TLS 1.3 Early Data.\r\n\r\nDisabled – Microsoft Edge disables TLS 1.3 Early Data.\r\n\r\nNot configured – Microsoft Edge follows the default rollout process for TLS 1.3 Early Data.\r\n\r\nNOTE: When this feature is enabled, whether TLS 1.3 Early Data is used depends on server support. Most modern TLS servers and middleware can handle or reject Early Data without interrupting the connection. However, improperly implemented TLS stacks may cause connection failures. If such issues occur, contact the device or software vendor for a resolution.\r\n\r\nThis policy is temporary and intended to help test for compatibility issues. It may be removed in a future release once the feature is fully rolled out.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_tls13earlydataenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge_tls13earlydataenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge~network_localnetworkaccessrestrictionsenabled","displayName":"Specifies whether to block requests from public websites to devices on a user's local network. (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nLocal Network Access restrictions prevent public websites from making\r\nrequests to devices on a user's local network without explicit user permission.\r\n\r\nIf you enable this policy, Microsoft Edge will\r\nblock any request that would otherwise trigger a DevTools warning\r\ndue to Local Network Access checks.\r\nThese requests will be denied without prompting the user.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will handle\r\nthese requests using the default behavior, which may include showing warnings in DevTools\r\nand allowing the request to proceed depending on the context.\r\n\r\nNote: This feature improves local network security by deprecating direct access to private IP addresses from public websites\r\nunless explicitly granted by the user.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge~network_localnetworkaccessrestrictionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev138~policy~microsoft_edge~network_localnetworkaccessrestrictionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader","displayName":"Allow software WebGL fallback using SwiftShader","description":"Controls whether SwiftShader is used as a fallback for WebGL when hardware GPU acceleration is not available.\r\n\r\nWhen enabled, Microsoft Edge will use SwiftShader to support WebGL on systems without GPU acceleration, such as headless environments or virtual machines.\r\n\r\nStarting in Microsoft Edge version 139, SwiftShader has been deprecated due to security concerns. As a result, WebGL context creation will fail in scenarios where SwiftShader would have been used. Enabling this policy allows organizations to temporarily defer the deprecation and continue using SwiftShader.\r\n\r\nIf you disable or do not configure this policy, WebGL context creation may fail on systems without hardware acceleration. This could cause web content relying on WebGL to function incorrectly if it does not handle context creation failures.\r\n\r\nNote: This is a temporary policy and will be removed in a future release.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_enableunsafeswiftshader_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_microsoft365copilotchaticonenabled","displayName":"Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar","description":"For users in an Entra ID Microsoft Edge profile, this policy controls whether the Microsoft 365 Copilot Chat icon will be shown in the Microsoft Edge for Business toolbar for Microsoft 365 Copilot licensed and unlicensed users.\r\n\r\nThis policy only applies when users are accessing Copilot in the sidepane.\r\n\r\nIf the policy is enabled: Copilot will appear in the toolbar.\r\n\r\nIf the policy is disabled: Copilot will not appear in the toolbar.\r\n\r\nIf the policy is not configured: Otherwise, Copilot will show in the toolbar and users may enable or disable Copilot from showing by using the Show Copilot toggle in settings.\r\n\r\nWhen both this policy and 'HubsSidebarEnabled' (Show Hubs Sidebar) are configured, this policy takes precedence in determining whether Copilot appears in the toolbar. If this policy is not configured and 'HubsSidebarEnabled' is disabled, Copilot will remain hidden. In a future release, this policy will be the sole control for managing Copilot's visibility in the toolbar.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_microsoft365copilotchaticonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_microsoft365copilotchaticonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector","displayName":"Configuration policy for Microsoft Edge for Business Reporting Connectors","description":"Defines the Microsoft Edge for Business Reporting Connectors service settings that apply when a security event occurs in Microsoft Edge. These events include negative verdicts from Data Loss Prevention Connectors, password reuse, navigation to unsafe pages, and other security-sensitive actions.\r\n\r\nThe service_provider field specifies the reporting service provider. The enabled_event_names field lists the security events enabled for that provider.\r\n\r\nThis policy requires additional setup to take effect. For configuration guidance, see https://go.microsoft.com/fwlink/?linkid=2325446.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"enabled_event_names\": [\r\n \"passwordChangedEvent\",\r\n \"sensitiveDataEvent\"\r\n ],\r\n \"enabled_opt_in_events\": [\r\n {\r\n \"name\": \"loginEvent\",\r\n \"url_patterns\": [\r\n \"*\"\r\n ]\r\n },\r\n {\r\n \"name\": \"passwordBreachEvent\",\r\n \"url_patterns\": [\r\n \"example.com\",\r\n \"other.example.com\"\r\n ]\r\n }\r\n ],\r\n \"service_provider\": \"microsoft\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_onsecurityevententerpriseconnector_onsecurityevententerpriseconnector","displayName":"Configuration policy for Microsoft Edge for Business Reporting Connectors (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended","displayName":"Control whether Microsoft 365 Copilot Chat shows in the Microsoft Edge for Business toolbar","description":"For users in an Entra ID Microsoft Edge profile, this policy controls whether the Microsoft 365 Copilot Chat icon will be shown in the Microsoft Edge for Business toolbar for Microsoft 365 Copilot licensed and unlicensed users.\r\n\r\nThis policy only applies when users are accessing Copilot in the sidepane.\r\n\r\nIf the policy is enabled: Copilot will appear in the toolbar.\r\n\r\nIf the policy is disabled: Copilot will not appear in the toolbar.\r\n\r\nIf the policy is not configured: Otherwise, Copilot will show in the toolbar and users may enable or disable Copilot from showing by using the Show Copilot toggle in settings.\r\n\r\nWhen both this policy and 'HubsSidebarEnabled' (Show Hubs Sidebar) are configured, this policy takes precedence in determining whether Copilot appears in the toolbar. If this policy is not configured and 'HubsSidebarEnabled' is disabled, Copilot will remain hidden. In a future release, this policy will be the sole control for managing Copilot's visibility in the toolbar.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge_recommended_microsoft365copilotchaticonenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation","displayName":"Specify extensions users must allow in order to navigate using InPrivate mode","description":"This policy lets you specify a list of extension IDs that must be explicitly allowed by the user to run in InPrivate mode in order to enable InPrivate browsing.\r\n\r\nIf users do not allow all listed extensions to run in InPrivate mode, they will be unable to navigate using InPrivate.\r\n\r\nIf any extension in the list is not installed, InPrivate navigation is blocked.\r\n\r\nThis policy only applies when InPrivate mode is enabled. If InPrivate mode is disabled using the InPrivateModeAvailability policy, this policy has no effect.\r\n\r\nExample value:\r\n\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~extensions_mandatoryextensionsforinprivatenavigation_mandatoryextensionsforinprivatenavigationdesc","displayName":"Specify extensions users must allow in order to navigate using InPrivate mode (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile","displayName":"Prioritize App specified profile to open external links","description":"This policy controls whether the profile specified by an app (such as Microsoft Teams or Outlook) is given priority when opening external links, instead of the profile selected in the Default profile for external links setting.\r\n\r\nPolicy behavior:\r\n1. Enabled or not configured: The app-specified profile is prioritized for opening external links. This behavior overrides the profile selected in settings, and the behavior defined by the EdgeDefaultProfileEnabled and EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled policies. If the app doesn't specify a profile, this policy has no effect.\r\n2. Disabled: The profile selected in settings—along with the EdgeDefaultProfileEnabled and EdgeOpenExternalLinksWithPrimaryWorkProfileEnabled policies—will be used to determine which profile opens external links.\r\n\r\nNOTE:\r\nThis policy doesn't override user-defined preferences set through Automatic profile switching, including the Custom site switch setting located within it. If a user has configured specific sites to open in designated profiles, those preferences take precedence.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev139~policy~microsoft_edge~identity_edgeopenexternallinkswithappspecifiedprofile_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled","displayName":"Allow DNS queries for more DNS record types","description":"This policy controls whether Microsoft Edge can query more DNS record types when making insecure (non-Secure DNS) requests.\r\n\r\nIf this policy is unset or set to Enabled, more record types such as HTTPS (DNS type 65) may be queried in addition to A (DNS type 1) and AAAA (DNS type 28).\r\n\r\nIf this policy is set to Disabled, Microsoft Edge will only query A and AAAA record types for insecure DNS requests.\r\n\r\nThis setting doesn't affect DNS queries made via Secure DNS, which may always use more record types.\r\n\r\nNote: This is a temporary policy and is planned for removal in a future version of Microsoft Edge. After removal, Microsoft Edge will always be able to query more DNS types during insecure requests.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_additionaldnsquerytypesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled","description":"This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigations to HTTPS.\r\n\r\nIf this setting is not set or is set to allowed, users will be able to enable HTTPS-Only Mode.\r\nIf this setting is set to disallowed, users will not be able to enable HTTPS-Only Mode.\r\nIf this setting is set to force_enabled, HTTPS-Only Mode will be enabled in Strict mode and users will not be able to disable it.\r\nIf this setting is set to force_balanced_enabled, HTTPS-Only Mode will be enabled in Balanced mode and users will not be able to disable it.\r\n\r\nIf you set this policy to a value that is not supported by the version of Microsoft Edge that receives the policy, Microsoft Edge will default to the allowed setting.\r\n\r\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\r\n\r\nPolicy options mapping:\r\n\r\n* allowed (allowed) = Do not restrict users' HTTPS-Only Mode setting\r\n\r\n* disallowed (disallowed) = Do not allow users to enable any HTTPS-Only Mode\r\n\r\n* force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode\r\n\r\n* force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: disallowed","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_httpsonlymode_allowed","displayName":"Do not restrict users' HTTPS-Only Mode setting","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_httpsonlymode_disallowed","displayName":"Do not allow users to enable any HTTPS-Only Mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_httpsonlymode_force_enabled","displayName":"Force enable HTTPS-Only Mode in Strict mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_httpsonlymode_httpsonlymode_force_balanced_enabled","displayName":"Force enable HTTPS-Only Mode in Balanced Mode","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_restrictcoresharingonrenderer","displayName":"Restrict CPU core sharing for renderer process","description":"This policy helps mitigate side-channel cross-process memory attacks by isolating the renderer process to a dedicated CPU core, preventing other processes from being scheduled on the same core. This mitigation is supported on Microsoft® Windows® 11 24H2 and later. If the operating system does not support the necessary scheduling features, this policy has no effect. Enabling this policy may reduce performance in demanding workloads, similar to the impact of disabling hyperthreading. For more information refer https://learn.microsoft.com/windows/win32/api/winnt/ns-winnt-process_mitigation_side_channel_isolation_policy\r\nIf you enable this policy, other processes can not be scheduled on the same CPU core as a renderer process.\r\nIf you disable this policy, other processes can be scheduled on the same CPU core as a renderer process.\r\nIf you don't configure this policy, other processes may be scheduled on the same core as the renderer process. Behavior may vary depending on Microsoft Edge version and platform.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_restrictcoresharingonrenderer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_restrictcoresharingonrenderer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_serviceworkerautopreloadenabled","displayName":"Allow ServiceWorker to dispatch navigation requests without waiting for its startup","description":"This policy controls whether Microsoft Edge enables the ServiceWorkerAutoPreload feature.\r\n\r\nWhen enabled or not configured, Microsoft Edge may initiate the main resource network request concurrently with the Service Worker bootstrap process. This can improve performance in scenarios where the Service Worker is not already running.\r\n\r\nIf you disable this policy, Microsoft Edge will wait to dispatch the navigation request until after the Service Worker has started.\r\n\r\nThis is a temporary policy and will be removed in version 144 of Microsoft Edge.\r\n\r\nFor more details on the feature, see https://github.com/WICG/service-worker-auto-preload.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_serviceworkerautopreloadenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge_serviceworkerautopreloadenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls","displayName":"Allow sites to make requests to local network endpoints.","description":"Specifies a list of URL patterns for which requests initiated from matching origins are exempt from Local Network Access restrictions.\r\n\r\nIf an origin is specified by both this policy and the 'LocalNetworkAccessBlockedForUrls' (Block sites from making requests to local network endpoints.) policy, the blocked list takes precedence.\r\n\r\nFor origins not covered by this policy, the user's personal settings and local network access restrictions will apply.\r\n\r\nFor guidance on valid URL pattern syntax, see:\r\nhttps://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns\r\n\r\nNote: This policy enables controlled exceptions to local network access restrictions. It allows specific public websites to access private IP addresses when necessary for trusted local communication scenarios. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessallowedforurls_localnetworkaccessallowedforurlsdesc","displayName":"Allow sites to make requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls","displayName":"Block sites from making requests to local network endpoints.","description":"List of URL patterns. Requests initiated from websites served by matching origins are blocked from issuing Local Network Access requests.\r\n\r\nIf an origin is covered by both this policy and by 'LocalNetworkAccessAllowedForUrls' (Allow sites to make requests to local network endpoints.), this policy takes precedence.\r\n\r\nDepending on the stage of the rollout of Local Network Access, LocalNetworkAccessRestrictionsEnabled may also need to be enabled for this policy to block Local Network Access requests.\r\n\r\nFor origins not covered by the patterns specified here, the user's personal configuration will apply.\r\n\r\nFor detailed information on valid URL patterns, please see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\r\n\r\nNote: This policy improves local network security by blocking specified public websites from accessing private IP addresses. It helps prevent unauthorized external sites from reaching internal resources unless explicitly permitted. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev140~policy~microsoft_edge~network_localnetworkaccessblockedforurls_localnetworkaccessblockedforurlsdesc","displayName":"Block sites from making requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled","displayName":"Allows users to translate videos to different languages.","description":"This policy configures the on-device real-time video translation feature in Microsoft Edge.\r\nWith this feature, users can watch videos translated into their selected language in real time.\r\n\r\nWhen a user selects the Translate icon and chooses a source (video language) and target language (translated language),\r\ntranslation components are downloaded on first use (approximately 200 MB per language pair).\r\n\r\nThese components may be updated periodically to improve performance and translation quality.\r\nTranslation is performed locally on the user’s device and no data is sent outside of the device.\r\nThe feature is available only for non-DRM videos, on supported high-end devices, with select language pairs, and in select regions.\r\nFor more details, see https://www.microsoft.com/en-us/edge/features/real-time-video-translation.\r\n\r\nIf you enable or don’t configure this policy, the on-device real-time video translation feature is enabled and\r\nusers will see the Translate button when hovering over videos.\r\n\r\nIf you disable this policy, the on-device real-time video translation feature is disabled and the Translate button won’t be shown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_livevideotranslationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_originkeyedprocessesenabled_recommended","displayName":"Enable origin-keyed process isolation for improved security","description":"This policy enables origin-keyed process isolation for most pages, which improves security by separating content from different origins into distinct processes. This may increase the number of processes created. Users can override this setting by using command-line flags or edge://flags to turn the feature on or off.\r\n\r\nIf you enable this policy, most origins will be isolated, even from other origins within the same site. For related configuration, see the IsolateOrigins and SitePerProcess policies.\r\n\r\nIf you disable this policy, origins will not be isolated from the rest of their site unless the origin explicitly requests isolation.\r\n\r\nIf you don’t configure this policy, the browser will decide which origins to isolate and when. By default, this feature is disabled. The default state may change in the future.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_originkeyedprocessesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_originkeyedprocessesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended","displayName":"Enable tab preview on hover","description":"This policy controls whether Microsoft Edge displays a preview of the tab content when the user hovers over a tab.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge shows a tab preview when the user hovers over a tab.\r\n\r\nIf you disable this policy, tab previews will not be shown on hover.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_recommended_showtabpreviewenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated","displayName":"Relaunch browser quickly when the current version is outdated","description":"This policy specifies the minimum release age after which relaunch notifications become more aggressive. The release age is calculated from the time the currently running version was last served to clients.\r\n\r\nIf a browser relaunch is needed to finalize a pending update and the current version has been outdated for more than the number of days specified by this setting, the RelaunchNotificationPeriod policy is overridden to 2 hours. If the RelaunchNotification policy is set to 1 ('Required'), a browser relaunch will be forced at the end of the period.\r\n\r\nIf not set, or if the release age cannot be determined, the RelaunchNotificationPeriod policy will be used for all updates.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_relaunchfastifoutdated_relaunchfastifoutdated","displayName":"Time period (days): (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled","displayName":"Enable tab preview on hover","description":"This policy controls whether Microsoft Edge displays a preview of the tab content when the user hovers over a tab.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge shows a tab preview when the user hovers over a tab.\r\n\r\nIf you disable this policy, tab previews will not be shown on hover.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge_showtabpreviewenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement","displayName":"Enable post-quantum key agreement for WebRTC","description":"This policy controls the use of post-quantum key agreement for WebRTC in Microsoft Edge.\r\n\r\nIf you enable this policy, Microsoft Edge will offer post-quantum key agreement for WebRTC.\r\n\r\nIf you disable this policy, post-quantum key agreement will not be offered for WebRTC.\r\n\r\nIf you don't configure this policy, post-quantum key agreement will not be offered for WebRTC. A future version of Microsoft Edge may enable this feature by default.\r\n\r\nOffering a post-quantum key agreement is backwards compatible. Existing datagram transport layer security (DTLS) peers and networking middleware are expected to ignore the new option and continue using previous options.\r\n\r\nHowever, devices that don't correctly implement DTLS may malfunction when offered the new option. For example, they may disconnect in response to unrecognized options or larger message sizes. Such devices aren’t post-quantum-ready and may interfere with an organization's post-quantum transition. If this issue occurs, administrators should contact the device vendor for a fix.\r\n\r\nThis policy is temporary and will be removed in a future release.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev141~policy~microsoft_edge~webrtc_webrtcpostquantumkeyagreement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended","displayName":"Configure Edge scareware blocker to block sites detected as potential tech scams","description":"This policy controls whether Microsoft Edge blocks sites that are detected as potential tech scams.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block sites detected as potential tech scams.\r\n\r\nIf you disable this policy, Microsoft Edge will not block sites detected as potential tech scams.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockerblocksdetectedsitesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended","displayName":"Configure Edge scareware blocker to share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen","description":"This policy controls whether Microsoft Edge shares URLs of sites that are detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge will share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge_recommended~scarewareblocker_recommended_scarewareblockersenddetectedsitestosmartscreenenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains","displayName":"Configure the list of domains where Microsoft Edge scareware blocker won't run","description":"This policy configures the list of trusted domains for Microsoft Edge scareware blocker. When a website's source URL matches any domain in this list, Edge scareware blocker won’t analyze that site.\r\n\r\nThis policy takes effect only if the ScarewareBlockerProtectionEnabled policy is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge scareware blocker will trust the specified domains.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge scareware blocker will analyze all sites.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerallowlistdomains_scarewareblockerallowlistdomainsdesc","displayName":"Configure the list of domains where Microsoft Edge scareware blocker won't run (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled","displayName":"Configure Edge scareware blocker to block sites detected as potential tech scams","description":"This policy controls whether Microsoft Edge blocks sites that are detected as potential tech scams.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block sites detected as potential tech scams.\r\n\r\nIf you disable this policy, Microsoft Edge will not block sites detected as potential tech scams.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockerblocksdetectedsitesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled","displayName":"Configure Edge scareware blocker to share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen","description":"This policy controls whether Microsoft Edge shares URLs of sites that are detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nThis policy only takes effect if ScarewareBlockerProtectionEnabled is enabled.\r\n\r\nIf you enable this policy, Microsoft Edge will share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will not share URLs of sites detected as potential tech scams with Microsoft Defender SmartScreen.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev142~policy~microsoft_edge~scarewareblocker_scarewareblockersenddetectedsitestosmartscreenenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout","displayName":"Specifies whether to opt out of Local Network Access restrictions","description":"This policy allows for opting out of restrictions on requests to local network endpoints.\r\n\r\nIf you enable this policy, Local Network Access requests will only display warnings in Edge DevTools when Local Network Access checks fail.\r\n\r\nIf you disable or don't configure this policy, Local Network Access requests will follow the default handling behavior.\r\n\r\nFor more information about Local Network Access restrictions, see Local Network Access .\r\n\r\nThis enterprise policy is temporary and will be removed after Microsoft Edge version 146.\r\n\r\nTo allow specific URL patterns that should automatically be granted Local Network Access permission, use the LocalNetworkAccessAllowedForUrls policy.\r\n\r\nNote: If the LocalNetworkAccessRestrictionsEnabled policy is enabled, it takes precedence over this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~network_localnetworkaccessrestrictionstemporaryoptout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled","displayName":"Enable RAM (memory) resource controls","description":"This policy controls whether users can access the RAM (memory) resource control feature. This feature lets users set an individual limit on how much RAM (memory) the browser can use.\r\n\r\nTo set a specific memory limit, use the 'TotalMemoryLimitMb' (Set limit on megabytes of memory a single Microsoft Edge instance can use) policy.\r\n\r\nIf you enable or don't configure this policy, users can enable resource control and set the amount of RAM that Microsoft Edge can use. Browser performance may be affected by low limits.\r\n\r\nIf you disable this policy, users can't use resource control.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev143~policy~microsoft_edge~performance_ramresourcecontrolsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled","displayName":"Enable Silent Printing","description":"This policy controls whether Microsoft Edge uses silent printing.\r\n\r\nIf you enable this policy, Edge automatically closes the print preview window and prints to the default printer using its default settings. If the default printer is Save as PDF, the file is saved to the user's Downloads folder.\r\n\r\nIf you disable or don't configure this policy, silent printing is disabled. The print preview window stays open and the user must choose print settings as usual.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_silentprintingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_whatsnewpageforentraprofilesenabled","displayName":"Control whether an informational webpage for Edge for Business is shown in the new tab after major browser updates","description":"Starting in Microsoft Edge version 145, users with Microsoft Entra ID profiles will see an informational page about new Edge for Business features after major browser updates. This page highlights recent enhancements designed to promote secure and productive browsing.\r\n\r\nThis policy controls whether users with Microsoft Entra ID profiles see this informational page. This policy applies only to Microsoft Entra ID profiles and does not apply to Microsoft account (MSA) profiles.\r\n\r\nThis policy is available starting in Microsoft Edge version 144 to allow configuration ahead of the changes introduced in version 145.\r\n\r\nIf you enable this policy or do not configure it, Microsoft Edge shows the informational page by default.\r\nIf you disable this policy, Microsoft Edge does not show the informational page to users.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_whatsnewpageforentraprofilesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge_whatsnewpageforentraprofilesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls","displayName":"Block geolocation on these sites","description":"Use this policy to define a list of URL patterns for sites that are blocked from accessing the user's geolocation. These sites also can't prompt the user for location permissions.\r\n\r\nIf you enable this policy, the list you provide determines which sites are blocked from requesting or accessing geolocation.\r\n\r\nIf you disable or don't configure this policy, DefaultGeolocationSetting applies to all sites, if configured. If it's not configured, the user’s personal browser setting is used.\r\n\r\nFor detailed information on valid url patterns, see the documentation on pattern formats: https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_geolocationblockedforurls_geolocationblockedforurlsdesc","displayName":"Block geolocation on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls","displayName":"Allow precise geolocation on these sites","description":"This policy lets you specify a list of URL patterns for sites that are allowed to access the user's high-accuracy geolocation without prompting for permission.\r\n\r\nIf you leave this policy unset, DefaultGeolocationSetting applies to all sites (if configured). Otherwise, the user's personal setting is used.\r\n\r\nFor information about valid url patterns, see https://learn.microsoft.com/deployedge/edge-learnmmore-url-list-filter%20format. Wildcards (*) are supported.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev144~policy~microsoft_edge~contentsettings_precisegeolocationallowedforurls_precisegeolocationallowedforurlsdesc","displayName":"Allow precise geolocation on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended","displayName":"Allow HTTPS-Only Mode to be enabled","description":"This policy controls whether users can enable HTTPS-Only Mode (Always Use Secure Connections) in Settings. HTTPS-Only Mode attempts to upgrade all navigations to HTTPS.\r\n\r\nIf this setting isn't set or is set to `allowed`, users are able to enable HTTPS-Only Mode.\r\nIf this setting is set to `disallowed`, HTTPS-Only Mode will be disabled.\r\nIf this setting is set to `force_enabled`, HTTPS-Only Mode is enabled in Strict mode.\r\nIf this setting is set to `force_balanced_enabled`, HTTPS-Only Mode is enabled in Balanced mode.\r\n\r\nThe settings `force_enabled` and `force_balanced_enabled` can be recommended to users. HTTPS-Only Mode will be set to Strict or Balanced initially, but users are allowed to change it.\r\n\r\nIf you set this policy to a value that isn't supported by the version of Microsoft Edge that receives the policy, Microsoft Edge defaults to the `allowed` setting.\r\n\r\nThe separate HttpAllowlist policy can be used to exempt specific hostnames or hostname patterns from being upgraded to HTTPS by this feature.\r\n\r\nPolicy options mapping:\r\n\r\n* allowed (allowed) = Don't restrict users' HTTPS-Only Mode setting\r\n\r\n* disallowed (disallowed) = Disable HTTPS-Only Mode\r\n\r\n* force_enabled (force_enabled) = Force enable HTTPS-Only Mode in Strict mode\r\n\r\n* force_balanced_enabled (force_balanced_enabled) = Force enable HTTPS-Only Mode in Balanced Mode\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: disallowed","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_allowed","displayName":"Don't restrict users' HTTPS-Only Mode setting","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_disallowed","displayName":"Disable HTTPS-Only Mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_force_enabled","displayName":"Force enable HTTPS-Only Mode in Strict mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_recommended_httpsonlymode_recommended_httpsonlymode_force_balanced_enabled","displayName":"Force enable HTTPS-Only Mode in Balanced Mode","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled","displayName":"Control whether storage quota APIs will return static values","description":"Controls how the Storage Quota APIs report the available quota to websites.\r\n\r\nWhen enabled, the Storage Quota APIs return a static quota value equal to the current usage plus the smaller of 10 GiB or the device's total storage rounded up to the nearest 1 GiB.\r\n\r\nWhen disabled, the Storage Quota APIs return a dynamic quota value that reflects the actual available device storage.\r\n\r\nWhen unset, the browser uses the default platform behavior.\r\n\r\nThis policy does not affect sites with unlimited storage permissions or enforced quota settings.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_staticstoragequotaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled","displayName":"Enable User Web App Install From Browser","description":"This policy controls whether users can install web apps through Microsoft Edge.\r\nIf you enable or don’t configure this policy, users can install web apps through the browser.\r\nIf you disable this policy, users can’t install web apps through the browser, and the \"apps\" data type is excluded from synchronization.\r\nThis policy doesn't support dynamic refresh. Changes to this policy, whether enabled, disabled, or not configured, take effect only after the browser is restarted.\r\nThis policy doesn't affect the 'WebAppInstallForceList' policy. Web apps specified by that policy are installed regardless of this policy setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge_webappinstallbyuserenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting","displayName":"Default idle detection setting","description":"Setting this policy to 1 - AllowIdleDetection allows websites to use the Idle Detection API without requesting user permission.\r\n\r\nSetting this policy to 2 - BlockIdleDetection prevents websites from using the Idle Detection API.\r\n\r\nSetting this policy to 3 - AskIdleDetection requires websites to request user permission each time before using the Idle Detection API.\r\n\r\nIf you do not configure this policy, users can decide whether to allow the Idle Detection API and can change this setting themselves.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowIdleDetection (1) = Allow sites to detect idle state without asking the user\r\n\r\n* BlockIdleDetection (2) = Do not allow any site to detect the user's idle state\r\n\r\n* AskIdleDetection (3) = Ask every time a site wants to detect the user's idle state\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting","displayName":"Idle detection (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_1","displayName":"Allow sites to detect idle state without asking the user","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_2","displayName":"Do not allow any site to detect the user's idle state","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_defaultidledetectionsetting_defaultidledetectionsetting_3","displayName":"Ask every time a site wants to detect the user's idle state","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls","displayName":"Allow idle detection on these sites","description":"Allows you to specify a list of URL patterns for sites that are allowed to use the Idle Detection API.\r\n\r\nIf you do not configure this policy, the default behavior applies to all sites. The default behavior is determined by the DefaultIdleDetectionSetting policy, if configured, or by the user’s personal settings otherwise.\r\n\r\nOnly the origin of the URL is evaluated. Any path specified in a URL pattern is ignored. Wildcards, *, are supported. For detailed information about valid URL pattern formats, see https://go.microsoft.com/fwlink/?linkid=209532.\r\n\r\nURL patterns specified in the blocklist take precedence over this allowlist. This allowlist takes precedence over the DefaultIdleDetectionSetting policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionallowedforurls_idledetectionallowedforurlsdesc","displayName":"Allowed sites for idle detection (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls","displayName":"Block idle detection on these sites","description":"Allows you to specify a list of URL patterns for sites that are not allowed to use the Idle Detection API.\r\n\r\nOnly the origin of the URL is evaluated. Any path specified in a URL pattern is ignored. Wildcards, *, are supported.\r\n\r\nFor detailed information about valid URL pattern formats, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nIf you do not configure this policy, the default behavior applies to all sites. The default behavior is determined by the DefaultIdleDetectionSetting policy, if configured, or by the user’s personal settings otherwise.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~contentsettings_idledetectionblockedforurls_idledetectionblockedforurlsdesc","displayName":"Blocked sites for idle detection (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled","displayName":"Control Microsoft Edge Safe Hosting Extension","description":"This policy controls whether the Microsoft Edge Safe Hosting component extension is installed automatically when users visit supported Microsoft services, such as Microsoft 365 Copilot app.\r\n\r\nThe Microsoft Edge Safe Hosting extension provides additional security capabilities for these services. When a user accesses a supported service, the extension installs automatically to enable those protections.\r\n\r\nIf you enable or don't configure this policy, the extension installs automatically and remains installed for 90 days after the user's last visit, then is removed if no further activity occurs.\r\n\r\nIf you disable this policy, the extension won't install automatically. If it’s already installed, it will be removed.\r\n\r\nNote: This policy controls only automatic installation. It doesn’t prevent users from manually installing other extensions from the Microsoft Edge Add-ons website.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~extensions_edgesafehostingextensionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~identity_editprofileenabled","displayName":"Enable editing profile in settings","description":"This policy controls whether users can modify profile properties (such as profile avatar) from the profile settings page.\r\n\r\nIf you enable or don't configure this policy, users can edit profile properties. The edit button is available on the profile settings page.\r\n\r\nIf you disable this policy, users can't edit profile properties. The edit button is disabled on the profile settings page.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~identity_editprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~identity_editprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled","displayName":"Enable saving passkeys to the password manager","description":"This policy controls whether users can save passkeys in the built-in password manager. It does not limit access to, or change the contents of, passkeys already saved in the password manager.\r\n\r\nIf the PasswordManagerEnabled policy is Disabled, saving to the built-in password manager is disabled in general, including passkeys. In this case, this policy has no effect.\r\n\r\nIf this policy is enabled or not configured, users can save passkeys in the built-in password manager when signed in to Microsoft Edge.\r\n\r\nIf this policy is disabled, users cannot save new passkeys to the built-in password manager. Previously saved passkeys continue to work.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev145~policy~microsoft_edge~passwordmanager_passwordmanagerpasskeysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled","displayName":"Enable Standardized Browser Zoom Behavior","description":"Configures whether the CSS \"zoom\" property follows the current CSS specification or legacy behavior.\r\n\r\nWhen this policy is enabled or not configured, the CSS \"zoom\" property follows the current specification defined by the CSS Working Group:\r\nhttps://drafts.csswg.org/css-viewport/#zoom-property\r\n\r\nWhen this policy is disabled, the CSS \"zoom\" property uses its legacy, pre-standardized behavior.\r\n\r\nThis policy is temporary and is intended to provide time for organizations to migrate web content to the updated behavior. In a future Microsoft Edge release, this policy will be removed and the standardized behavior will be enforced by default.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge_standardizedbrowserzoomenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers","displayName":"Prefer specific encryption cipher algorithms for TLS","description":"This policy configures Microsoft Edge to order its preferred encryption ciphers in TLS 1.3 based on algorithms approved by a specific compliance regime.\r\n\r\nSetting this policy does not guarantee that any specific algorithms will be negotiated.\r\n\r\nThis policy allows server operators who support both compliant and non-compliant clients to differentiate between them, and use certain non-default algorithms with increased cryptographic strength only for clients explicitly configured to prefer them.\r\n\r\nSetting the policy to 'cnsa' configures Microsoft Edge to prefer ciphers required for compliance with the Commercial National Security Algorithm Suite versions 1.0 and 2.0 (CNSA 1.0 and 2.0).\r\n\r\nNot setting the policy, or setting it to 'default', configures Microsoft Edge to use its default ciphers.\r\n\r\nSetting this policy isn't required for security. The default cryptography used by Microsoft Edge is strong enough to withstand a brute-force attack using the entire power of the Sun.\r\n\r\nSetting this policy will cause Microsoft Edge to be slower when accessing websites.\r\n\r\nThis policy only affects TLS 1.3 and QUIC. It doesn't affect earlier versions of TLS.\r\n\r\nPolicy options mapping:\r\n\r\n* CNSA (cnsa) = Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0\r\n\r\n* Default (default) = Use Microsoft Edge's default cipher order\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: cnsa","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_preferslowciphers","displayName":"Prefer specific encryption cipher algorithms for TLS (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_preferslowciphers_cnsa","displayName":"Prefer ciphers satisfying the requirements of CNSA 1.0 and 2.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowciphers_preferslowciphers_default","displayName":"Use Microsoft Edge's default cipher order","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms","displayName":"Prefer specific key exchange algorithms for TLS","description":"This policy configures Microsoft Edge to prioritize certain key agreement algorithms (supported groups) in TLS 1.3 based on compliance requirements.\r\n\r\nIf you set this policy to 'cnsa2', Microsoft Edge prefers the algorithms required for the Commercial National Security Algorithm Suite 2.0 (CNSA 2.0). If you leave this policy unset or set it to 'default', the browser uses its standard key exchange order.\r\n\r\nThis policy does not guarantee negotiation of a specific algorithm. It is designed to help server operators distinguish clients with compliance requirements and apply higher-strength, non-default algorithms only when appropriate.\r\n\r\nIf this policy would prefer a post-quantum key agreement algorithm but PostQuantumKeyAgreementEnabled is Disabled, the post-quantum setting takes precedence.\r\n\r\nThis policy applies only to TLS 1.3 and QUIC. The default cryptography used by Microsoft Edge already provides strong security, but enabling this policy may reduce performance when accessing websites.\r\n\r\nPolicy options mapping:\r\n\r\n* CNSA2.0 (cnsa2) = Prefer key exchange methods satisfying the requirements of CNSA 2.0\r\n\r\n* Default (default) = Use Microsoft Edge's default supported groups\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: cnsa2","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms","displayName":"Prefer specific key exchange algorithms for TLS (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms_cnsa2","displayName":"Prefer key exchange methods satisfying the requirements of CNSA 2.0","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~cryptographycompliance_preferslowkexalgorithms_preferslowkexalgorithms_default","displayName":"Use Microsoft Edge's default supported groups","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides","displayName":"Override IP address space mappings","description":"Specifies IP address space overrides for Local Network Access restrictions. This policy allows administrators to treat specific IP address ranges as public (exempt from Local Network Access restrictions) or as local (subject to Local Network Access restrictions).\r\n\r\nIP address space overrides can be specified using one of the following formats:\r\n\r\n• [cidr]=[public|local|loopback]\r\nwhere [cidr] is an IP address range in CIDR notation. CIDR overrides apply to all ports.\r\n\r\n• [ip-address]:[port]=[public|local|loopback]\r\n\r\nIPv6 addresses must be specified in URL-safe (bracketed) format.\r\n\r\nFor more information about Local Network Access, see https://wicg.github.io/local-network-access/.\r\n\r\nExample value:\r\n\r\n100.64.0.0/10=public\r\n[2001:db8::]/32=local\r\n192.168.0.1:8000=public\r\n[2001:DB8::8:800:200C:417A]:8080=local","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccessipaddressspaceoverrides_localnetworkaccessipaddressspaceoverridesdesc","displayName":"Override IP address space mappings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled","displayName":"Allow Local Network Access (LNA) requests in subframes without explicit delegation","description":"Controls whether Local Network Access (LNA) permissions are inherited by cross-origin subframes.\r\n\r\nBy default, Local Network Access permissions can be requested in cross-origin subframes only if they are explicitly delegated.\r\n\r\nIf you enable this policy, subframes inherit all LNA Permissions Policy features by default and can make local network requests, which trigger the permission prompt.\r\n\r\nIf you disable or don't configure this policy, subframes must be explicitly delegated the Permissions Policy feature to make local network requests and trigger the permission prompt.\r\n\r\nThis policy applies to the Permissions Policy features \"local-network-access\", \"loopback-network\", and \"local-network\".\r\n\r\nFor more information about Local Network Access, see https://learn.microsoft.com/deployedge/ms-edge-local-network-access.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkaccesspermissionspolicydefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls","displayName":"Allow sites to make network requests to local network endpoints.","description":"Controls which website origins are exempt from Local Network Access checks when accessing local network endpoints.\r\n\r\nNetwork requests initiated from websites that match the specified URL patterns are not subject to Local Network Access checks.\r\n\r\nFor origins not covered by the patterns specified in this policy, the user's personal configuration applies.\r\n\r\nFor detailed information about valid URL patterns, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\r\n\r\nFor more information about Local Network Access restrictions, see https://wicg.github.io/local-network-access/.\r\n\r\nMultiple policies can list origins that affect requests to local network endpoints. If an origin matches more than one of the following policies, they take precedence in the following order:\r\n- LocalNetworkBlockedForUrls\r\n- LocalNetworkAllowedForUrls\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nThis policy controls access to local network endpoints (private IP addresses) and can be used to allow specific websites to access local network resources.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkallowedforurls_localnetworkallowedforurlsdesc","displayName":"Allow sites to make network requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkblockedforurls","displayName":"Block sites from making network requests to local network endpoints.","description":"Controls which website origins are blocked from making Local Network Access requests to local network endpoints.\r\n\r\nNetwork requests initiated from websites that match the specified URL patterns are blocked from issuing Local Network Access requests.\r\n\r\nFor origins not covered by the patterns specified in this policy, the user's personal configuration applies.\r\n\r\nFor detailed information about valid URL patterns, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns.\r\n\r\nFor more information about Local Network Access restrictions, see https://wicg.github.io/local-network-access/.\r\n\r\nMultiple policies can list origins that affect requests to local network endpoints. If an origin matches more than one of the following policies, they take precedence in the following order:\r\n- LocalNetworkBlockedForUrls\r\n- LocalNetworkAllowedForUrls\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nThis policy controls access to local network endpoints (private IP addresses) and can be used to block specific websites from accessing local network resources.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_localnetworkblockedforurls_localnetworkblockedforurlsdesc","displayName":"Block sites from making network requests to local network endpoints. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls","displayName":"Allow sites to make network requests to the local device.","description":"Specifies a list of URL patterns for which requests initiated from matching origins are exempt from Local Network Access restrictions when accessing loopback addresses (127.0.0.1, ::1, localhost).\r\n\r\nIf a requesting origin matches a URL pattern specified in this policy, requests to loopback addresses are allowed and are not subject to Local Network Access restrictions.\r\n\r\nFor origins not covered by this policy, the user's personal settings and local network access restrictions apply.\r\n\r\nIf this policy is disabled or not configured, no additional exemptions are granted beyond the user's existing configuration.\r\n\r\nMultiple policies can specify origins that affect requests to the local device. If an origin matches more than one of the following policies, they are applied in the following order of precedence:\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nFor guidance on valid URL pattern syntax, see https://learn.microsoft.com/deployedge/edge-learnmore-ent-policy-url-patterns .\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkallowedforurls_loopbacknetworkallowedforurlsdesc","displayName":"Allow sites to make network requests to the local device. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls","displayName":"Block sites from making network requests to the local device.","description":"Specifies a list of URL patterns for which requests initiated from matching origins to loopback addresses (127.0.0.1, ::1, localhost) are blocked from issuing Local Network Access requests.\r\n\r\nIf a requesting origin matches a URL pattern specified in this policy, requests to loopback addresses are blocked.\r\n\r\nFor origins not covered by this policy, the user's personal settings and local network access restrictions apply.\r\n\r\nMultiple policies can specify origins that affect requests to the local device. If an origin matches more than one of the following policies, they are applied in the following order of precedence:\r\n- LoopbackNetworkBlockedForUrls\r\n- LoopbackNetworkAllowedForUrls\r\n- LocalNetworkAccessBlockedForUrls\r\n- LocalNetworkAccessAllowedForUrls\r\n\r\nNote: This policy improves local network security by blocking specified public websites from accessing loopback addresses. It helps prevent unauthorized external sites from reaching local services running on the device unless explicitly permitted.\r\n\r\nFor more information about Local Network Access, see https://wicg.github.io/local-network-access/\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev146~policy~microsoft_edge~network_loopbacknetworkblockedforurls_loopbacknetworkblockedforurlsdesc","displayName":"Block sites from making network requests to the local device. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'RestoreOnStartupIsNewTabPage'.\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'RestoreOnStartupIsLastSession'. The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'RestoreOnStartupIsURLs'.\r\n\r\nStarting in Microsoft Edge version 125, if you want to reopen URLs that were open the last time Microsoft Edge closed and open a specific set of URLs, choose 'RestoreOnStartupIsLastSessionAndURLs'.\r\n\r\nDisabling this setting is the same as leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is only available on instances that are managed via MDM or joined to a domain via MCX.\r\n\r\nPolicy options mapping:\r\n\r\n* RestoreOnStartupIsNewTabPage (5) = Open a new tab\r\n\r\n* RestoreOnStartupIsLastSession (1) = Restore the last session\r\n\r\n* RestoreOnStartupIsURLs (4) = Open a list of URLs\r\n\r\n* RestoreOnStartupIsLastSessionAndURLs (6) = Open a list of URLs and restore the last session\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup","displayName":"Action to take on Microsoft Edge startup (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_6","displayName":"Open a list of URLs and restore the last session","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup","displayName":"Action to take on Microsoft Edge startup","description":"Specify how Microsoft Edge behaves when it starts.\r\n\r\nIf you want a new tab to always open on startup, choose 'RestoreOnStartupIsNewTabPage'.\r\n\r\nIf you want to reopen URLs that were open the last time Microsoft Edge closed, choose 'RestoreOnStartupIsLastSession'. The browsing session will be restored as it was. Note that this option disables some settings that rely on sessions or that perform actions on exit (such as Clear browsing data on exit or session-only cookies).\r\n\r\nIf you want to open a specific set of URLs, choose 'RestoreOnStartupIsURLs'.\r\n\r\nStarting in Microsoft Edge version 125, if you want to reopen URLs that were open the last time Microsoft Edge closed and open a specific set of URLs, choose 'RestoreOnStartupIsLastSessionAndURLs'.\r\n\r\nDisabling this setting is the same as leaving it not configured. Users will be able to change it in Microsoft Edge.\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is only available on instances that are managed via MDM or joined to a domain via MCX.\r\n\r\nPolicy options mapping:\r\n\r\n* RestoreOnStartupIsNewTabPage (5) = Open a new tab\r\n\r\n* RestoreOnStartupIsLastSession (1) = Restore the last session\r\n\r\n* RestoreOnStartupIsURLs (4) = Open a list of URLs\r\n\r\n* RestoreOnStartupIsLastSessionAndURLs (6) = Open a list of URLs and restore the last session\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup","displayName":"Action to take on Microsoft Edge startup (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_5","displayName":"Open a new tab","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev77.3~policy~microsoft_edge~startup_restoreonstartup_restoreonstartup_6","displayName":"Open a list of URLs and restore the last session","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads","description":"Controls whether ads are blocked on sites with intrusive ads. You can set this policy to one of the following options:\r\n\r\n* 1 = Allow ads on all sites.\r\n\r\n* 2 = Block ads on sites with intrusive ads (Default value).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites_1","displayName":"Allow ads on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_adssettingforintrusiveadssites_adssettingforintrusiveadssites_2","displayName":"Block ads on sites with intrusive ads. (Default value)","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowpopupsduringpageunload","displayName":"Allows a page to show popups during its unloading","description":"This policy allows an admin to specify that a page can show popups during its unloading.\r\n\r\nWhen the policy is set to enabled, pages are allowed to show popups while they're being unloaded.\r\n\r\nWhen the policy is set to disabled or unset, pages aren't allowed to show popups while they're being unloaded. This is as per the spec: (https://html.spec.whatwg.org/#apis-for-creating-and-navigating-browsing-contexts-by-name).\r\n\r\nThis policy will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowpopupsduringpageunload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowpopupsduringpageunload_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls","displayName":"Configure tracking prevention exceptions for specific sites","description":"Configure the list of URL patterns that are excluded from tracking prevention.\r\n\r\nIf you configure this policy, the list of configured URL patterns is excluded from tracking prevention.\r\n\r\nIf you don't configure this policy, the global default value from the \"Block tracking of users' web-browsing activity\" policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_allowtrackingforurls_allowtrackingforurlsdesc","displayName":"Configure tracking prevention exceptions for specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed","displayName":"Allow media autoplay for websites","description":"This policy sets the media autoplay policy for websites.\r\n\r\nThe default setting, \"Not configured\" respects the current media autoplay settings and lets users configure their autoplay settings.\r\n\r\nSetting to \"Enabled\" sets media autoplay to \"Allow\". All websites are allowed to autoplay media. Users can’t override this policy.\r\n\r\nSetting to \"Disabled\" sets media autoplay to \"Block\". No websites are allowed to autoplay media. Users can’t override this policy.\r\n\r\nA tab will need to be closed and re-opened for this policy to take effect.\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_autoplayallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit","displayName":"Clear browsing data when Microsoft Edge closes","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\r\n\r\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured 'DefaultCookiesSetting' (Configure cookies)\r\n\r\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\r\n\r\nIf you enable this policy, don't configure the 'AllowDeletingBrowserHistory' (Enable deleting browser and download history) or the 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes) policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured 'AllowDeletingBrowserHistory' or 'ClearCachedImagesAndFilesOnExit'.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clearbrowsingdataonexit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled","displayName":"Allow users to open files using the ClickOnce protocol","description":"Allow users to open files using the ClickOnce protocol. The ClickOnce protocol allows websites to request that the browser open files from a specific URL using the ClickOnce file handler on the user's computer or device.\r\n\r\nIf you enable this policy, users can open files using the ClickOnce protocol. This policy overrides the user's ClickOnce setting in the edge://flags/ page.\r\n\r\nIf you disable this policy, users can't open files using the ClickOnce protocol. Instead, the file will be saved to the file system using the browser. This policy overrides the user's ClickOnce setting in the edge://flags/ page.\r\n\r\nIf you don't configure this policy, users can't open files using the ClickOnce protocol. Users have the option to enable the use of the ClickOnce protocol with the edge://flags/ page.\r\n\r\nDisabling ClickOnce may prevent ClickOnce applications (.application files) from launching properly.\r\n\r\nFor more information about ClickOnce, see https://go.microsoft.com/fwlink/?linkid=2103872 and https://go.microsoft.com/fwlink/?linkid=2099880.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_clickonceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled","displayName":"Enable security warnings for command-line flags","description":"If disabled, this policy prevents security warnings from appearing when Microsoft Edge is launched with potentially dangerous command-line flags.\r\n\r\nIf enabled or unset, security warnings are displayed when these command-line flags are used to launch Microsoft Edge.\r\n\r\nFor example, the --disable-gpu-sandbox flag generates this warning: You're using an unsupported command-line flag: --disable-gpu-sandbox. This poses stability and security risks.\r\n\r\nOn Windows, this policy is only available on instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro (or Enterprise) instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_commandlineflagsecuritywarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled","displayName":"Allow users to open files using the DirectInvoke protocol","description":"Allow users to open files using the DirectInvoke protocol. The DirectInvoke protocol allows websites to request that the browser open files from a specific URL using a specific file handler on the user's computer or device.\r\n\r\nIf you enable or don't configure this policy, users can open files using the DirectInvoke protocol.\r\n\r\nIf you disable this policy, users can't open files using the DirectInvoke protocol. Instead, the file will be saved to the file system.\r\n\r\nNote: Disabling DirectInvoke may prevent certain Microsoft SharePoint Online features from working as expected.\r\n\r\nFor more information about DirectInvoke, see https://go.microsoft.com/fwlink/?linkid=2103872 and https://go.microsoft.com/fwlink/?linkid=2099871.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_directinvokeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled","displayName":"Enable the Collections feature","description":"Lets you allow users to access the Collections feature, where they can collect, organize, share, and export content more efficiently and with Office integration.\r\n\r\nIf you enable or don't configure this policy, users can access and use the Collections feature in Microsoft Edge.\r\n\r\nIf you disable this policy, users can't access and use Collections in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_edgecollectionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled","displayName":"Allow managed extensions to use the Enterprise Hardware Platform API","description":"When this policy is set to enabled, extensions installed by enterprise policy are allowed to use the Enterprise Hardware Platform API.\r\nWhen this policy is set to disabled or isn't set, no extensions are allowed to use the Enterprise Hardware Platform API.\r\nThis policy also applies to component extensions.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_enterprisehardwareplatformapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess","displayName":"Force networking code to run in the browser process","description":"This policy forces networking code to run in the browser process.\r\n\r\nThis policy is disabled by default. If enabled, users are open to security issues when the networking process is sandboxed.\r\n\r\nThis policy is intended to give enterprises a chance to migrate to 3rd party software that doesn't depend on hooking networking APIs. Proxy servers are recommended over LSPs and Win32 API patching.\r\n\r\nIf this policy isn't set, networking code may run out of the browser process depending on field trials of the NetworkService experiment.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_forcenetworkinprocess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar","displayName":"Force direct intranet site navigation instead of searching on single word entries in the Address Bar","description":"If you enable this policy, the top auto-suggest result in the address bar suggestion list will navigate to intranet sites if the text entered in the address bar is a single word without punctuation.\r\n\r\nDefault navigation when typing a single word without punctuation will conduct a navigation to an intranet site matching the entered text.\r\n\r\nIf you enable this policy, the second auto-suggest result in the address bar suggestion list will conduct a web search exactly as it was entered, provided that this text is a single word without punctuation. The default search provider will be used unless a policy to prevent web search is also enabled.\r\n\r\nTwo effects of enabling this policy are:\r\n\r\nNavigation to sites in response to single word queries that would typically resolve to a history item will no longer happen. Instead, the browser will attempt navigate to internal sites that may not exist in an organization’s intranet. This will result in a 404 error.\r\n\r\nPopular, single-word search terms will require manual selection of search suggestions to properly conduct a search.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_gotointranetsiteforsinglewordentryinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_importbrowsersettings","displayName":"Allow importing of browser settings","description":"Allows users to import browser settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browser settings** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browser settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, browser settings are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports the settings on first run, but users can select or clear the **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_importbrowsersettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_importbrowsersettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist","displayName":"Configure the Enterprise Mode Site List","description":"For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210\r\n\r\nExample value: https://internal.contoso.com/sitelist.xml","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_internetexplorerintegrationsitelist_internetexplorerintegrationsitelist","displayName":"Configure the Enterprise Mode Site List (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled","displayName":"Configure whether a user always has a default profile automatically signed in with their work or school account","description":"This policy determines if a user can remove the Microsoft Edge profile automatically signed in with a user's work or school account.\r\n\r\nIf you enable this policy, a non-removable profile will be created with the user's work or school account on Windows. This profile can't be signed out or removed.\r\n\r\nIf you disable or don't configure this policy, the profile automatically signed in with a user's work or school account on Windows can be signed out or removed by the user.\r\n\r\nIf you want to configure browser sign in, use the 'BrowserSignin' (Browser sign-in settings) policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_nonremovableprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended","displayName":"Clear browsing data when Microsoft Edge closes","description":"Microsoft Edge doesn't clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.\r\n\r\nIf you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured 'DefaultCookiesSetting' (Configure cookies)\r\n\r\nIf you disable or don't configure this policy, users can configure the Clear browsing data option in Settings.\r\n\r\nIf you enable this policy, don't configure the 'AllowDeletingBrowserHistory' (Enable deleting browser and download history) or the 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes) policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured 'AllowDeletingBrowserHistory' or 'ClearCachedImagesAndFilesOnExit'.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_clearbrowsingdataonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_importbrowsersettings_recommended","displayName":"Allow importing of browser settings","description":"Allows users to import browser settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Browser settings** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, browser settings aren't imported at first run, and users can’t import them manually.\r\n\r\nIf you don’t configure this policy, browser settings are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports the settings on first run, but users can select or clear the **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_importbrowsersettings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended_importbrowsersettings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended","displayName":"Force Microsoft Defender SmartScreen checks on downloads from trusted sources","description":"This policy setting lets you configure whether Microsoft Defender SmartScreen checks download reputation from a trusted source.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen checks the download’s reputation regardless of source.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen doesn’t check the download’s reputation when downloading from a trusted source.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenfortrusteddownloadsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled","displayName":"Enable renderer code integrity (deprecated)","description":"If this policy is enabled or left unset, then Renderer Code Integrity is enabled. This policy should only be disabled if compatibility issues are encountered with third party software that must run inside Microsoft Edge's renderer processes.\r\n\r\nDisabling this policy has a detrimental effect on Microsoft Edge's security and stability because unknown and potentially hostile code will be allowed to load inside Microsoft Edge's renderer processes.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_renderercodeintegrityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled","displayName":"Enable Signed HTTP Exchange (SXG) support","description":"Enable support for Signed HTTP Exchange (SXG).\r\n\r\nIf this policy isn't set or enabled, Microsoft Edge will accept web contents served as Signed HTTP Exchanges.\r\n\r\nIf this policy is set to disabled, Signed HTTP Exchanges can't be loaded.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_signedhttpexchangeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist","displayName":"Force disable spellcheck languages","description":"Force-disables spellcheck languages. Unrecognized languages in that list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be disabled for the languages specified. The user can still enable or disable spellcheck for languages not in the list.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the 'SpellcheckEnabled' (Enable spellcheck) policy is set to disabled, this policy will have no effect.\r\n\r\nIf a language is included in both the 'SpellcheckLanguage' (Enable specific spellcheck languages) and the 'SpellcheckLanguageBlocklist' policy, the spellcheck language is enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_spellchecklanguageblocklist_spellchecklanguageblocklistdesc","displayName":"Force disable spellcheck languages (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention","displayName":"Block tracking of users' web-browsing activity","description":"Lets you decide whether to block websites from tracking users' web-browsing activity.\r\n\r\nIf you enable this policy, you have the following options for setting the level of tracking prevention:\r\n\r\n* 0 = Off (no tracking prevention)\r\n\r\n* 1 = Basic (blocks harmful trackers, content and ads will be personalized)\r\n\r\n* 2 = Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)\r\n\r\n* 3 = Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)\r\n\r\nIf you disable this policy or don't configure it, users can set their own level of tracking prevention.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention","displayName":"Block tracking of users' web-browsing activity (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_0","displayName":"Off (no tracking prevention)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_1","displayName":"Basic (blocks harmful trackers, content and ads will be personalized)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_2","displayName":"Balanced (blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge_trackingprevention_trackingprevention_3","displayName":"Strict (blocks harmful trackers and majority of trackers from all sites; content and ads will have minimal personalization. Some parts of sites might not work)","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled","displayName":"Force Microsoft Defender SmartScreen checks on downloads from trusted sources","description":"This policy setting lets you configure whether Microsoft Defender SmartScreen checks download reputation from a trusted source.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen checks the download’s reputation regardless of source.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen doesn’t check the download’s reputation when downloading from a trusted source.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev78diff~policy~microsoft_edge~smartscreen_smartscreenfortrusteddownloadsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal","displayName":"Allow pages to send synchronous XHR requests during page dismissal","description":"This policy lets you specify that a page can send synchronous XHR requests during page dismissal.\r\n\r\nIf you enable this policy, pages can send synchronous XHR requests during page dismissal.\r\n\r\nIf you disable this policy or don't configure this policy, pages aren't allowed to send synchronous XHR requests during page dismissal.\r\n\r\nThis policy is temporary and will be removed in a future release.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_allowsyncxhrinpagedismissal_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled","displayName":"Enables background updates to the list of available templates for Collections and other features that use templates (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because we are moving to a new policy. It won't work in Microsoft Edge as soon as version 104. The new policy to use is 'EdgeAssetDeliveryServiceEnabled' (Allow features to download assets from the Asset Delivery Service).\r\n\r\nLets you enable or disable background updates to the list of available templates for Collections and other features that use templates. Templates are used to extract rich metadata from a webpage when the page is saved to a collection.\r\n\r\nIf you enable this setting or the setting is unconfigured, the list of available templates will be downloaded in the background from a Microsoft service every 24 hours.\r\n\r\nIf you disable this setting the list of available templates will be downloaded on demand. This type of download might result in small performance penalties for Collections and other features.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_backgroundtemplatelistupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink","displayName":"Specify custom help link","description":"Specify a link for the Help menu or the F1 key.\r\n\r\nIf you enable this policy, an admin can specify a link for the Help menu or the F1 key.\r\n\r\nIf you disable or don't configure this policy, the default link for the Help menu or the F1 key is used.\r\n\r\nExample value: https://go.microsoft.com/fwlink/?linkid=2080734","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_customhelplink_customhelplink","displayName":"Specify custom help link (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox","displayName":"Show an \"Always open\" checkbox in external protocol dialog","description":"This policy controls whether the \"Always allow this site to open links of this type\" checkbox is shown on external protocol launch confirmation prompts.\r\n\r\nIf you set this policy to True, when an external protocol confirmation prompt is shown, the user can select \"Always allow\" to skip all future confirmation prompts for the protocol on this site.\r\n\r\nIf you set this policy to False, the \"Always allow\" checkbox isn't displayed. The user will be prompted for confirmation every time an external protocol is invoked.\r\n\r\nIf this policy is unset, the checkbox visibility is controlled by the \"Enable remembering protocol launch prompting preferences\" flag in edge://flags","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_externalprotocoldialogshowalwaysopencheckbox_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist","displayName":"Configure the list of names that will bypass the HSTS policy check","description":"Hostnames specified in this list will be exempt from the HSTS policy check that could potentially upgrade requests from \"http://\" to \"https://\". Only single-label hostnames are allowed in this policy. Hostnames must be canonicalized. Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific hostnames specified; it doesn't apply to subdomains of the names in the list.\r\n\r\nExample value:\r\n\r\nmeet","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_hstspolicybypasslist_hstspolicybypasslistdesc","displayName":"Configure the list of names that will bypass the HSTS policy check (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs","displayName":"Allow importing of open tabs","description":"Allows users to import open and pinned tabs from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Open tabs** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, open tabs aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, open tabs are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports open tabs on first run, but users can select or clear the **Open tabs** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_importopentabs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended_importopentabs_recommended","displayName":"Allow importing of open tabs","description":"Allows users to import open and pinned tabs from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Open tabs** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, open tabs aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, open tabs are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports open tabs on first run, but users can select or clear the **Open tabs** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended_importopentabs_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended_importopentabs_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended","displayName":"Set new tab page quick links","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\r\n\r\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\r\n\r\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' is not provided, the URL is used as the default title. If 'pinned' is not provided, the default value is false.\r\n\r\nMicrosoft Edge presents these in the order listed, from left to right, with all pinned tiles displayed ahead of non-pinned tiles.\r\n\r\nIf the policy is set as mandatory, the 'pinned' field will be ignored and all tiles will be pinned. The tiles can't be deleted by the user and will always appear at the front of the quick links list.\r\n\r\nIf the policy is set as recommended, pinned tiles will remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying non-pinned links via this policy to an existing browser profile, the links may not appear at all, depending on how they rank compared to the user's browsing history.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"pinned\": true,\r\n \"title\": \"Contoso Portal\",\r\n \"url\": \"https://contoso.com\"\r\n },\r\n {\r\n \"title\": \"Fabrikam\",\r\n \"url\": \"https://fabrikam.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagemanagedquicklinks_recommended_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended","displayName":"Configure the Microsoft Edge new tab page experience","description":"Lets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\r\n\r\nWhen you set this policy to Microsoft News feed experience (0), users will see the Microsoft News feed experience on the new tab page.\r\n\r\nWhen you set this policy to Office 365 feed experience (1), users with an Azure Active Directory browser sign-in will see the Office 365 feed experience on the new tab page.\r\n\r\nIf you disable or don't configure this policy:\r\n\r\n- Users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, as well as the standard new tab page feed experience.\r\n\r\n- Users without an Azure Active Directory browser sign-in will see the standard new tab page experience.\r\n\r\nIf you configure this policy *and* the 'NewTabPageLocation' (Configure the new tab page URL) policy, 'NewTabPageLocation' has precedence.\r\n\r\nDefault setting: Disabled or not configured.\r\n\r\n* 0 = Microsoft News feed experience\r\n\r\n* 1 = Office 365 feed experience","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype","displayName":"New tab page experience (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype_0","displayName":"Microsoft News feed experience","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_recommended~startup_recommended_newtabpagesetfeedtype_recommended_newtabpagesetfeedtype_1","displayName":"Office 365 feed experience","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled","displayName":"Allow freezing of background tabs","description":"Controls whether Microsoft Edge can freeze tabs that are in the background for at least 5 minutes.\r\n\r\nTab freezing reduces CPU, battery, and memory usage. Microsoft Edge uses heuristics to avoid freezing tabs that do useful work in the background, such as display notifications, play sound, and stream video.\r\n\r\nIf you enable or don't configure this policy, tabs that have been in the background for at least 5 minutes might be frozen.\r\n\r\nIf you disable this policy, no tabs will be frozen.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge_tabfreezingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo","displayName":"Set new tab page company logo (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nWe are deprecating this policy because it doesn't work as expected and recommend that it not be used.\r\n\r\nSpecifies the company logo to use on the new tab page in Microsoft Edge.\r\n\r\nThe policy should be configured as a string that expresses the logo(s) in JSON format. For example: { \"default_logo\": { \"url\": \"https://www.contoso.com/logo.png\", \"hash\": \"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29\" }, \"light_logo\": { \"url\": \"https://www.contoso.com/light_logo.png\", \"hash\": \"517d286edb416bb2625ccfcba9de78296e90da8e32330d4c9c8275c4c1c33737\" } }\r\n\r\nYou configure this policy by specifying the URL from which Microsoft Edge can download the logo and its cryptographic hash (SHA-256), which is used to verify the integrity of the download. The logo must be in PNG or SVG format, and its file size must not exceed 16 MB. The logo is downloaded and cached, and it will be redownloaded whenever the URL or the hash changes. The URL must be accessible without any authentication.\r\n\r\nThe 'default_logo' is required and will be used when there's no background image. If 'light_logo' is provided, it will be used when the user's new tab page has a background image. We recommend a horizontal logo with a transparent background that is left-aligned and vertically centered. The logo should have a minimum height of 32 pixels and an aspect ratio from 1:1 to 4:1. The 'default_logo' should have proper contrast against a white/black background while the 'light_logo' should have proper contrast against a background image.\r\n\r\nIf you enable this policy, Microsoft Edge downloads and shows the specified logo(s) on the new tab page. Users can't override or hide the logo(s).\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will show no company logo or a Microsoft logo on the new tab page.\r\n\r\nFor help with determining the SHA-256 hash, see https://docs.microsoft.com/powershell/module/microsoft.powershell.utility/get-filehash.\r\n\r\nExample value:\r\n\r\n{\r\n \"light_logo\": {\r\n \"url\": \"https://www.contoso.com/light_logo.png\", \r\n \"hash\": \"517d286edb416bb2625ccfcba9de78296e90da8e32330d4c9c8275c4c1c33737\"\r\n }, \r\n \"default_logo\": {\r\n \"url\": \"https://www.contoso.com/logo.png\", \r\n \"hash\": \"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29\"\r\n }\r\n}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagecompanylogo_newtabpagecompanylogo","displayName":"New tab page company logo (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links","description":"By default, Microsoft Edge displays quick links on the new tab page from user-added shortcuts and top sites based on browsing history. With this policy, you can configure up to three quick link tiles on the new tab page, expressed as a JSON object:\r\n\r\n[ { \"url\": \"https://www.contoso.com\", \"title\": \"Contoso Portal\", \"pinned\": true/false }, ... ]\r\n\r\nThe 'url' field is required; 'title' and 'pinned' are optional. If 'title' is not provided, the URL is used as the default title. If 'pinned' is not provided, the default value is false.\r\n\r\nMicrosoft Edge presents these in the order listed, from left to right, with all pinned tiles displayed ahead of non-pinned tiles.\r\n\r\nIf the policy is set as mandatory, the 'pinned' field will be ignored and all tiles will be pinned. The tiles can't be deleted by the user and will always appear at the front of the quick links list.\r\n\r\nIf the policy is set as recommended, pinned tiles will remain in the list but the user has the ability to edit and delete them. Quick link tiles that aren't pinned behave like default top sites and are pushed off the list if other websites are visited more frequently. When applying non-pinned links via this policy to an existing browser profile, the links may not appear at all, depending on how they rank compared to the user's browsing history.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"pinned\": true,\r\n \"title\": \"Contoso Portal\",\r\n \"url\": \"https://contoso.com\"\r\n },\r\n {\r\n \"title\": \"Fabrikam\",\r\n \"url\": \"https://fabrikam.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagemanagedquicklinks_newtabpagemanagedquicklinks","displayName":"Set new tab page quick links (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype","displayName":"Configure the Microsoft Edge new tab page experience","description":"Lets you choose either the Microsoft News or Office 365 feed experience for the new tab page.\r\n\r\nWhen you set this policy to Microsoft News feed experience (0), users will see the Microsoft News feed experience on the new tab page.\r\n\r\nWhen you set this policy to Office 365 feed experience (1), users with an Azure Active Directory browser sign-in will see the Office 365 feed experience on the new tab page.\r\n\r\nIf you disable or don't configure this policy:\r\n\r\n- Users with an Azure Active Directory browser sign-in are offered the Office 365 new tab page feed experience, as well as the standard new tab page feed experience.\r\n\r\n- Users without an Azure Active Directory browser sign-in will see the standard new tab page experience.\r\n\r\nIf you configure this policy *and* the 'NewTabPageLocation' (Configure the new tab page URL) policy, 'NewTabPageLocation' has precedence.\r\n\r\nDefault setting: Disabled or not configured.\r\n\r\n* 0 = Microsoft News feed experience\r\n\r\n* 1 = Office 365 feed experience","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_newtabpagesetfeedtype","displayName":"New tab page experience (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_newtabpagesetfeedtype_0","displayName":"Microsoft News feed experience","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev79diff~policy~microsoft_edge~startup_newtabpagesetfeedtype_newtabpagesetfeedtype_1","displayName":"Office 365 feed experience","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled","displayName":"Suggest similar pages when a webpage can’t be found","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\r\n\r\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\r\n\r\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Suggest similar pages when a webpage can’t be found** toggle, which the user can switch on or off. Note that if you have enable this policy (AlternateErrorPagesEnabled), the Suggest similar pages when a webpage can’t be found setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the Suggest similar pages when a webpage can’t be found setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_alternateerrorpagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled","displayName":"DNS interception checks enabled","description":"This policy configures a local switch that can be used to disable DNS interception checks. These checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nThis detection might not be necessary in an enterprise environment where the network configuration is known. It can be disabled to avoid additional DNS and HTTP traffic on start-up and each DNS configuration change.\r\n\r\nIf you enable or don’t set this policy, the DNS interception checks are performed.\r\n\r\nIf you disable this policy, DNS interception checks aren’t performed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_dnsinterceptionchecksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience","displayName":"Hide the First-run experience and splash screen","description":"If you enable this policy, the First-run experience and the splash screen will not be shown to users when they run Microsoft Edge for the first time.\r\n\r\nFor the configuration options shown in the First Run Experience, the browser will default to the following:\r\n\r\n-On the New Tab Page, the feed type will be set to MSN News and the layout to Inspirational.\r\n\r\n-The user will still be automatically signed into Microsoft Edge if the Windows account is of Azure AD or MSA type.\r\n\r\n-Sync will not be enabled by default and users will be able to turn on sync from the sync settings.\r\n\r\nIf you disable or don't configure this policy, the First-run experience and the Splash screen will be shown.\r\n\r\nNote: The specific configuration options shown to the user in the First Run Experience, can also be managed by using other specific policies. You can use the HideFirstRunExperience policy in combination with these policies to configure a specific browser experience on your managed devices. Some of these other policies are:\r\n\r\n-'AutoImportAtFirstRun' (Automatically import another browser's data and settings at first run)\r\n\r\n-'NewTabPageLocation' (Configure the new tab page URL)\r\n\r\n-'NewTabPageSetFeedType' (Configure the Microsoft Edge new tab page experience)\r\n\r\n-'SyncDisabled' (Disable synchronization of data using Microsoft sync services)\r\n\r\n-'BrowserSignin' (Browser sign-in settings)\r\n\r\n-'NonRemovableProfileEnabled' (Configure whether a user always has a default profile automatically signed in with their work or school account)","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_hidefirstrunexperience_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled","displayName":"Allow websites to query for available payment methods","description":"Allows you to set whether websites can check if the user has payment methods saved.\r\n\r\nIf you disable this policy, websites that use PaymentRequest.canMakePayment or PaymentRequest.hasEnrolledInstrument API will be informed that no payment methods are available.\r\n\r\nIf you enable this policy or don't set this policy, websites can check if the user has payment methods saved.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_paymentmethodqueryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled","displayName":"Allow personalization of ads, search and news by sending browsing history to Microsoft","description":"This policy prevents Microsoft from collecting a user's Microsoft Edge browsing history to be used for personalizing advertising, search, news and other Microsoft services.\r\n\r\nThis setting is only available for users with a Microsoft account. This setting is not available for child accounts or enterprise accounts.\r\n\r\nIf you disable this policy, users can't change or override the setting. If this policy is enabled or not configured, Microsoft Edge will default to the user’s preference.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_personalizationreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed","displayName":"Allow Pin to taskbar wizard","description":"Microsoft Edge uses the Pin to taskbar wizard to help users pin suggested sites to the taskbar. The Pin to taskbar wizard feature is enabled by default and accessible to the user through the Settings and more menu.\r\n\r\nIf you enable this policy or don't configure it, users can call the Pin to taskbar wizard from the Settings and More menu. The wizard can also be called via a protocol launch.\r\n\r\nIf you disable this policy, the Pin to taskbar wizard is disabled in the menu and cannot be called via a protocol launch.\r\n\r\nUser settings to enable or disable the Pin to taskbar wizard aren't available.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_pinningwizardallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended","displayName":"Suggest similar pages when a webpage can’t be found","description":"Allow Microsoft Edge to issue a connection to a web service to generate URL and search suggestions for connectivity issues such as DNS errors.\r\n\r\nIf you enable this policy, a web service is used to generate url and search suggestions for network errors.\r\n\r\nIf you disable this policy, no calls to the web service are made and a standard error page is shown.\r\n\r\nIf you don't configure this policy, Microsoft Edge respects the user preference that's set under Services at edge://settings/privacy.\r\nSpecifically, there's a **Suggest similar pages when a webpage can’t be found** toggle, which the user can switch on or off. Note that if you have enable this policy (AlternateErrorPagesEnabled), the Suggest similar pages when a webpage can’t be found setting is turned on, but the user can't change the setting by using the toggle. If you disable this policy, the Suggest similar pages when a webpage can’t be found setting is turned off, and the user can't change the setting by using the toggle.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended_alternateerrorpagesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended","displayName":"Configure Microsoft Defender SmartScreen to block potentially unwanted apps","description":"This policy setting lets you configure whether to turn on blocking for potentially unwanted apps with Microsoft Defender SmartScreen. Potentially unwanted app blocking with Microsoft Defender SmartScreen provides warning messages to help protect users from adware, coin miners, bundleware, and other low-reputation apps that are hosted by websites. Potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off by default.\r\n\r\nIf you enable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use potentially unwanted app blocking with Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreenpuaenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb","displayName":"Set limit on megabytes of memory a single Microsoft Edge instance can use.","description":"Configures the amount of memory that a single Microsoft Edge instance can use before tabs start getting discarded to save memory. The memory used by the tab will be freed and the tab will have to be reloaded when switched to.\r\n\r\nIf you enable this policy, the browser will start to discard tabs to save memory once the limitation is exceeded. However, there is no guarantee that the browser is always running under the limit. Any value under 1024 will be rounded up to 1024.\r\n\r\nIf you don't set this policy, the browser will only attempt to save memory when it has detected that the amount of physical memory on its machine is low.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_totalmemorylimitmb_totalmemorylimitmb","displayName":"Set memory limit for Microsoft Edge instances: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist","displayName":"Configure list of force-installed Web Apps","description":"Specifies a list of websites that are installed silently, without user interaction, and which can't be uninstalled or disabled by the user.\r\n\r\nEach list item of the policy is an object with the following members:\r\n - \"url\", which is mandatory. \"url\" should be the URL of the web app to install.\r\n\r\nValues for the optional members are:\r\n - \"launch_container\" should be either \"window\" or \"tab\" to indicate how the Web App will be opened after it's installed.\r\n - \"create_desktop_shortcut\" should be true if a desktop shortcut should be created on Windows.\r\n\r\nIf \"default_launch_container\" is omitted, the app will open in a tab by default. Regardless of the value of \"default_launch_container\", users can change which container the app will open in. If \"create_desktop_shortcuts\" is omitted, no desktop shortcuts will be created.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.contoso.com/maps\", \r\n \"create_desktop_shortcut\": true, \r\n \"default_launch_container\": \"window\"\r\n }, \r\n {\r\n \"url\": \"https://app.contoso.edu\", \r\n \"default_launch_container\": \"tab\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webappinstallforcelist_webappinstallforcelist","displayName":"URLs for Web Apps to be silently installed. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled","displayName":"Re-enable Web Components v0 API until M84. (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThe Web Components v0 APIs (Shadow DOM v0, Custom Elements v0, and HTML Imports) were deprecated in 2018, and have been disabled by default starting in M80. This policy allows these features to be selectively re-enabled until M84.\r\n\r\n If you set this policy is set to True, the Web Components v0 features will be enabled for all sites.\r\n\r\n If you set this policy to False or don't set this policy, the Web Components v0 features will be disabled by default, starting in M80.\r\n\r\n This policy will be removed after Microsoft Edge 84.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webcomponentsv0enabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls","displayName":"Manage exposure of local IP addressess by WebRTC","description":"Specifies a list of origins (URLs) or hostname patterns (like \"*contoso.com*\") for which local IP address should be exposed by WebRTC.\r\n\r\nIf you enable this policy and set a list of origins (URLs) or hostname patterns, when edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Enabled, WebRTC will expose the local IP address for cases that match patterns in the list.\r\n\r\nIf you disable or don't configure this policy, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Enabled, WebRTC will not expose local IP addresses. The local IP address is concealed with an mDNS hostname.\r\n\r\nIf you enable, disable, or don't configure this policy, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, WebRTC will expose local IP addresses.\r\n\r\nPlease note that this policy weakens the protection of local IP addresses that might be needed by administrators.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n*contoso.com*","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge_webrtclocalipsallowedurls_webrtclocalipsallowedurlsdesc","displayName":"Manage exposure of local IP addressess by WebRTC (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions","description":"Allows you to set whether users can add exceptions to allow mixed content for specific sites.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'InsecureContentAllowedForUrls' (Allow insecure content on specified sites) and 'InsecureContentBlockedForUrls' (Block insecure content on specified sites) policies.\r\n\r\nIf this policy isn't set, users will be allowed to add exceptions to allow blockable mixed content and disable autoupgrades for optionally blockable mixed content.\r\n\r\n* 2 = Do not allow any site to load blockable mixed content\r\n\r\n* 3 = Allow users to add exceptions to allow blockable mixed content","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_2","displayName":"Do not allow any site to load blockable mixed content","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_3","displayName":"Allow users to add exceptions to allow blockable mixed content","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls","displayName":"Allow insecure content on specified sites","description":"Create a list of URL patterns to specify sites that can display insecure mixed content (that is, HTTP content on HTTPS sites).\r\n\r\nIf you don't configure this policy, blockable mixed content will be blocked and optionally blockable mixed content will be upgraded. However, users will be allowed to set exceptions to allow insecure mixed content for specific sites.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentallowedforurls_insecurecontentallowedforurlsdesc","displayName":"Allow insecure content on specified sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls","displayName":"Block insecure content on specified sites","description":"Create a list of URL patterns to specify sites that aren't allowed to display blockable (i.e. active) mixed content (that is, HTTP content on HTTPS sites) and for which optionally blockable mixed content upgrades will be disabled.\r\n\r\nIf you don't configure this policy, blockable mixed content will be blocked and optionally blockable mixed content will be upgraded. However, users will be allowed to set exceptions to allow insecure mixed content for specific sites.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_insecurecontentblockedforurls_insecurecontentblockedforurlsdesc","displayName":"Block insecure content on specified sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled","displayName":"Enable default legacy SameSite cookie behavior setting (obsolete)","description":"Lets you revert all cookies to legacy SameSite behavior. Reverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", and removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute.\r\n\r\nYou can set the following values for this policy:\r\n\r\n* 1 = Revert to legacy SameSite behavior for cookies on all sites\r\n\r\n* 2 = Use SameSite-by-default behavior for cookies on all sites\r\n\r\nIf you don't set this policy, the default behavior for cookies that don't specify a SameSite attribute will depend on other configuration sources for the SameSite-by-default feature. This feature might be set by a field trial or by enabling the same-site-by-default-cookies flag in edge://flags.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled","displayName":"Enable default legacy SameSite cookie behavior setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_1","displayName":"Revert to legacy SameSite behavior for cookies on all sites","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_2","displayName":"Use SameSite-by-default behavior for cookies on all sites","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist","displayName":"Revert to legacy SameSite behavior for cookies on specified sites (obsolete)","description":"Cookies set for domains match specified patterns will revert to legacy SameSite behavior.\r\n\r\nReverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", and removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute.\r\n\r\nIf you don't set this policy, the global default value will be used. The global default will also be used for cookies on domains not covered by the patterns you specify.\r\n\r\nThe global default value can be configured using the 'LegacySameSiteCookieBehaviorEnabled' (Enable default legacy SameSite cookie behavior setting) policy. If 'LegacySameSiteCookieBehaviorEnabled' is unset, the global default value falls back to other configuration sources.\r\n\r\nNote that patterns you list in this policy are treated as domains, not URLs, so you should not specify a scheme or port.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_legacysamesitecookiebehaviorenabledfordomainlistdesc","displayName":"Revert to legacy SameSite behavior for cookies on specified sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~smartscreen_smartscreenpuaenabled","displayName":"Configure Microsoft Defender SmartScreen to block potentially unwanted apps","description":"This policy setting lets you configure whether to turn on blocking for potentially unwanted apps with Microsoft Defender SmartScreen. Potentially unwanted app blocking with Microsoft Defender SmartScreen provides warning messages to help protect users from adware, coin miners, bundleware, and other low-reputation apps that are hosted by websites. Potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off by default.\r\n\r\nIf you enable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned on.\r\n\r\nIf you disable this setting, potentially unwanted app blocking with Microsoft Defender SmartScreen is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use potentially unwanted app blocking with Microsoft Defender SmartScreen.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain; or on Windows 10 Pro or Enterprise instances that are enrolled for device management.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~smartscreen_smartscreenpuaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev80diff~policy~microsoft_edge~smartscreen_smartscreenpuaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_addressbarmicrosoftsearchinbingproviderenabled","displayName":"Enable Microsoft Search in Bing suggestions in the address bar","description":"Enables the display of relevant Microsoft Search in Bing suggestions in the address bar's suggestion list when the user types a search string in the address bar. If you enable or don't configure this policy, users can see internal results powered by Microsoft Search in Bing in the Microsoft Edge address bar suggestion list. To see the Microsoft Search in Bing results, the user must be signed into Microsoft Edge with their Azure AD account for that organization.\r\nIf you disable this policy, users can't see internal results in the Microsoft Edge address bar suggestion list.\r\nIf you have enabled the set of policies which forces a default search provider ('DefaultSearchProviderEnabled' (Enable the default search provider), 'DefaultSearchProviderName' (Default search provider name) and 'DefaultSearchProviderSearchURL' (Default search provider search URL)), and the search provider specified is not Bing, then this policy is not applicable and there will be no Microsoft Search in Bing suggestions in the address bar's suggestion list.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_addressbarmicrosoftsearchinbingproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_addressbarmicrosoftsearchinbingproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for InPrivate and Guest profiles","description":"Configure this policy to allow/disallow ambient authentication for InPrivate and Guest profiles in Microsoft Edge.\r\n\r\nAmbient Authentication is http authentication with default credentials when explicit credentials aren't provided via NTLM/Kerberos/Negotiate challenge/response schemes.\r\n\r\nIf you set the policy to RegularOnly (value 0), it allows ambient authentication for Regular sessions only. InPrivate and Guest sessions won't be allowed to ambiently authenticate.\r\n\r\nIf you set the policy to InPrivateAndRegular (value 1), it allows ambient authentication for InPrivate and Regular sessions. Guest sessions won't be allowed to ambiently authenticate.\r\n\r\nIf you set the policy to GuestAndRegular (value 2), it allows ambient authentication for Guest and Regular sessions. InPrivate sessions won't be allowed to ambiently authenticate\r\n\r\nIf you set the policy to All (value 3), it allows ambient authentication for all sessions.\r\n\r\nNote that ambient authentication is always allowed on regular profiles.\r\n\r\nIn Microsoft Edge version 81 and later, if the policy is left not set, ambient authentication will be enabled in regular sessions only.\r\n\r\n* 0 = Enable ambient authentication in regular sessions only\r\n\r\n* 1 = Enable ambient authentication in InPrivate and regular sessions\r\n\r\n* 2 = Enable ambient authentication in guest and regular sessions\r\n\r\n* 3 = Enable ambient authentication in regular, InPrivate and guest sessions","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for InPrivate and Guest profiles (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_0","displayName":"Enable ambient authentication in regular sessions only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_1","displayName":"Enable ambient authentication in InPrivate and regular sessions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_2","displayName":"Enable ambient authentication in guest and regular sessions","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_3","displayName":"Enable ambient authentication in regular, InPrivate and guest sessions","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled","displayName":"Allow the audio sandbox to run","description":"This policy controls the audio process sandbox.\r\n\r\nIf you enable this policy, the audio process will run sandboxed.\r\n\r\nIf you disable this policy, the audio process will run unsandboxed and the WebRTC audio-processing module will run in the renderer process.\r\nThis leaves users open to security risks related to running the audio subsystem unsandboxed.\r\n\r\nIf you don't configure this policy, the default configuration for the audio sandbox will be used, which might differ based on the platform.\r\n\r\nThis policy is intended to give enterprises flexibility to disable the audio sandbox if they use security software setups that interfere with the sandbox.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_audiosandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin","displayName":"Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account","description":"Enable the use of Active Directory accounts for automatic sign in if your users' machines are Domain Joined and your environment is not hybrid joined. If you want users automatically signed in with their Azure Active Directory accounts instead, please Azure AD join (See https://go.microsoft.com/fwlink/?linkid=2118197 for more information) or hybrid join (See https://go.microsoft.com/fwlink/?linkid=2118365 for more information) your environment.\r\n\r\nIf you have configured the 'BrowserSignin' (Browser sign-in settings) policy to disabled, this policy will not take any effect.\r\n\r\nIf you enable this policy and set it to \"Sign in and make domain account non-removable\", Microsoft Edge will automatically sign in users that are on domain joined machines using their Active Directory accounts.\r\n\r\nIf you set this policy to \"Disabled\" or don't set it, Microsoft Edge will not automatically sign in users that are on domain joined machines with Active Directory accounts.\r\n\r\n* 0 = Disabled\r\n\r\n* 1 = Sign in and make domain account non-removable","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin","displayName":"Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_configureonpremisesaccountautosignin_configureonpremisesaccountautosignin_1","displayName":"Sign in and make domain account non-removable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy","displayName":"Use a default referrer policy of no-referrer-when-downgrade. (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis enterprise policy is for short-term adaptation and will be removed in M83.\r\n\r\nMicrosoft Edge’s default referrer policy is being strengthened from its current value of no-referrer-when-downgrade to the more secure strict-origin-when-cross-origin through a gradual rollout targeting M80 stable.\r\n\r\nBefore the rollout, this enterprise policy will have no effect. After the rollout, when this enterprise policy is enabled, Microsoft Edge’s default referrer policy will be set to its pre-M80 value of no-referrer-when-downgrade.\r\n\r\nThis enterprise policy is disabled by default","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_forcelegacydefaultreferrerpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled","displayName":"Enable globally scoped HTTP auth cache","description":"This policy configures a single global per profile cache with HTTP server authentication credentials.\r\n\r\nIf you disable or don’t set this policy, the browser will use the default behavior of cross-site auth, which as of version 80, will be to scope HTTP server authentication credentials by top-level site. So, if two sites use resources from the same authenticating domain, credentials will need to be provided independently in the context of both sites. Cached proxy credentials will be reused across sites.\r\n\r\nIf you enable this policy HTTP auth credentials entered in the context of one site will automatically be used in the context of another site.\r\n\r\nEnabling this policy leaves sites open to some types of cross-site attacks, and allows users to be tracked across sites even without cookies by adding entries to the HTTP auth cache using credentials embedded in URLs.\r\n\r\nThis policy is intended to give enterprises depending on the legacy behavior a chance to update their login procedures and will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_globallyscopehttpauthcacheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importcookies","displayName":"Allow importing of Cookies","description":"Allows users to import Cookies from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Cookies aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Cookies are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importcookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importcookies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions","displayName":"Allow importing of extensions","description":"Allows users to import extensions from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, extensions aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **extensions** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importextensions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts","displayName":"Allow importing of shortcuts","description":"Allows users to import Shortcuts from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Shortcuts aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Shortcuts are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Shortcuts on first run.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_importshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect","displayName":"Specify how \"in-page\" navigations to unconfigured sites behave when started from Internet Explorer mode pages","description":"An \"in-page\" navigation is started from a link, a script, or a form on the current page. It can also be a server-side redirect of a previous \"in-page\" navigation attempt. Conversely, a user can start a navigation that isn't \"in-page\" that's independent of the current page in several ways by using the browser controls. For example, using the address bar, the back button, or a favorite link.\r\n\r\nThis setting lets you specify whether navigations from pages loaded in Internet Explorer mode to unconfigured sites (that are not configured in the Enterprise Mode Site List) switch back to Microsoft Edge or remain in Internet Explorer mode.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\nIf you disable or don’t configure this policy, only sites configured to open in Internet Explorer mode will open in that mode. Any site not configured to open in Internet Explorer mode will be redirected back to Microsoft Edge.\r\n\r\nIf you set this policy to Default (value 0), only sites configured to open in Internet Explorer mode will open in that mode. Any site not configured to open in Internet Explorer mode will be redirected back to Microsoft Edge.\r\n\r\nIf you set this policy to AutomaticNavigationsOnly (value 1), you get the default experience except that all automatic navigations (such as 302 redirects) to unconfigured sites will be kept in Internet Explorer mode.\r\n\r\nIf you set this policy to AllInPageNavigations (value 2), all navigations from pages loaded in IE mode to unconfigured sites are kept in Internet Explorer mode (Least Recommended).\r\n\r\nIf you enable this policy, you can choose one of the following navigation options:\r\n\r\n* 0 = Default\r\n\r\n* 1 = Keep only automatic navigations in Internet Explorer mode\r\n\r\n* 2 = Keep all in-page navigations in Internet Explorer mode\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2105106","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect","displayName":"Specify how \"in-page\" navigations to unconfigured sites behave when started from Internet Explorer mode pages (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_0","displayName":"Default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_1","displayName":"Keep only automatic navigations in Internet Explorer mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_internetexplorerintegrationsiteredirect_internetexplorerintegrationsiteredirect_2","displayName":"Keep all in-page navigations in Internet Explorer mode","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended","displayName":"Allow importing of Cookies","description":"Allows users to import Cookies from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Cookies aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Cookies are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.\r\n\r\n**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importcookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended","displayName":"Allow importing of extensions","description":"Allows users to import extensions from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.\r\n\r\nIf you disable this policy, extensions aren't imported at first run, and users can't import them manually.\r\n\r\nIf you don't configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **extensions** option during manual import.\r\n\r\n**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importextensions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importshortcuts_recommended","displayName":"Allow importing of shortcuts","description":"Allows users to import Shortcuts from another browser into Microsoft Edge.\r\n\r\nIf you disable this policy, Shortcuts aren't imported on first run.\r\n\r\nIf you don’t configure this policy, Shortcuts are imported on first run.\r\n\r\nYou can also set this policy as a recommendation. This means that Microsoft Edge imports Shortcuts on first run.\r\n\r\n**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importshortcuts_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_recommended_importshortcuts_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled","displayName":"Enable stricter treatment for mixed content","description":"This policy controls the treatment for mixed content (HTTP content in HTTPS sites) in the browser.\r\n\r\nIf you set this policy to true or not set, audio and video mixed content will be automatically upgraded to HTTPS (that is, the URL will be rewritten as HTTPS, without a fallback if the resource isn’t available over HTTPS) and a 'Not Secure' warning will be shown in the URL bar for image mixed content.\r\n\r\nIf you set the policy to false, auto upgrades will be disabled for audio and video, and no warning will be shown for images.\r\n\r\nThis policy does not affect other types of mixed content other than audio, video, and images.\r\n\r\nThis policy will no longer take effect starting in Microsoft Edge 84.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_strictermixedcontenttreatmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled","displayName":"Enable a TLS 1.3 security feature for local trust anchors.","description":"This policy controls a security feature in TLS 1.3 that protects connections against downgrade attacks. It is backwards-compatible and will not affect connections to compliant TLS 1.2 servers or proxies. However, older versions of some TLS-intercepting proxies have an implementation flaw which causes them to be incompatible.\r\n\r\nIf you enable this policy or don't set it, Microsoft Edge will enable these security protections for all connections.\r\n\r\nIf you disable this policy, Microsoft Edge will disable these security protections for connections authenticated with locally-installed CA certificates. These protections are always enabled for connections authenticated with publicly-trusted CA certificates.\r\n\r\nThis policy may be used to test for any affected proxies and upgrade them. Affected proxies are expected to fail connections with an error code of ERR_TLS13_DOWNGRADE_DETECTED. A later version of Microsoft Edge will enable this option by default.\r\n\r\nAfter it is enabled by default, administrators who need more time to upgrade affected proxies may use this policy to temporarily disable this security feature. This policy will be removed after version 85.\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81diff~policy~microsoft_edge_tls13hardeningforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches","displayName":"Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with \"AutoSelectCertificateForUrls\"","description":"Toggles whether users are prompted to select a certificate if there are multiple certificates available and a site is configured with 'AutoSelectCertificateForUrls' (Automatically select client certificates for these sites). If you don't configure 'AutoSelectCertificateForUrls' for a site, the user will always be prompted to select a certificate.\r\n\r\nIf you set this policy to True, Microsoft Edge will prompt a user to select a certificate for sites on the list defined in 'AutoSelectCertificateForUrls' if and only if there is more than one certificate.\r\n\r\nIf you set this policy to False or don't configure it, Microsoft Edge will automatically select a certificate even if there are multiple matches for a certificate. The user will not be prompted to select a certificate for sites on the list defined in 'AutoSelectCertificateForUrls'.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev81identitydiff~policy~microsoft_edge_forcecertificatepromptsonmultiplematches_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame","displayName":"Allow surf game","description":"If you disable this policy, users won't be able to play the surf game when the device is offline or if the user navigates to edge://surf.\r\n\r\nIf you enable or don't configure this policy, users can play the surf game.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowsurfgame_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls","displayName":"Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with.","description":"Configure the list of URL patterns for sites that the browser will attempt to perform the Token Binding protocol with.\r\nFor the domains on this list, the browser will send the Token Binding ClientHello in the TLS handshake (See https://tools.ietf.org/html/rfc8472).\r\nIf the server responds with a valid ServerHello response, the browser will create and send Token Binding messages on subsequent https requests. See https://tools.ietf.org/html/rfc8471 for more info.\r\n\r\nIf this list is empty, Token Binding will be disabled.\r\n\r\nThis policy is only available on Windows 10 devices with Virtual Secure Mode capability.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\n[*.]mydomain2.com\r\n[*.].mydomain2.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_allowtokenbindingforurls_allowtokenbindingforurlsdesc","displayName":"Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with. (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression","displayName":"Block all ads on Bing search results","description":"Enables an ad-free search experience on Bing.com\r\n\r\nIf you enable this policy, then a user can search on bing.com and have an ad-free search experience. At the same time, the SafeSearch setting will be set to 'Strict' and can't be changed by the user.\r\n\r\nIf you don't configure this policy, then the default experience will have ads in the search results on bing.com. SafeSearch will be set to 'Moderate' by default and can be changed by the user.\r\n\r\nThis policy is only available for K-12 SKUs that are identified as EDU tenants by Microsoft.\r\n\r\nPlease refer to https://go.microsoft.com/fwlink/?linkid=2119711 to learn more about this policy or if the following scenarios apply to you:\r\n\r\n* You have an EDU tenant, but the policy doesn't work.\r\n\r\n* You had your IP whitelisted for having an ad free search experience.\r\n\r\n* You were experiencing an ad-free search experience on Microsoft Edge Legacy and want to upgrade to the new version of Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_bingadssuppression_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit","displayName":"Clear cached images and files when Microsoft Edge closes","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\r\n\r\nIf you enable this policy, cached images and files will be deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy, users cannot configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\r\n\r\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\r\n\r\nIf you disable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you configure both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_clearcachedimagesandfilesonexit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare","displayName":"Configure the Share experience","description":"If you set this policy to 'ShareAllowed' (0, the default), users will be able to access the Windows 10 Share experience from the Settings and More Menu in Microsoft Edge to share with other apps on the system.\r\n\r\nIf you set this policy to 'ShareDisallowed' (1), users won't be able to access the Windows 10 Share experience. If the Share button is on the toolbar, it will also be hidden.\r\n\r\n* 0 = Allow using the Share experience\r\n\r\n* 1 = Don't allow using the Share experience\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare","displayName":"Configure the Share experience (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare_0","displayName":"Allow using the Share experience","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_configureshare_configureshare_1","displayName":"Don't allow using the Share experience","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration","displayName":"Delete old browser data on migration","description":"This policy determines whether user browsing data from Microsoft Edge Legacy will be deleted after migrating to the Microsoft Edge version 81 or later.\r\n\r\nIf you set this policy to \"Enabled\", all browsing data from Microsoft Edge Legacy after migrating to the Microsoft Edge version 81 or later will be deleted. This policy must be set before migrating to the Microsoft Edge version 81 or later to have any effect on existing browsing data.\r\n\r\nIf you set this policy to \"Disabled\", or the policy is not configured, user browsing data isn't deleted after migrating to the Microsoft Edge version 83 or later.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_deletedataonmigration_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode","displayName":"Control the mode of DNS-over-HTTPS","description":"Control the mode of the DNS-over-HTTPS resolver. Note that this policy will only set the default mode for each query. The mode can be overridden for special types of queries such as requests to resolve a DNS-over-HTTPS server hostname.\r\n\r\nThe \"off\" mode will disable DNS-over-HTTPS.\r\n\r\nThe \"automatic\" mode will send DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and may fallback to sending insecure queries on error.\r\n\r\nThe \"secure\" mode will only send DNS-over-HTTPS queries and will fail to resolve on error.\r\n\r\nIf you don't configure this policy, the browser might send DNS-over-HTTPS requests to a resolver associated with the user's configured system resolver.\r\n\r\nExample value: off","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode","displayName":"Control the mode of DNS-over-HTTPS (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_off","displayName":"Disable DNS-over-HTTPS","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_automatic","displayName":"Enable DNS-over-HTTPS with insecure fallback","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpsmode_dnsoverhttpsmode_secure","displayName":"Enable DNS-over-HTTPS without insecure fallback","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver","description":"The URI template of the desired DNS-over-HTTPS resolver. To specify multiple DNS-over-HTTPS resolvers, separate the corresponding URI templates with spaces.\r\n\r\nIf you set 'DnsOverHttpsMode' (Control the mode of DNS-over-HTTPS) to \"secure\" then this policy must be set and cannot be empty.\r\n\r\nIf you set 'DnsOverHttpsMode' to \"automatic\" and this policy is set then the URI templates specified will be used. If you don't set this policy, then hardcoded mappings will be used to attempt to upgrade the user's current DNS resolver to a DoH resolver operated by the same provider.\r\n\r\nIf the URI template contains a dns variable, requests to the resolver will use GET; otherwise requests will use POST.\r\n\r\nIncorrectly formatted templates will be ignored.\r\n\r\nExample value: https://dns.example.net/dns-query{?dns}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_dnsoverhttpstemplates_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled","displayName":"Allow users to configure Family safety","description":"This policy disables and completely hides the Family safety page in Settings. Navigation to edge://settings/familysafety will also be blocked. The Family safety page describes what features are available for family groups and how to join a family group. Learn more about family safety here: (https://go.microsoft.com/fwlink/?linkid=2098432).\r\n\r\nIf you enable this policy or don't configure it, the Family safety page will be shown.\r\n\r\nIf you disable this policy, the Family safety page will not be shown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_familysafetysettingsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled","displayName":"Allow suggestions from local providers","description":"Allow suggestions from suggestion providers on the device (local providers), for example, Favorites and Browsing History, in Microsoft Edge's Address Bar and Auto-Suggest List.\r\n\r\nIf you enable this policy, suggestions from local providers are used.\r\n\r\nIf you disable this policy, suggestions from local providers are never used. Local history and local favorites suggestions will not appear.\r\n\r\nIf you do not configure this policy, suggestions from local providers are allowed but the user can change that using the settings toggle.\r\n\r\nNote that some features may not be available if a policy to disable this feature has been applied. For example, Browsing History suggestions will not be available if you enable the 'SavingBrowserHistoryDisabled' (Disable saving browser history) policy.\r\n\r\nThis policy requires a browser restart to finish applying.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_localprovidersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended","displayName":"Clear cached images and files when Microsoft Edge closes","description":"Microsoft Edge doesn't clear cached images and files by default when it closes.\r\n\r\nIf you enable this policy, cached images and files will be deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy, users cannot configure the cached images and files option in edge://settings/clearBrowsingDataOnClose.\r\n\r\nIf you don't configure this policy, users can choose whether cached images and files are cleared on exit.\r\n\r\nIf you disable this policy, don't enable the 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you configure both, the 'ClearBrowsingDataOnExit' policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how you configured 'ClearCachedImagesAndFilesOnExit' (Clear cached images and files when Microsoft Edge closes).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_clearcachedimagesandfilesonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended","displayName":"Allow suggestions from local providers","description":"Allow suggestions from suggestion providers on the device (local providers), for example, Favorites and Browsing History, in Microsoft Edge's Address Bar and Auto-Suggest List.\r\n\r\nIf you enable this policy, suggestions from local providers are used.\r\n\r\nIf you disable this policy, suggestions from local providers are never used. Local history and local favorites suggestions will not appear.\r\n\r\nIf you do not configure this policy, suggestions from local providers are allowed but the user can change that using the settings toggle.\r\n\r\nNote that some features may not be available if a policy to disable this feature has been applied. For example, Browsing History suggestions will not be available if you enable the 'SavingBrowserHistoryDisabled' (Disable saving browser history) policy.\r\n\r\nThis policy requires a browser restart to finish applying.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_recommended_localprovidersenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed","displayName":"Allow or deny screen capture","description":"If you enable this policy, or don't configure this policy, a web page can use screen-share APIs (for example, getDisplayMedia() or the Desktop Capture extension API) for a screen capture.\r\nIf you disable this policy, calls to screen-share APIs will fail. For example, if you're using a web-based online meeting, video or screen sharing will not work. However, this policy is not considered\r\n(and a site will be allowed to use screen-share APIs) if the site matches an origin pattern in any of the following policies:\r\n'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins),\r\n'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins),\r\n'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins),\r\n'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_screencaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled","displayName":"Enable scrolling to text specified in URL fragments","description":"This feature lets hyperlink and address bar URL navigations target specific text on a web page, which will be scrolled to after the web page finishes loading.\r\n​\r\nIf you enable or don't configure this policy, web page scrolling to specific text fragments via a URL will be enabled.​\r\n\r\nIf you disable this policy, web page scrolling to specific text fragments via a URL will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_scrolltotextfragmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled","displayName":"Configure the list of types that are excluded from synchronization","description":"If you enable this policy all the specified data types will be excluded from synchronization. This policy can be used to limit the type of data uploaded to the Microsoft Edge synchronization service.\r\n\r\nYou can provide one of the following data types for this policy: \"favorites\", \"settings\", \"passwords\", \"addressesAndMore\", \"extensions\", and “collections”. Note that these data type names are case sensitive.\r\n\r\nUsers will not be able to override the disabled data types.\r\n\r\nExample value:\r\n\r\nfavorites","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev83diff~policy~microsoft_edge_synctypeslistdisabled_synctypeslistdisableddesc","displayName":"Configure the list of types that are excluded from synchronization (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled","displayName":"Allows the AppCache feature to be re-enabled, even if it's turned off by default (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 96.\r\n\r\nSupport for AppCache and this policy was removed from Microsoft Edge starting in version 97.\r\n\r\nIf you set this policy to true, the AppCache is enabled, even when AppCache in Microsoft Edge is not available by default.\r\n\r\nIf you set this policy to false, or don't set it, AppCache will follow Microsoft Edge's defaults.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_appcacheforceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload","displayName":"Require that the Enterprise Mode Site List is available before tab navigation","description":"Lets you specify whether Microsoft Edge tabs wait to navigate until the browser has downloaded the initial Enterprise Mode Site List. This setting is intended for the scenario where the browser home page should load in Internet Explorer mode, and it is important that is does so on browser first run after IE mode is enabled. If this scenario does not exist, we recommend not enabling this setting because it can negatively impact the performance of loading the home page. The setting only applies when Microsoft Edge does not have a cached Enterprise Mode Site List, such as on browser first run after IE mode is enabled.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\nThe timeout behavior of this policy can be configured with the 'NavigationDelayForInitialSiteListDownloadTimeout' (Set a timeout for delay of tab navigation for the Enterprise Mode Site List) policy.\r\n\r\nIf you set this policy to 1, when Microsoft Edge does not have a cached version of the Enterprise Mode Site List, tabs delay navigating until the browser has downloaded the site list. Sites configured to open in Internet Explorer mode by the site list will load in Internet Explorer mode, even during the initial navigation of the browser. Sites that cannot possibly be configured to open in Internet Explorer, such as any site with a scheme other than http:, https:, file:, or ftp: do not delay navigating and load immediately in Edge mode.\r\n\r\nIf you set this policy to 0 or don't configure it, when Microsoft Edge does not have a cached version of the Enterprise Mode Site List, tabs will navigate immediately, and not wait for the browser to download the Enterprise Mode Site List. Sites configured to open in Internet Explorer mode by the site list will open in Microsoft Edge mode until the browser has finished downloading the Enterprise Mode Site List.\r\n\r\n* 0 = None\r\n\r\n* 1 = All eligible navigations","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload","displayName":"Require that the Enterprise Mode Site List is available before tab navigation (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_delaynavigationsforinitialsitelistdownload_delaynavigationsforinitialsitelistdownload_1","displayName":"All eligible navigations","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection","displayName":"Configure enhanced hang detection for Internet Explorer mode","description":"Enhanced hang detection is a more granular approach to detecting hung webpages in Internet Explorer mode than what standalone Internet Explorer uses. When a hung webpage is detected, the browser will apply a mitigation to prevent the rest of the browser from hanging.\r\n\r\nThis setting allows you to configure the use of enhanced hang detection in case you run into incompatible issues with any of your websites. We recommend disabling this policy only if you see notifications such as \"(website) is not responding\" in Internet Explorer mode but not in standalone Internet Explorer.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\nIf you set this policy to 'Enabled' (1) or don’t configure it, websites running in Internet Explorer mode will use enhanced hang detection.\r\n\r\nIf you set this policy to 'Disabled' (0), enhanced hang detection is disabled, and users will get the basic Internet Explorer hang detection behavior.\r\n\r\n* 0 = Enhanced hang detection disabled\r\n\r\n* 1 = Enhanced hang detection enabled\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection","displayName":"Configure enhanced hang detection for Internet Explorer mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection_0","displayName":"Enhanced hang detection disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_internetexplorerintegrationenhancedhangdetection_internetexplorerintegrationenhancedhangdetection_1","displayName":"Enhanced hang detection enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled","displayName":"Enable Hiding of Native Windows","description":"Enables hiding of native windows in Microsoft Edge.\r\n\r\nIf you enable this setting, to reduce CPU and power consumption Microsoft Edge will detect when a window is covered by other windows, and will suspend work painting pixels.\r\n\r\nIf you disable this setting Microsoft Edge will not detect when a window is covered by other windows.\r\n\r\nIf this policy is left not set, window hiding detection will be enabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_nativewindowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout","displayName":"Set a timeout for delay of tab navigation for the Enterprise Mode Site List","description":"Allows you to set a timeout, in seconds, for Microsoft Edge tabs waiting to navigate until the browser has downloaded the initial Enterprise Mode Site List.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to \"Internet Explorer mode\" (1)\r\nand\r\n'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry\r\nand\r\n'DelayNavigationsForInitialSiteListDownload' (Require that the Enterprise Mode Site List is available before tab navigation) is set to \"All eligible navigations\" (1).\r\n\r\nTabs will not wait longer than this timeout for the Enterprise Mode Site List to download. If the browser has not finished downloading the Enterprise Mode Site List when the timeout expires, Microsoft Edge tabs will continue navigating anyway. The value of the timeout should be no greater than 20 seconds and no fewer than 1 second.\r\n\r\nIf you set the timeout in this policy to a value greater than the default of 2 seconds, an information bar is shown to the user after 2 seconds. The information bar contains a button that allows the user to quit waiting for the Enterprise Mode Site List download to complete.\r\n\r\nIf you don't configure this policy, the default timeout of 2 seconds is used. This default is subject to change in the future.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_navigationdelayforinitialsitelistdownloadtimeout_navigationdelayforinitialsitelistdownloadtimeout","displayName":"Set a timeout for delay of tab navigation for the Enterprise Mode Site List: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended","displayName":"Manage Search Engines","description":"Lets you configure a list of up to 10 search engines, one of which must be marked as the default search engine.\r\nYou do not need to specify the encoding. Starting in Microsoft Edge 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge 80.\r\n\r\nStarting in Microsoft Edge 83, you can enable search engine discovery with the allow_search_engine_discovery optional parameter. This parameter must be the first item in the list. If allow_search_engine_discovery is not specified, search engine discovery will be disabled by default. Starting in Microsoft Edge 84, you can set this policy as a recommended policy to allow search provider discovery. You do not need to add the allow_search_engine_discovery optional parameter.\r\n\r\nIf you enable this policy, users can't add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.\r\n\r\nIf you disable or don't configure this policy, users can modify the search engines list as desired.\r\n\r\nIf the 'DefaultSearchProviderSearchURL' (Default search provider search URL) policy is set, this policy (ManagedSearchEngines) is ignored. The user must restart their browser to finish applying this policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"allow_search_engine_discovery\": true\r\n }, \r\n {\r\n \"is_default\": true, \r\n \"suggest_url\": \"https://www.example1.com/qbox?query={searchTerms}\", \r\n \"search_url\": \"https://www.example1.com/search?q={searchTerms}\", \r\n \"name\": \"Example1\", \r\n \"keyword\": \"example1.com\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example2.com/qbox?query={searchTerms}\", \r\n \"image_search_url\": \"https://www.example2.com/images/detail/search?iss=sbiupload\", \r\n \"name\": \"Example2\", \r\n \"keyword\": \"example2.com\", \r\n \"image_search_post_params\": \"content={imageThumbnail},url={imageURL},sbisrc={SearchSource}\", \r\n \"search_url\": \"https://www.example2.com/search?q={searchTerms}\"\r\n }, \r\n {\r\n \"suggest_url\": \"https://www.example3.com/qbox?query={searchTerms}\", \r\n \"search_url\": \"https://www.example3.com/search?q={searchTerms}\", \r\n \"name\": \"Example3\", \r\n \"keyword\": \"example3.com\", \r\n \"encoding\": \"UTF-8\", \r\n \"image_search_url\": \"https://www.example3.com/images/detail/search?iss=sbiupload\"\r\n }, \r\n {\r\n \"search_url\": \"https://www.example4.com/search?q={searchTerms}\", \r\n \"name\": \"Example4\", \r\n \"keyword\": \"example4.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended_managedsearchengines_recommended_managedsearchengines","displayName":"Manage Search Engines (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended","displayName":"Enable the default search provider","description":"Enables the ability to use a default search provider.\r\n\r\nIf you enable this policy, a user can search for a term by typing in the address bar (as long as what they type isn't a URL).\r\n\r\nYou can specify the default search provider to use by enabling the rest of the default search policies. If these are left empty (not configured) or configured incorrectly, the user can choose the default provider.\r\n\r\nIf you disable this policy, the user can't search from the address bar.\r\n\r\nIf you enable or disable this policy, users can't change or override it.\r\n\r\nIf you don't configure this policy, the default search provider is enabled, and the user can choose the default search provider and set the search provider list.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain or Windows 10 Pro or Enterprise instances that are enrolled for device management.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended","displayName":"Default search provider encodings","description":"Specify the character encodings supported by the search provider. Encodings are code page names like UTF-8, GB2312, and ISO-8859-1. They are tried in the order provided.\r\n\r\nThis policy is optional. If not configured, the default, UTF-8, is used.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended","displayName":"Specifies the search-by-image feature for the default search provider","description":"Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.\r\n\r\nThis policy is optional. If you don't configure it, image search isn't available.\r\n\r\nSpecify Bing's Image Search URL as:\r\n'{bing:baseURL}images/detail/search?iss=sbiupload&FORM=ANCMS1#enterInsights'.\r\n\r\nSpecify Google's Image Search URL as: '{google:baseURL}searchbyimage/upload'.\r\n\r\nSee 'DefaultSearchProviderImageURLPostParams' (Parameters for an image URL that uses POST) policy to finish configuring image search.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy.\r\n\r\nExample value: https://search.contoso.com/searchbyimage/upload","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_defaultsearchproviderimageurl","displayName":"Specifies the search-by-image feature for the default search provider (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended","displayName":"Parameters for an image URL that uses POST","description":"If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it's replaced with real image thumbnail data. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nSpecify Bing's Image Search URL Post Params as:\r\n'imageBin={google:imageThumbnailBase64}'.\r\n\r\nSpecify Google's Image Search URL Post Params as:\r\n'encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}'.\r\n\r\nIf you don't set this policy, image search requests are sent using the GET method.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_defaultsearchproviderimageurlpostparams","displayName":"Parameters for an image URL that uses POST (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended","displayName":"Default search provider keyword","description":"Specifies the keyword, which is the shortcut used in the Address Bar to trigger the search for this provider.\r\n\r\nThis policy is optional. If you don't configure it, no keyword activates the search provider.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_defaultsearchproviderkeyword","displayName":"Default search provider keyword (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended","displayName":"Default search provider name","description":"Specifies the name of the default search provider.\r\n\r\nIf you enable this policy, you set the name of the default search provider.\r\n\r\nIf you don't enable this policy or if you leave it empty, the host name specified by the search URL is used.\r\n\r\n'DefaultSearchProviderName' should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_defaultsearchprovidername","displayName":"Default search provider name (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended","displayName":"Default search provider search URL","description":"Specifies the URL of the search engine used for a default search. The URL contains the string '{searchTerms}', which is replaced at query time by the terms the user is searching for.\r\n\r\nSpecify Bing's search URL as:\r\n\r\n'{bing:baseURL}search?q={searchTerms}'.\r\n\r\nSpecify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nThis policy is required when you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) policy; if you don't enable the latter policy, this policy is ignored.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: https://search.contoso.com/search?q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended","displayName":"Default search provider URL for suggestions","description":"Specifies the URL for the search engine used to provide search suggestions. The URL contains the string '{searchTerms}', which is replaced at query time by the text the user has entered so far.\r\n\r\nThis policy is optional. If you don't configure it, users won't see search suggestions; they will see suggestions from their browsing history and favorites.\r\n\r\nBing's suggest URL can be specified as:\r\n\r\n'{bing:baseURL}qbox?query={searchTerms}'.\r\n\r\nGoogle's suggest URL can be specified as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nThis policy is applied only if you enable the 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL) policies.\r\n\r\nStarting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the 'ManagedSearchEngines' (Manage Search Engines) policy.\r\n\r\nExample value: https://search.contoso.com/suggest?q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_defaultsearchprovidersuggesturl","displayName":"Default search provider URL for suggestions (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled","displayName":"Use Windows proxy resolver","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nUse Windows to resolve proxies for all browser networking instead of the proxy resolver built into Microsoft Edge. The Windows proxy resolver enables Windows proxy features such as DirectAccess/NRPT.\r\n\r\nThis policy comes with the problems described by https://crbug.com/644030. It causes PAC files to be fetched and executed by Windows code, including PAC files set via the 'ProxyPacUrl' (Set the proxy .pac file URL) policy. Since Network Fetches for the PAC file happen via Windows instead of Microsoft Edge code, network policies such as 'DnsOverHttpsMode' (Control the mode of DNS-over-HTTPS) will not apply to network fetches for a PAC file.\r\n\r\nThis policy is deprecated. It will be superseded by a similar feature in a future release, see https://crbug.com/1032820.\r\n\r\nIf you enable this policy, the Windows proxy resolver will be used.\r\n\r\nIf you disable or don't configure this policy, the Microsoft Edge proxy resolver will be used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge_winhttpproxyresolverenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy","displayName":"Application Guard Container Proxy","description":"Configures the proxy settings for Microsoft Edge Application Guard.\r\nIf you enable this policy, Microsoft Edge Application Guard ignores other sources of proxy configurations.\r\n\r\nIf you don't configure this policy, Microsoft Edge Application Guard uses the proxy configuration of the host.\r\n\r\nThis policy does not affect the proxy configuration of Microsoft Edge outside of Application Guard (on the host).\r\n\r\nThe ProxyMode field lets you specify the proxy server used by Microsoft Edge Application Guard.\r\n\r\nThe ProxyPacUrl field is a URL to a proxy .pac file.\r\n\r\nThe ProxyServer field is a URL for the proxy server.\r\n\r\nIf you choose the 'direct' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'auto_detect' value as 'ProxyMode', all other fields are ignored.\r\n\r\nIf you choose the 'fixed_servers' value as 'ProxyMode', the 'ProxyServer' field is used.\r\n\r\nIf you choose the 'pac_script' value as 'ProxyMode', the 'ProxyPacUrl' field is used.\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"direct\", \r\n \"ProxyPacUrl\": \"https://internal.site/example.pac\", \r\n \"ProxyServer\": \"123.123.123.123:8080\"\r\n}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev84diff~policy~microsoft_edge~applicationguard_applicationguardcontainerproxy_applicationguardcontainerproxy","displayName":"Application Guard Container Proxy (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user","description":"Allows you to set a list of protocols, and for each protocol an associated list of allowed origin patterns, that can launch an external application without prompting the user. The trailing separator should not be included when listing the protocol and the protocol should be all lower case. For example, list \"skype\" instead of \"skype:\", \"skype://\" or \"Skype\".\r\n\r\nIf you configure this policy, a protocol will only be permitted to launch an external application without prompting by policy if:\r\n\r\n- the protocol is listed\r\n\r\n- the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.\r\n\r\nIf either condition is false, the external protocol launch prompt will not be omitted by policy.\r\n\r\nIf you don't configure this policy, no protocols can launch without a prompt. Users can opt out of prompts on a per-protocol/per-site basis unless the 'ExternalProtocolDialogShowAlwaysOpenCheckbox' (Show an \"Always open\" checkbox in external protocol dialog) policy is set to Disabled. This policy has no impact on per-protocol/per-site prompt exemptions set by users.\r\n\r\nThe origin matching patterns use a similar format to those for the 'URLBlocklist' (Block access to a list of URLs) policy, which are documented at https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nHowever, origin matching patterns for this policy cannot contain \"/path\" or \"@query\" elements. Any pattern that does contain a \"/path\" or \"@query\" element will be ignored.\r\n\r\nThis policy does not work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"allowed_origins\": [\r\n \"example.com\",\r\n \"http://www.example.com:8080\"\r\n ],\r\n \"protocol\": \"spotify\"\r\n },\r\n {\r\n \"allowed_origins\": [\r\n \"https://example.com\",\r\n \"https://.mail.example.com\"\r\n ],\r\n \"protocol\": \"msteams\"\r\n },\r\n {\r\n \"allowed_origins\": [\r\n \"*\"\r\n ],\r\n \"protocol\": \"msoutlook\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autolaunchprotocolsfromorigins_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls","displayName":"URLs where AutoOpenFileTypes can apply","description":"A list of URLs to which 'AutoOpenFileTypes' (List of file types that should be automatically opened on download) will apply to. This policy has no impact on automatically open values set by users via the download shelf ... > \"Always open files of this type\" menu entry.\r\n\r\nIf you set URLs in this policy, files will only automatically open by policy if the URL is part of this set and the file type is listed in 'AutoOpenFileTypes'. If either condition is false, the download won't automatically open by policy.\r\n\r\nIf you don't set this policy, all downloads where the file type is in 'AutoOpenFileTypes' will automatically open.\r\n\r\nA URL pattern has to be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nThis policy does not work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenallowedforurls_autoopenallowedforurlsdesc","displayName":"URLs where AutoOpenFileTypes can apply (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes","displayName":"List of file types that should be automatically opened on download","description":"This policy sets a list of file types that should be automatically opened on download. Note: The leading separator should not be included when listing the file type, so list \"txt\" instead of \".txt\".\r\n\r\nBy default, these file types will be automatically opened on all URLs. You can use the 'AutoOpenAllowedForURLs' (URLs where AutoOpenFileTypes can apply) policy to restrict the URLs for which these file types will be automatically opened on.\r\n\r\nFiles with types that should be automatically opened will still be subject to the enabled Microsoft Defender SmartScreen checks and won't be opened if they fail those checks.\r\n\r\nFile types that a user has already specified to automatically be opened will continue to do so when downloaded. The user will continue to be able to specify other file types to be automatically opened.\r\n\r\nIf you don't set this policy, only file types that a user has already specified to automatically be opened will do so when downloaded.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory or instances that enrolled for device management.\r\n\r\nExample value:\r\n\r\nexe\r\ntxt","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_autoopenfiletypes_autoopenfiletypesdesc","displayName":"List of file types that should be automatically opened on download (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed","displayName":"Allow default search provider context menu search access","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider and sidebar search will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider and sidebar search will be available.\r\n\r\nThe policy value is only applied when the 'DefaultSearchProviderEnabled' (Enable the default search provider) policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_defaultsearchprovidercontextmenuaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_enablesha1forlocalanchors","displayName":"Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nWhen this setting is enabled, Microsoft Edge allows connections secured by SHA-1 signed certificates so long as the the certificate chains to a locally-installed root certificate and is otherwise valid.\r\n\r\nNote that this policy depends on the operating system (OS) certificate verification stack allowing SHA-1 signatures. If an OS update changes the OS handling of SHA-1 certificates, this policy might no longer have effect. Further, this policy is intended as a temporary workaround to give enterprises more time to move away from SHA-1. This policy will be removed in Microsoft Edge 92 releasing in mid 2021.\r\n\r\nIf you don't set this policy or set it to false, or the SHA-1 certificate chains to a publicly trusted certificate root, then Microsoft Edge won't allow certificates signed by SHA-1.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_enablesha1forlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_enablesha1forlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 109.\r\n\r\nThis policy has been obsoleted in favor of 'ExemptFileTypeDownloadWarnings' (Disable download file type extension-based warnings for specified file types on domains) because of a type mismatch that caused errors in Mac.\r\n\r\nYou can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Microsoft Defender SmartScreen warnings.\r\n\r\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://go.microsoft.com/fwlink/?linkid=2095322.\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent file type extension-based download warnings on swf, exe, and jnlp extensions for *.contoso.com domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\r\n\r\n[\r\n { \"file_extension\": \"jnlp\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"exe\", \"domains\": [\"contoso.com\"] },\r\n { \"file_extension\": \"swf\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nExample value:\r\n\r\n{\"domains\": [\"https://contoso.com\", \"contoso2.com\"], \"file_extension\": \"jnlp\"}\r\n{\"domains\": [\"*\"], \"file_extension\": \"swf\"}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_exemptdomainfiletypepairsfromfiletypedownloadwarnings_exemptdomainfiletypepairsfromfiletypedownloadwarningsdesc","displayName":"Disable download file type extension-based warnings for specified file types on domains (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled","displayName":"Control the IntensiveWakeUpThrottling feature","description":"When enabled the IntensiveWakeUpThrottling feature causes Javascript timers in background tabs to be aggressively throttled and coalesced, running no more than once per minute after a page has been backgrounded for 5 minutes or more.\r\n\r\nThis is a web standards compliant feature, but it may break functionality on some websites by causing certain actions to be delayed by up to a minute. However, it results in significant CPU and battery savings when enabled. See https://bit.ly/30b1XR4 for more details.\r\n\r\nIf you enable this policy, the feature will be force enabled, and users will not be able to override this setting.\r\nIf you disable this policy, the feature will be force disabled, and users will not be able to override this setting.\r\nIf you don't configure this policy, the feature will be controlled by its own internal logic. Users can manually configure this setting.\r\n\r\nNote that the policy is applied per renderer process, with the most recent value of the policy setting in force when a renderer process starts. A full restart is required to ensure that all the loaded tabs receive a consistent policy setting. It is harmless for processes to be running with different values of this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_intensivewakeupthrottlingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended","displayName":"Configure the new tab page search box experience","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL).\r\n\r\n If you disable or don't configure this policy and:\r\n\r\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\r\n- If the address bar default search engine is not Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\r\n\r\n\r\nIf you enable this policy and set it to:\r\n\r\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\r\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\r\n\r\nPolicy options mapping:\r\n\r\n* bing (bing) = Search box (Recommended)\r\n\r\n* redirect (redirect) = Address bar\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: bing","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox","displayName":"New tab page search box experience (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox_bing","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~defaultsearchprovider_recommended_newtabpagesearchbox_recommended_newtabpagesearchbox_redirect","displayName":"Address bar","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmonitorallowed_recommended","displayName":"Allow users to be alerted if their passwords are found to be unsafe","description":"Allow Microsoft Edge to monitor user passwords.\r\n\r\nIf you enable this policy, the user will get alerted if any of their passwords stored in Microsoft Edge are found to be unsafe. Microsoft Edge will show an alert and this information will also be available in Settings > Passwords > Password Monitor.\r\n\r\nIf you disable this policy, users will not be asked for permission to enable this feature. Their passwords will not be scanned and they will not be alerted either.\r\n\r\nIf you don't configure the policy, users can turn this feature on or off.\r\n\r\nTo learn more about how Microsoft Edge finds unsafe passwords see https://go.microsoft.com/fwlink/?linkid=2133833\r\n\r\nAdditional guidance:\r\n\r\nThis policy can be set as both Recommended as well as Mandatory, however with an important callout.\r\n\r\nMandatory enabled: If the policy is set to Mandatory enabled, the UI in Settings will be disabled but remain in 'On' state, and a briefcase icon will be made visible next to it with this description displayed on hover - \"This setting is managed by your organization.\"\r\n\r\nRecommended enabled: If the policy is set to Recommended enabled, the UI in Settings will remain in 'Off' state, but a briefcase icon will be made visible next to it with this description displayed on hover - \"Your organization recommends a specific value for this setting and you have chosen a different value\"\r\n\r\nMandatory and Recommended disabled: Both these states will work the normal way, with the usual captions being shown to users.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmonitorallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordmonitorallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended","displayName":"Enable preload of the new tab page for faster rendering","description":"If you configure this policy, preloading the New tab page is enabled, and users can't change this setting. If you don't configure this policy, preloading is enabled and a user can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_recommended~startup_recommended_newtabpageprerenderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation","displayName":"Set the roaming profile directory","description":"Configures the directory to use to store the roaming copy of profiles.\r\n\r\nIf you enable this policy, Microsoft Edge uses the provided directory to store a roaming copy of the profiles, as long as you've also enabled the 'RoamingProfileSupportEnabled' (Enable using roaming copies for Microsoft Edge profile data) policy. If you disable the 'RoamingProfileSupportEnabled' policy or don't configure it, the value stored in this policy isn't used.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2095041 for a list of variables you can use.\r\n\r\nIf you don't configure this policy, the default roaming profile path is used.\r\n\r\nExample value: ${roaming_app_data}\\edge-profile","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilelocation_roamingprofilelocation","displayName":"Set the roaming profile directory (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled","displayName":"Enable using roaming copies for Microsoft Edge profile data","description":"Enable this policy to use roaming profiles on Windows. The settings stored in Microsoft Edge profiles (favorites and preferences) are also saved to a file stored in the Roaming user profile folder (or the location specified by the administrator through the 'RoamingProfileLocation' (Set the roaming profile directory) policy).\r\n\r\nIf you disable this policy or don't configure it, only the regular local profiles are used.\r\n\r\nThe 'SyncDisabled' (Disable synchronization of data using Microsoft sync services) policy disables all data synchronization, overriding policy.\r\n\r\nSee https://docs.microsoft.com/windows-server/storage/folder-redirection/deploy-roaming-user-profiles for more information on using roaming user profiles.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_roamingprofilesupportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist","displayName":"Specify the TLS cipher suites to disable","description":"Configure the list of cipher suites that are disabled for TLS connections.\r\n\r\nIf you configure this policy, the list of configured cipher suites will not be used when establishing TLS connections.\r\n\r\nIf you don't configure this policy, the browser will choose which TLS cipher suites to use.\r\n\r\nCipher suite values to be disabled are specified as 16-bit hexadecimal values. The values are assigned by the Internet Assigned Numbers Authority (IANA) registry.\r\n\r\nThe TLS 1.3 cipher suite TLS_AES_128_GCM_SHA256 (0x1301) is required for TLS 1.3 and can't be disabled by this policy.\r\n\r\nThis policy does not affect QUIC-based connections. QUIC can be turned off via the 'QuicAllowed' (Allow QUIC protocol) policy.\r\n\r\nExample value:\r\n\r\n0x1303\r\n0xcca8\r\n0xcca9","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge_tlsciphersuitedenylist_tlsciphersuitedenylistdesc","displayName":"Specify the TLS cipher suites to disable (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox","displayName":"Configure the new tab page search box experience","description":"You can configure the new tab page search box to use \"Search box (Recommended)\" or \"Address bar\" to search on new tabs. This policy only works if you set the search engine to a value other than Bing by setting the following two policies: 'DefaultSearchProviderEnabled' (Enable the default search provider) and 'DefaultSearchProviderSearchURL' (Default search provider search URL).\r\n\r\n If you disable or don't configure this policy and:\r\n\r\n- If the address bar default search engine is Bing, the new tab page uses the search box to search on new tabs.\r\n- If the address bar default search engine is not Bing, users are offered an additional choice (use \"Address bar\") when searching on new tabs.\r\n\r\n\r\nIf you enable this policy and set it to:\r\n\r\n- \"Search box (Recommended)\" ('bing'), the new tab page uses the search box to search on new tabs.\r\n- \"Address bar\" ('redirect'), the new tab page search box uses the address bar to search on new tabs.\r\n\r\nPolicy options mapping:\r\n\r\n* bing (bing) = Search box (Recommended)\r\n\r\n* redirect (redirect) = Address bar\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: bing","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox","displayName":"New tab page search box experience (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox_bing","displayName":"Search box (Recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~defaultsearchprovider_newtabpagesearchbox_newtabpagesearchbox_redirect","displayName":"Address bar","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed","displayName":"Allow users to be alerted if their passwords are found to be unsafe","description":"Allow Microsoft Edge to monitor user passwords.\r\n\r\nIf you enable this policy, the user will get alerted if any of their passwords stored in Microsoft Edge are found to be unsafe. Microsoft Edge will show an alert and this information will also be available in Settings > Passwords > Password Monitor.\r\n\r\nIf you disable this policy, users will not be asked for permission to enable this feature. Their passwords will not be scanned and they will not be alerted either.\r\n\r\nIf you don't configure the policy, users can turn this feature on or off.\r\n\r\nTo learn more about how Microsoft Edge finds unsafe passwords see https://go.microsoft.com/fwlink/?linkid=2133833\r\n\r\nAdditional guidance:\r\n\r\nThis policy can be set as both Recommended as well as Mandatory, however with an important callout.\r\n\r\nMandatory enabled: If the policy is set to Mandatory enabled, the UI in Settings will be disabled but remain in 'On' state, and a briefcase icon will be made visible next to it with this description displayed on hover - \"This setting is managed by your organization.\"\r\n\r\nRecommended enabled: If the policy is set to Recommended enabled, the UI in Settings will remain in 'Off' state, but a briefcase icon will be made visible next to it with this description displayed on hover - \"Your organization recommends a specific value for this setting and you have chosen a different value\"\r\n\r\nMandatory and Recommended disabled: Both these states will work the normal way, with the usual captions being shown to users.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~passwordmanager_passwordmonitorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled","displayName":"Enable preload of the new tab page for faster rendering","description":"If you configure this policy, preloading the New tab page is enabled, and users can't change this setting. If you don't configure this policy, preloading is enabled and a user can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev85diff~policy~microsoft_edge~startup_newtabpageprerenderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage","description":"This policy controls sending required and optional diagnostic data about browser usage to Microsoft.\r\n\r\nRequired diagnostic data is collected to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\nOptional diagnostic data includes data about how you use the browser, websites you visit and crash reports to Microsoft for product and service improvement.\r\n\r\nUp to version 121, this policy is not supported on Windows 10 devices. To control this data collection on Windows 10 for 121 and previous, IT admins must use the Windows diagnostic data group policy. This policy will either be 'Allow Telemetry' or 'Allow Diagnostic Data', depending on the version of Windows. Learn more about Windows 10 diagnostic data collection: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nFor version 122 and later, this policy is supported on Windows 10 devices to allow controlling Microsoft Edge data collection separately from Windows 10 diagnostics data collection.\r\n\r\nUse one of the following settings to configure this policy:\r\n\r\n'Off' turns off required and optional diagnostic data collection. This option is not recommended.\r\n\r\n'RequiredData' sends required diagnostic data but turns off optional diagnostic data collection. Microsoft Edge will send required diagnostic data to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\n'OptionalData' sends optional diagnostic data includes data about browser usage, websites that are visited, crash reports sent to Microsoft for product and service improvement.\r\n\r\nOn Windows 7/macOS, this policy controls sending required and optional data to Microsoft.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will default to the user's preference.\r\n\r\nPolicy options mapping:\r\n\r\n* Off (0) = Off (Not recommended)\r\n\r\n* RequiredData (1) = Required data\r\n\r\n* OptionalData (2) = Optional data\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_0","displayName":"Off (Not recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_1","displayName":"Required data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86.1~policy~microsoft_edge_diagnosticdata_diagnosticdata_2","displayName":"Optional data","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist","displayName":"Block access to a specified list of services and export targets in Collections","description":"List specific services and export targets that users can't access in the Collections feature in Microsoft Edge. This includes displaying additional data from Bing and exporting collections to Microsoft products or external partners.\r\n\r\nIf you enable this policy, services and export targets that match the given list are blocked.\r\n\r\nIf you don't configure this policy, no restrictions on the acceptable services and export targets are enforced.\r\n\r\nPolicy options mapping:\r\n\r\n* pinterest_suggestions (pinterest_suggestions) = Pinterest suggestions\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\npinterest_suggestions","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_collectionsservicesandexportsblocklist_collectionsservicesandexportsblocklistdesc","displayName":"Block access to a specified list of services and export targets in Collections (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting","displayName":"Default sensors setting","description":"Set whether websites can access and use sensors such as motion and light sensors. You can completely block or allow websites to get access to sensors.\r\n\r\nSetting the policy to 1 lets websites access and use sensors. Setting the policy to 2 denies access to sensors.\r\n\r\nYou can override this policy for specific URL patterns by using the 'SensorsAllowedForUrls' (Allow access to sensors on specific sites) and 'SensorsBlockedForUrls' (Block access to sensors on specific sites) policies.\r\n\r\nIf you don't configure this policy, websites can access and use sensors, and users can change this setting. This is the global default for 'SensorsAllowedForUrls' and 'SensorsBlockedForUrls'.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowSensors (1) = Allow sites to access sensors\r\n\r\n* BlockSensors (2) = Do not allow any site to access sensors\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting","displayName":"Default sensors setting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting_1","displayName":"Allow sites to access sensors","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultsensorssetting_defaultsensorssetting_2","displayName":"Do not allow any site to access sensors","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting","displayName":"Control use of the Serial API","description":"\r\nSet whether websites can access serial ports. You can completely block access or ask the user each time a website wants to get access to a serial port.\r\n\r\nSetting the policy to 3 lets websites ask for access to serial ports. Setting the policy to 2 denies access to serial ports.\r\n\r\nYou can override this policy for specific URL patterns by using the 'SerialAskForUrls' (Allow the Serial API on specific sites) and 'SerialBlockedForUrls' (Block the Serial API on specific sites) policies.\r\n\r\nIf you don't configure this policy, by default, websites can ask users whether they can access a serial port, and users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockSerial (2) = Do not allow any site to request access to serial ports via the Serial API\r\n\r\n* AskSerial (3) = Allow sites to ask for user permission to access a serial port\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting","displayName":"Control use of the Serial API (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting_2","displayName":"Do not allow any site to request access to serial ports via the Serial API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_defaultserialguardsetting_defaultserialguardsetting_3","displayName":"Allow sites to ask for user permission to access a serial port","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage","description":"This policy controls sending required and optional diagnostic data about browser usage to Microsoft.\r\n\r\nRequired diagnostic data is collected to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\nOptional diagnostic data includes data about how you use the browser, websites you visit and crash reports to Microsoft for product and service improvement.\r\n\r\nUp to version 121, this policy is not supported on Windows 10 devices. To control this data collection on Windows 10 for 121 and previous, IT admins must use the Windows diagnostic data group policy. This policy will either be 'Allow Telemetry' or 'Allow Diagnostic Data', depending on the version of Windows. Learn more about Windows 10 diagnostic data collection: https://go.microsoft.com/fwlink/?linkid=2099569\r\n\r\nFor version 122 and later, this policy is supported on Windows 10 devices to allow controlling Microsoft Edge data collection separately from Windows 10 diagnostics data collection.\r\n\r\nUse one of the following settings to configure this policy:\r\n\r\n'Off' turns off required and optional diagnostic data collection. This option is not recommended.\r\n\r\n'RequiredData' sends required diagnostic data but turns off optional diagnostic data collection. Microsoft Edge will send required diagnostic data to keep Microsoft Edge secure, up to date and performing as expected.\r\n\r\n'OptionalData' sends optional diagnostic data includes data about browser usage, websites that are visited, crash reports sent to Microsoft for product and service improvement.\r\n\r\nOn Windows 7/macOS, this policy controls sending required and optional data to Microsoft.\r\n\r\nIf you don't configure this policy or disable it, Microsoft Edge will default to the user's preference.\r\n\r\nPolicy options mapping:\r\n\r\n* Off (0) = Off (Not recommended)\r\n\r\n* RequiredData (1) = Required data\r\n\r\n* OptionalData (2) = Optional data\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata","displayName":"Send required and optional diagnostic data about browser usage (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_0","displayName":"Off (Not recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_1","displayName":"Required data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_diagnosticdata_diagnosticdata_2","displayName":"Optional data","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed","displayName":"Allow access to the Enterprise Mode Site List Manager tool","description":"Allows you to set whether Enterprise Mode Site List Manager is available to users.\r\n\r\nIf you enable this policy, users can see the Enterprise Mode Site List Manager nav button on edge://compat page, navigate to the tool and use it.\r\n\r\nIf you disable or don't configure this policy, users won't see the Enterprise Mode Site List Manager nav button and won't be able to use it.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_enterprisemodesitelistmanagerallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync","displayName":"Force synchronization of browser data and do not show the sync consent prompt","description":"Forces data synchronization in Microsoft Edge. This policy also prevents the user from turning sync off.\r\n\r\nIf you don't configure this policy, users will be able to turn sync on or off. If you enable this policy, users will not be able to turn sync off.\r\n\r\nFor this policy to work as intended,\r\n'BrowserSignin' (Browser sign-in settings) policy must not be configured, or must be set to enabled. If 'ForceSync' (Force synchronization of browser data and do not show the sync consent prompt) is set to disabled, then 'BrowserSignin' will not take affect.\r\n\r\n'SyncDisabled' (Disable synchronization of data using Microsoft sync services) must not be configured or must be set to False. If this is set to True, 'ForceSync' will not take affect.\r\n\r\n0 = Do not automatically start sync and show the sync consent (default)\r\n1 = Force sync to be turned on for Azure AD/Azure AD-Degraded user profile and do not show the sync consent prompt","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_forcesync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_insecureformswarningsenabled","displayName":"Enable warnings for insecure forms (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy controls the handling of insecure forms (forms submitted over HTTP) embedded in secure (HTTPS) sites in the browser.\r\nIf you enable this policy or don't set it, a full page warning will be shown when an insecure form is submitted. Additionally, a warning bubble will be shown next to the form fields when they are focused, and autofill will be disabled for those forms.\r\nIf you disable this policy, warnings will not be shown for insecure forms, and autofill will work normally.\r\n\r\nThis policy may be removed as soon as Edge 132. The feature is enabled by default since Edge 131.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_insecureformswarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_insecureformswarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed","displayName":"Allow Internet Explorer mode testing","description":"This policy is a replacement for the ie-mode-test flag policy. It lets users open an IE mode tab from the UI menu option.\r\n\r\n This setting works in conjunction with:\r\n 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'\r\n and\r\n 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy where the list has at least one entry.\r\n\r\n If you enable this policy, users can open IE mode tab from the UI option and navigate current site to an IE mode site.\r\n\r\n If you disable this policy, users can't see the UI option in the menu directly.\r\n\r\n If you don't configure this policy, you can set up the ie-mode-test flag manually.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_internetexplorerintegrationtestingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit","displayName":"Save cookies when Microsoft Edge closes","description":"When this policy is enabled, the specified set of cookies is exempt from deletion when the browser closes. This policy is only effective when:\r\n- The 'Cookies and other site data' toggle is configured in Settings/Privacy and services/Clear browsing data on close or\r\n- The policy 'ClearBrowsingDataOnExit' (Clear browsing data when Microsoft Edge closes) is enabled or\r\n- The policy 'DefaultCookiesSetting' (Configure cookies) is set to 'Keep cookies for the duration of the session'.\r\n\r\nYou can define a list of sites, based on URL patterns, that will have their cookies preserved across sessions.\r\n\r\nNote: Users can still edit the cookie site list to add or remove URLs. However, they can't remove URLs that have been added by an Admin.\r\n\r\nIf you enable this policy, the list of cookies won't be cleared when the browser closes.\r\n\r\nIf you disable or don't configure this policy, the user's personal configuration is used.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_savecookiesonexit_savecookiesonexitdesc","displayName":"Save cookies when Microsoft Edge closes (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls","displayName":"Allow access to sensors on specific sites","description":"Define a list of sites, based on URL patterns, that can access and use sensors such as motion and light sensors.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSensorsSetting' (Default sensors setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SensorsBlockedForUrls' (Block access to sensors on specific sites) policy (if there is a match), the 'DefaultSensorsSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SensorsBlockedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsallowedforurls_sensorsallowedforurlsdesc","displayName":"Allow access to sensors on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls","displayName":"Block access to sensors on specific sites","description":"Define a list of sites, based on URL patterns, that can't access sensors such as motion and light sensors.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSensorsSetting' (Default sensors setting) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SensorsAllowedForUrls' (Allow access to sensors on specific sites) policy (if there is a match), the 'DefaultSensorsSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SensorsAllowedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid URL patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_sensorsblockedforurls_sensorsblockedforurlsdesc","displayName":"Block access to sensors on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls","displayName":"Allow the Serial API on specific sites","description":"Define a list of sites, based on URL patterns, that can ask the user for access to a serial port.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSerialGuardSetting' (Control use of the Serial API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SerialBlockedForUrls' (Block the Serial API on specific sites) policy (if there is a match), the 'DefaultSerialGuardSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns defined in this policy can't conflict with those configured in the 'SerialBlockedForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialaskforurls_serialaskforurlsdesc","displayName":"Allow the Serial API on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls","displayName":"Block the Serial API on specific sites","description":"Define a list of sites, based on URL patterns, that can't ask the user to grant them access to a serial port.\r\n\r\nIf you don't configure this policy, the global default value from the 'DefaultSerialGuardSetting' (Control use of the Serial API) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor URL patterns that don't match this policy, the following order of precedence is used: The 'SerialAskForUrls' (Allow the Serial API on specific sites) policy (if there is a match), the 'DefaultSerialGuardSetting' policy (if set), or the user's personal settings.\r\n\r\nThe URL patterns in this policy can't conflict with those configured in the 'SerialAskForUrls' policy. You can't allow and block a URL.\r\n\r\nFor detailed information about valid URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_serialblockedforurls_serialblockedforurlsdesc","displayName":"Block the Serial API on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled","displayName":"Enable the User-Agent Client Hints feature (obsolete)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nThis policy is deprecated because it's only intended to be a short-term mechanism to give enterprises more time to update their web content if and when it's found to be incompatible with the User-Agent Client Hints feature. It won't work in Microsoft Edge version 89.\r\n\r\nWhen enabled the User-Agent Client Hints feature sends granular request headers that provide information about the user browser (for example, the browser version) and environment (for example, the system architecture).\r\n\r\nThis is an additive feature, but the new headers may break some websites that restrict the characters that requests may contain.\r\n\r\nIf you enable or don't configure this policy, the User-Agent Client Hints feature is enabled. If you disable this policy, this feature is unavailable.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_useragentclienthintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback","description":"Following each major version update, Microsoft Edge will create a snapshot of parts of the user's browsing data to use in case of a later emergency that requires a temporary version rollback. If a temporary rollback is performed to a version for which a user has a corresponding snapshot, the data in the snapshot is restored. This lets users keep settings such as bookmarks and autofill data.\r\n\r\nIf you don't set this policy, the default value of 3 snapshots is used.\r\n\r\nIf you set this policy, old snapshots are deleted as needed to respect the limit you set. If you set this policy to 0, no snapshots are taken.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge_userdatasnapshotretentionlimit_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading","description":"If you set this policy to 3, websites can ask for read access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.\r\n\r\nIf you don't set this policy, websites can ask for access. Users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockFileSystemRead (2) = Don't allow any site to request read access to files and directories via the File System API\r\n\r\n* AskFileSystemRead (3) = Allow sites to ask the user to grant read access to files and directories via the File System API\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_2","displayName":"Don't allow any site to request read access to files and directories via the File System API","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_3","displayName":"Allow sites to ask the user to grant read access to files and directories via the File System API","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing","description":"If you set this policy to 3, websites can ask for write access to the host operating system's filesystem using the File System API. If you set this policy to 2, access is denied.\r\n\r\nIf you don't set this policy, websites can ask for access. Users can change this setting.\r\n\r\nPolicy options mapping:\r\n\r\n* BlockFileSystemWrite (2) = Don't allow any site to request write access to files and directories\r\n\r\n* AskFileSystemWrite (3) = Allow sites to ask the user to grant write access to files and directories\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_2","displayName":"Don't allow any site to request write access to files and directories","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_3","displayName":"Allow sites to ask the user to grant write access to files and directories","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadaskforurls","displayName":"Allow read access via the File System API on these sites","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nLeaving the policy unset means 'DefaultFileSystemReadGuardSetting' (Control use of the File System API for reading) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemReadBlockedForUrls' (Block read access via the File System API on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadaskforurls_filesystemreadaskforurlsdesc","displayName":"Allow read access via the File System API on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadblockedforurls","displayName":"Block read access via the File System API on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nIf you don't set this policy, 'DefaultFileSystemReadGuardSetting' (Control use of the File System API for reading) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemReadAskForUrls' (Allow read access via the File System API on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemreadblockedforurls_filesystemreadblockedforurlsdesc","displayName":"Block read access via the File System API on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls","displayName":"Allow write access to files and directories on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nIf you don't set this policy, 'DefaultFileSystemWriteGuardSetting' (Control use of the File System API for writing) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemWriteBlockedForUrls' (Block write access to files and directories on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteaskforurls_filesystemwriteaskforurlsdesc","displayName":"Allow write access to files and directories on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls","displayName":"Block write access to files and directories on these sites","description":"If you set this policy, you can list the URL patterns that specify which sites can't ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nIf you don't set this policy, 'DefaultFileSystemWriteGuardSetting' (Control use of the File System API for writing) applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with 'FileSystemWriteAskForUrls' (Allow write access to files and directories on these sites). Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information about valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_filesystemwriteblockedforurls_filesystemwriteblockedforurlsdesc","displayName":"Block write access to files and directories on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled","displayName":"Choose whether users can receive customized background images and text, suggestions, notifications,\r\nand tips for Microsoft services","description":"Choose whether users can receive customized background images and text, suggestions, notifications, and tips for Microsoft services.\r\n\r\nIf you enable or don't configure this setting, spotlight experiences and recommendations are turned on.\r\n\r\nIf you disable this setting, spotlight experiences and recommendations are turned off.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~contentsettings_spotlightexperiencesandrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes","displayName":"Configure the background types allowed for the new tab page layout","description":"You can configure which types of background image that are allowed on the new tab page layout in Microsoft Edge.\r\n\r\nIf you don't configure this policy, all background image types on the new tab page are enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* DisableImageOfTheDay (1) = Disable daily background image type\r\n\r\n* DisableCustomImage (2) = Disable custom background image type\r\n\r\n* DisableAll (3) = Disable all background image types\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes","displayName":"New tab page experience (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_1","displayName":"Disable daily background image type","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_2","displayName":"Disable custom background image type","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev86~policy~microsoft_edge~startup_newtabpageallowedbackgroundtypes_newtabpageallowedbackgroundtypes_3","displayName":"Disable all background image types","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users","description":"If FriendlyURLs are enabled, Microsoft Edge will compute additional representations of the URL and place them on the clipboard.\r\n\r\nThis policy configures what format will be pasted when the user pastes in external applications, or inside Microsoft Edge without the 'Paste as' context menu item.\r\n\r\nIf configured, this policy makes a choice on behalf of the user. The options in edge://settings/shareCopyPaste will be grayed out, and the options in the 'Paste As' context menu will not be available.\r\n\r\n* Not configured = The user will be able to choose their preferred paste format. By default, this is set to the friendly URL format. The 'Paste As' menu will be available in Microsoft Edge.\r\n\r\n* 1 = No additional formats will be stored on the clipboard. There will be no 'Paste as' context menu item in Microsoft Edge and the only format available to paste will be the plain text URL format. Effectively, the friendly URL feature will be disabled.\r\n\r\n* 3 = The user will get a friendly URL whenever they paste into surfaces that accept rich text. The plain URL will still be available for non-rich surfaces. There will be no 'Paste As' menu in Microsoft Edge.\r\n\r\n* 4 = (Not currently used)\r\n\r\nThe richer formats may not be well-supported in some paste destinations and/or websites. In these scenarios, the plain URL option is recommended when configuring this policy.\r\n\r\nThe recommended policy is available in Microsoft Edge 105 or later.\r\n\r\nPolicy options mapping:\r\n\r\n* PlainText (1) = The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.\r\n\r\n* TitledHyperlink (3) = Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.\r\n\r\n* WebPreview (4) = Coming soon. If set, behaves the same as 'Plain URL'.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat","displayName":"Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_1","displayName":"The plain URL without any extra information, such as the page's title. This is the recommended option when this policy is configured. For more information, see the description.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_3","displayName":"Titled Hyperlink: A hyperlink that points to the copied URL, but whose visible text is the title of the destination page. This is the Friendly URL format.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_configurefriendlyurlformat_configurefriendlyurlformat_4","displayName":"Coming soon. If set, behaves the same as 'Plain URL'.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_edgeshoppingassistantenabled","displayName":"Shopping in Microsoft Edge Enabled","description":"This policy lets users compare the prices of a product they are looking at, get coupons from the website they're on, or auto-apply coupons during checkout.\r\n\r\nIf you enable or don't configure this policy, shopping features such as price comparison and coupons will be automatically applied for retail domains. Coupons for the current retailer and prices from other retailers will be fetched from a server.\r\n\r\nIf you disable this policy shopping features such as price comparison and coupons will not be automatically found for retail domains.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_edgeshoppingassistantenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_edgeshoppingassistantenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled","displayName":"Hide the one-time redirection dialog and the banner on Microsoft Edge","description":"This policy gives an option to disable one-time redirection dialog and the banner. When this policy is enabled, users will not see both the one-time dialog and the banner.\r\nUsers will continue to be redirected to Microsoft Edge when they encounter an incompatible website on Internet Explorer, but their browsing data will not be imported.\r\n\r\n- If you enable this policy the one-time redirection dialog and banner will never be shown to users. Users' browsing data will not be imported when a redirection happens.\r\n\r\n- If you disable or don't set this policy, the redirection dialog will be shown on the first redirection and the persistent redirection banner will be shown to users on sessions that begin with a redirection. Users' browsing data will be imported every time user encounters such redirection (ONLY IF user consents to it on the one-time dialog).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_hideinternetexplorerredirectuxforincompatiblesitesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended","displayName":"Shopping in Microsoft Edge Enabled","description":"This policy lets users compare the prices of a product they are looking at, get coupons from the website they're on, or auto-apply coupons during checkout.\r\n\r\nIf you enable or don't configure this policy, shopping features such as price comparison and coupons will be automatically applied for retail domains. Coupons for the current retailer and prices from other retailers will be fetched from a server.\r\n\r\nIf you disable this policy shopping features such as price comparison and coupons will not be automatically found for retail domains.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_edgeshoppingassistantenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge","description":"This setting lets you specify whether Internet Explorer will redirect navigations to sites that require a modern browser to Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Sitelist', beginning in M87, Internet Explorer will redirect sites that require a modern browser to Microsoft Edge.\r\n\r\nMicrosoft provides a list of public sites that require such redirection, such as https://mail.yahoo.com.\r\n\r\nWhen a site is redirected from Internet Explorer to Microsoft Edge, the Internet Explorer tab that began loading that site is closed if it had no prior content. Otherwise, it is navigated to a Microsoft help page explaining why the site was redirected to Microsoft Edge.\r\n\r\nWhen Microsoft Edge is launched to load a site from IE, an information bar is shown to the user explaining that the site works best in a modern browser.\r\n\r\nIf you set this policy to 'Disable', Internet Explorer will not redirect any traffic to Microsoft Edge.\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715\r\n\r\nPolicy options mapping:\r\n\r\n* Disable (0) = Disable\r\n\r\n* Sitelist (1) = Redirect sites based on the incompatible sites sitelist\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Prevent redirection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended_redirectsitesfrominternetexplorerredirectmode_recommended_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Redirect sites based on the incompatible sites sitelist","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended","displayName":"Enable Password reveal button","description":"Lets you configure the default display of the browser password reveal button for password input fields on websites.\r\n\r\nIf you enable or don't configure this policy, the browser user setting defaults to displaying the password reveal button.\r\n\r\nIf you disable this policy, the browser user setting won't display the password reveal button.\r\n\r\nFor accessibility, users can change the browser setting from the default policy.\r\n\r\nThis policy only affects the browser password reveal button, it doesn't affect websites' custom reveal buttons.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_recommended~passwordmanager_recommended_passwordrevealenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall","displayName":"Prevent install of the BHO to redirect incompatible sites from Internet Explorer to Microsoft Edge","description":"This setting lets you specify whether to block the install of the Browser Helper Object (BHO) that enables redirecting incompatible sites from Internet Explorer to Microsoft Edge for sites that require a modern browser.\r\n\r\nIf you enable this policy, the BHO will not be installed. If it is already installed it will be uninstalled on the next Microsoft Edge update.\r\n\r\nIf this policy is not configured or is disabled, the BHO will be installed.\r\n\r\nThe BHO is required for incompatible site redirection to occur, however whether redirection occurs or not is also controlled by 'RedirectSitesFromInternetExplorerRedirectMode' (Redirect incompatible sites from Internet Explorer to Microsoft Edge).\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerpreventbhoinstall_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge","description":"This setting lets you specify whether Internet Explorer will redirect navigations to sites that require a modern browser to Microsoft Edge.\r\n\r\nIf you don't configure this policy or set it to 'Sitelist', beginning in M87, Internet Explorer will redirect sites that require a modern browser to Microsoft Edge.\r\n\r\nMicrosoft provides a list of public sites that require such redirection, such as https://mail.yahoo.com.\r\n\r\nWhen a site is redirected from Internet Explorer to Microsoft Edge, the Internet Explorer tab that began loading that site is closed if it had no prior content. Otherwise, it is navigated to a Microsoft help page explaining why the site was redirected to Microsoft Edge.\r\n\r\nWhen Microsoft Edge is launched to load a site from IE, an information bar is shown to the user explaining that the site works best in a modern browser.\r\n\r\nIf you set this policy to 'Disable', Internet Explorer will not redirect any traffic to Microsoft Edge.\r\n\r\nFor more information about this policy see https://go.microsoft.com/fwlink/?linkid=2141715\r\n\r\nPolicy options mapping:\r\n\r\n* Disable (0) = Disable\r\n\r\n* Sitelist (1) = Redirect sites based on the incompatible sites sitelist\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode","displayName":"Redirect incompatible sites from Internet Explorer to Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode_0","displayName":"Prevent redirection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_redirectsitesfrominternetexplorerredirectmode_redirectsitesfrominternetexplorerredirectmode_1","displayName":"Redirect sites based on the incompatible sites sitelist","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled","displayName":"Configure Speech Recognition","description":"Set whether websites can use the W3C Web Speech API to recognize speech from the user. The Microsoft Edge implementation of the Web Speech API uses Azure Cognitive Services, so voice data will leave the machine.\r\n\r\nIf you enable or don't configure this policy, web-based applications that use the Web Speech API can use Speech Recognition.\r\n\r\nIf you disable this policy, Speech Recognition is not available through the Web Speech API.\r\n\r\nRead more about this feature here:\r\nSpeechRecognition API: https://go.microsoft.com/fwlink/?linkid=2143388\r\nCognitive Services: https://go.microsoft.com/fwlink/?linkid=2143680","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_speechrecognitionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled","displayName":"Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge","description":"Note: The web capture feature is rebranded to \"Screenshot\".\r\n\r\nEnables the Screenshot feature in Microsoft Edge. This feature lets users capture web and PDF content, and annotate captures using inking tools. Users can also do a visual image search based on the captured content.\r\n\r\nIf you enable or don't configure this policy, the Screenshot option appears in the context menu, the Settings and more menu, and by using the keyboard shortcut, CTRL+SHIFT+S.\r\n\r\nIf you disable this policy, users can't access this feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge_webcaptureenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled","displayName":"Configure address bar editing for kiosk mode public browsing experience","description":"This policy only applies to Microsoft Edge kiosk mode while using the public browsing experience.\r\n\r\nIf you enable or don't configure this policy, users can change the URL in the address bar.\r\n\r\nIf you disable this policy, it prevents users from changing the URL in the address bar.\r\n\r\nFor detailed information on configuring kiosk Mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskaddressbareditingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit","displayName":"Delete files downloaded as part of kiosk session when Microsoft Edge closes","description":"This policy only applies to Microsoft Edge kiosk mode.\r\n\r\nIf you enable this policy, files downloaded as part of the kiosk session are deleted each time Microsoft Edge closes.\r\n\r\nIf you disable this policy or don't configure it, files downloaded as part of the kiosk session are not deleted when Microsoft Edge closes.\r\n\r\nFor detailed information on configuring kiosk Mode, see https://go.microsoft.com/fwlink/?linkid=2137578.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~kioskmode_kioskdeletedownloadsonexit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault","displayName":"Default printing page size","description":"Overrides default printing page size.\r\n\r\nname should contain one of the listed formats or 'custom' if required paper size is not in the list. If 'custom' value is provided custom_size property should be specified. It describes the desired height and width in micrometers. Otherwise custom_size property shouldn't be specified. Policy that violates these rules is ignored.\r\n\r\nIf the page size is unavailable on the printer chosen by the user this policy is ignored.\r\n\r\nExample value:\r\n\r\n{\r\n \"custom_size\": {\r\n \"height\": 297000,\r\n \"width\": 210000\r\n },\r\n \"name\": \"custom\"\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"custom_size\": {\"height\": 297000, \"width\": 210000}, \"name\": \"custom\"}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev87~policy~microsoft_edge~printing_printingpapersizedefault_printingpapersizedefault","displayName":"Default printing page size (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge_targetblankimpliesnoopener","displayName":"Do not set window.opener for links targeting _blank (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 102.\r\n\r\nIf you enable this policy or leave it unset, the window.opener property is set to null unless the anchor specifies rel=\"opener\".\r\n\r\nIf you disable this policy, popups that target _blank are permitted to access (via JavaScript) the page that requested to open the popup.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge_targetblankimpliesnoopener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge_targetblankimpliesnoopener_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled","displayName":"Allow Basic authentication for HTTP","description":"If you enable this policy or leave it unset, Basic authentication challenges received over non-secure HTTP will be allowed.\r\n\r\nIf you disable this policy, non-secure HTTP requests from the Basic authentication scheme are blocked, and only secure HTTPS is allowed.\r\n\r\nThis policy setting is ignored (and Basic is always forbidden) if the 'AuthSchemes' (Supported authentication schemes) policy is set and does not include Basic.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.0.705.23~policy~microsoft_edge~httpauthentication_basicauthoverhttpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended","displayName":"Set the background tab inactivity timeout for sleeping tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if sleeping tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure sleeping tabs) is enabled or is not configured and the user has enabled the sleeping tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 30Seconds (30) = 30 seconds of inactivity\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_30","displayName":"30 seconds of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if sleeping tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure sleeping tabs) is enabled or is not configured and the user has enabled the sleeping tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 30Seconds (30) = 30 seconds of inactivity\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for sleeping tabs (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_30","displayName":"30 seconds of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88.1~policy~microsoft_edge_sleepingtabstimeout_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed","displayName":"Allow launching of local files in Internet Explorer mode","description":"This policy controls the availability of the --ie-mode-file-url command line argument which is used to launch Microsoft Edge with a local file specified on the command line into Internet Explorer mode.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nIf you set this policy to true, or don't configure it, the user is allowed to use the --ie-mode-file-url command line argument for launching local files in Internet Explorer mode.\r\n\r\nIf you set this policy to false, the user isn't allowed to use the --ie-mode-file-url command line argument for launching local files in Internet Explorer mode.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist","displayName":"Open local files in Internet Explorer mode file extension allow list","description":"This policy limits which file:// URLs are allowed to be launched into Internet Explorer mode based on file extension.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nWhen a file:// URL is requested to launch in Internet Explorer mode, the file extension of the URL must be present in this list in order for the URL to be allowed to launch in Internet Explorer mode. A URL which is blocked from opening in Internet Explorer mode will instead open in Edge mode.\r\n\r\nIf you set this policy to the special value \"*\" or don't configure it, all file extensions are allowed.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210\r\n\r\nExample value:\r\n\r\n.mht\r\n.pdf\r\n.vsdx","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileextensionallowlist_internetexplorerintegrationlocalfileextensionallowlistdesc","displayName":"Open local files in Internet Explorer mode file extension allow list (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu","displayName":"Show context menu to open a link in Internet Explorer mode","description":"This policy controls the visibility of the 'Open link in new Internet Explorer mode tab' option on the context menu for file:// links.\r\n\r\nThis setting works in conjunction with:\r\n'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) is set to 'IEMode'.\r\n\r\nIf you set this policy to true, the 'Open link in new Internet Explorer mode tab' context menu item will be available for file:// links.\r\n\r\nIf you set this policy to false or don't configure it, the context menu item will not be added.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_internetexplorerintegrationlocalfileshowcontextmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior","displayName":"Intranet Redirection Behavior","description":"This policy configures behavior for intranet redirection via DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nIf this policy isn't configured, the browser will use the default behavior of DNS interception checks and intranet redirect suggestions. In M88, they are enabled by default but will be disabled by default in the future release.\r\n\r\n'DNSInterceptionChecksEnabled' (DNS interception checks enabled) is a related policy that might also disable DNS interception checks. However, this policy is a more flexible version which might separately control intranet redirection infobars and might be expanded in the future.\r\nIf either 'DNSInterceptionChecksEnabled' or this policy make a request to disable interception checks, the checks will be disabled.\r\nIf DNS interception checks are disabled by this policy but 'GoToIntranetSiteForSingleWordEntryInAddressBar' (Force direct intranet site navigation instead of searching on single word entries in the Address Bar) is enabled, single word queries will still result in intranet navigations.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Use default browser behavior.\r\n\r\n* DisableInterceptionChecksDisableInfobar (1) = Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.\r\n\r\n* DisableInterceptionChecksEnableInfobar (2) = Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.\r\n\r\n* EnableInterceptionChecksEnableInfobar (3) = Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_0","displayName":"Use default browser behavior.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_1","displayName":"Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_2","displayName":"Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_intranetredirectbehavior_intranetredirectbehavior_3","displayName":"Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended","displayName":"Show Microsoft Rewards experiences","description":"Show Microsoft Rewards experience and notifications.\r\nIf you enable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.\r\n\r\nIf you disable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will not see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be disabled and toggled off.\r\n\r\nIf you don't configure this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended_showmicrosoftrewards_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~performance_recommended_startupboostenabled_recommended","displayName":"Enable startup boost","description":"Allows Microsoft Edge processes to start at OS sign-in and restart in background after the last browser window is closed.\r\n\r\nIf Microsoft Edge is running in background mode, the browser might not close when the last window is closed and the browser won't be restarted in background when the window closes. See the 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about what happens after configuring Microsoft Edge background mode behavior.\r\n\r\nIf you enable this policy, startup boost is turned on.\r\n\r\nIf you disable this policy, startup boost is turned off.\r\n\r\nIf you don't configure this policy, startup boost may initially be off or on. The user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about startup boost: https://go.microsoft.com/fwlink/?linkid=2147018","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~performance_recommended_startupboostenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~performance_recommended_startupboostenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended","displayName":"Block Sleeping Tabs on specific sites","description":"Define a list of sites, based on URL patterns, that are not allowed to be put to sleep by Sleeping Tabs.\r\n\r\nIf the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is disabled, this list is not used and no sites will be put to sleep automatically.\r\n\r\nIf you don't configure this policy, all sites will be eligible to be put to sleep unless the user's personal configuration blocks them.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsblockedforurls_recommended_sleepingtabsblockedforurlsdesc","displayName":"Block Sleeping Tabs on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended","displayName":"Configure Sleeping Tabs","description":"This policy setting lets you configure whether to turn on Sleeping Tabs. Sleeping Tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, Sleeping Tabs is turned on.\r\n\r\nIndividual sites may be blocked from being put to sleep by configuring the policy 'SleepingTabsBlockedForUrls' (Block Sleeping Tabs on specific sites).\r\n\r\nIf you enable this setting, Sleeping Tabs is turned on.\r\n\r\nIf you disable this setting, Sleeping Tabs is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Sleeping Tabs.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended","displayName":"Set the background tab inactivity timeout for Sleeping Tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if Sleeping Tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is enabled or is not configured and the user has enabled the Sleeping Tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_recommended~sleepingtabs_recommended_sleepingtabstimeout_recommended_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_showmicrosoftrewards","displayName":"Show Microsoft Rewards experiences","description":"Show Microsoft Rewards experience and notifications.\r\nIf you enable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.\r\n\r\nIf you disable this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will not see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be disabled and toggled off.\r\n\r\nIf you don't configure this policy:\r\n - Microsoft account users (excludes Azure AD accounts) in search and earn markets will see the Microsoft Rewards experience in their Microsoft Edge user profile.\r\n - The setting to enable Microsoft Rewards in Microsoft Edge settings will be enabled and toggled on.\r\n - The setting to enable Give mode will be enabled and respect the user's setting.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_showmicrosoftrewards_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_showmicrosoftrewards_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed","displayName":"Configures availability of a vertical layout for tabs on the side of the browser","description":"Configures whether a user can access an alternative layout where tabs are vertically aligned on the side of the browser instead of at the top.\r\nWhen there are several tabs open, this layout provides better tab viewing and management. There's better visibility of the site titles,\r\nit's easier to scan aligned icons, and there's more space to manage and close tabs.\r\n\r\nIf you disable this policy, then the vertical tab layout will not be available as an option for users.\r\n\r\nIf you enable or don't configure this policy, the tab layout will still be at the top, but a user has the option to turn on vertical tabs on the side.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_verticaltabsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols","displayName":"Allow legacy TLS/DTLS downgrade in WebRTC (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 120.\r\n\r\nIf you enable this policy, WebRTC peer connections can downgrade to obsolete\r\nversions of the TLS/DTLS (DTLS 1.0, TLS 1.0 and TLS 1.1) protocols.\r\nIf you disable or don't set this policy, these TLS/DTLS versions are\r\ndisabled.\r\n\r\nThis policy was removed in Microsoft Edge 121 and is ignored if set.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webrtcallowlegacytlsprotocols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed","displayName":"Enable the Search bar (deprecated)","description":"DEPRECATED: This policy is deprecated. It is currently supported but will become obsolete in a future release.\r\n\r\nEnables the search bar. When enabled, users can use the search bar to search the web from their desktop or from an application. The search bar provides a search box that shows web suggestions and opens all web searches in Microsoft Edge. The search box provides search (powered by Bing) and URL suggestions. The search bar can be launched from the \"More tools\" menu or jump list in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy:\r\nThe search bar will be automatically enabled for all profiles.\r\nThe option to enable the search bar at startup will be toggled on if the 'WebWidgetIsEnabledOnStartup' (Allow the Search bar at Windows startup) policy is enabled.\r\nIf the 'WebWidgetIsEnabledOnStartup' is disabled or not configured, the option to enable the search bar at startup will be toggled off.\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge \"More tools\" menu. Users can launch the search bar from \"More tools\".\r\nUsers will see the menu item to launch the search bar from the Microsoft Edge jump list menu. Users can launch the search bar from the Microsoft Edge jump list menu.\r\nThe search bar can be turned off by the \"Quit\" option in the System tray or by closing the search bar from the 3 dot menu. The search bar will be restarted on system reboot if auto-start is enabled.\r\n\r\n\r\nIf you disable this policy:\r\nThe search bar will be disabled for all profiles.\r\nThe option to launch the search bar from Microsoft Edge \"More tools\" menu will be disabled.\r\nThe option to launch the search bar from Microsoft Edge jump list menu will be disabled.\r\n\r\nThis policy is deprecated due to the deprecation of the Web widget's vertical layout. This policy will be made obsolete in 119 release.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup","displayName":"Allow the Search bar at Windows startup (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 119.\r\n\r\nThis policy is obsolete due to the deprecation of the Web widget, which is now known as Edge search bar. Admins should use SearchbarIsEnabledOnStartup for Edge search bar instead. Allows the Search bar to start running at Windows startup.\r\n\r\nIf you enable this policy the Search bar will start running at Windows startup by default. If the Search bar is disabled via 'WebWidgetAllowed' (Enable the Search bar) policy, this policy will not start the Search bar on Windows startup.\r\n\r\nIf you disable this policy, the Search bar will not start at Windows startup for all profiles. The option to start the Edge search bar at Windows startup will be disabled and toggled off in Microsoft Edge settings.\r\n\r\nIf you don't configure this policy, the Search bar will not start at Windows startup for all profiles. The option to start the Edge search bar at Windows startup will be toggled off in Microsoft Edge settings.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge_webwidgetisenabledonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions","displayName":"Blocks external extensions from being installed","description":"Control the installation of external extensions.\r\n\r\nIf you enable this setting, external extensions are blocked from being installed.\r\n\r\nIf you disable this setting or leave it unset, external extensions are allowed to be installed.\r\n\r\nExternal extensions and their installation are documented at [Alternate extension distribution methods](/microsoft-edge/extensions-chromium/developer-guide/alternate-distribution-options).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~extensions_blockexternalextensions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled","displayName":"Enable startup boost","description":"Allows Microsoft Edge processes to start at OS sign-in and restart in background after the last browser window is closed.\r\n\r\nIf Microsoft Edge is running in background mode, the browser might not close when the last window is closed and the browser won't be restarted in background when the window closes. See the 'BackgroundModeEnabled' (Continue running background apps after Microsoft Edge closes) policy for information about what happens after configuring Microsoft Edge background mode behavior.\r\n\r\nIf you enable this policy, startup boost is turned on.\r\n\r\nIf you disable this policy, startup boost is turned off.\r\n\r\nIf you don't configure this policy, startup boost may initially be off or on. The user can configure its behavior in edge://settings/system.\r\n\r\nLearn more about startup boost: https://go.microsoft.com/fwlink/?linkid=2147018","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~performance_startupboostenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist","displayName":"Disable printer types on the deny list","description":"The printer types on the deny list won't be discovered or have their capabilities fetched.\r\n\r\nPlacing all printer types on the deny list effectively disables printing, because there's no print destination for documents.\r\n\r\nIf you don't configure this policy, or the printer list is empty, all printer types are discoverable.\r\n\r\nPrinter destinations include extension printers and local printers. Extension printers are also known as print provider destinations, and include any destination that belongs to a Microsoft Edge extension.\r\nLocal printers are also known as native printing destinations, and include destinations available to the local machine and shared network printers.\r\n\r\nIn Microsoft version 93 or later, if you set this policy to 'pdf' it also disables the 'save as Pdf' option from the right click context menu.\r\n\r\nIn Microsoft version 103 or later, if you set this policy to 'onedrive' it also disables the 'save as Pdf (OneDrive)' option from print preview.\r\n\r\nPolicy options mapping:\r\n\r\n* privet (privet) = Zeroconf-based (mDNS + DNS-SD) protocol destinations\r\n\r\n* extension (extension) = Extension-based destinations\r\n\r\n* pdf (pdf) = The 'Save as PDF' destination. (93 or later, also disables from context menu)\r\n\r\n* local (local) = Local printer destinations\r\n\r\n* onedrive (onedrive) = Save as PDF (OneDrive) printer destinations. (103 or later)\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nlocal\r\nprivet","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~printing_printertypedenylist_printertypedenylistdesc","displayName":"Disable printer types on the deny list (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls","displayName":"Block Sleeping Tabs on specific sites","description":"Define a list of sites, based on URL patterns, that are not allowed to be put to sleep by Sleeping Tabs.\r\n\r\nIf the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is disabled, this list is not used and no sites will be put to sleep automatically.\r\n\r\nIf you don't configure this policy, all sites will be eligible to be put to sleep unless the user's personal configuration blocks them.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsblockedforurls_sleepingtabsblockedforurlsdesc","displayName":"Block Sleeping Tabs on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled","displayName":"Configure Sleeping Tabs","description":"This policy setting lets you configure whether to turn on Sleeping Tabs. Sleeping Tabs reduces CPU, battery, and memory usage by putting idle background tabs to sleep. Microsoft Edge uses heuristics to avoid putting tabs to sleep that do useful work in the background, such as display notifications, play sound, and stream video. By default, Sleeping Tabs is turned on.\r\n\r\nIndividual sites may be blocked from being put to sleep by configuring the policy 'SleepingTabsBlockedForUrls' (Block Sleeping Tabs on specific sites).\r\n\r\nIf you enable this setting, Sleeping Tabs is turned on.\r\n\r\nIf you disable this setting, Sleeping Tabs is turned off.\r\n\r\nIf you don't configure this setting, users can choose whether to use Sleeping Tabs.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs","description":"This policy setting lets you configure the timeout, in seconds, after which inactive background tabs will be automatically put to sleep if Sleeping Tabs is enabled. By default, this timeout is 7,200 seconds (2 hours).\r\n\r\nTabs are only put to sleep automatically when the policy 'SleepingTabsEnabled' (Configure Sleeping Tabs) is enabled or is not configured and the user has enabled the Sleeping Tabs setting.\r\n\r\nIf you don't configure this policy, users can choose the timeout value.\r\n\r\nPolicy options mapping:\r\n\r\n* 5Minutes (300) = 5 minutes of inactivity\r\n\r\n* 15Minutes (900) = 15 minutes of inactivity\r\n\r\n* 30Minutes (1800) = 30 minutes of inactivity\r\n\r\n* 1Hour (3600) = 1 hour of inactivity\r\n\r\n* 2Hours (7200) = 2 hours of inactivity\r\n\r\n* 3Hours (10800) = 3 hours of inactivity\r\n\r\n* 6Hours (21600) = 6 hours of inactivity\r\n\r\n* 12Hours (43200) = 12 hours of inactivity\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout","displayName":"Set the background tab inactivity timeout for Sleeping Tabs (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_300","displayName":"5 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_900","displayName":"15 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_1800","displayName":"30 minutes of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_3600","displayName":"1 hour of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_7200","displayName":"2 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_10800","displayName":"3 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_21600","displayName":"6 hours of inactivity","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev88~policy~microsoft_edge~sleepingtabs_sleepingtabstimeout_sleepingtabstimeout_43200","displayName":"12 hours of inactivity","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings","description":"Configures browsing data lifetime settings for Microsoft Edge.\r\nThis policy controls the lifetime of selected browsing data. This policy has no effect if Sync is enabled.\r\nThe available data types are the 'browsing_history', 'download_history', 'cookies_and_other_site_data', 'cached_images_and_files', 'password_signin', 'autofill', 'site_settings' and 'hosted_app_data'.\r\nMicrosoft Edge will regularly remove data of selected types that is older than 'time_to_live_in_hours'. Because data deletion only happens at certain intervals, some data might be kept slightly longer but never more than twice its expected 'time_to_live_in_hours'.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"data_types\": [\r\n \"browsing_history\"\r\n ], \r\n \"time_to_live_in_hours\": 24\r\n }, \r\n {\r\n \"data_types\": [\r\n \"password_signin\", \r\n \"autofill\"\r\n ], \r\n \"time_to_live_in_hours\": 12\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_browsingdatalifetime_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages","displayName":"Define an ordered list of preferred languages that websites should display in if the site supports the language","description":"Configures the language variants that Microsoft Edge sends to websites as part of the Accept-Language request HTTP header and prevents users from adding, removing, or changing the order of preferred languages in Microsoft Edge settings. Users who want to change the languages Microsoft Edge displays in or offers to translate pages to will be limited to the languages configured in this policy.\r\n\r\nIf you enable this policy, websites will appear in the first language in the list that they support unless other site-specific logic is used to determine the display language. The language variants defined in this policy override the languages configured as part of the 'SpellcheckLanguage' (Enable specific spellcheck languages) policy.\r\n\r\nIf you don't configure or disable this policy, Microsoft Edge sends websites the user-specified preferred languages as part of the Accept-Language request HTTP header.\r\n\r\nFor detailed information on valid language variants, see https://go.microsoft.com/fwlink/?linkid=2148854.\r\n\r\nExample value: en-US,fr,es","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_definepreferredlanguages_definepreferredlanguages","displayName":"Define an ordered list of preferred languages that websites should display in if the site supports the language (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended","displayName":"Block smart actions for a list of services","description":"List specific services, such as PDFs, that don't show smart actions. (Smart actions are actions like \"define\" which are available in full and mini context menus in Microsoft Edge.)\r\n\r\nIf you enable the policy: :\r\n - The smart action in the mini and full context menu will be disabled for all profiles for services that match the given list.\r\n - Users will not see the smart action in the mini and full context menu on text selection for services that match the given list.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be disabled for services that match the given list.\r\n\r\nIf you disable or don't configure this policy:\r\n - The smart action in the mini and full context menu will be enabled for all profiles.\r\n - Users will see the smart action in the mini and full context menu on text selection.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* smart_actions_pdf (smart_actions_pdf) = Smart actions in PDF\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nsmart_actions_pdf","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_recommended_smartactionsblocklist_recommended_smartactionsblocklistdesc","displayName":"Block smart actions for a list of services (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled","displayName":"Allow feature recommendations and browser assistance notifications from Microsoft Edge","description":"This setting controls the in-browser assistance notifications which are intended to help users get the most out of Microsoft Edge. This is done by recommending features and by helping them use browser features. These notifications take the form of dialog boxes, flyouts, coach marks and banners in the browser. An example of an assistance notification would be when a user has many tabs opened in the browser. In this instance Microsoft Edge may prompt the user to try out the vertical tabs feature which is designed to give better browser tab management.\r\n\r\nDisabling this policy will stop this message from appearing again even if the user has too many tabs open.\r\n Any features that have been disabled by a management policy are not suggested to users.\r\nIf you enable or don't configure this setting, users will receive recommendations or notifications from Microsoft Edge.\r\n If you disable this setting, users will not receive any recommendations or notifications from Microsoft Edge","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_showrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist","displayName":"Block smart actions for a list of services","description":"List specific services, such as PDFs, that don't show smart actions. (Smart actions are actions like \"define\" which are available in full and mini context menus in Microsoft Edge.)\r\n\r\nIf you enable the policy: :\r\n - The smart action in the mini and full context menu will be disabled for all profiles for services that match the given list.\r\n - Users will not see the smart action in the mini and full context menu on text selection for services that match the given list.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be disabled for services that match the given list.\r\n\r\nIf you disable or don't configure this policy:\r\n - The smart action in the mini and full context menu will be enabled for all profiles.\r\n - Users will see the smart action in the mini and full context menu on text selection.\r\n - In Microsoft Edge settings, the smart action in the mini and full context menu will be enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* smart_actions_pdf (smart_actions_pdf) = Smart actions in PDF\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\nsmart_actions_pdf","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge_smartactionsblocklist_smartactionsblocklistdesc","displayName":"Block smart actions for a list of services (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled","displayName":"Mobile App Management Enabled","description":"Allows the Microsoft Edge browser to retrieve policies from the Intune application management services and apply them to users' profiles.\r\n\r\nIf you enable this policy or don't configure it, Mobile App Management (MAM) Policies can be applied.\r\n\r\nIf you disable this policy, Microsoft Edge will not communicate with Intune to request MAM Policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~manageability_mamenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode","description":"Restricts background graphics printing mode. If this policy isn't set there's no restriction on printing background graphics.\r\n\r\nPolicy options mapping:\r\n\r\n* any (any) = Allow printing with and without background graphics\r\n\r\n* enabled (enabled) = Allow printing only with background graphics\r\n\r\n* disabled (disabled) = Allow printing only without background graphics\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_any","displayName":"Allow printing with and without background graphics","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_enabled","displayName":"Allow printing only with background graphics","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_disabled","displayName":"Allow printing only without background graphics","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode","description":"Overrides the last used setting for printing background graphics.\r\nIf you enable this setting, background graphics printing is enabled.\r\nIf you disable this setting, background graphics printing is disabled.\r\n\r\nPolicy options mapping:\r\n\r\n* enabled (enabled) = Enable background graphics printing mode by default\r\n\r\n* disabled (disabled) = Disable background graphics printing mode by default\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_enabled","displayName":"Enable background graphics printing mode by default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev89~policy~microsoft_edge~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_disabled","displayName":"Disable background graphics printing mode by default","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on shutdown","description":"Controls the duration (in seconds) that keepalive requests are allowed to prevent the browser from completing its shutdown.\r\n\r\nIf you configure this policy, the browser will block completing shutdown while it processes any outstanding keepalive requests (see https://fetch.spec.whatwg.org/#request-keepalive-flag) up to the maximum period of time specified by this policy.\r\n\r\nIf you disable or don't configure this policy, the default value of 0 seconds is used and outstanding keepalive requests will be immediately cancelled during browser shutdown.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_fetchkeepalivedurationsecondsonshutdown_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on shutdown: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin","displayName":"Sets managed configuration values for websites to specific origins","description":"Setting this policy defines the return value of Managed Configuration API for given origin.\r\n\r\nManaged Configuration API is a key-value configuration that can be accessed via navigator.device.getManagedConfiguration() javascript call. This API is only available to origins which correspond to force-installed web applications via 'WebAppInstallForceList' (Configure list of force-installed Web Apps).\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"managed_configuration_hash\": \"asd891jedasd12ue9h\",\r\n \"managed_configuration_url\": \"https://static.contoso.com/configuration.json\",\r\n \"origin\": \"https://www.contoso.com\"\r\n },\r\n {\r\n \"managed_configuration_hash\": \"djio12easd89u12aws\",\r\n \"managed_configuration_url\": \"https://static.contoso.com/configuration2.json\",\r\n \"origin\": \"https://www.example.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_managedconfigurationperorigin_managedconfigurationperorigin","displayName":"Sets managed configuration values for websites to specific origins (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled","displayName":"Manage QuickView Office files capability in Microsoft Edge","description":"Allows you to set whether users can view publicly accessible Office files on the web that aren't on OneDrive or SharePoint. (For example: Word documents, PowerPoint presentations, and Excel spreadsheets)\r\n\r\nIf you enable or don't configure this policy, these files can be viewed in Microsoft Edge using Office Viewer instead of downloading the files.\r\n\r\nIf you disable this policy, these files will be downloaded to be viewed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_quickviewofficefilesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended","displayName":"Windows Hello For HTTP Auth Enabled","description":"Indicates if Windows Credential UI should be used to respond to NTLM and Negotiate authentication challenges.\r\n\r\nIf you disable this policy, a basic username and password prompt will be used to respond to NTLM and Negotiate challenges. If you enable or don't configure this policy, Windows Credential UI will be used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_recommended~httpauthentication_recommended_windowshelloforhttpauthenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins","displayName":"Allow users to proceed from the HTTPS warning page for specific origins","description":"Microsoft Edge shows a warning page when users visit sites that have SSL errors.\r\n\r\nIf you enable or don't configure the 'SSLErrorOverrideAllowed' (Allow users to proceed from the HTTPS warning page) policy, this policy does nothing.\r\n\r\nIf you disable the 'SSLErrorOverrideAllowed' policy, configuring this policy lets you configure a list of origin patterns for sites where users can continue to click through SSL error pages. Users can't click through SSL error pages on origins that are not on this list.\r\n\r\nIf you don't configure this policy, the 'SSLErrorOverrideAllowed' policy applies for all sites.\r\n\r\nFor detailed information about valid origin patterns, see https://go.microsoft.com/fwlink/?linkid=2095322. * is not an accepted value for this policy. This policy only matches based on origin, so any path or query in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge_sslerroroverrideallowedfororigins_sslerroroverrideallowedfororiginsdesc","displayName":"Allow users to proceed from the HTTPS warning page for specific origins (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled","displayName":"Application Guard Favorites Sync Enabled","description":"This policy allows Microsoft Edge computers/devices that have application guard enabled to sync favorites from the host to the container so the favorites match.\r\n\r\nIf 'ManagedFavorites' (Configure favorites) are configured, those favorites will also be synced to the container.\r\n\r\nIf you enable this policy, editing favorites in the container is disabled. So, the add favorites and add favorites folder buttons will be blurred out in the UI of the container browser.\r\n\r\nIf you disable or don't configure this policy, favorites on the host will not be shared to the container.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~applicationguard_applicationguardfavoritessyncenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled","displayName":"Windows Hello For HTTP Auth Enabled","description":"Indicates if Windows Credential UI should be used to respond to NTLM and Negotiate authentication challenges.\r\n\r\nIf you disable this policy, a basic username and password prompt will be used to respond to NTLM and Negotiate challenges. If you enable or don't configure this policy, Windows Credential UI will be used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~httpauthentication_windowshelloforhttpauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode","displayName":"Print Rasterization Mode","description":"Controls how Microsoft Edge prints on Windows.\r\n\r\nWhen printing to a non-PostScript printer on Windows, sometimes print jobs need to be rasterized to print correctly.\r\n\r\nIf you set this policy to 'Full' or don't configure it, Microsoft Edge will do full page rasterization if necessary.\r\n\r\nIf you set this policy to 'Fast', Microsoft Edge will reduce the amount of rasterization which can help reduce print job sizes and increase printing speed.\r\n\r\nPolicy options mapping:\r\n\r\n* Full (0) = Full page rasterization\r\n\r\n* Fast (1) = Avoid rasterization if possible\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode","displayName":"Print Rasterization Mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode_0","displayName":"Full page rasterization","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev90~policy~microsoft_edge~printing_printrasterizationmode_printrasterizationmode_1","displayName":"Avoid rasterization if possible","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports","displayName":"Explicitly allowed network ports","description":"There is a list of restricted ports built into Microsoft Edge. Connections to these ports will fail. This policy allows bypassing that list. The set of ports is defined as a comma-separated list that outgoing connections should be permitted on.\r\n\r\nPorts are restricted to prevent Microsoft Edge from being used as a vector to exploit various network vulnerabilities. Setting this policy may expose your network to attacks. This policy is intended as a temporary workaround for error code \"ERR_UNSAFE_PORT\" while migrating a service running on a blocked port to a standard port (for example port 80 or 443).\r\n\r\nMalicious websites can easily detect that this policy is set, and for which ports, then use that information to target attacks.\r\n\r\nEach port listed in this policy is labeled with a date that it can be unblocked until. After that date the port will be restricted regardless of if it's specified by the value of this policy.\r\n\r\nLeaving the value empty or unset means that all restricted ports will be blocked. Invalid port values set through this policy will be ignored while valid ones will still be applied.\r\n\r\nThis policy overrides the \"--explicitly-allowed-ports\" command-line option.\r\n\r\nPolicy options mapping:\r\n\r\n* 554 (554) = port 554 (can be unblocked until 2021/10/15)\r\n\r\n* 10080 (10080) = port 10080 (can be unblocked until 2022/04/01)\r\n\r\n* 6566 (6566) = port 6566 (can be unblocked until 2021/10/15)\r\n\r\n* 989 (989) = port 989 (can be unblocked until 2022/02/01)\r\n\r\n* 990 (990) = port 990 (can be unblocked until 2022/02/01)\r\n\r\nUse the preceding information when configuring this policy.\r\n\r\nExample value:\r\n\r\n10080","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_explicitlyallowednetworkports_explicitlyallowednetworkportsdesc","displayName":"Explicitly allowed network ports (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_importstartuppagesettings","displayName":"Allow importing of startup page settings","description":"Allows users to import Startup settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the Startup settings are always imported.\r\n\r\nIf you disable this policy, startup settings are not imported at first run or at manual import.\r\n\r\nIf you don't configure this policy, startup settings are imported at first run, and users can choose whether to import this data manually by selecting browser settings option during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import startup settings on first run, but users can select or clear **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Microsoft Edge Legacy and Google Chrome (on Windows 7, 8, and 10) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_importstartuppagesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_importstartuppagesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_mathsolverenabled","displayName":"Let users snip a Math problem and get the solution with a step-by-step explanation in Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 125.\r\n\r\nThis policy is obsoleted because Math Solver is deprecated from Edge. This policy won't work in Microsoft Edge version 126. This policy lets you manage whether users can use the Math Solver tool in Microsoft Edge or not.\r\n\r\nIf you enable or don't configure the policy, then a user can take a snip of the Math problem and get the solution including a step-by-step explanation of the solution in a Microsoft Edge side pane.\r\n\r\nIf you disable the policy, then the Math Solver tool will be disabled and users will not be able to use it.\r\n\r\nNote: Setting the 'ComponentUpdatesEnabled' (Enable component updates in Microsoft Edge) policy to disabled will also disable the Math Solver component.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_mathsolverenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_mathsolverenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended","displayName":"Allow importing of startup page settings","description":"Allows users to import Startup settings from another browser into Microsoft Edge.\r\n\r\nIf you enable this policy, the Startup settings are always imported.\r\n\r\nIf you disable this policy, startup settings are not imported at first run or at manual import.\r\n\r\nIf you don't configure this policy, startup settings are imported at first run, and users can choose whether to import this data manually by selecting browser settings option during later browsing sessions.\r\n\r\nYou can set this policy as a recommendation. This means that Microsoft Edge will import startup settings on first run, but users can select or clear **browser settings** option during manual import.\r\n\r\n**Note**: This policy currently manages importing from Microsoft Edge Legacy and Google Chrome (on Windows 7, 8, and 10) browsers.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge_recommended_importstartuppagesettings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled","displayName":"Application Guard Traffic Identification","description":"If you enable or don't configure this policy, Application Guard will add an extra HTTP header (X-MS-ApplicationGuard-Initiated) to all outbound HTTP requests made from the Application Guard container.\r\n\r\nIf you disable this policy, the extra header is not added to the traffic.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~applicationguard_applicationguardtrafficidentificationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagecontentenabled","displayName":"Allow Microsoft content on the new tab page","description":"This policy applies for Microsoft Edge to all profile types, namely unsigned local user profiles, profiles signed in using a Microsoft Account, profiles signed in using Active Directory and profiles signed in using Microsoft Entra ID. The Enterprise new tab page for profiles signed in using Microsoft Entra ID can be configured in the M365 admin portal, but this policy setting takes precedence, so any M365 admin portal configurations will be ignored.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge displays Microsoft content on the new tab page. The user can choose different display options for the content. These options include, but aren't limited to: Content off, Content visible on scroll, Headings only, and Content visible. Enabling this policy doesn't force content to be visible - the user can keep setting their own preferred content position.\r\n\r\nIf you disable this policy, Microsoft Edge doesn't display Microsoft content on the new tab page, the Content control in the NTP settings flyout is disabled and set to \"Content off\", and the Layout control in the NTP settings flyout is disabled and set to \"Custom\".\r\n\r\nRelated policies: 'NewTabPageAllowedBackgroundTypes' (Configure the background types allowed for the new tab page layout), 'NewTabPageQuickLinksEnabled' (Allow quick links on the new tab page)","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagecontentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagecontentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled","displayName":"Allow quick links on the new tab page","description":"If you enable or don't configure this policy, Microsoft Edge displays quick links on the new tab page, and the user can interact with the control, turning quick links on and off. Enabling this policy does not force quick links to be visible - the user can continue to turn quick links on and off.\r\n\r\nIf you disable this policy, Microsoft Edge hides quick links on the new tab page and disables the quick links control in the NTP settings flyout.\r\n\r\nThis policy only applies for Microsoft Edge local user profiles, profiles signed in using a Microsoft Account, and profiles signed in using Active Directory. To configure the Enterprise new tab page for profiles signed in using Azure Active Directory, use the M365 admin portal.\r\n\r\nRelated policies: 'NewTabPageAllowedBackgroundTypes' (Configure the background types allowed for the new tab page layout), 'NewTabPageContentEnabled' (Allow Microsoft content on the new tab page)","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev91~policy~microsoft_edge~startup_newtabpagequicklinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_aadwebsitessousingthisprofileenabled","displayName":"Single sign-on for work or school sites using this profile enabled","description":"'Allow single sign-on for work or school sites using this profile' option allows non-AAD profiles to be able to use single sign-on for work or school sites using work or school credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-AAD profiles only.\r\n\r\nIf you disable this policy, non-AAD profiles will not be able to use SSO using other credentials present on the machine. This will also ensure that 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' is turned off.\r\n\r\nIf you enable this policy or don't configure it, non-AAD profiles will be able to use SSO using other credentials present on the machine and 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' will continue working.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_aadwebsitessousingthisprofileenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_aadwebsitessousingthisprofileenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault","displayName":"Configure Automatic HTTPS","description":"This policy lets you manage settings for 'AutomaticHttpsDefault' (Configure Automatic HTTPS), which switches connections from HTTP to HTTPS.\r\n\r\nThis feature helps protect against man-in-the-middle attacks by enforcing more secure connections, but users might experience more connection errors.\r\n\r\nNote: The 'UpgradeCapableDomains' configuration requires a component list, and will not upgrade these connections if 'ComponentUpdatesEnabled' (Enable component updates in Microsoft Edge) is set to 'Disabled'.\r\n\r\nIf you don't configure this policy, 'AutomaticHttpsDefault' will be enabled, and will only upgrade connections on domains likely to support HTTPS.\r\n\r\nPolicy options mapping:\r\n\r\n* DisableAutomaticHttps (0) = Automatic HTTPS functionality is disabled.\r\n\r\n* UpgradeCapableDomains (1) = Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.\r\n\r\n* AlwaysUpgrade (2) = All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault","displayName":"Configure Automatic HTTPS (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_0","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_1","displayName":"Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_automatichttpsdefault_automatichttpsdefault_2","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled","displayName":"Control use of the Headless Mode","description":"This policy setting lets you decide whether users can launch Microsoft Edge in headless mode.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge allows use of the headless mode.\r\n\r\nIf you disable this policy, Microsoft Edge denies use of the headless mode.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_headlessmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays","displayName":"Specify the number of days that a site remains on the local IE mode site list","description":"If the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or not configured, users will be able to tell Microsoft Edge to load specific pages in Internet Explorer mode for a limited number of days.\r\n\r\nYou can use this setting to determine how many days that configuration is remembered in the browser. After this period has elapsed, the individual page will no longer automatically load in IE mode.\r\n\r\nIf you disable the 'InternetExplorerIntegrationReloadInIEModeAllowed' policy, this policy has no effect.\r\n\r\nIf you disable or don't configure this policy, the default value of 30 days is used.\r\n\r\nIf you enable this policy, you must enter the number of days for which the sites are retained on the user's local site list in Microsoft Edge. The value can be from 0 to 90 days.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationlocalsitelistexpirationdays_internetexplorerintegrationlocalsitelistexpirationdays","displayName":"Specify the number of days that a site remains on the local IE mode site list: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationreloadiniemodeallowed","displayName":"Allow unconfigured sites to be reloaded in Internet Explorer mode","description":"This policy allows users to reload unconfigured sites (that are not configured in the Enterprise Mode Site List) in Internet Explorer mode when browsing in Microsoft Edge and a site requires Internet Explorer for compatibility.\r\n\r\nAfter a site has been reloaded in Internet Explorer mode, \"in-page\" navigations will stay in Internet Explorer mode (for example, a link, script, or form on the page, or a server-side redirect from another \"in-page\" navigation). Users can choose to exit from Internet Explorer mode, or Microsoft Edge will automatically exit from Internet Explorer mode when a navigation that isn't \"in-page\" occurs (for example, using the address bar, the back button, or a favorite link).\r\n\r\nUsers can also optionally tell Microsoft Edge to use Internet Explorer mode for the site in the future. This choice will be remembered for a length of time managed by the 'InternetExplorerIntegrationLocalSiteListExpirationDays' (Specify the number of days that a site remains on the local IE mode site list) policy.\r\n\r\nIf the 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) policy is set to 'IEMode', then sites explicitly configured by the 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy's site list to use Microsoft Edge can't be reloaded in Internet Explorer mode, and sites configured by the site list or by the 'SendIntranetToInternetExplorer' (Send all intranet sites to Internet Explorer) policy to use Internet Explorer mode can't exit from Internet Explorer mode.\r\n\r\nIf you enable this policy, users are allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nIf you disable this policy, users aren't allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nNote that if you enable this policy, it takes precedence over how you configured the 'InternetExplorerIntegrationTestingAllowed' (Allow Internet Explorer mode testing) policy, and that policy will be disabled.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationreloadiniemodeallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_internetexplorerintegrationreloadiniemodeallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended","displayName":"Single sign-on for work or school sites using this profile enabled","description":"'Allow single sign-on for work or school sites using this profile' option allows non-AAD profiles to be able to use single sign-on for work or school sites using work or school credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-AAD profiles only.\r\n\r\nIf you disable this policy, non-AAD profiles will not be able to use SSO using other credentials present on the machine. This will also ensure that 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' is turned off.\r\n\r\nIf you enable this policy or don't configure it, non-AAD profiles will be able to use SSO using other credentials present on the machine and 'Intelligent enablement of Single sign-on (SSO) for all Windows Azure Active Directory (Azure AD) accounts for users with a single non-Azure AD Microsoft Edge profile' will continue working.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_aadwebsitessousingthisprofileenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended","displayName":"Configure Automatic HTTPS","description":"This policy lets you manage settings for 'AutomaticHttpsDefault' (Configure Automatic HTTPS), which switches connections from HTTP to HTTPS.\r\n\r\nThis feature helps protect against man-in-the-middle attacks by enforcing more secure connections, but users might experience more connection errors.\r\n\r\nNote: The 'UpgradeCapableDomains' configuration requires a component list, and will not upgrade these connections if 'ComponentUpdatesEnabled' (Enable component updates in Microsoft Edge) is set to 'Disabled'.\r\n\r\nIf you don't configure this policy, 'AutomaticHttpsDefault' will be enabled, and will only upgrade connections on domains likely to support HTTPS.\r\n\r\nPolicy options mapping:\r\n\r\n* DisableAutomaticHttps (0) = Automatic HTTPS functionality is disabled.\r\n\r\n* UpgradeCapableDomains (1) = Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.\r\n\r\n* AlwaysUpgrade (2) = All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault","displayName":"Configure Automatic HTTPS (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_0","displayName":"Automatic HTTPS functionality is disabled.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_1","displayName":"Navigations delivered over HTTP are switched to HTTPS, only on domains likely to support HTTPS.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_automatichttpsdefault_recommended_automatichttpsdefault_2","displayName":"All navigations delivered over HTTP are switched to HTTPS. Connection errors might occur more often.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended","displayName":"Allow unconfigured sites to be reloaded in Internet Explorer mode","description":"This policy allows users to reload unconfigured sites (that are not configured in the Enterprise Mode Site List) in Internet Explorer mode when browsing in Microsoft Edge and a site requires Internet Explorer for compatibility.\r\n\r\nAfter a site has been reloaded in Internet Explorer mode, \"in-page\" navigations will stay in Internet Explorer mode (for example, a link, script, or form on the page, or a server-side redirect from another \"in-page\" navigation). Users can choose to exit from Internet Explorer mode, or Microsoft Edge will automatically exit from Internet Explorer mode when a navigation that isn't \"in-page\" occurs (for example, using the address bar, the back button, or a favorite link).\r\n\r\nUsers can also optionally tell Microsoft Edge to use Internet Explorer mode for the site in the future. This choice will be remembered for a length of time managed by the 'InternetExplorerIntegrationLocalSiteListExpirationDays' (Specify the number of days that a site remains on the local IE mode site list) policy.\r\n\r\nIf the 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) policy is set to 'IEMode', then sites explicitly configured by the 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy's site list to use Microsoft Edge can't be reloaded in Internet Explorer mode, and sites configured by the site list or by the 'SendIntranetToInternetExplorer' (Send all intranet sites to Internet Explorer) policy to use Internet Explorer mode can't exit from Internet Explorer mode.\r\n\r\nIf you enable this policy, users are allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nIf you disable this policy, users aren't allowed to reload unconfigured sites in Internet Explorer mode.\r\n\r\nNote that if you enable this policy, it takes precedence over how you configured the 'InternetExplorerIntegrationTestingAllowed' (Allow Internet Explorer mode testing) policy, and that policy will be disabled.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2094210","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge_recommended_internetexplorerintegrationreloadiniemodeallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed","displayName":"Specifies whether to allow insecure websites to make requests to more-private network endpoints","description":"Controls whether insecure websites are allowed to make requests to more-private network endpoints.\r\n\r\nThis policy relates to the CORS-RFC1918 specification. See https://wicg.github.io/cors-rfc1918 for more details.\r\n\r\nA network endpoint is more private than another if:\r\n1) Its IP address is localhost and the other is not.\r\n2) Its IP address is private and the other is public.\r\nIn the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost.\r\n\r\nA website is deemed secure if it meets the definition of a secure context in https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts. Otherwise, it will be treated as an insecure context.\r\n\r\nWhen this policy is either not set or set to false, the default behavior for requests from insecure contexts to more-private network endpoints will depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests feature, which may be set by a field trial or on the command line.\r\n\r\nWhen this policy is set to true, insecure websites are allowed to make requests to any network endpoint, subject to other cross-origin checks.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts","description":"List of URL patterns. Private network requests initiated from insecure websites served by matching origins are allowed.\r\n\r\nIf this policy is not set, this policy behaves as if set to the empty list.\r\n\r\nFor origins not covered by the patterns specified here, the global default value will be used either from the 'InsecurePrivateNetworkRequestsAllowed' (Specifies whether to allow insecure websites to make requests to more-private network endpoints) policy, if it is set, or the user's personal configuration otherwise.\r\n\r\nNote that this policy only affects insecure origins, so secure origins (e.g. https://example.com) included in this list will be ignored.\r\n\r\nFor detailed information on valid URL patterns, please see https://docs.microsoft.com/en-us/DeployEdge/edge-learnmmore-url-list-filter%20format.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev92~policy~microsoft_edge~privatenetworkrequestsettings_insecureprivatenetworkrequestsallowedforurls_insecureprivatenetworkrequestsallowedforurlsdesc","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill","description":"The feature helps users add an additional layer of privacy to their online accounts by requiring device authentication (as a way of confirming the user's identity) before the saved password is auto-filled into a web form. This ensures that non-authorized persons can't use saved passwords for autofill.\r\n\r\nThis group policy configures the radio button selector that enables this feature for users. It also has a frequency control where users can specify how often they would like to be prompted for authentication.\r\n\r\nIf you set this policy to 'Automatically', disable this policy, or don't configure this policy, autofill will not have any authentication flow.\r\n\r\nIf you set this policy to 'WithDevicePassword', users will have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is auto filled. Authentication modes include Windows Hello, PIN, face recognition, or fingerprint. The frequency for authentication prompt will be set to 'Always' by default. However, users can change it to the other option, which is 'Once every browsing session'.\r\n\r\nIf you set this policy to 'WithCustomPrimaryPassword', users will be asked to create their custom password and then to be redirected to Settings. After the custom password is set, users can authenticate themselves using the custom password and their passwords will get auto-filled after successful authentication. The frequency for authentication prompt will be set to 'Always' by default. However, users can change it to the other option, which is 'Once every browsing session'.\r\n\r\nIf you set this policy to 'AutofillOff', saved passwords will no longer be suggested for autofill.\r\n\r\nPolicy options mapping:\r\n\r\n* Automatically (0) = Automatically\r\n\r\n* WithDevicePassword (1) = With device password\r\n\r\n* WithCustomPrimaryPassword (2) = With custom primary password\r\n\r\n* AutofillOff (3) = Autofill off\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_0","displayName":"Automatically","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_1","displayName":"With device password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_2","displayName":"With custom primary password","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93.1~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_3","displayName":"Autofill off","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist","displayName":"Allow media autoplay on specific sites","description":"Define a list of sites, based on URL patterns, that are allowed to autoplay media.\r\n\r\nIf you don't configure this policy, the global default value from the 'AutoplayAllowed' (Allow media autoplay for websites) policy (if set) or the user's personal configuration is used for all sites.\r\n\r\nFor detailed information about valid url patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nNote: * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.contoso.com\r\n[*.]contoso.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_autoplayallowlist_autoplayallowlistdesc","displayName":"Allow media autoplay on specific sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled","displayName":"CECPQ2 post-quantum key-agreement enabled for TLS (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 113.\r\n\r\nThis policy was removed in Microsoft Edge 114 and is ignored if set. It served to disable CECPQ2, but CECPQ2 has been disabled by default. A separate policy will be introduced to control the rollout of the replacement of CECPQ2. That replacement will be a combination of the standard key-agreement X25519 with NIST's chosen post-quantum KEM, called \"Kyber\".\r\n\r\nIf this policy is not configured, or is set to enabled, then Microsoft Edge will follow the default rollout process for CECPQ2, a post-quantum key-agreement algorithm in TLS.\r\n\r\nCECPQ2 results in larger TLS messages which, in very rare cases, can trigger bugs in some networking hardware. This policy can be set to False to disable CECPQ2 while networking issues are resolved.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_cecpq2enabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer","displayName":"Configure the View in File Explorer feature for SharePoint pages in Microsoft Edge","description":"This setting allows you to configure the View in File Explorer capability for file management in SharePoint Online while using Microsoft Edge.\r\n\r\nYou will need to list the specific domains where this is allowed and list cookies needed for SharePoint authentication (rtFa and FedAuth).\r\n\r\nBehind the scenes, the policy allows URLs with the viewinfileexplorer: scheme to open WebDAV URLs in Windows File Explorer on pages matching the list of domains and uses the cookies you specified for WebDAV authentication.\r\n\r\nIf you enable this policy, you can use the \"View in File Explorer\" feature on the SharePoint document libraries you list. You will need to specify the SharePoint domain and authentication cookies. See example value below.\r\n\r\nIf you disable or don't configure this policy, you cannot use the \"View in File Explorer\" feature on SharePoint document libraries.\r\n\r\nNote that while this is an available option through Microsoft Edge, rather than use the View in File Explorer option, the recommended approach to managing files and folders outside of SharePoint is to sync your SharePoint files or move or copy files in SharePoint.\r\nSync your SharePoint files: https://go.microsoft.com/fwlink/p/?linkid=2166983\r\nMove or copy files in SharePoint: https://go.microsoft.com/fwlink/p/?linkid=2167123\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, or Windows 10 Pro or Enterprise instances enrolled for device management.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"cookies\": [\r\n \"rtFa\",\r\n \"FedAuth\"\r\n ],\r\n \"domain\": \"contoso.sharepoint.com\"\r\n },\r\n {\r\n \"cookies\": [\r\n \"rtFa\",\r\n \"FedAuth\"\r\n ],\r\n \"domain\": \"contoso2.sharepoint.com\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_configureviewinfileexplorer_configureviewinfileexplorer","displayName":"Configure the View in File Explorer feature for SharePoint pages in Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist","displayName":"Configure the Enterprise Mode Cloud Site List","description":"The Microsoft Edge Site Lists setting in the M365 Admin Center allows you to host your site list(s) in a compliant cloud location and manage the contents of your site list(s) through the built-in experience. This setting allows you to specify which site list within the M365 Admin Center to deploy to your users. The user must be signed into Microsoft Edge with a valid work or school account. Otherwise, Microsoft Edge will not download the site list from the cloud location.\r\n\r\nThis setting is applicable only when the 'InternetExplorerIntegrationLevel' (Configure Internet Explorer integration) setting is configured.\r\n\r\nIf you configure this policy, Microsoft Edge will use the specified site list. When enabled, you can enter the identifier of the site list that you created and published to the cloud in M365 Admin Center.\r\n\r\nThis setting takes precedence over Microsoft Edge's 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) policy as well as Internet Explorer's site list setting (Use the Enterprise mode IE website list). If you disable or don't configure this policy, Microsoft Edge will use the 'InternetExplorerIntegrationSiteList' policy instead.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationcloudsitelist_internetexplorerintegrationcloudsitelist","displayName":"Configure the Enterprise Mode Cloud Site List (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval","displayName":"Configure how frequently the Enterprise Mode Site List is refreshed","description":"This setting lets you specify a custom refresh interval for the Enterprise Mode Site List. The refresh interval is specified in minutes. The minimum refresh interval is 30 minutes.\r\n\r\nThis setting is applicable only when the 'InternetExplorerIntegrationSiteList' (Configure the Enterprise Mode Site List) or 'InternetExplorerIntegrationCloudSiteList' (Configure the Enterprise Mode Cloud Site List) setting is configured.\r\n\r\nIf you configure this policy, Microsoft Edge will attempt to retrieve an updated version of the configured Enterprise Mode Site List using the specified refresh interval.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use a default refresh interval, it is 10080 minutes (7 days) starting from version 110 or later, 120 minutes from version 93 to 110, and 30 minutes before version 93.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_internetexplorerintegrationsitelistrefreshinterval_internetexplorerintegrationsitelistrefreshinterval","displayName":"Configure how frequently the Enterprise Mode Site List is refreshed: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled","displayName":"Enable Windows to search local Microsoft Edge browsing data","description":"Enables Windows to index Microsoft Edge browsing data stored locally on the user's device and allows users to find and launch previously stored browsing data directly from Windows features such as the search box on the taskbar in Windows.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will publish local browsing data to the Windows Indexer.\r\n\r\nIf you disable this policy, Microsoft Edge will not share data to the Windows Indexer.\r\n\r\nNote that if you disable this policy, Microsoft Edge will remove the data shared with Windows on the device and stop sharing any new browsing data.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_localbrowserdatashareenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed","displayName":"Allow single sign-on for Microsoft personal sites using this profile","description":"'Allow single sign-on for Microsoft personal sites using this profile' option allows non-MSA profiles to be able to use single sign-on for Microsoft sites using MSA credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-MSA profiles only.\r\n\r\nIf you disable this policy, non-MSA profiles will not be able to use single sign-on for Microsoft sites using MSA credentials present on the machine.\r\n\r\nIf you enable this policy or don't configure it, users will be able to use the Settings option to ensure non-MSA profiles are able to use single sign-on for Microsoft sites using MSA credentials present on the machine provided only a single MSA account exists on the machine.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_msawebsitessousingthisprofileallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended","displayName":"Enable Windows to search local Microsoft Edge browsing data","description":"Enables Windows to index Microsoft Edge browsing data stored locally on the user's device and allows users to find and launch previously stored browsing data directly from Windows features such as the search box on the taskbar in Windows.\r\n\r\nIf you enable this policy or don't configure it, Microsoft Edge will publish local browsing data to the Windows Indexer.\r\n\r\nIf you disable this policy, Microsoft Edge will not share data to the Windows Indexer.\r\n\r\nNote that if you disable this policy, Microsoft Edge will remove the data shared with Windows on the device and stop sharing any new browsing data.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_localbrowserdatashareenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended","displayName":"Allow single sign-on for Microsoft personal sites using this profile","description":"'Allow single sign-on for Microsoft personal sites using this profile' option allows non-MSA profiles to be able to use single sign-on for Microsoft sites using MSA credentials present on the machine. This option shows up for end-users as a toggle in Settings -> Profiles -> Profile Preferences for non-MSA profiles only.\r\n\r\nIf you disable this policy, non-MSA profiles will not be able to use single sign-on for Microsoft sites using MSA credentials present on the machine.\r\n\r\nIf you enable this policy or don't configure it, users will be able to use the Settings option to ensure non-MSA profiles are able to use single sign-on for Microsoft sites using MSA credentials present on the machine provided only a single MSA account exists on the machine.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_msawebsitessousingthisprofileallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_travelassistanceenabled_recommended","displayName":"Enable travel assistance (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy is obsolete as the feature is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy. It doesn't work in Microsoft Edge after version 105.\r\nConfigure this policy to allow/disallow travel assistance.\r\n\r\nThe travel assistance feature gives helpful and relevant information to a user who performs Travel related task within the browser. This feature provides trusted and validated suggestions / information to the users from across sources gathered by Microsoft.\r\n\r\nIf you enable or don't configure this setting, travel assistance will be enabled for the users when they are performing travel related tasks.\r\n\r\nIf you disable this setting, travel assistance will be disabled and users will not be able to see any travel related recommendations.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_travelassistanceenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended_travelassistanceenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended","displayName":"Sets layout for printing","description":"Configuring this policy sets the layout for printing webpages.\r\n\r\nIf you disable or don't configure this policy, users can decide whether to print webpages in Portrait or Landscape layout.\r\n\r\nIf you enable this policy, the selected option is set as the layout option.\r\n\r\nPolicy options mapping:\r\n\r\n* portrait (0) = Sets layout option as portrait\r\n\r\n* landscape (1) = Sets layout option as landscape\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout","displayName":"Sets layout for printing (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout_0","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_recommended~printing_recommended_printingwebpagelayout_recommended_printingwebpagelayout_1","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow","displayName":"Set the time interval for relaunch","description":"Specifies a target time window for the end of the relaunch notification period.\r\n\r\nUsers are notified of the need for a browser relaunch or device restart based on the 'RelaunchNotification' (Notify a user that a browser restart is recommended or required for pending updates) and 'RelaunchNotificationPeriod' (Set the time period for update notifications) policy settings. Browsers and devices are forcibly restarted at the end of the notification period when the 'RelaunchNotification' policy is set to 'Required'. This RelaunchWindow policy can be used to defer the end of the notification period so that it falls within a specific time window.\r\n\r\nIf you don't configure this policy, the default target time window is the whole day (i.e., the end of the notification period is never deferred).\r\n\r\nNote: Though the policy can accept multiple items in entries, all but the first item are ignored.\r\nWarning: Setting this policy may delay application of software updates.\r\n\r\nExample value:\r\n\r\n{\r\n \"entries\": [\r\n {\r\n \"duration_mins\": 240,\r\n \"start\": {\r\n \"hour\": 2,\r\n \"minute\": 15\r\n }\r\n }\r\n ]\r\n}\r\n\r\n\r\nCompact example value:\r\n\r\n{\"entries\": [{\"duration_mins\": 240, \"start\": {\"hour\": 2, \"minute\": 15}}]}","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_relaunchwindow_relaunchwindow","displayName":"Relaunch time window (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed","displayName":"Allow remote debugging","description":"Controls whether users may use remote debugging.\r\n\r\nIf you enable or don't configure this policy, users may use remote debugging by specifying --remote-debug-port and --remote-debugging-pipe command line switches.\r\n\r\nIf you disable this policy, users are not allowed to use remote debugging.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_remotedebuggingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled","displayName":"Enable travel assistance (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy is obsolete as the feature is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy. It doesn't work in Microsoft Edge after version 105.\r\nConfigure this policy to allow/disallow travel assistance.\r\n\r\nThe travel assistance feature gives helpful and relevant information to a user who performs Travel related task within the browser. This feature provides trusted and validated suggestions / information to the users from across sources gathered by Microsoft.\r\n\r\nIf you enable or don't configure this setting, travel assistance will be enabled for the users when they are performing travel related tasks.\r\n\r\nIf you disable this setting, travel assistance will be disabled and users will not be able to see any travel related recommendations.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_travelassistanceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled","displayName":"Enable 3DES cipher suites in TLS (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 96.\r\n\r\n'This policy was removed in version 97 after 3DES was removed from Microsoft Edge.\r\n\r\nIf the policy is set to true, then 3DES cipher suites in TLS will be enabled. If it is set to false, they will be disabled. If the policy is unset, 3DES cipher suites are disabled by default. This policy may be used to temporarily retain compatibility with an outdated server. This is a stopgap measure and the server should be reconfigured.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge_tripledesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT","description":"Allows you to set whether Microsoft Edge will run the v8 JavaScript engine with JIT (Just In Time) compiler enabled or not.\r\n\r\nDisabling the JavaScript JIT will mean that Microsoft Edge may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'JavaScriptJitAllowedForSites' (Allow JavaScript to use JIT on these sites) and 'JavaScriptJitBlockedForSites' (Block JavaScript from using JIT on these sites) policies.\r\n\r\nIf you don't configure this policy, JavaScript JIT is enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* AllowJavaScriptJit (1) = Allow any site to run JavaScript JIT\r\n\r\n* BlockJavaScriptJit (2) = Do not allow any site to run JavaScript JIT\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_1","displayName":"Allow any site to run JavaScript JIT","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_2","displayName":"Do not allow any site to run JavaScript JIT","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites","displayName":"Allow JavaScript to use JIT on these sites","description":"Allows you to set a list of site url patterns that specify sites which are allowed to run JavaScript with JIT (Just In Time) compiler enabled.\r\n\r\nFor detailed information on valid site url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the JavaScriptJitAllowedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT enabled, but fabrikam.com will use the policy from 'DefaultJavaScriptJitSetting' (Control use of JavaScript JIT), if set, or default to JavaScript JIT enabled.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptJitSetting' applies to the site, if set, otherwise Javascript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitallowedforsites_javascriptjitallowedforsitesdesc","displayName":"Allow JavaScript to use JIT on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites","displayName":"Block JavaScript from using JIT on these sites","description":"Allows you to set a list of site url patterns that specify sites which are not allowed to run JavaScript JIT (Just In Time) compiler enabled.\r\n\r\nDisabling the JavaScript JIT will mean that Microsoft Edge may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Microsoft Edge to render web content in a more secure configuration.\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. Wildcards, *, are allowed.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.contoso.com will not correctly apply to contoso.com or subdomain.contoso.com since they both resolve to the same eTLD+1 (contoso.com) for which there is no policy. In this case, policy must be set on contoso.com to apply correctly for both contoso.com and subdomain.contoso.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if contoso.com is listed in the JavaScriptJitBlockedForSites policy but contoso.com loads a frame containing fabrikam.com then contoso.com will have JavaScript JIT disabled, but fabrikam.com will use the policy from 'DefaultJavaScriptJitSetting' (Control use of JavaScript JIT), if set, or default to JavaScript JIT enabled.\r\n\r\nIf you don't configure this policy for a site then the policy from 'DefaultJavaScriptJitSetting' applies to the site, if set, otherwise JavaScript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_javascriptjitblockedforsites_javascriptjitblockedforsitesdesc","displayName":"Block JavaScript from using JIT on these sites (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled","displayName":"Allow notifications to set Microsoft Edge as default PDF reader","description":"This policy setting lets you decide whether employees should receive recommendations to set Microsoft Edge as PDF handler.\r\n\r\nIf you enable or don't configure this setting, employees receive recommendations from Microsoft Edge to set itself as the default PDF handler.\r\n\r\nIf you disable this setting, employees will not receive any notifications from Microsoft Edge to set itself as the default PDF handler.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~contentsettings_showpdfdefaultrecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol","displayName":"Configure users ability to override feature flags","description":"Configures users ability to override state of feature flags.\r\nIf you set this policy to 'CommandLineOverridesEnabled', users can override state of feature flags using command line arguments but not edge://flags page.\r\n\r\nIf you set this policy to 'OverridesEnabled', users can override state of feature flags using command line arguments or edge://flags page.\r\n\r\nIf you set this policy to 'OverridesDisabled', users can't override state of feature flags using command line arguments or edge://flags page.\r\n\r\nIf you don't configure this policy, the behavior is the same as the 'OverridesEnabled'.\r\n\r\nPolicy options mapping:\r\n\r\n* CommandLineOverridesEnabled (2) = Allow users to override feature flags using command line arguments only\r\n\r\n* OverridesEnabled (1) = Allow users to override feature flags\r\n\r\n* OverridesDisabled (0) = Prevent users from overriding feature flags\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol","displayName":"Configure users ability to override feature flags (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_2","displayName":"Allow users to override feature flags using command line arguments only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_1","displayName":"Allow users to override feature flags","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~experimentation_featureflagoverridescontrol_featureflagoverridescontrol_0","displayName":"Prevent users from overriding feature flags","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled","displayName":"Enable implicit sign-in","description":"Configure this policy to allow/disallow implicit sign-in.\r\n\r\nIf you have configured the 'BrowserSignin' (Browser sign-in settings) policy to 'Disable browser sign-in', this policy will not take any effect.\r\n\r\nIf you enable or don't configure this setting, implicit sign-in will be enabled, Edge will attempt to sign the user into their profile based on what and how they sign in to their OS.\r\n\r\nIf you disable this setting, implicit sign-in will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_implicitsigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced","displayName":"OneAuth Authentication Flow Enforced for signin","description":"This policy allows users to decide whether to use the OneAuth library for sign-in and token fetch in Microsoft Edge on Windows 10 RS3 and above.\r\n\r\nIf you disable or don't configure this policy, signin process will use Windows Account Manager. Microsoft Edge would be able to use accounts you logged in to Windows, Microsoft Office, or other Microsoft applications for login, without the needing of password. Or you can provide valid account and password to sign in, which will be stored in Windows Account Manager for future usage. You will be able to investigate all accounts stored in Windows Account Manager through Windows Settings -> Accounts -> Email and accounts page.\r\n\r\nIf you enable this policy, OneAuth authentication flow will be used for account signin. The OneAuth authentication flow has fewer dependencies and can work without Windows shell. The account you use would not be stored in the Email and accounts page.\r\n\r\nThis policy will only take effect on Windows 10 RS3 and above. On Windows 10 below RS3, OneAuth is used for authentication in Microsoft Edge by default.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~identity_oneauthauthenticationenforced_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled","displayName":"Allow users to get a strong password suggestion whenever they are creating an account online","description":"Configures the Password Generator Settings toggle that enables/disables the feature for users.\r\n\r\nIf you enable or don't configure this policy, then Password Generator will offer users a strong and unique password suggestion (via a dropdown) on Signup and Change Password pages.\r\n\r\nIf you disable this policy, users will no longer see strong password suggestions on Signup or Change Password pages.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_passwordgeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill","description":"The feature helps users add an additional layer of privacy to their online accounts by requiring device authentication (as a way of confirming the user's identity) before the saved password is auto-filled into a web form. This ensures that non-authorized persons can't use saved passwords for autofill. Note that this feature does not protect against locally-running malware.\r\n\r\nThis group policy configures the radio button selector that enables this feature for users. It also has a frequency control where users can specify how often they would like to be prompted for authentication.\r\n\r\nIf you set this policy to 'Automatically', disable this policy, or don't configure this policy, autofill will not have any authentication flow.\r\n\r\nIf you set this policy to 'WithDevicePassword', users will have to enter their device password (or preferred mode of authentication under Windows) to prove their identity before their password is auto filled. Authentication modes include Windows Hello, PIN, face recognition, or fingerprint. The frequency for authentication prompt will be set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\r\n\r\nIf you set this policy to 'WithCustomPrimaryPassword', users will be asked to create their custom password and then to be redirected to Settings. After the custom password is set, users can authenticate themselves using the custom password and their passwords will get auto-filled after successful authentication. The frequency for authentication prompt will be set to 'Ask permission once per browsing session' by default. However, users can change it to the other option, which is 'Always ask permission'.\r\n\r\nIf you set this policy to 'AutofillOff', saved passwords will no longer be suggested for autofill.\r\n\r\nPolicy options mapping:\r\n\r\n* Automatically (0) = Automatically\r\n\r\n* WithDevicePassword (1) = With device password\r\n\r\n* WithCustomPrimaryPassword (2) = With custom primary password\r\n\r\n* AutofillOff (3) = Autofill off\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting","displayName":"Configures a setting that asks users to enter their device password while using password autofill (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_0","displayName":"Automatically","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~passwordmanager_primarypasswordsetting_primarypasswordsetting_1","displayName":"With device password","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout","displayName":"Sets layout for printing","description":"Configuring this policy sets the layout for printing webpages.\r\n\r\nIf you disable or don't configure this policy, users can decide whether to print webpages in Portrait or Landscape layout.\r\n\r\nIf you enable this policy, the selected option is set as the layout option.\r\n\r\nPolicy options mapping:\r\n\r\n* portrait (0) = Sets layout option as portrait\r\n\r\n* landscape (1) = Sets layout option as landscape\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout","displayName":"Sets layout for printing (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout_0","displayName":"Sets layout option as portrait","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev93~policy~microsoft_edge~printing_printingwebpagelayout_printingwebpagelayout_1","displayName":"Sets layout option as landscape","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled","displayName":"Enable support for Windows OS routing table rules when making peer to peer connections via WebRTC","description":"Controls whether WebRTC will respect the Windows OS routing table rules when making peer to peer connections, thus enabling split tunnel VPNs.\r\n\r\nIf you disable this policy or don't configure it, WebRTC will not consider the routing table and may make peer to peer connections over any available network.\r\n\r\nIf you enable this policy, WebRTC will prefer to make peer to peer connections using the indicated network interface for the remote address as indicated in the routing table.\r\n\r\nThis policy is only available on Windows.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge_webrtcrespectosroutingtableenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~applicationguard_applicationguardpassivemodeenabled","displayName":"Ignore Application Guard site list configuration and browse Edge normally","description":"Set whether Edge should ignore the Application Guard site list configuration for trusted and untrusted sites.\r\n\r\nIf you enable this policy, all navigations from Edge, including navigations to untrusted sites, will be accessed normally within Edge without redirecting to the Application Guard container. Note: this policy ONLY impacts Edge, so navigations from other browsers might get redirected to the Application Guard Container if you have the corresponding extensions enabled.\r\n\r\nIf you disable or don't configure this policy, Edge does not ignore the Application Guard site list. If users try to navigate to an untrusted site in the host, the site will open in the container.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~applicationguard_applicationguardpassivemodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~applicationguard_applicationguardpassivemodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~identity_onlyonpremisesimplicitsigninenabled","displayName":"Only on-premises account enabled for implicit sign-in","description":"Configure this policy to decide whether only on-premises accounts are enabled for implicit sign-in.\r\n\r\nIf you enable this policy, only on-premises accounts will be enabled for implicit sign-in. Microsoft Edge won't attempt to implicitly sign in to MSA or AAD accounts. Upgrade from on-premises accounts to AAD accounts will be stopped as well.\r\n\r\nIf you disable or don't configure this policy, all accounts will be enabled for implicit sign-in.\r\n\r\nThis policy will only take effect when policy 'ConfigureOnPremisesAccountAutoSignIn' (Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account) is enabled and set to 'SignInAndMakeDomainAccountNonRemovable'.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~identity_onlyonpremisesimplicitsigninenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev94~policy~microsoft_edge~identity_onlyonpremisesimplicitsigninenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled","displayName":"Enable browser legacy extension point blocking","description":"Sets the ProcessExtensionPointDisablePolicy on Microsoft Edge's browser process to block code injection from legacy third party applications.\r\n\r\nIf you enable or don't configure this policy, the ProcessExtensionPointDisablePolicy is applied to block legacy extension points in the browser process.\r\n\r\nIf you disable this policy, the ProcessExtensionPointDisablePolicy is not applied to block legacy extension points in the browser process. This has a detrimental effect on Microsoft Edge's security and stability as unknown and potentially hostile code can load inside Microsoft Edge's browser process. Only turn off the policy if there are compatibility issues with third-party software that must run inside Microsoft Edge's browser process.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_browserlegacyextensionpointsblockingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled","displayName":"Specifies whether WebAssembly modules can be sent cross-origin (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 98.\r\n\r\nSpecifies whether WebAssembly modules can be sent to another window or worker cross-origin. Cross-origin WebAssembly module sharing was deprecated as part of the efforts to deprecate document.domain, see https://github.com/mikewest/deprecating-document-domain. This policy allowed re-enabling of cross-origin WebAssembly module sharing. This policy is obsolete because it was intended to offer a longer transition period in the deprecation process.\r\n\r\nIf you enable this policy, sites can send WebAssembly modules cross-origin\r\nwithout restrictions.\r\n\r\nIf you disable or don't configure this policy, sites can only send\r\nWebAssembly modules to windows and workers in the same origin.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_crossoriginwebassemblymodulesharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled","displayName":"Specifies whether the display-capture permissions-policy is checked or skipped (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 109.\r\n\r\nThis policy is obsolete. The policy was a temporary workaround for non-spec-compliant enterprise applications.\r\n\r\nThis policy stopped working in Microsoft Edge 107 and was obsoleted in Microsoft Edge 110.\r\n\r\nThe display-capture permissions-policy gates access to getDisplayMedia(),\r\nas per this spec:\r\nhttps://www.w3.org/TR/screen-capture/#feature-policy-integration\r\nHowever, if this policy is Disabled, this requirement is not enforced,\r\nand getDisplayMedia() is allowed from contexts that would otherwise be\r\nforbidden.\r\n\r\nIf you enable or don't configure this policy, sites can only call getDisplayMedia() from\r\ncontexts which are allowlisted by the display-capture permissions-policy.\r\n\r\nIf you disable this policy, sites can call getDisplayMedia() even from contexts\r\nwhich are not allowlisted by the display-capture permissions policy.\r\nNote that other restrictions may still apply.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_displaycapturepermissionspolicyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment","displayName":"Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages","description":"This setting lets you specify a custom adjustment to the height of popup windows generated via window.open from the Internet Explorer mode site.\r\n\r\nIf you configure this policy, Microsoft Edge will add the adjustment value to the height, in pixels. The exact difference depends on the UI configuration of both IE and Edge, but a typical difference is 5.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will treat IE mode window.open the same as Edge mode window.open in window height calculations.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenheightadjustment_internetexplorerintegrationwindowopenheightadjustment","displayName":"Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment","displayName":"Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages","description":"This setting lets you specify a custom adjustment to the width of popup windows generated via window.open from the Internet Explorer mode site.\r\n\r\nIf you configure this policy, Microsoft Edge will add the adjustment value to the width, in pixels. The exact difference depends on the UI configuration of both IE and Edge, but a typical difference is 4.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will treat IE mode window.open the same as Edge mode window.open in window width calculations.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_internetexplorerintegrationwindowopenwidthadjustment_internetexplorerintegrationwindowopenwidthadjustment","displayName":"Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended","displayName":"Visual search enabled","description":"Visual search lets you quickly explore more related content about entities in an image.\r\n\r\nIf you enable or don't configure this policy, visual search will be enabled via image hover, context menu, and search in sidebar.\r\n\r\nIf you disable this policy, visual search will be disabled and you won't be able to get more info about images via hover, context menu, and search in sidebar.\r\n\r\nNote: Visual Search in Web Capture is still managed by 'WebCaptureEnabled' (Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge) policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended_visualsearchenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended~smartscreen_recommended_newsmartscreenlibraryenabled_recommended","displayName":"Enable new SmartScreen library (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 107.\r\n\r\nThis policy doesn't work because it was only intended to be a short-term mechanism to support the update to a new SmartScreen client.\r\n\r\nAllows the Microsoft Edge browser to load the new SmartScreen library (libSmartScreenN) for any SmartScreen checks on site URLs or application downloads.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will use the new SmartScreen library (libSmartScreenN).\r\n\r\nIf you disable this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nBefore Microsoft Edge version 103, if you don't configure this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management.\r\nThis also includes macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended~smartscreen_recommended_newsmartscreenlibraryenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_recommended~smartscreen_recommended_newsmartscreenlibraryenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior","displayName":"Configure ShadowStack crash rollback behavior (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 109.\r\n\r\nThis policy is deprecated because it's intended to serve only as a short-term mechanism to give enterprises more time to update their environments and report issues if they are found to be incompatible with Hardware-enforced Stack Protection. It won't work in Microsoft Edge as soon as version 109.\r\n\r\nMicrosoft Edge includes a Hardware-enforced Stack Protection security feature. This feature may result in the browser crashing unexpectedly in cases that do not represent an attempt to compromise the browser's security.\r\n\r\nUsing this policy, you may control the behavior of the Hardware-enforced Stack Protection feature after a crash triggered by this feature is encountered.\r\n\r\nSet this policy to 'Disable' to disable the feature.\r\n\r\nSet this policy to 'DisableUntilUpdate' to disable the feature until Microsoft Edge updates next time.\r\n\r\nSet this policy to 'Enable' to keep the feature enabled.\r\n\r\nPolicy options mapping:\r\n\r\n* Disable (0) = Disable Hardware-enforced Stack Protection\r\n\r\n* DisableUntilUpdate (1) = Disable Hardware-enforced Stack Protection until the next Microsoft Edge update\r\n\r\n* Enable (2) = Enable Hardware-enforced Stack Protection\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_shadowstackcrashrollbackbehavior","displayName":"Configure ShadowStack crash rollback behavior (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_shadowstackcrashrollbackbehavior_0","displayName":"Disable Hardware-enforced Stack Protection","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_shadowstackcrashrollbackbehavior_1","displayName":"Disable Hardware-enforced Stack Protection until the next Microsoft Edge update","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_shadowstackcrashrollbackbehavior_shadowstackcrashrollbackbehavior_2","displayName":"Enable Hardware-enforced Stack Protection","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled","displayName":"Visual search enabled","description":"Visual search lets you quickly explore more related content about entities in an image.\r\n\r\nIf you enable or don't configure this policy, visual search will be enabled via image hover, context menu, and search in sidebar.\r\n\r\nIf you disable this policy, visual search will be disabled and you won't be able to get more info about images via hover, context menu, and search in sidebar.\r\n\r\nNote: Visual Search in Web Capture is still managed by 'WebCaptureEnabled' (Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge) policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge_visualsearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled","displayName":"Allow intranet zone file URL links from Microsoft Edge to open in Windows File Explorer","description":"This setting allows file URL links to intranet zone files from intranet zone HTTPS websites to open Windows File Explorer for that file or directory.\r\n\r\nIf you enable this policy, intranet zone file URL links originating from intranet zone HTTPS pages will open Windows File Explorer to the parent directory of the file and select the file. Intranet zone directory URL links originating from intranet zone HTTPS pages will open Windows File Explorer to the directory with no items in the directory selected.\r\n\r\nIf you disable or don't configure this policy, file URL links will not open.\r\n\r\nMicrosoft Edge uses the definition of intranet zone as configured for Internet Explorer. Note that https://localhost/ is specifically blocked as an exception of allowed intranet zone host, while loopback addresses (127.0.0.*, [::1]) are considered internet zone by default.\r\n\r\nUsers may opt out of prompts on a per-protocol/per-site basis unless the 'ExternalProtocolDialogShowAlwaysOpenCheckbox' (Show an \"Always open\" checkbox in external protocol dialog) policy is disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~contentsettings_intranetfilelinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled","displayName":"Enable new SmartScreen library (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 107.\r\n\r\nThis policy doesn't work because it was only intended to be a short-term mechanism to support the update to a new SmartScreen client.\r\n\r\nAllows the Microsoft Edge browser to load the new SmartScreen library (libSmartScreenN) for any SmartScreen checks on site URLs or application downloads.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will use the new SmartScreen library (libSmartScreenN).\r\n\r\nIf you disable this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nBefore Microsoft Edge version 103, if you don't configure this policy, Microsoft Edge will use the old SmartScreen library (libSmartScreen).\r\n\r\nThis policy is only available on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management.\r\nThis also includes macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev95~policy~microsoft_edge~smartscreen_newsmartscreenlibraryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended","displayName":"Configure when efficiency mode should become active","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode","displayName":"Configure when efficiency mode should become active (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_4","displayName":"When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_5","displayName":"When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode","displayName":"Configure when efficiency mode should become active","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode","displayName":"Configure when efficiency mode should become active (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_4","displayName":"When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96.1~policy~microsoft_edge~performance_efficiencymode_efficiencymode_5","displayName":"When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled","displayName":"Allow the audio process to run with priority above normal on Windows","description":"This policy controls the priority of the audio process on Windows.\r\nIf this policy is enabled, the audio process will run with above normal priority.\r\nIf this policy is disabled, the audio process will run with normal priority.\r\nIf this policy is not configured, the default configuration for the audio process will be used.\r\nThis policy is intended as a temporary measure to give enterprises the ability to\r\nrun audio with higher priority to address certain performance issues with audio capture.\r\nThis policy will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_audioprocesshighpriorityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled","displayName":"AutoLaunch Protocols Component Enabled","description":"Specifies whether the AutoLaunch Protocols component should be enabled. This component allows Microsoft to provide a list similar to that of the 'AutoLaunchProtocolsFromOrigins' (Define a list of protocols that can launch an external application from listed origins without prompting the user) policy, allowing certain external protocols to launch without prompt or blocking certain protocols (on specified origins). By default, this component is enabled.\r\n\r\nIf you enable or don't configure this policy, the AutoLaunch Protocols component is enabled.\r\n\r\nIf you disable this policy, the AutoLaunch Protocols component is disabled.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_autolaunchprotocolscomponentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes","displayName":"Configure the list of types that are included for synchronization","description":"If you enable this policy all the specified data types will be included for synchronization for Azure AD/Azure AD-Degraded user profiles. This policy can be used to ensure the type of data uploaded to the Microsoft Edge synchronization service.\r\n\r\nYou can provide one of the following data types for this policy: \"favorites\", \"settings\", \"passwords\", \"addressesAndMore\", \"extensions\", \"history\", \"openTabs\", \"edgeWallet\", \"collections\", \"apps\", and \"edgeFeatureUsage\". The \"edgeFeatureUsage\" data type will be supported starting in Microsoft Edge version 134. Note that these data type names are case sensitive.\r\n\r\nUsers will not be able to override the enabled data types.\r\n\r\nExample value:\r\n\r\nfavorites","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_forcesynctypes_forcesynctypesdesc","displayName":"Configure the list of types that are included for synchronization (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes","displayName":"Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode","description":"Starting with Microsoft Edge version 96, navigations that switch between Internet Explorer mode and Microsoft Edge will include form data.\r\n\r\nIf you enable this policy, you can specify which data types should be included in navigations between Microsoft Edge and Internet Explorer mode.\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will use the new behavior of including form data in navigations that change modes.\r\n\r\nTo learn more, see https://go.microsoft.com/fwlink/?linkid=2174004\r\n\r\nPolicy options mapping:\r\n\r\n* IncludeNone (0) = Do not send form data or headers\r\n\r\n* IncludeFormDataOnly (1) = Send form data only\r\n\r\n* IncludeHeadersOnly (2) = Send additional headers only\r\n\r\n* IncludeFormDataAndHeaders (3) = Send form data and additional headers\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes","displayName":"Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_0","displayName":"Do not send form data or headers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_1","displayName":"Send form data only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_2","displayName":"Send additional headers only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorerintegrationcomplexnavdatatypes_internetexplorerintegrationcomplexnavdatatypes_3","displayName":"Send form data and additional headers","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled","displayName":"Show the Reload in Internet Explorer mode button in the toolbar","description":"Set this policy to show the Reload in Internet Explorer mode button in the toolbar. Users can hide the button in the toolbar through edge://settings/appearance. The button will only be shown on the toolbar when the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or if the user has chosen to enable \"Allow sites to be reloaded in Internet Explorer mode\".\r\n\r\nIf you enable this policy, the Reload in Internet mode button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure this policy, the Reload in Internet Explorer mode button isn't shown in the toolbar by default. Users can toggle the Show Internet Explorer mode button in edge://settings/appearance.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_internetexplorermodetoolbarbuttonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended","displayName":"Show the Reload in Internet Explorer mode button in the toolbar","description":"Set this policy to show the Reload in Internet Explorer mode button in the toolbar. Users can hide the button in the toolbar through edge://settings/appearance. The button will only be shown on the toolbar when the 'InternetExplorerIntegrationReloadInIEModeAllowed' (Allow unconfigured sites to be reloaded in Internet Explorer mode) policy is enabled or if the user has chosen to enable \"Allow sites to be reloaded in Internet Explorer mode\".\r\n\r\nIf you enable this policy, the Reload in Internet mode button is pinned to the toolbar.\r\n\r\nIf you disable or don't configure this policy, the Reload in Internet Explorer mode button isn't shown in the toolbar by default. Users can toggle the Show Internet Explorer mode button in edge://settings/appearance.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended_internetexplorermodetoolbarbuttonenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended","displayName":"Configure when efficiency mode should become active","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode","displayName":"Configure when efficiency mode should become active (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~performance_recommended_efficiencymode_recommended_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~typosquattingchecker_recommended_typosquattingcheckerenabled_recommended","displayName":"Configure Edge Website Typo Protection","description":"This policy setting lets you configure whether to turn on Edge TyposquattingChecker. Edge TyposquattingChecker provides warning messages to help protect your users from potential typosquatting sites. By default, Edge TyposquattingChecker is turned on.\r\n\r\nIf you enable this policy, Edge TyposquattingChecker is turned on.\r\n\r\nIf you disable this policy, Edge TyposquattingChecker is turned off.\r\n\r\nIf you don't configure this policy, Edge TyposquattingChecker is turned on but users can choose whether to use Edge TyposquattingChecker.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~typosquattingchecker_recommended_typosquattingcheckerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_recommended~typosquattingchecker_recommended_typosquattingcheckerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled","displayName":"Enable renderer in app container","description":"Launches Renderer processes into an App Container for\r\nadditional security benefits.\r\n\r\nIf you don't configure this policy, Microsoft Edge will launch the renderer process in an app\r\ncontainer in a future update.\r\n\r\nIf you enable this policy, Microsoft Edge will launch the renderer process in an app container.\r\n\r\nIf you disable this policy, Microsoft Edge will not launch the renderer process in an app container.\r\n\r\nOnly turn off the policy if there are compatibility issues with\r\nthird-party software that must run inside Microsoft Edge's renderer processes.\r\n\r\nThis policy will only take effect on Windows 10 RS5 and above.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_rendererappcontainerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled","displayName":"Show links shared from Microsoft 365 apps in History","description":"Allows Microsoft Edge to display links recently shared by or shared with the user from Microsoft 365 apps in History.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge displays links recently shared by or shared with the user from Microsoft 365 apps in History.\r\n\r\nIf you disable this policy, Microsoft Edge does not display links recently shared by or shared with the user from Microsoft 365 apps in History. The control in Microsoft Edge settings is disabled and set to off.\r\n\r\nThis policy only applies for Microsoft Edge local user profiles and profiles signed in using Azure Active Directory.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge_sharedlinksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled","displayName":"Prevents files from being uploaded while in Application Guard","description":"Sets whether files can be uploaded while in Application Guard.\r\n\r\nIf you enable this policy, users will not be able to upload files in Application Guard.\r\n\r\nIf you disable or don't configure this policy, users will be able to upload files while in Application Guard.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~applicationguard_applicationguarduploadblockingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode","displayName":"Configure when efficiency mode should become active","description":"This policy setting lets you configure when efficiency mode will become active. By default, efficiency mode is set to 'BalancedSavings'. On devices with no battery, the default is for efficiency mode to never become active.\r\n\r\nIndividual sites may be blocked from participating in efficiency mode by configuring the policy 'SleepingTabsBlockedForUrls' (Block sleeping tabs on specific sites).\r\n\r\nSet this policy to 'AlwaysActive' and efficiency mode will always be active.\r\n\r\nSet this policy to 'NeverActive' and efficiency mode will never become active.\r\n\r\nSet this policy to 'ActiveWhenUnplugged' and efficiency mode will become active when the device is unplugged.\r\n\r\nSet this policy to 'ActiveWhenUnpluggedBatteryLow' and efficiency mode will become active when the device is unplugged and the battery is low.\r\n\r\nSet this policy to 'BalancedSavings' and when the device is unplugged, efficiency mode will take moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode will take additional steps to save battery.\r\n\r\nSet this policy to 'MaximumSavings' and when the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nIf the device does not have a battery, efficiency mode will never become active in any mode other than 'AlwaysActive' unless the setting or 'EfficiencyModeEnabled' (Efficiency mode enabled) policy is enabled.\r\n\r\nThis policy has no effect if the 'EfficiencyModeEnabled' policy is disabled.\r\n\r\nLearn more about efficiency mode: https://go.microsoft.com/fwlink/?linkid=2173921\r\n\r\nPolicy options mapping:\r\n\r\n* AlwaysActive (0) = Efficiency mode is always active\r\n\r\n* NeverActive (1) = Efficiency mode is never active\r\n\r\n* ActiveWhenUnplugged (2) = Efficiency mode is active when the device is unplugged\r\n\r\n* ActiveWhenUnpluggedBatteryLow (3) = Efficiency mode is active when the device is unplugged and the battery is low\r\n\r\n* BalancedSavings (4) = When the device is unplugged, efficiency mode takes moderate steps to save battery. When the device is unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\n* MaximumSavings (5) = When the device is unplugged or unplugged and the battery is low, efficiency mode takes additional steps to save battery.\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode","displayName":"Configure when efficiency mode should become active (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_0","displayName":"Efficiency mode is always active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_1","displayName":"Efficiency mode is never active","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_2","displayName":"Efficiency mode is active when the device is unplugged","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~performance_efficiencymode_efficiencymode_3","displayName":"Efficiency mode is active when the device is unplugged and the battery is low","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode","displayName":"Print PostScript Mode","description":"Controls how Microsoft Edge prints on Microsoft Windows.\r\n\r\nPrinting to a PostScript printer on Microsoft Windows different PostScript generation methods can affect printing performance.\r\n\r\nIf you set this policy to Default, Microsoft Edge will use a set of default options when generating PostScript. For text in particular, text will always be rendered using Type 3 fonts.\r\n\r\nIf you set this policy to Type42, Microsoft Edge will render text using Type 42 fonts if possible. This should increase printing speed for some PostScript printers.\r\n\r\nIf you don't configure this policy, Microsoft Edge will be in Default mode.\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = Default\r\n\r\n* Type42 (1) = Type42\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode","displayName":"Print PostScript Mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode_0","displayName":"Default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printpostscriptmode_printpostscriptmode_1","displayName":"Type42","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI","description":"Controls print image resolution when Microsoft Edge prints PDFs with rasterization.\r\n\r\nWhen printing a PDF using the Print to image option, it can be beneficial to specify a print resolution other than a device's printer setting or the PDF default. A high resolution will significantly increase the processing and printing time while a low resolution can lead to poor imaging quality.\r\n\r\nIf you set this policy, it allows a particular resolution to be specified for use when rasterizing PDFs for printing.\r\n\r\nIf you set this policy to zero or don't configure it, the system default resolution will be used during rasterization of page images.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~printing_printrasterizepdfdpi_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled","displayName":"Configure Edge Website Typo Protection","description":"This policy setting lets you configure whether to turn on Edge TyposquattingChecker. Edge TyposquattingChecker provides warning messages to help protect your users from potential typosquatting sites. By default, Edge TyposquattingChecker is turned on.\r\n\r\nIf you enable this policy, Edge TyposquattingChecker is turned on.\r\n\r\nIf you disable this policy, Edge TyposquattingChecker is turned off.\r\n\r\nIf you don't configure this policy, Edge TyposquattingChecker is turned on but users can choose whether to use Edge TyposquattingChecker.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev96~policy~microsoft_edge~typosquattingchecker_typosquattingcheckerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled","displayName":"Let screen reader users get image descriptions from Microsoft","description":"Lets screen reader users get descriptions of unlabeled images on the web.\r\n\r\nIf you enable or don't configure this policy, users have the option of using an anonymous Microsoft service. This service provides automatic descriptions for unlabeled images users encounter on the web when they're using a screen reader.\r\n\r\nIf you disable this policy, users can't enable the Get Image Descriptions from Microsoft feature.\r\n\r\nWhen this feature is enabled, the content of images that need a generated description is sent to Microsoft servers to generate a description.\r\n\r\nNo cookies or other user data is sent to Microsoft, and Microsoft doesn't save or log any image content.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_accessibilityimagelabelsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport","displayName":"CORS non-wildcard request header support enabled","description":"This policy lets you configure support of CORS non-wildcard request headers.\r\n\r\nMicrosoft Edge version 97 introduces support for CORS non-wildcard request headers. When a script makes a cross-origin network request via fetch() and XMLHttpRequest with a script-added Authorization header, the header must be explicitly allowed by the Access-Control-Allow-Headers header in the CORS preflight response. \"Explicitly\" here means that the wild card symbol \"*\" doesn't cover the Authorization header. See https://go.microsoft.com/fwlink/?linkid=2180022 for more detail.\r\n\r\nIf you enable or don't configure the policy, Microsoft Edge will support the CORS non-wildcard request headers and behave as previously described.\r\n\r\nIf you disable this policy, Microsoft Edge will allow the wildcard symbol (\"*\") in the Access-Control-Allow-Headers header in the CORS preflight response to cover the Authorization header.\r\n\r\nThis policy is a temporary workaround for the new CORS non-wildcard request header feature. It's intended to be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_corsnonwildcardrequestheaderssupport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled","displayName":"Discover feature In Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy doesn't work because Discover is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.\r\n\r\nThis policy lets you configure the Discover feature in Microsoft Edge.\r\n\r\nWorking in the background when enabled, this feature sends URLs to Microsoft Bing to search for related recommendations.\r\n\r\nIf you enable or don't configure this policy, you can use the Discover button on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Discover feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgediscoverenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled","displayName":"Enhance images enabled (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 121.\r\n\r\nThe enhance images feature is deprecated and starting in 122 this policy will be removed. Set whether Microsoft Edge can automatically enhance images to show you sharper images with better color, lighting, and contrast.\r\n\r\nIf you enable this policy or don't configure the policy, Microsoft Edge will automatically enhance images on specific web applications.\r\n\r\nIf you disable this policy, Microsoft Edge will not enhance images.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_edgeenhanceimagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed","displayName":"Allow sites configured for Internet Explorer mode to open in Microsoft Edge","description":"This policy lets sites configured to open in Internet Explorer mode to be opened by Microsoft Edge for testing on a modern browser without removing them from the site list.\r\n\r\nUsers can configure this setting in the \"More tools\" menu by selecting 'Open sites in Microsoft Edge'.\r\n\r\nIf you enable this policy, the option to 'Open sites in Microsoft Edge' will be visible under \"More tools\". Users use this option to test IE mode sites on a modern browser.\r\n\r\nIf you disable or don't configure this policy, users can't see the option 'Open in Microsoft Edge' under the \"More tools\" menu. However, users can access this menu option with the --ie-mode-test flag.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_internetexplorermodetabinedgemodeallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled","displayName":"Always open links from certain Microsoft apps in Microsoft Edge","description":"Make Microsoft Edge open links from other supported Microsoft Apps, such as Microsoft Outlook and Microsoft Teams on Windows 10 and above, so that web links can be opened using the correct profile in Microsoft Edge. This does not change the browser set as the default in Windows settings.\r\n\r\nIf you do not configure this policy, the end user will see a prompt to manage this policy the first time Microsoft Edge opens a link from supported Microsoft apps. Users can manage this policy in Microsoft Edge settings at any time. The default browser setting in Windows will not be changed based on the Microsoft Edge setting.\r\n\r\nIf this policy is Enabled, Microsoft Edge will open web links from these apps, and will use the correct profile where possible, even when Microsoft Edge is not set as the default in Windows settings. This policy does not change the browser set as the default in Windows settings.\r\n\r\nIf this policy is disabled, the browser set as the default in Windows settings will be used to open web links from these apps.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_openmicrosoftlinksinedgeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended","displayName":"Discover feature In Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 105.\r\n\r\nThis policy doesn't work because Discover is now contained within the Edge Sidebar and can be managed using the 'HubsSidebarEnabled' (Show Hubs Sidebar) policy.\r\n\r\nThis policy lets you configure the Discover feature in Microsoft Edge.\r\n\r\nWorking in the background when enabled, this feature sends URLs to Microsoft Bing to search for related recommendations.\r\n\r\nIf you enable or don't configure this policy, you can use the Discover button on Microsoft Edge to start using this feature.\r\n\r\nIf you disable this policy, you can't use the Discover feature in Microsoft Edge.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended_edgediscoverenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended","displayName":"Enable Microsoft Defender SmartScreen DNS requests","description":"This policy lets you configure whether to enable DNS requests made by Microsoft Defender SmartScreen. Note: Disabling DNS requests will prevent Microsoft Defender SmartScreen from getting IP addresses, and potentially impact the IP-based protections provided.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen will make DNS requests.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen will not make any DNS requests.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_recommended~smartscreen_recommended_smartscreendnsrequestsenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled","displayName":"Force WebSQL in third-party contexts to be re-enabled (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 100.\r\n\r\nThis policy is obsolete because it was intended to be a short-term mechanism to give enterprises more time to update their web content when it's found to be incompatible with the change to disable WebSQL in third-party contexts. It doesn't work in Microsoft Edge after version 100.\r\n\r\nWebSQL in third-party contexts (for example, cross-site iframes) is off by default as of Microsoft Edge version 97 and was fully removed in version 101.\r\n\r\nIf you enable this policy, WebSQL in third-party contexts will be re-enabled.\r\n\r\nIf you disable this policy or don't configure it, WebSQL in third-party contexts will stay off.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge_websqlinthirdpartycontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls","displayName":"Automatically grant sites permission to connect all serial ports","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available serial ports.\r\n\r\nThe URLs must be valid, or the policy is ignored. Only the origin (scheme, host, and port) of the URL is considered.\r\n\r\nThis policy overrides 'DefaultSerialGuardSetting' (Control use of the Serial API), 'SerialAskForUrls' (Allow the Serial API on specific sites), 'SerialBlockedForUrls' (Block the Serial API on specific sites) and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowallportsforurls_serialallowallportsforurlsdesc","displayName":"Automatically grant sites permission to connect all serial ports (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls","displayName":"Automatically grant sites permission to connect to USB serial devices","description":"Setting the policy lets you list sites that are automatically granted permission to access USB serial devices with vendor and product IDs that match the vendor_id and product_id fields.\r\n\r\nOptionally you can omit the product_id field. This enables site access to all the vendor's devices. When you provide a product ID, then you give the site access to a specific device from the vendor but not all devices.\r\n\r\nThe URLs must be valid, or the policy is ignored. Only the origin (scheme, host, and port) of the URL is considered.\r\n\r\nThis policy overrides 'DefaultSerialGuardSetting' (Control use of the Serial API), 'SerialAskForUrls' (Allow the Serial API on specific sites), 'SerialBlockedForUrls' (Block the Serial API on specific sites) and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the Web Serial API. To grant access to USB devices through the WebUSB API see the 'WebUsbAllowDevicesForUrls' (Grant access to specific sites to connect to specific USB devices) policy.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://specific-device.example.com\"\r\n ]\r\n },\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://all-vendor-devices.example.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~contentsettings_serialallowusbdevicesforurls_serialallowusbdevicesforurls","displayName":"Automatically grant sites permission to connect to USB serial devices (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins","displayName":"Allow Same Origin Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can capture tabs with their same Origin.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of capture.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins), 'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins), 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_sameorigintabcaptureallowedbyorigins_sameorigintabcaptureallowedbyoriginsdesc","displayName":"Allow Same Origin Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins","displayName":"Allow Desktop, Window, and Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Desktop, Window, and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: 'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins), 'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins), 'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins).\r\n\r\nIf a site matches a URL pattern in this policy, the 'ScreenCaptureAllowed' (Allow or deny screen capture) will not be considered.\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_screencaptureallowedbyorigins_screencaptureallowedbyoriginsdesc","displayName":"Allow Desktop, Window, and Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins","displayName":"Allow Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in the 'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins) policy.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'WindowCaptureAllowedByOrigins' (Allow Window and Tab capture by these origins), 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_tabcaptureallowedbyorigins_tabcaptureallowedbyoriginsdesc","displayName":"Allow Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins","displayName":"Allow Window and Tab capture by these origins","description":"Setting the policy lets you set a list of URL patterns that can use Window and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this scope of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: 'TabCaptureAllowedByOrigins' (Allow Tab capture by these origins), 'SameOriginTabCaptureAllowedByOrigins' (Allow Same Origin Tab capture by these origins).\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: 'ScreenCaptureAllowedByOrigins' (Allow Desktop, Window, and Tab capture by these origins), 'ScreenCaptureAllowed' (Allow or deny screen capture).\r\n\r\nFor detailed information on valid url patterns, please see https://go.microsoft.com/fwlink/?linkid=2095322. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~screencapture_windowcaptureallowedbyorigins_windowcaptureallowedbyoriginsdesc","displayName":"Allow Window and Tab capture by these origins (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled","displayName":"Enable Microsoft Defender SmartScreen DNS requests","description":"This policy lets you configure whether to enable DNS requests made by Microsoft Defender SmartScreen. Note: Disabling DNS requests will prevent Microsoft Defender SmartScreen from getting IP addresses, and potentially impact the IP-based protections provided.\r\n\r\nIf you enable or don't configure this setting, Microsoft Defender SmartScreen will make DNS requests.\r\n\r\nIf you disable this setting, Microsoft Defender SmartScreen will not make any DNS requests.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management, or macOS instances that are that are managed via MDM or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev97~policy~microsoft_edge~smartscreen_smartscreendnsrequestsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge","description":"This policy lets you enhance the security state in Microsoft Edge.\r\n\r\nIf you set this policy to 'StandardMode', the enhanced mode will be turned off and Microsoft Edge will fallback to its standard security mode.\r\n\r\nIf you set this policy to 'BalancedMode', the security state will be in balanced mode.\r\n\r\nIf you set this policy to 'StrictMode', the security state will be in strict mode.\r\n\r\nIf you set this policy to 'BasicMode', the security state will be in basic mode.\r\n\r\nNote: Sites that use WebAssembly (WASM) are not currently supported when 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) is enabled. If you require access to a site that uses WASM, consider adding it to your exception list as described in https://go.microsoft.com/fwlink/?linkid=2183321.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2195852\r\n\r\nPolicy options mapping:\r\n\r\n* StandardMode (0) = Standard mode\r\n\r\n* BalancedMode (1) = Balanced mode\r\n\r\n* StrictMode (2) = Strict mode\r\n\r\n* BasicMode (2) = Basic mode\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_0","displayName":"Standard mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_1","displayName":"Balanced mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_2","displayName":"Strict mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98.1~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_3","displayName":"Basic mode","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled","displayName":"Enable Follow service in Microsoft Edge (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 126.\r\n\r\nLets Microsoft Edge browser enable Follow service and apply it to users.\r\n\r\nUsers can use the Follow feature for an influencer, site, or topic in Microsoft Edge..\r\n\r\nIf you enable or don't configure this policy, Follow in Microsoft Edge can be applied.\r\n\r\nIf you disable this policy, Microsoft Edge will not communicate with Follow service to provide the follow feature.\r\n\r\nThis policy is obsolete after version 126.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_edgefollowenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge","description":"This policy lets you enhance the security state in Microsoft Edge.\r\n\r\nIf you set this policy to 'StandardMode', the enhanced mode will be turned off and Microsoft Edge will fallback to its standard security mode.\r\n\r\nIf you set this policy to 'BalancedMode', the security state will be in balanced mode.\r\n\r\nIf you set this policy to 'StrictMode', the security state will be in strict mode.\r\n\r\nIf you set this policy to 'BasicMode', the security state will be in basic mode.\r\n\r\nNote: Sites that use WebAssembly (WASM) are not supported on 32-bit systems when 'EnhanceSecurityMode' (Enhance the security state in Microsoft Edge) is enabled. If you require access to a site that uses WASM, consider adding it to your exception list as described in https://go.microsoft.com/fwlink/?linkid=2183321.\r\n\r\nStarting in Microsoft Edge 113, 'BasicMode' is deprecated and is treated the same as 'BalancedMode'. It won't work in Microsoft Edge version 116.\r\n\r\nFor detailed information about Enhanced Security Mode, see https://go.microsoft.com/fwlink/?linkid=2185895\r\n\r\nPolicy options mapping:\r\n\r\n* StandardMode (0) = Standard mode\r\n\r\n* BalancedMode (1) = Balanced mode\r\n\r\n* StrictMode (2) = Strict mode\r\n\r\n* BasicMode (3) = (Deprecated) Basic mode\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode","displayName":"Enhance the security state in Microsoft Edge (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_0","displayName":"Standard mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_1","displayName":"Balanced mode","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymode_enhancesecuritymode_2","displayName":"Strict mode","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains","displayName":"Configure the list of domains for which enhance security mode will not be enforced","description":"Configure the list of enhance security trusted domains. This means that\r\nenhance security mode will not be enforced when loading the sites in trusted domains.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodebypasslistdomains_enhancesecuritymodebypasslistdomainsdesc","displayName":"Configure the list of domains for which enhance security mode will not be enforced (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains","displayName":"Configure the list of domains for which enhance security mode will always be enforced","description":"Configure the list of enhance security untrusted domains. This means that\r\nenhance security mode will always be enforced when loading the sites in untrusted domains.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_enhancesecuritymodeenforcelistdomains_enhancesecuritymodeenforcelistdomainsdesc","displayName":"Configure the list of domains for which enhance security mode will always be enforced (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled","displayName":"In-app support Enabled","description":"Microsoft Edge uses the in-app support feature (enabled by default) to allow users to contact our support agents directly from the browser. Also, by default, users can't disable (turn off) the in-app support feature.\r\n\r\nIf you enable this policy or don't configure it, users can invoke in-app support.\r\n\r\nIf you disable this policy, users can't invoke in-app support.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_inappsupportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled","displayName":"Microsoft Edge Insider Promotion Enabled","description":"Shows content promoting the Microsoft Edge Insider channels on the About Microsoft Edge settings page.\r\n\r\nIf you enable or don't configure this policy, the Microsoft Edge Insider promotion content will be shown on the About Microsoft Edge page.\r\n\r\nIf you disable this policy, the Microsoft Edge Insider promotion content will not be shown on the About Microsoft Edge page.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_microsoftedgeinsiderpromotionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled","displayName":"Allow using the deprecated U2F Security Key API (obsolete)","description":"OBSOLETE: This policy is obsolete and doesn't work after Microsoft Edge 103.\r\n\r\nThis policy is obsolete because it was intended to be a short-term mechanism to give enterprises more time to update their web content when it's found to be incompatible with the change to remove the U2F Security Key API. It doesn't work in Microsoft Edge after version 103.\r\n\r\nIf you enable this policy, the deprecated U2F Security Key API can be used and the deprecation reminder prompt shown for U2F API requests is suppressed.\r\n\r\nIf you disable this policy or don't configure it, the U2F Security Key API is disabled by default and can only be used by sites that register for and use the U2FSecurityKeyAPI origin trial which ended after Microsoft Edge version 103.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge_u2fsecuritykeyapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings","displayName":"Print preview sticky settings","description":"Specifies whether print preview should apply last used settings for Microsoft Edge PDF and webpages.\r\n\r\nIf you set this policy to 'EnableAll' or don't configure it, Microsoft Edge applies the last used print preview settings for both PDF and webpages.\r\n\r\nIf you set this policy to 'DisableAll', Microsoft Edge doesn't apply the last used print preview settings for both PDF and webpages.\r\n\r\nIf you set this policy to 'DisablePdf', Microsoft Edge doesn't apply the last used print preview settings for PDF printing and retains it for webpages.\r\n\r\nIf you set this policy to 'DisableWebpage', Microsoft Edge doesn't apply the last used print preview settings for webpage printing and retain it for PDF.\r\n\r\nThis policy is only available if you enable or don't configure the 'PrintingEnabled' (Enable printing) policy.\r\n\r\nPolicy options mapping:\r\n\r\n* EnableAll (0) = Enable sticky settings for PDF and Webpages\r\n\r\n* DisableAll (1) = Disable sticky settings for PDF and Webpages\r\n\r\n* DisablePdf (2) = Disable sticky settings for PDF\r\n\r\n* DisableWebpage (3) = Disable sticky settings for Webpages\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings","displayName":"Print preview sticky settings (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_0","displayName":"Enable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_1","displayName":"Disable sticky settings for PDF and Webpages","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_2","displayName":"Disable sticky settings for PDF","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev98~policy~microsoft_edge~printing_printstickysettings_printstickysettings_3","displayName":"Disable sticky settings for Webpages","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled","displayName":"Configure address bar editing","description":"If you enable or don't configure this policy, users can change the URL in the address bar.\r\n\r\nIf you disable this policy, it prevents users from changing the URL in the address bar.\r\n\r\nNote: This policy doesn't prevent the browser from navigating to any URL. Users can still navigate to any URL by using the search option in the default New Tab Page, or using any link that leads to a web search engine. To ensure that users can only go to sites you expect, consider configuring the following policies in addition to this policy:\r\n\r\n- 'NewTabPageLocation' (Configure the new tab page URL)\r\n\r\n- 'HomepageLocation' (Configure the home page URL)\r\n\r\n- 'HomepageIsNewTabPage' (Set the new tab page as the home page)\r\n\r\n- 'URLBlocklist' (Block access to a list of URLs) and 'URLAllowlist' (Define a list of allowed URLs) to scope the pages that browser can navigate to.\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_addressbareditingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_allowgamesmenu","displayName":"Allow users to access the games menu","description":"If you enable or don't configure this policy, users can access the games menu.\r\n\r\nIf you disable this policy, users won't be able to access the games menu.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_allowgamesmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_allowgamesmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins","displayName":"Define a list of protocols that can not be silently blocked by anti-flood protection","description":"Allows you to create a list of protocols, and for each protocol an associated list of allowed origin patterns. These origins won't be silently blocked from launching an external application by anti-flood protection. The trailing separator shouldn't be included when listing the protocol. For example, list \"skype\" instead of \"skype:\" or \"skype://\".\r\n\r\nIf you configure this policy, a protocol will only be permitted to bypass being silently blocked by anti-flood protection if:\r\n\r\n- the protocol is listed\r\n\r\n- the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list.\r\n\r\nIf either condition is false, the external protocol launch may be blocked by anti-flood protection.\r\n\r\nIf you don't configure this policy, no protocols can bypass being silently blocked.\r\n\r\nThe origin matching patterns use a similar format to those for the 'URLBlocklist' (Block access to a list of URLs) policy, that are documented at https://go.microsoft.com/fwlink/?linkid=2095322.\r\n\r\nHowever, origin matching patterns for this policy cannot contain \"/path\" or \"@query\" elements. Any pattern that does contain a \"/path\" or \"@query\" element will be ignored.\r\n\r\nThis policy doesn't work as expected with file://* wildcards.\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"protocol\": \"spotify\",\r\n \"allowed_origins\": [\r\n \"example.com\",\r\n \"http://www.example.com:8080\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"msteams\",\r\n \"allowed_origins\": [\r\n \"https://example.com\",\r\n \"https://.mail.example.com\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"msoutlook\",\r\n \"allowed_origins\": [\r\n \"*\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_donotsilentlyblockprotocolsfromorigins_donotsilentlyblockprotocolsfromorigins","displayName":"Define a list of protocols that can not be silently blocked by anti-flood protection (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled","displayName":"Show Hubs Sidebar","description":"Shows a launcher bar on the right side of Microsoft Edge's screen.\r\n\r\nEnable this policy to always show the Sidebar.\r\nDisable this policy to never show the Sidebar.\r\n\r\nIf you don't configure the policy, users can choose whether to show the Sidebar.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_hubssidebarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting","displayName":"Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app","description":"This setting lets you enable reporting of sites that might need to be configured as a neutral site on the Enterprise Mode Site List. The user must be signed into Microsoft Edge with a valid work or school account for reports to be sent, and the user's account tenant must match the tenant specified by the policy.\r\n\r\nIf you configure this policy, Microsoft Edge will send a report to the M365 Admin Center Site Lists app when a navigation appears stuck redirecting back and forth between the Microsoft Edge and Internet Explorer engines several times. This usually indicates that redirection to an authentication server is switching engines, which repeatedly fails in a loop. The report will show the URL of the site that is the redirect target, minus any query string or fragment. The user's identity isn't reported.\r\n\r\nFor this reporting to work correctly, you must have successfully visited the Microsoft Edge Site Lists app in the M365 Admin Center at least once. This activates a per-tenant storage account used to store these reports. Microsoft Edge will still attempt to send reports if this step hasn't been completed. However, the reports will not be stored in the Site Lists app.\r\n\r\nWhen enabling this policy, you must specify your O365 tenant ID. To learn more about finding your O365 tenant ID, see https://go.microsoft.com/fwlink/?linkid=2185668\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will never send reports about potentially misconfigured neutral sites to the Site Lists app.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudneutralsitesreporting_internetexplorerintegrationcloudneutralsitesreporting","displayName":"Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting","displayName":"Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app","description":"This setting lets you enable reporting of sites that Microsoft Edge users add to their local IE Mode site list. The user must be signed into Microsoft Edge with a valid work or school account for reports to be sent, and the user's account tenant must match the tenant specified by the policy.\r\n\r\nIf you configure this policy, Microsoft Edge will send a report to the M365 Admin Center Site Lists app when a user adds a site to their local IE mode site list. The report will show the URL of the site the user added, minus any query string or fragment. The user's identity isn't reported.\r\n\r\nFor this reporting to work correctly, you must have successfully visited the Microsoft Edge Site Lists app in the M365 Admin Center at least once. This activates a per-tenant storage account used to store these reports. Microsoft Edge will still attempt to send reports if this step hasn't been completed. However, the reports will not be stored in the Site Lists app.\r\n\r\nWhen enabling this policy, you must specify your O365 tenant ID. To learn more about finding your O365 tenant ID, see https://go.microsoft.com/fwlink/?linkid=2185668\r\n\r\nIf you disable or don't configure this policy, Microsoft Edge will never send reports about URLs added to a user's local site list to the Site Lists app.\r\n\r\nTo learn more about Internet Explorer mode, see https://go.microsoft.com/fwlink/?linkid=2165707\r\n\r\nExample value: aba95e58-070f-4784-8dcd-e5fd46c2c6d6","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_internetexplorerintegrationcloudusersitesreporting_internetexplorerintegrationcloudusersitesreporting","displayName":"Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended","displayName":"Show Hubs Sidebar","description":"Shows a launcher bar on the right side of Microsoft Edge's screen.\r\n\r\nEnable this policy to always show the Sidebar.\r\nDisable this policy to never show the Sidebar.\r\n\r\nIf you don't configure the policy, users can choose whether to show the Sidebar.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended_hubssidebarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended","displayName":"Enable sign in click to action dialog","description":"Configure this policy to show sign in click to action dialog on New tab page.\r\n\r\nIf you enable or don't configure this policy, sign in click to action dialog is shown on New tab page.\r\n\r\nIf you disable this policy, sign in click to action dialog isn't shown on the New tab page.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_recommended~identity_recommended_signinctaonntpenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled","displayName":"Configure Related Matches in Find on Page","description":"Specifies how the user receives related matches in Find on Page, which provides spellcheck, synonyms, and Q&A results in Microsoft Edge.\r\n\r\nIf you enable or don't configure this policy, users can receive related matches in Find on Page on all sites. The results are processed in a cloud service.\r\n\r\nIf you disable this policy, users can receive related matches in Find on Page on limited sites. The results are processed on the user's device.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_relatedmatchescloudserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked","displayName":"Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe","description":"Microsoft Edge will block navigations to external protocols inside a\r\nsandboxed iframe.\r\n\r\nIf you enable or don't configure this policy, Microsoft Edge will block those navigations.\r\n\r\nIf you disable this policy, Microsoft Edge will not block those navigations.\r\n\r\nThis can be used by administrators who need more time to update their internal website affected by this new restriction. This Enterprise policy is temporary; it's intended to be removed after Microsoft Edge version 104.\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_sandboxexternalprotocolblocked_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction","displayName":"Enable or disable the User-Agent Reduction","description":"The User-Agent HTTP request header is scheduled to be reduced. To facilitate testing and compatibility, this policy can enable the reduction feature for all websites, or disable the ability for origin trials, or field trials to enable the feature.\r\n\r\nIf you don't configure this policy or set it to Default, User-Agent will be controlled by experimentation.\r\n\r\nSet this policy to 'ForceEnabled' to force the reduced version of the User-Agent request header.\r\n\r\nSet this policy to 'ForceDisabled' to force the full version of the User-Agent request header.\r\n\r\nTo learn more about the User-Agent string, read here:\r\n\r\nhttps://docs.microsoft.com/en-us/microsoft-edge/web-platform/user-agent-guidance.\r\n\r\n\r\nPolicy options mapping:\r\n\r\n* Default (0) = User-Agent reduction will be controllable via Experimentation\r\n\r\n* ForceDisabled (1) = User-Agent reduction diabled, and not enabled by Experimentation\r\n\r\n* ForceEnabled (2) = User-Agent reduction will be enabled for all origins\r\n\r\nUse the preceding information when configuring this policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction","displayName":"Enable or disable the User-Agent Reduction (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_0","displayName":"User-Agent reduction will be controllable via Experimentation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_1","displayName":"User-Agent reduction diabled, and not enabled by Experimentation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge_useragentreduction_useragentreduction_2","displayName":"User-Agent reduction will be enabled for all origins","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist","displayName":"Configure the list of domains for which the password manager UI (Save and Fill) will be disabled","description":"Configure the list of domains where Microsoft Edge should disable the password manager. This means that Save and Fill workflows will be disabled, ensuring that passwords for those websites can't be saved or auto filled into web forms.\r\n\r\nIf you enable this policy, the password manager will be disabled for the specified set of domains.\r\n\r\nIf you disable or don't configure this policy, password manager will work as usual for all domains.\r\n\r\nIf you configure this policy, that is, add domains for which password manager is blocked, users can't change or override the behavior in Microsoft Edge. In addition, users can't use password manager for those URLs.\r\n\r\nExample value:\r\n\r\nhttps://contoso.com/\r\nhttps://login.contoso.com","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_microsoft_edgev99~policy~microsoft_edge~passwordmanager_passwordmanagerblocklist_passwordmanagerblocklistdesc","displayName":"Configure the list of domains for which the password manager UI (Save and Fill) will be disabled (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_mixedreality_aadgroupmembershipcachevalidityindays","displayName":"AAD Group Membership Cache Validity In Days","description":"This policy controls for how many days, AAD group membership cache is allowed to be used for Assigned Access configurations targeting AAD groups for signed in user. Once this policy is set only then cache is used otherwise not. In order for this policy to take effect, user must sign-out and sign-in with Internet available at least once before the cache can be used for subsequent 'disconnected' sessions.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#aadgroupmembershipcachevalidityindays"],"options":null},{"id":"device_vendor_msft_policy_config_mixedreality_allowcaptiveportalbeforelogon","displayName":"Allow Captive Portal Before Logon","description":"This policy controls whether the device will display the captive portal flow on the HoloLens sign in screen's network selection page when a captive portal network is detected. Displaying the captive portal flow is disabled by default to reduce the potential of gaining unauthorized access to the device through the browser.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#allowcaptiveportalbeforelogon"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_allowcaptiveportalbeforelogon_0","displayName":"Displaying captive portal is not allowed.","description":"Displaying captive portal is not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_allowcaptiveportalbeforelogon_1","displayName":"Displaying captive portal is allowed.","description":"Displaying captive portal is allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_allowlaunchuriinsingleappkiosk","displayName":"Allow Launch Uri In Single App Kiosk","description":"By default, launching applications via Launcher API (Launcher Class (Windows.System) - Windows UWP applications | Microsoft Docs) is disabled in single app kiosk mode. To enable applications to launch in single app kiosk mode on HoloLens devices, set the policy value to true.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#allowlaunchuriinsingleappkiosk"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_allowlaunchuriinsingleappkiosk_0","displayName":"Applications are not allowed to be launched with Launcher API, when in single app kiosk mode.","description":"Applications are not allowed to be launched with Launcher API, when in single app kiosk mode.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_allowlaunchuriinsingleappkiosk_1","displayName":"Applications are allowed to be launched with Launcher API, when in single app kiosk mode.","description":"Applications are allowed to be launched with Launcher API, when in single app kiosk mode.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_autologonuser","displayName":"Auto Logon User","description":"This policy controls whether a user will be automatically logged on. When the policy is set to a non-empty value, it specifies the email address of the auto-logon user. The specified user must logon to the device at least once to enable auto-logon.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#autologonuser"],"options":null},{"id":"device_vendor_msft_policy_config_mixedreality_automaticdisplayadjustment","displayName":"Automatic Display Adjustment","description":"This policy controls if the HoloLens displays will be automatically adjusted for your eyes to improve hologram visual quality when an user wears the device. When this feature is enabled, a new user upon wearing the device will not be prompted to calibrate and yet the displays will be adjusted to suite them automatically. However if an immersive application is launched that depends on eye tracking interactions, the user will be prompted to perform the calibration.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_automaticdisplayadjustment_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_automaticdisplayadjustment_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_brightnessbuttondisabled","displayName":"Brightness Button Disabled","description":"This policy setting controls if pressing the brightness button changes the brightness or not. It only impacts brightness on HoloLens and not the functionality of the button when it's used with other buttons as combination for other purposes.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_brightnessbuttondisabled_0","displayName":"Disabled","description":"Brightness can be changed with press of brightness button.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_brightnessbuttondisabled_1","displayName":"Enabled","description":"Brightness cannot be changed with press of brightness button.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_configuremovingplatform","displayName":"Configure Moving Platform","description":"This policy controls the behavior of moving platform feature on HoloLens 2, that is, whether it’s turned off / on or it can be toggled by a user. It should only be used by customers who intend to use HoloLens 2 in moving environments with low dynamic motion. Please refer to HoloLens 2 Moving Platform Mode for background information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#configuremovingplatform"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_configuremovingplatform_0","displayName":"Last set user's preference. Initial state is OFF and after that user's preference is persisted across reboots and is used to initialize the system.","description":"Last set user's preference. Initial state is OFF and after that user's preference is persisted across reboots and is used to initialize the system.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_configuremovingplatform_1","displayName":"Moving platform is disabled and cannot be changed by user.","description":"Moving platform is disabled and cannot be changed by user.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_configuremovingplatform_2","displayName":"Moving platform is enabled and cannot be changed by user.","description":"Moving platform is enabled and cannot be changed by user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_disallownetworkconnectivitypassivepolling","displayName":"Disallow Network Connectivity Passive Polling","description":"Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. This policy allows IT admins to disable NCSI passive polling. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#disallownetworkconnectivitypassivepolling"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_disallownetworkconnectivitypassivepolling_0","displayName":"Allowed.","description":"Allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_disallownetworkconnectivitypassivepolling_1","displayName":"Not allowed.","description":"Not allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_eyetrackingcalibrationprompt","displayName":"Eye Tracking Calibration Prompt","description":"This policy controls when a new person uses Hololens device, if Hololens should automatically ask to run eye calibration.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_eyetrackingcalibrationprompt_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_eyetrackingcalibrationprompt_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_fallbackdiagnostics","displayName":"Fallback Diagnostics","description":"This policy setting controls, when and if diagnostic logs can be collected using specific button combination on HoloLens.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#fallbackdiagnostics"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_fallbackdiagnostics_0","displayName":"Not allowed. Diagnostic logs cannot be collected by pressing the button combination.","description":"Not allowed. Diagnostic logs cannot be collected by pressing the button combination.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_fallbackdiagnostics_1","displayName":"Allowed for device owners only. Diagnostics logs can be collected by pressing the button combination only if signed-in user is considered as device owner.","description":"Allowed for device owners only. Diagnostics logs can be collected by pressing the button combination only if signed-in user is considered as device owner.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_fallbackdiagnostics_2","displayName":"Allowed for all users. Diagnostic logs can be collected by pressing the button combination.","description":"Allowed for all users. Diagnostic logs can be collected by pressing the button combination.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_headtrackingmode","displayName":"Head Tracking Mode","description":"This policy configures behavior of HUP to determine, which algorithm to use for head tracking. It requires a reboot for the policy to take effect.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_mixedreality_manualdowndirectiondisabled","displayName":"Manual Down Direction Disabled","description":"This policy controls whether the user can change down direction manually or not. If no down direction is set by the user, then an automatically calculated down direction is used by the system. This policy has no dependency on ConfigureMovingPlatform policy and they can be set independently.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#manualdowndirectiondisabled"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_manualdowndirectiondisabled_0","displayName":"User is allowed to manually change down direction.","description":"User is allowed to manually change down direction.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_manualdowndirectiondisabled_1","displayName":"User is not allowed to manually change down direction.","description":"User is not allowed to manually change down direction.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_microphonedisabled","displayName":"Microphone Disabled","description":"This policy setting controls whether microphone on HoloLens 2 is disabled or not.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_microphonedisabled_0","displayName":"Disabled","description":"Microphone can be used for voice.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_microphonedisabled_1","displayName":"Enabled","description":"Microphone cannot be used for voice.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_skipcalibrationduringsetup","displayName":"Skip Calibration During Setup","description":"This policy configures whether the device will take the user through the eye tracking calibration process during device setup and first time user setup. If this policy is enabled, the device will not show the eye tracking calibration process during device setup and first time user setup. Note that until the user goes through the calibration process, eye tracking will not work on the device. If an app requires eye tracking and the user has not gone through the calibration process, the user will be prompted to do so.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#skipcalibrationduringsetup"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_skipcalibrationduringsetup_0","displayName":"Eye tracking calibration process will be shown during device setup and first time user setup.","description":"Eye tracking calibration process will be shown during device setup and first time user setup.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_skipcalibrationduringsetup_1","displayName":"Eye tracking calibration process will not be shown during device setup and first time user setup.","description":"Eye tracking calibration process will not be shown during device setup and first time user setup.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_skiptrainingduringsetup","displayName":"Skip Training During Setup","description":"This policy configures whether the device will take the user through a training process during device setup and first time user setup. If this policy is enabled, the device will not show the training process during device setup and first time user setup. If the user wishes to go through that training process, the user can launch the Tips app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#skiptrainingduringsetup"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_skiptrainingduringsetup_0","displayName":"Training process will be shown during device setup and first time user setup.","description":"Training process will be shown during device setup and first time user setup.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_skiptrainingduringsetup_1","displayName":"Training process will not be shown during device setup and first time user setup.","description":"Training process will not be shown during device setup and first time user setup.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_visitorautologon","displayName":"Visitor Auto Logon","description":"This policy controls whether a visitor user will be automatically logged in. Visitor users can only be created and logged in, if an Assigned Access profile has been created targeting visitor users. A visitor user will only be automatically logged in, if no other user has logged in on the device before.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-MixedReality#visitorautologon"],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_visitorautologon_0","displayName":"Visitor user will not be signed in automatically.","description":"Visitor user will not be signed in automatically.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_visitorautologon_1","displayName":"Visitor user will be signed in automatically.","description":"Visitor user will be signed in automatically.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mixedreality_volumebuttondisabled","displayName":"Volume Button Disabled","description":"This policy setting controls if pressing the volume button changes the volume or not. It only impacts volume on HoloLens and not the functionality of the button when it's used with other buttons as combination for other purposes.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_mixedreality_volumebuttondisabled_0","displayName":"Disabled","description":"Volume can be changed with press of the volume button.","helpText":null},{"id":"device_vendor_msft_policy_config_mixedreality_volumebuttondisabled_1","displayName":"Enabled","description":"Volume cannot be changed with press of the volume button.","helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_applyuacrestrictionstolocalaccountsonnetworklogon","displayName":"Apply UAC restrictions to local accounts on network logons","description":"This setting controls whether local accounts can be used for remote administration via network logon (e.g., NET USE, connecting to C$, etc.). Local accounts are at high risk for credential theft when the same account and password is configured on multiple systems. Enabling this policy significantly reduces that risk.\r\n\r\nEnabled (recommended): Applies UAC token-filtering to local accounts on network logons. Membership in powerful group such as Administrators is disabled and powerful privileges are removed from the resulting access token. This configures the LocalAccountTokenFilterPolicy registry value to 0. This is the default behavior for Windows.\r\n\r\nDisabled: Allows local accounts to have full administrative rights when authenticating via network logon, by configuring the LocalAccountTokenFilterPolicy registry value to 1.\r\n\r\nFor more information about local accounts and credential theft, see \"Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques\": http://www.microsoft.com/en-us/download/details.aspx?id=36036.\r\n\r\nFor more information about LocalAccountTokenFilterPolicy, see http://support.microsoft.com/kb/951016.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-applyuacrestrictionstolocalaccountsonnetworklogon"],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_applyuacrestrictionstolocalaccountsonnetworklogon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_applyuacrestrictionstolocalaccountsonnetworklogon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver","displayName":"Configure SMB v1 client driver","description":"Configures the SMB v1 client driver's start type.\r\n\r\nTo disable client-side processing of the SMBv1 protocol, select the \"Enabled\" radio button, then select \"Disable driver\" from the dropdown.\r\nWARNING: DO NOT SELECT THE \"DISABLED\" RADIO BUTTON UNDER ANY CIRCUMSTANCES!\r\n\r\nFor Windows 7 and Servers 2008, 2008R2, and 2012, you must also configure the \"Configure SMB v1 client (extra setting needed for pre-Win8.1/2012R2)\" setting.\r\n\r\nTo restore default SMBv1 client-side behavior, select \"Enabled\" and choose the correct default from the dropdown:\r\n* \"Manual start\" for Windows 7 and Windows Servers 2008, 2008R2, and 2012;\r\n* \"Automatic start\" for Windows 8.1 and Windows Server 2012R2 and newer.\r\n\r\nChanges to this setting require a reboot to take effect.\r\n\r\nFor more information, see https://support.microsoft.com/kb/2696547 \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-configuresmbv1clientdriver"],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_pol_secguide_smb1clientdriver","displayName":"Configure MrxSmb10 driver","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_pol_secguide_smb1clientdriver_4","displayName":"Disable driver (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_pol_secguide_smb1clientdriver_3","displayName":"Manual start (default for Win7/2008/2008R2/2012)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1clientdriver_pol_secguide_smb1clientdriver_2","displayName":"Automatic start (default for Win8.1/2012R2/newer)","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1server","displayName":"Configure SMB v1 server","description":"Disabling this setting disables server-side processing of the SMBv1 protocol. (Recommended.)\r\n\r\nEnabling this setting enables server-side processing of the SMBv1 protocol. (Default.)\r\n\r\nChanges to this setting require a reboot to take effect.\r\n\r\nFor more information, see https://support.microsoft.com/kb/2696547\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-configuresmbv1server"],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1server_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_configuresmbv1server_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_enablestructuredexceptionhandlingoverwriteprotection","displayName":"Enable Structured Exception Handling Overwrite Protection (SEHOP)","description":"If this setting is enabled, SEHOP is enforced. For more information, see https://support.microsoft.com/en-us/help/956607/how-to-enable-structured-exception-handling-overwrite-protection-sehop-in-windows-operating-systems.\r\n\r\nIf this setting is disabled or not configured, SEHOP is not enforced for 32-bit processes.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-enablestructuredexceptionhandlingoverwriteprotection"],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_enablestructuredexceptionhandlingoverwriteprotection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_enablestructuredexceptionhandlingoverwriteprotection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration","displayName":"NetBT NodeType configuration","description":"The NetBT NodeType setting determines what methods NetBT uses to register and resolve names:\r\n* A B-node computer uses broadcasts.\r\n* A P-node computer uses only point-to-point name queries to a name server (WINS).\r\n* An M-node computer broadcasts first, and then queries the name server.\r\n* An H-node computer queries the name server first, and then broadcasts.\r\nResolution through LMHOSTS or DNS follows these methods. If the NodeType value is present, it overrides any DhcpNodeType value.\r\nIf neither NodeType nor DhcpNodeType is present, the computer uses B-node if there are no WINS servers configured for the network, or H-node if there is at least one WINS server configured.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-netbtnodetypeconfiguration"],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg","displayName":"Configure NetBT NodeType (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg_1","displayName":"B-node","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg_2","displayName":"P-node (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg_4","displayName":"M-node","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_netbtnodetypeconfiguration_pol_secguide_secguide_netbtnodetypecfg_8","displayName":"H-node","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications","displayName":"Turn on Windows Defender protection against Potentially Unwanted Applications (DEPRECATED)","description":"If this setting is enabled, Windows Defender protects against Potentially Unwanted Applications. For more information, see https://blogs.technet.microsoft.com/mmpc/2015/11/25/shields-up-on-potentially-unwanted-applications-in-your-enterprise/.\r\n\r\nIf this setting is disabled or not configured, Potentially Unwanted Application protection is disabled.\r\n\r\nBeginning with Windows 10 v1809 and Windows Server 2019, this functionality should instead be configured through the following Group Policy setting:\r\nComputer Configuration\\Administrative Templates\\Windows Components\\Windows Defender Antivirus, Configure detection for potentially unwanted applications.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications"],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_mssecurityguide_wdigestauthentication","displayName":"WDigest Authentication (disabling may require KB2871997)","description":"When WDigest authentication is enabled, Lsass.exe retains a copy of the user's plaintext password in memory, where it can be at risk of theft. Microsoft recommends disabling WDigest authentication unless it is needed.\r\n\r\nIf this setting is not configured, WDigest authentication is disabled in Windows 8.1 and in Windows Server 2012 R2; it is enabled by default in earlier versions of Windows and Windows Server.\r\n\r\nUpdate KB2871997 must first be installed to disable WDigest authentication using this setting in Windows 7, Windows 8, Windows Server 2008 R2 and Windows Server 2012.\r\n\r\nEnabled: Enables WDigest authentication.\r\n\r\nDisabled (recommended): Disables WDigest authentication. For this setting to work on Windows 7, Windows 8, Windows Server 2008 R2 or Windows Server 2012, KB2871997 must first be installed.\r\n\r\nFor more information, see http://support.microsoft.com/kb/2871997 and http://blogs.technet.com/b/srd/archive/2014/06/05/an-overview-of-kb2871997.aspx .\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-mssecurityguide#mssecurityguide-wdigestauthentication"],"options":[{"id":"device_vendor_msft_policy_config_mssecurityguide_wdigestauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_mssecurityguide_wdigestauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_msslegacy_allowicmpredirectstooverrideospfgeneratedroutes","displayName":"MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes","description":"MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-msslegacy#msslegacy-allowicmpredirectstooverrideospfgeneratedroutes"],"options":[{"id":"device_vendor_msft_policy_config_msslegacy_allowicmpredirectstooverrideospfgeneratedroutes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_allowicmpredirectstooverrideospfgeneratedroutes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_msslegacy_allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers","displayName":"MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers","description":"MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-msslegacy#msslegacy-allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers"],"options":[{"id":"device_vendor_msft_policy_config_msslegacy_allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_allowthecomputertoignorenetbiosnamereleaserequestsexceptfromwinsservers_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel","displayName":"MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)","description":"MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-msslegacy#msslegacy-ipsourceroutingprotectionlevel"],"options":[{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_disableipsourcerouting","displayName":"DisableIPSourceRouting (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_disableipsourcerouting_0","displayName":"No additional protection, source routed packets are allowed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_disableipsourcerouting_1","displayName":"Medium, source routed packets ignored when IP forwarding is enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipsourceroutingprotectionlevel_disableipsourcerouting_2","displayName":"Highest protection, source routing is completely disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel","displayName":"MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)","description":"MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-msslegacy#msslegacy-ipv6sourceroutingprotectionlevel"],"options":[{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_disableipsourceroutingipv6","displayName":"DisableIPSourceRoutingIPv6 (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_disableipsourceroutingipv6_0","displayName":"No additional protection, source routed packets are allowed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_disableipsourceroutingipv6_1","displayName":"Medium, source routed packets ignored when IP forwarding is enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_msslegacy_ipv6sourceroutingprotectionlevel_disableipsourceroutingipv6_2","displayName":"Highest protection, source routing is completely disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_networkisolation_enterprisecloudresources","displayName":"Enterprise Cloud Resources","description":"Contains a list of Enterprise resource domains hosted in the cloud that need to be protected. Connections to these resources are considered enterprise data. If a proxy is paired with a cloud resource, traffic to the cloud resource will be routed through the enterprise network via the denoted proxy server (on Port 80). A proxy server used for this purpose must also be configured using the EnterpriseInternalProxyServers policy. This domain list is a pipe-separated list of cloud resources. Each cloud resource can also be paired optionally with an internal proxy server by using a trailing comma followed by the proxy address. For example, ||,||,|.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterprisecloudresources"],"options":null},{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseinternalproxyservers","displayName":"Enterprise Internal Proxy Servers","description":"This is the comma-separated list of internal proxy servers. For example 157.54.14.28, 157.54.11.118, 10.202.14.167, 157.53.14.163, 157.69.210.59. These proxies have been configured by the admin to connect to specific resources on the Internet. They are considered to be enterprise network locations. The proxies are only leveraged in configuring the EnterpriseCloudResources policy to force traffic to the matched cloud resources through these proxies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseinternalproxyservers"],"options":null},{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseiprange","displayName":"Enterprise IP Range","description":"Sets the enterprise IP ranges that define the computers in the enterprise network. Data that comes from those computers will be considered part of the enterprise and protected. These locations will be considered a safe destination for enterprise data to be shared to. This is a comma-separated list of IPv4 and IPv6 ranges.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseiprange"],"options":null},{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseiprangesareauthoritative","displayName":"Enterprise IP Ranges Are Authoritative","description":"Boolean value that tells the client to accept the configured list and not to use heuristics to attempt to find other subnets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseiprangesareauthoritative"],"options":[{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseiprangesareauthoritative_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseiprangesareauthoritative_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_networkisolation_enterprisenetworkdomainnames","displayName":"Enterprise Network Domain Names","description":"This is the list of domains that comprise the boundaries of the enterprise. Data from one of these domains that is sent to a device will be considered enterprise data and protected These locations will be considered a safe destination for enterprise data to be shared to. This is a comma-separated list of domains, for example contoso. sharepoint. com, Fabrikam. com. Note The client requires domain name to be canonical, otherwise the setting will be rejected by the client.  Here are the steps to create canonical domain names:Transform the ASCII characters (A-Z only) to lower case. For example, Microsoft. COM -> microsoft. com. Call IdnToAscii with IDN_USE_STD3_ASCII_RULES as the flags. Call IdnToUnicode with no flags set (dwFlags = 0).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterprisenetworkdomainnames"],"options":null},{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseproxyservers","displayName":"Enterprise Proxy Servers","description":"This is a comma-separated list of proxy servers. Any server on this list is considered non-enterprise. For example 157.54.14.28, 157.54.11.118, 10.202.14.167, 157.53.14.163, 157.69.210.59.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseproxyservers"],"options":null},{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseproxyserversareauthoritative","displayName":"Enterprise Proxy Servers Are Authoritative","description":"Boolean value that tells the client to accept the configured list of proxies and not try to detect other work proxies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#enterpriseproxyserversareauthoritative"],"options":[{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseproxyserversareauthoritative_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_networkisolation_enterpriseproxyserversareauthoritative_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_networkisolation_neutralresources","displayName":"Neutral Resources","description":"List of domain names that can used for work or personal resource.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkIsolation#neutralresources"],"options":null},{"id":"device_vendor_msft_policy_config_networklistmanager_allowedtlsauthenticationendpoints","displayName":"Allowed Tls Authentication Endpoints","description":"List of URLs (seperated by Unicode character 0xF000) to endpoints accessible only within an enterprise's network. If any of the URLs can be resolved over HTTPS, the network would be considered authenticated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkListManager#allowedtlsauthenticationendpoints"],"options":null},{"id":"device_vendor_msft_policy_config_networklistmanager_configuredtlsauthenticationnetworkname","displayName":"Configured Tls Authentication Network Name","description":"The string will be used to name the network authenticated against one of the endpoints listed in AllowedTlsAuthenticationEndpoints policy","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NetworkListManager#configuredtlsauthenticationnetworkname"],"options":null},{"id":"device_vendor_msft_policy_config_newsandinterests_allownewsandinterests","displayName":"Allow widgets","description":"Allow widgets\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider"],"options":[{"id":"device_vendor_msft_policy_config_newsandinterests_allownewsandinterests_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_newsandinterests_allownewsandinterests_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsboard","displayName":"Disable Widgets Board","description":"Disable widgets board","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NewsAndInterests#disablewidgetsboard"],"options":[{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsboard_0","displayName":"Enabled.","description":"Enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsboard_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsonlockscreen","displayName":"Disable Widgets On Lock Screen","description":"Disable widgets on lock screen","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-NewsAndInterests#disablewidgetsonlockscreen"],"options":[{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsonlockscreen_0","displayName":"Enabled.","description":"Enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_newsandinterests_disablewidgetsonlockscreen_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_notifications_disallowcloudnotification","displayName":"Disallow Cloud Notification","description":"This policy setting blocks applications from using the network to send tile, badge, toast, and raw notifications. Specifically, this policy setting turns off the connection between Windows and the Windows Push Notification Service (WNS). This policy setting also stops applications from being able to use periodic (polling) notifications. If you enable this policy setting, applications and system features will not be able receive notifications from the network from WNS or via notification polling APIs. If you enable this policy setting, notifications can still be raised by applications running on the machine via local API calls from within the application. If you disable or do not configure this policy setting, the client computer will connect to WNS at user login and applications will be allowed to use periodic (polling) notifications. No reboots or service restarts are required for this policy setting to take effect. WarningThis policy is designed for zero exhaust. This policy may cause some MDM processes to break because WNS notification is used by the MDM server to send real time tasks to the device, such as remote wipe, unenroll, remote find, and mandatory app installation. When this policy is set to disallow WNS, those real time processes will no longer work and some time-sensitive actions such as remote wipe when the device is stolen or unenrollment when the device is compromised will not work.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Notifications#disallowcloudnotification"],"options":[{"id":"device_vendor_msft_policy_config_notifications_disallowcloudnotification_0","displayName":"Block","description":"Enable cloud notification.","helpText":null},{"id":"device_vendor_msft_policy_config_notifications_disallowcloudnotification_1","displayName":"Allow","description":"Disable cloud notification.","helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_graphsettings_l_mapchartitadminoptin","displayName":"Allow Map Charts to send geographic data to Bing","description":"This policy setting controls whether Map Charts can send geographic data to Bing. For more information about Map Charts, see https://go.microsoft.com/fwlink/?linkid=2194000.\r\n\r\nIf you enable this policy setting, when a user adds geographic data to a new or existing map chart, that data will be sent to Bing and the map chart will be updated to include any new locations.\r\n\r\nIf you disable this policy setting, when a user adds geographic data to a new or existing map chart, the geographic data won’t be sent to Bing and the map chart won’t be updated to include any new locations. Also, the user will see a message letting them know that their map chart can’t be created.\r\n\r\nIf you don’t configure this policy setting, when a user adds geographic data to a new or existing map chart, that data will be sent to Bing and the map chart will be updated to include any new locations.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_graphsettings_l_mapchartitadminoptin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v12~policy~l_microsoftofficesystem~l_graphsettings_l_mapchartitadminoptin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingmachine","displayName":"Disable local training of all features for the computer.","description":"\r\nThis policy setting disables local training of all features for the computer.\r\n\r\nFor local training policy, feature-specific settings are prioritized over general settings and computer settings are prioritized over user settings.\r\n\r\nIf a higher priority policy setting is not configured, then:\r\n- If this policy setting is enabled, local training of all features is disabled for the computer.\r\n- If this policy setting is disabled, local training of all features is enabled for the computer.\r\n- If this policy setting is not configured, local training of all features is determined by lower priority policy settings.\r\n- If this policy setting is not configured and lower priority policy settings are also not configured, local training of all features is enabled for the computer.\r\n\r\nFor this policy setting, the order of priority is:\r\n1. Disable local training of [a specific feature] for the computer.\r\n2. Disable local training of all features for the computer.\r\n3. Disable local training of [a specific feature] for the user.\r\n4. Disable local training of all features for the user.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingmachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingmachine_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatiemachine","displayName":"Disable local training of the Adaptive Floatie feature for the computer.","description":"\r\nThis policy setting disables local training of the Adaptive Floatie feature for the computer.\r\n\r\nFor local training policy, feature-specific settings are prioritized over general settings and computer settings are prioritized over user settings.\r\n\r\n- If this policy setting is enabled, local training of the Adaptive Floatie feature is disabled for the computer.\r\n- If this policy setting is disabled, local training of the Adaptive Floatie feature is enabled for the computer.\r\n- If this policy setting is not configured, local training of the Adaptive Floatie feature is determined by lower priority policy settings.\r\n- If this policy setting is not configured and lower priority policy settings are also not configured, local training of the Adaptive Floatie feature is enabled for the computer.\r\n\r\nFor this policy setting, the order of priority is:\r\n1. Disable local training of the Adaptive Floatie feature for the computer.\r\n2. Disable local training of all features for the computer.\r\n3. Disable local training of the Adaptive Floatie feature for the user.\r\n4. Disable local training of all features for the user.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatiemachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v17~policy~l_microsoftofficesystem~l_miscellaneous437_l_disabletrainingofadaptivefloatiemachine_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_orgideduenabledcentennial","displayName":"Enable EDU Org ID Sign In in Office from Windows Store","description":"This policy setting controls whether Office product is activated with the student’s email account. By default, Org Id sign in is not allowed.\r\n\r\nIf you enable this policy setting, student’s email Id sign in will be used to activate the version of Office installed on the computer.\r\n\r\nIf you disable this policy setting, student’s email Id sign in won’t be used to activate the version of Office installed on the computer.\r\n\r\nEnabling or disabling this policy setting takes precedence over any setting that’s been configured by using the Office Deployment Tool or by manually editing the registry.\r\n\r\nIf you don’t configure this policy setting, student’s email Id sign in won’t be used to activate the version of Office installed on the computer unless you’ve enabled Org ID to sign in by manually editing the registry.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_orgideduenabledcentennial_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_orgideduenabledcentennial_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sclcacheoverride","displayName":"Specify the location to save the licensing token used by shared computer activation","description":"\r\nThis policy setting allows you to specify the file folder to save the licensing token used by shared computer activation. \r\n\r\nShared computer activation is used only for situations where multiple users share the same computer. For example, when using Remote Desktop Services (RDS). \r\n\r\nBy default, the licensing token used by shared computer activation is saved in the %localappdata%\\Microsoft\\Office\\16.0\\Licensing folder. But, this location isn’t included in the user’s roaming profile, so the licensing token won’t be available if the user signs in to a different computer.\r\n\r\nIf you enable this policy setting, you need to specify a location to store the licensing token used by shared computer activation. You should specify a folder that is specific to the user and that will be available to the user from whatever computer on the network that the user signs in to. For example, a folder that’s included in the user’s roaming profile, or a shared folder on the network, where there is a folder for each user.\r\n\r\nIf you disable or don’t configure this policy setting, Office uses the default folder to save the licensing token used by shared computer activation.\r\n\r\nNote: Shared computer activation is supported only with Office 365 subscription plans that include Office 365 ProPlus, Visio Pro for Office 365, or Project Online Desktop Client.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sclcacheoverride_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sclcacheoverride_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sclcacheoverride_l_sclcacheoverride","displayName":"Folder location: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sharedcomputerlicensing","displayName":"Use shared computer activation","description":"\r\nThis policy setting controls whether shared computer activation is used to activate the version of Office installed on the computer. By default, shared computer activation isn’t used for activation. \r\n \r\nShared computer activation is used only for situations where multiple users share the same computer. For example, when using Remote Desktop Services (RDS). \r\n \r\nIf you enable this policy setting, shared computer activation is used to activate the version of Office installed on the computer.\r\n\r\nIf you disable or don’t configure this policy setting, shared computer activation won’t be used to activate the version of Office installed on the computer unless you’ve enabled shared computer activation by using the Office Deployment Tool or by manually editing the registry.\r\n\r\nNote: Shared computer activation is supported only with Office 365 subscription plans that include Office 365 ProPlus, Visio Pro for Office 365, or Project Online Desktop Client.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sharedcomputerlicensing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_licensingsettings_l_sharedcomputerlicensing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_ageoutpolicy","displayName":"Age out documents older than n days","description":"This policy controls when locally cached Office documents are aged out of the Office Document Cache","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_ageoutpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_ageoutpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_documentinspector","displayName":"Prevent document inspectors from running","description":"This policy setting allows you to prevent document inspectors from running in Microsoft Office programs.\r\n \r\nIf you enable this policy setting, specific document inspectors can be disabled by entering their Class ID (CLSID). The inspector CLSID can be found at HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Office\\16.0\\Word\\\"Document Inspectors\" and similarly in Excel and PowerPoint.\r\n\r\nIf you disable or do not configure this policy setting, document inspectors may be run in Microsoft Office programs.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_documentinspector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_documentinspector_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_documentinspector_l_empty197","displayName":"","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_evictserverversionspolicy","displayName":"Age out the locally cached copies of server document versions that are more than n days old.","description":"\r\n This policy controls when locally cached Office version documents from the server are aged out of the local cache.\r\n\r\n If you enable this policy setting, Office document versions from the server that have been locally cached for more than n days, will be deleted from the local cache.\r\n\r\n If you disable or do not configure this policy setting, Office document versions from the server that have been locally cached, will be deleted from the local cache if older than the default of one day.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_evictserverversionspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_evictserverversionspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_filepreviewing","displayName":"File Previewing","description":"Disables file previewers in Microsoft Office programs. This policy will not disable file previewers for Microsoft Windows.\r\n \r\nTo disable a file previewer, type the CLSID for the previewer you want to disable (the previewer CLSID can be found at HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\PreviewHandlers).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_filepreviewing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_filepreviewing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_filepreviewing_l_empty196","displayName":"","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_maximplicitcachesize","displayName":"Set the max size of the Office Document Cache","description":"This policy controls how large the user's Office Document Cache can be. It does not apply to explicitly cached files on \"OneDrive for Business Client\" and \"OneDrive (consumer) Client\".","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_maximplicitcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_maximplicitcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_opendirectlyinapp","displayName":"Open Directly in Office Client Application","description":"This policy allows the admin to choose whether Office documents located on web servers open up directly in the App or go via the web browser","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_opendirectlyinapp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_miscellaneous_l_opendirectlyinapp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepackagerepair","displayName":"Disable Package Repair","description":"This policy setting lets you disable the option to repair Open XML documents. \r\n\r\nIf you enable this policy setting, Office 2016 prevents applications from performing a repair on corrupted Open XML documents.\r\n\r\nIf you disable or do not configure this policy setting, when an Office 2016 application detects that an Open XML document has been corrupted, the user is given the option of repairing the corrupted document. ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepackagerepair_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepackagerepair_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepasswordcaching","displayName":"Disable Password Caching","description":"This policy lets you control whether passwords can be stored in Microsoft Office 2016 files. \r\n\r\nIf you enable this policy setting, Office 2016 users are prevented from storing passwords in Office 2016 files.\r\n\r\nIf you disable or do not configure this policy setting, users can store passwords in Office 2016 files.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepasswordcaching_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablepasswordcaching_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablevbaforofficeapplications","displayName":"Disable VBA for Office applications","description":"This setting will prevent Excel, SharePoint Designer, Outlook, PowerPoint, Publisher and Word from using Visual Basic for Applications (VBA), despite whether or not the VBA feature is installed. Changing this setting will not install or remove the VBA files from the omputer. See the Office Resource Kit for more important information about configuring security settings.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablevbaforofficeapplications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_disablevbaforofficeapplications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_graphicsfilterimport","displayName":"Graphics filter import","description":"This policy setting allows you to specify a list of graphic filters that 2016 Office applications load. \r\n\r\nIf you enable this policy setting, you can specify a list of graphic filters that 2016 Office applications load. The graphic filters you specify must be assigned a string value FILTER.FLT (where FILTER.FLT is replaced with the name of a real filter), the value of which is XX.YY.ZZ.WW, where XX, YY, ZZ, and WW are each positive numbers less than 2^16, where the version in the registry is less than or equal to the version of the filter. For example: ''myfilter.flt''=''2006.1200.1000.1000''\r\n\r\nIf you disable or do not configure this policy setting, 2016 Office applications does not restrict any graphics filters from loading.\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_graphicsfilterimport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine_l_graphicsfilterimport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement","displayName":"Add-on Management","description":"Add-on Management","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_excelexe15","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_excelexe15_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_excelexe15_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_exprwdexe24","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_exprwdexe24_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_exprwdexe24_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_grooveexe14","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_grooveexe14_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_grooveexe14_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_msaccessexe25","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_msaccessexe25_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_msaccessexe25_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mse7exe27","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mse7exe27_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mse7exe27_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mspubexe16","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mspubexe16_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_mspubexe16_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_onenoteexe26","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_onenoteexe26_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_onenoteexe26_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_outlookexe22","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_outlookexe22_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_outlookexe22_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_powerpntexe17","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_powerpntexe17_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_powerpntexe17_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_pptviewexe18","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_pptviewexe18_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_pptviewexe18_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_spdesignexe23","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_spdesignexe23_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_spdesignexe23_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_visioexe19","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_visioexe19_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_visioexe19_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winprojexe20","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winprojexe20_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winprojexe20_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winwordexe21","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winwordexe21_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_addonmanagement_l_winwordexe21_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject","displayName":"Bind to object","description":"Safe to bind to object","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_excelexe141","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_excelexe141_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_excelexe141_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_exprwdexe150","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_exprwdexe150_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_exprwdexe150_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_grooveexe140","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_grooveexe140_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_grooveexe140_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_msaccessexe151","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_msaccessexe151_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_msaccessexe151_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mse7exe153","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mse7exe153_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mse7exe153_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mspubexe142","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mspubexe142_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_mspubexe142_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_onenoteexe152","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_onenoteexe152_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_onenoteexe152_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_outlookexe148","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_outlookexe148_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_outlookexe148_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_powerpntexe143","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_powerpntexe143_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_powerpntexe143_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_pptviewexe144","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_pptviewexe144_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_pptviewexe144_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_spdesignexe149","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_spdesignexe149_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_spdesignexe149_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_visioexe145","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_visioexe145_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_visioexe145_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winprojexe146","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winprojexe146_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winprojexe146_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winwordexe147","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winwordexe147_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_bindtoobject_l_winwordexe147_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups","displayName":"Block popups","description":"Block popups","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_excelexe183","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_excelexe183_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_excelexe183_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_exprwdexe192","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_exprwdexe192_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_exprwdexe192_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_grooveexe182","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_grooveexe182_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_grooveexe182_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_msaccessexe193","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_msaccessexe193_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_msaccessexe193_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mse7exe195","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mse7exe195_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mse7exe195_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mspubexe184","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mspubexe184_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_mspubexe184_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_onenoteexe194","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_onenoteexe194_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_onenoteexe194_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_outlookexe190","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_outlookexe190_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_outlookexe190_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_powerpntexe185","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_powerpntexe185_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_powerpntexe185_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_pptviewexe186","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_pptviewexe186_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_pptviewexe186_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_spdesignexe191","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_spdesignexe191_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_spdesignexe191_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_visioexe187","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_visioexe187_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_visioexe187_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winprojexe188","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winprojexe188_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winprojexe188_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winwordexe189","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winwordexe189_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_blockpopups_l_winwordexe189_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling","displayName":"Consistent Mime Handling","description":"Mime Handling","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_excelexe43","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_excelexe43_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_excelexe43_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_exprwdexe52","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_exprwdexe52_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_exprwdexe52_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_grooveexe42","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_grooveexe42_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_grooveexe42_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_msaccessexe53","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_msaccessexe53_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_msaccessexe53_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mse7exe55","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mse7exe55_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mse7exe55_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mspubexe44","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mspubexe44_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_mspubexe44_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_onenoteexe54","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_onenoteexe54_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_onenoteexe54_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_outlookexe50","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_outlookexe50_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_outlookexe50_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_powerpntexe45","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_powerpntexe45_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_powerpntexe45_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_pptviewexe46","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_pptviewexe46_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_pptviewexe46_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_spdesignexe51","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_spdesignexe51_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_spdesignexe51_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_visioexe47","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_visioexe47_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_visioexe47_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winprojexe48","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winprojexe48_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winprojexe48_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winwordexe49","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winwordexe49_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_consistentmimehandling_l_winwordexe49_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword","displayName":"Disable user name and password","description":"Disable user name and password","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_excelexe127","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_excelexe127_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_excelexe127_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_exprwdexe136","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_exprwdexe136_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_exprwdexe136_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_grooveexe126","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_grooveexe126_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_grooveexe126_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_msaccessexe137","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_msaccessexe137_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_msaccessexe137_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mse7exe139","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mse7exe139_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mse7exe139_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mspubexe128","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mspubexe128_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_mspubexe128_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_onenoteexe138","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_onenoteexe138_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_onenoteexe138_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_outlookexe134","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_outlookexe134_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_outlookexe134_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_powerpntexe129","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_powerpntexe129_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_powerpntexe129_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_pptviewexe130","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_pptviewexe130_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_pptviewexe130_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_spdesignexe135","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_spdesignexe135_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_spdesignexe135_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_visioexe131","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_visioexe131_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_visioexe131_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winprojexe132","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winprojexe132_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winprojexe132_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winwordexe133","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winwordexe133_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_disableusernameandpassword_l_winwordexe133_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar","displayName":"Information Bar","description":"Security Band","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_excelexe113","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_excelexe113_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_excelexe113_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_exprwdexe122","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_exprwdexe122_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_exprwdexe122_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_grooveexe112","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_grooveexe112_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_grooveexe112_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_msaccessexe123","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_msaccessexe123_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_msaccessexe123_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mse7exe125","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mse7exe125_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mse7exe125_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mspubexe114","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mspubexe114_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_mspubexe114_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_onenoteexe124","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_onenoteexe124_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_onenoteexe124_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_outlookexe120","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_outlookexe120_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_outlookexe120_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_powerpntexe115","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_powerpntexe115_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_powerpntexe115_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_pptviewexe116","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_pptviewexe116_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_pptviewexe116_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_spdesignexe121","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_spdesignexe121_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_spdesignexe121_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_visioexe117","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_visioexe117_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_visioexe117_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winprojexe118","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winprojexe118_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winprojexe118_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winwordexe119","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winwordexe119_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_informationbar_l_winwordexe119_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity","displayName":"Local Machine Zone Lockdown Security","description":"Local Machine Zone Lockdown","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_excelexe29","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_excelexe29_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_excelexe29_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_exprwdexe38","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_exprwdexe38_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_exprwdexe38_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_grooveexe28","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_grooveexe28_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_grooveexe28_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_msaccessexe39","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_msaccessexe39_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_msaccessexe39_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mse7exe41","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mse7exe41_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mse7exe41_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mspubexe30","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mspubexe30_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_mspubexe30_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_onenoteexe40","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_onenoteexe40_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_onenoteexe40_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_outlookexe36","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_outlookexe36_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_outlookexe36_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_powerpntexe31","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_powerpntexe31_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_powerpntexe31_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_pptviewexe32","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_pptviewexe32_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_pptviewexe32_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_spdesignexe37","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_spdesignexe37_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_spdesignexe37_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_visioexe33","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_visioexe33_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_visioexe33_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winprojexe34","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winprojexe34_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winprojexe34_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winwordexe35","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winwordexe35_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_localmachinezonelockdownsecurity_l_winwordexe35_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature","displayName":"Mime Sniffing Safety Feature","description":"Mime Sniffing","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_excelexe57","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_excelexe57_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_excelexe57_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_exprwdexe66","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_exprwdexe66_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_exprwdexe66_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_grooveexe56","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_grooveexe56_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_grooveexe56_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_msaccessexe67","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_msaccessexe67_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_msaccessexe67_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mse7exe69","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mse7exe69_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mse7exe69_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mspubexe58","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mspubexe58_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_mspubexe58_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_onenoteexe68","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_onenoteexe68_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_onenoteexe68_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_outlookexe64","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_outlookexe64_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_outlookexe64_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_powerpntexe59","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_powerpntexe59_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_powerpntexe59_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_pptviewexe60","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_pptviewexe60_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_pptviewexe60_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_spdesignexe65","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_spdesignexe65_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_spdesignexe65_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_visioexe61","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_visioexe61_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_visioexe61_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winprojexe62","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winprojexe62_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winprojexe62_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winwordexe63","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winwordexe63_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_mimesniffingsafetyfature_l_winwordexe63_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl","displayName":"Navigate URL","description":"Block malformed navigation","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_excelexe169","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_excelexe169_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_excelexe169_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_exprwdexe178","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_exprwdexe178_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_exprwdexe178_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_grooveexe168","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_grooveexe168_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_grooveexe168_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_msaccessexe179","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_msaccessexe179_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_msaccessexe179_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mse7exe181","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mse7exe181_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mse7exe181_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mspubexe170","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mspubexe170_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_mspubexe170_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_onenoteexe180","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_onenoteexe180_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_onenoteexe180_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_outlookexe176","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_outlookexe176_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_outlookexe176_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_powerpntexe171","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_powerpntexe171_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_powerpntexe171_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_pptviewexe172","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_pptviewexe172_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_pptviewexe172_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_spdesignexe177","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_spdesignexe177_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_spdesignexe177_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_visioexe173","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_visioexe173_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_visioexe173_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winprojexe174","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winprojexe174_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winprojexe174_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winwordexe175","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winwordexe175_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_navigateurl_l_winwordexe175_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection","displayName":"Object Caching Protection","description":"Object Caching","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_excelexe71","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_excelexe71_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_excelexe71_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_exprwdexe80","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_exprwdexe80_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_exprwdexe80_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_grooveexe70","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_grooveexe70_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_grooveexe70_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_msaccessexe81","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_msaccessexe81_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_msaccessexe81_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_mse7exe83","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_mse7exe83_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_mse7exe83_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_mspubexe72","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_mspubexe72_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_mspubexe72_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_onenoteexe82","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_onenoteexe82_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_onenoteexe82_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_outlookexe78","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_outlookexe78_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_outlookexe78_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_powerpntexe73","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_powerpntexe73_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_powerpntexe73_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_pptviewexe74","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_pptviewexe74_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_pptviewexe74_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_spdesignexe79","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_spdesignexe79_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_spdesignexe79_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_visioexe75","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_visioexe75_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_visioexe75_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winprojexe76","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winprojexe76_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winprojexe76_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winwordexe77","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winwordexe77_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_objectcachingprotection_l_winwordexe77_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation","displayName":"Protection From Zone Elevation","description":"Zone Elevation","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_excelexe99","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_excelexe99_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_excelexe99_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_exprwdexe108","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_exprwdexe108_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_exprwdexe108_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_grooveexe98","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_grooveexe98_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_grooveexe98_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_msaccessexe109","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_msaccessexe109_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_msaccessexe109_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mse7exe111","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mse7exe111_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mse7exe111_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mspubexe100","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mspubexe100_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_mspubexe100_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_onenoteexe110","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_onenoteexe110_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_onenoteexe110_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_outlookexe106","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_outlookexe106_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_outlookexe106_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_powerpntexe101","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_powerpntexe101_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_powerpntexe101_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_pptviewexe102","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_pptviewexe102_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_pptviewexe102_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_spdesignexe107","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_spdesignexe107_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_spdesignexe107_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_visioexe103","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_visioexe103_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_visioexe103_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winprojexe104","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winprojexe104_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winprojexe104_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winwordexe105","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winwordexe105_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_protectionfromzoneelevation_l_winwordexe105_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall","displayName":"Restrict ActiveX Install","description":"Restrict ActiveX Install","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_excelexe","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_excelexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_excelexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_exprwdexe","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_exprwdexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_exprwdexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_grooveexe","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_grooveexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_grooveexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_msaccessexe","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_msaccessexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_msaccessexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mse7exe","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mse7exe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mse7exe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mspubexe","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mspubexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_mspubexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_onenoteexe","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_onenoteexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_onenoteexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_outlookexe","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_outlookexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_outlookexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_powerpntexe","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_powerpntexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_powerpntexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_pptviewexe","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_pptviewexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_pptviewexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_spdesignexe","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_spdesignexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_spdesignexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_visioexe","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_visioexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_visioexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winprojexe","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winprojexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winprojexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winwordexe","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winwordexe_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictactivexinstall_l_winwordexe_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload","displayName":"Restrict File Download","description":"Restrict File Download","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_excelexe1","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_excelexe1_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_excelexe1_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_exprwdexe10","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_exprwdexe10_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_exprwdexe10_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_grooveexe0","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_grooveexe0_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_grooveexe0_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_msaccessexe11","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_msaccessexe11_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_msaccessexe11_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mse7exe13","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mse7exe13_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mse7exe13_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mspubexe2","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mspubexe2_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_mspubexe2_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_onenoteexe12","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_onenoteexe12_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_onenoteexe12_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_outlookexe8","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_outlookexe8_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_outlookexe8_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_powerpntexe3","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_powerpntexe3_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_powerpntexe3_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_pptviewexe4","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_pptviewexe4_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_pptviewexe4_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_spdesignexe9","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_spdesignexe9_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_spdesignexe9_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_visioexe5","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_visioexe5_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_visioexe5_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winprojexe6","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winprojexe6_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winprojexe6_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winwordexe7","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winwordexe7_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_restrictfiledownload_l_winwordexe7_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl","displayName":"Saved from URL","description":"Saved from URL","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_excelexe155","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_excelexe155_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_excelexe155_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_exprwdexe164","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_exprwdexe164_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_exprwdexe164_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_grooveexe154","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_grooveexe154_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_grooveexe154_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_msaccessexe165","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_msaccessexe165_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_msaccessexe165_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mse7exe167","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mse7exe167_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mse7exe167_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mspubexe156","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mspubexe156_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_mspubexe156_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_onenoteexe166","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_onenoteexe166_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_onenoteexe166_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_outlookexe162","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_outlookexe162_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_outlookexe162_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_powerpntexe157","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_powerpntexe157_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_powerpntexe157_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_pptviewexe158","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_pptviewexe158_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_pptviewexe158_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_spdesignexe163","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_spdesignexe163_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_spdesignexe163_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_visioexe159","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_visioexe159_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_visioexe159_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winprojexe160","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winprojexe160_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winprojexe160_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winwordexe161","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winwordexe161_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_savedfromurl_l_winwordexe161_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions","displayName":"Scripted Window Security Restrictions","description":"Window Restrictions","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_excelexe85","displayName":"excel.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_excelexe85_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_excelexe85_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_exprwdexe94","displayName":"exprwd.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_exprwdexe94_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_exprwdexe94_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_grooveexe84","displayName":"groove.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_grooveexe84_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_grooveexe84_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_msaccessexe95","displayName":"msaccess.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_msaccessexe95_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_msaccessexe95_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mse7exe97","displayName":"mse7.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mse7exe97_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mse7exe97_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mspubexe86","displayName":"mspub.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mspubexe86_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_mspubexe86_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_onenoteexe96","displayName":"onent.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_onenoteexe96_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_onenoteexe96_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_outlookexe92","displayName":"outlook.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_outlookexe92_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_outlookexe92_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_powerpntexe87","displayName":"powerpnt.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_powerpntexe87_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_powerpntexe87_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_pptviewexe88","displayName":"pptview.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_pptviewexe88_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_pptviewexe88_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_spdesignexe93","displayName":"spDesign.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_spdesignexe93_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_spdesignexe93_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_visioexe89","displayName":"visio.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_visioexe89_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_visioexe89_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winprojexe90","displayName":"winproj.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winprojexe90_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winprojexe90_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winwordexe91","displayName":"winword.exe (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winwordexe91_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_securitysettingsmachine~l_iesecurity_l_scriptedwindowsecurityrestrictions_l_winwordexe91_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_enableautomaticupdates","displayName":"Enable Automatic Updates","description":"This policy setting controls whether the Office automatic updates are enabled or disabled for all Office products installed via Click-to-Run. This policy has no effect on Office products installed via Windows Installer. \r\n\r\nIf you enable or do not configure this policy setting, Office periodically checks for updates. When updates are detected, Office downloads and applies them in the background. \r\n\r\nIf you disable this policy setting, Office won't check for updates.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_enableautomaticupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_enableautomaticupdates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideenabledisableupdates","displayName":"Hide option to enable or disable updates","description":"This policy setting allows you to hide the user interface (UI) options to enable or disable Office automatic updates from users. These options are found in the Product Information area of all Office applications installed via Click-to-Run. This policy setting has no effect on Office applications installed via Windows Installer. \r\n\r\nIf you enable this policy setting, the Enable Update and Disable Updates options in the UI are hidden from users. \r\n\r\nIf you disable or do not configure this policy setting, the Enable Update and Disable Updates options are visible, and users can enable or disable Office automatic updates from the UI.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideenabledisableupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideenabledisableupdates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideupdatenotifications","displayName":"Hide Update Notifications","description":"This policy setting allows you to hide notifications to users that updates to Office are available.\r\n\r\nWhen automatic updates are enabled for Office, in most cases updates are applied automatically in the background without any user input. However, updates can’t be applied if an Office program is open. If an Office program is open, other attempts are made to apply the updates at a later time. If, after several days, updates haven’t been applied, only then will users see a notification that an update to Office is available.\r\n\r\nIf you enable this policy setting, users won’t see notifications that updates to Office are ready to be applied.\r\n\r\nIf you disable or don’t configure this policy setting, users will see notifications that updates to Office are ready to be applied.\r\n\r\nThis policy setting does not apply to notifications associated with update deadlines.\r\n\r\nImportant: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideupdatenotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_hideupdatenotifications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_officemgmtcom","displayName":"Office 365 Client Management","description":"This policy setting enables programmatic control of Office 365 clients.\r\n\r\nIf you enable this policy, System Center Configuration Manager or other application management solutions can manage the Office 365 client. After applying the policy, you will be required to restart the Office Click-to-run service. \r\n\r\nIf you disable or do not configure this policy setting, System Center Configuration Manager update workflow will not be able to manage Office 365 clients. You will, however, be able to continue to use the Office Deployment Tool and System Center Configuration Manager’s program and packages or applications deployment methods. \r\n\r\nImportant: This policy setting only applies to Office 365 clients that are installed by using Click-to-Run, including Office 365 ProPlus, Office 365 Business, Visio Pro for Office 365 and Project Pro for Office 365. It doesn't apply to Office products that use Windows Installer (MSI)","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_officemgmtcom_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_officemgmtcom_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair","displayName":"Online Repair","description":"\r\nThis policy setting controls whether users can run an online repair for an Office client, such as Office 365 ProPlus, that comes with an Office 365 plan. You can also control whether the online repair only uses a local source and doesn't use the Office Content Delivery Network (CDN) on the Internet.\r\n\r\nNote: Users must have administrative privileges on the local computer to run an online repair.\r\n\r\nIf you enable or don't configure this policy setting, users can run an online repair from \"Programs and Features\" or \"Add/Remove Programs\" in Control Panel.\r\n\r\nThe online repair downloads and reinstalls Office from the Office CDN or from a local source, such a network share, depending on how Office is configured to get updates. If you aren't using the Office CDN, the local source must contain all the required files, including language files, to perform the repair.\r\n\r\nSelect \"Use Office CDN (if needed)\" if you want to use the Office CDN as an alternative location for the repair if the local source isn't available or doesn't contain all the necessary files.\r\n\r\nYou can also use a local copy of the Office Deployment Tool (setup.exe) for the repair by entering a local path for the Office Deployment Tool. This path can be a network share. If setup.exe can't be found in the local path specified, and \"Use Office CDN (if needed)\" is selected, then the online repair downloads a copy of setup.exe from the Office CDN. Otherwise, the online repair will fail.\r\n\r\nThe repair maintains all configuration settings, including products, languages, excluded applications, and update settings.\r\n\r\nIf you disable this policy setting, users can't run an online repair, but they can still run a quick repair.\r\n\r\nImportant: This policy setting only applies to Office clients, such as Office 365 ProPlus, that come with an Office 365 plan. This policy setting also applies to Visio and Project products that come with an Office 365 plan. This policy has no effect on Office products that are installed by using Windows Installer (MSI).\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_l_fallbacktocdn","displayName":"Use Office CDN (if needed) (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_l_fallbacktocdn_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_l_fallbacktocdn_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_onlinerepair_l_localodtpath","displayName":"Location of Office Deployment Tool: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_setbitsasprimary","displayName":"Prioritize BITS","description":"This policy setting prioritizes the use of Windows Background Interface Transfer Service (BITS) by the Office client when downloading Office updates from the Office Content Delivery Network (CDN).\r\n\r\nIf enabled, BITS will be used on devices that are downloading Office updates directly from the Office CDN and throttle values used by BITS will be honored. The device will not leverage BITS if updates are obtained from a local UNC share.\r\n\r\nIf disable or not configured, BITS will not be prioritized and http will be the primary transport for downloading updates.\r\n\r\nImportant: This policy setting only applies to Office 365 clients that are installed by using Click-to-Run, including Office 365 ProPlus, Office 365 Business, Visio Pro for Office 365 and Project Pro for Office 365. It doesn't apply to Office products that use Windows Installer (MSI)","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_setbitsasprimary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_setbitsasprimary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updateblockversion","displayName":"Prevent Office from being updated to a specific version","description":"\r\n This policy setting allows you to prevent Office from being updated to a specific version, and instead have Office be updated to a different version that you specify.\r\n\r\n If you enable this policy setting, you need to specify both the version to block and the version to update Office to. You list the version to block first and separate the two versions with a colon. You can specify more than one version to block by separating the entries with a vertical bar.\r\n\r\n For example, if you want to block versions 16.0.10326.10000 and 16.0.10326.20000 and have Office updated to version 16.0.10328.10000 instead, you would enter 16.0.10326.10000:16.0.10328.10000|16.0.10326.20000:16.0.10328.10000.\r\n\r\n If the blocked version is already installed, Office will be updated to the other version you've specified.\r\n\r\n Note: if you make a mistake entering the versions, the update won't be blocked. Also, be sure that the installation files for the version that you want to update Office to are available on the update location.\r\n\r\n If you disable or don't configure this policy setting, Office will be updated to whichever more current version is available in the location where Office is configured to get updates from, unless youve specified a version to block by using the Office Deployment Tool.\r\n\r\n Note: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updateblockversion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updateblockversion_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updateblockversion_l_updateblockversionid","displayName":"Block version: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch","displayName":"Update Channel (Deprecated)","description":"This policy setting controls which update channel Office gets updates from when Office is configured to get updates directly from the Office Content Delivery Network (CDN).\r\n\r\nIf you enable this policy setting, Office gets updates from the update channel that you select.\r\n\r\nIf you disable or don't configure this policy setting, Office gets updates from its default channel, or by the update channel specified by the Office Deployment Tool. The default channel is determined by which Office product that is installed.\r\n\r\nImportant: This policy setting only applies to Office clients, such as Office 365 ProPlus, that come with an Office 365 plan. This policy setting also applies to Visio and Project products that come with an Office 365 plan. This policy has no effect on Office products that are installed by using Windows Installer (MSI).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid","displayName":"Channel Name: (Device) (Deprecated)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_current","displayName":"Monthly Channel","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_firstreleasecurrent","displayName":"Monthly Channel (Targeted)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_deferred","displayName":"Semi-Annual Channel","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_firstreleasedeferred","displayName":"Semi-Annual Channel (Targeted)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_insiderfast","displayName":"Insider Fast","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatedeadline","displayName":"Update Deadline","description":"This policy setting allows you to set a deadline by when updates to Office must be applied.\r\n\r\nYou can set a deadline in one of two ways:\r\n\r\n Specify a date and time\r\n\r\n Specify a certain number of days after the update has been downloaded\r\n\r\nPrior to the deadline, users will receive multiple reminders to install the updates. If Office isn't updated by the deadline, the updates are applied automatically. If any Office programs are open, they'll be closed, which might result in data loss.\r\n\r\nIf you're specifying a date and time, we recommend that you set the deadline at least a week in the future to allow users time to install the updates.\r\n\r\nIf you enable this policy setting, you need to either specify a date and time or specify a certain number of days.\r\n\r\nNote: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatedeadline_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatedeadline_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatedeadline_l_updatedeadlineid","displayName":"Deadline: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatepath","displayName":"Update Path","description":"This policy setting allows you to specify the location where Office will get updates from.\r\n\r\nIf you enable this policy setting, you can specify one of the following for the update location: a network share, a folder on the local computer where Office is installed, or an HTTP address. Mapped network drives aren’t supported. \r\n\r\nIf you enable this policy setting, but you leave the update location blank, Office will get updates from the Internet.\r\n\r\nIf you disable or don’t configure this policy setting, Office will get updates from the Internet, unless you specify a different location by using the Office Deployment Tool.\r\n\r\nImportant: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatepath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatepath_l_updatepathid","displayName":"Location for updates: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatetargetversion","displayName":"Target Version","description":"This policy setting allows you to specify a version number that you want to update Office to. For a list of version numbers, see http://go.microsoft.com/fwlink/?LinkId=616875.\r\n\r\nIf you enable this policy setting, you specify the version that you want to update Office to. The next time Office looks for updates, Office will try to update to that version. The version must be available where Office is configured to look for updates (for example, on a network share). \r\n\r\nIf you enable this policy setting, but you leave the version blank, Office is updated to the most current version that’s available at the update location for Office.\r\n\r\nIf you disable or don’t configure this policy setting, Office is updated to the most current version that’s available at the update location for Office, unless you specify a different version by using the Office Deployment Tool.\r\n\r\nImportant: This policy setting only applies to Office products that are installed by using Click-to-Run. It doesn't apply to Office products that use Windows Installer (MSI).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatetargetversion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatetargetversion_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_updatetargetversion_l_updatetargetversionid","displayName":"Update version: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_vltosubscription","displayName":"Upgrade Office 2019 to Office 365 ProPlus","description":"This policy setting allows you to upgrade volume licensed versions of Office Professional Plus 2019 to Office 365 ProPlus.\r\n\r\nNote: For the user to be able to use Office 365 ProPlus, you must have purchased an Office 365 plan that includes Office 365 ProPlus, and you must have assigned the user a license to use Office 365 ProPlus.\r\n\r\nIf you enable this policy setting, the installed volume licensed version of Office 2019 on the user's computer will be upgraded to Office 365 ProPlus. We also recommend that you use Group Policy to specify an update path and an update channel for Office 365 ProPlus.\r\n\r\nNote: If there are volume licensed versions of Visio and Project on the user's computer, those won't be upgraded to Office 365 subscription versions.\r\n\r\nIf you disable or don't configure this policy setting, Office 2019 isn't automatically upgraded to Office 365 ProPlus. But, you can initiate the upgrade by using some other method, such as by using the Office Deployment Tool.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_vltosubscription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_updates_l_vltosubscription_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_preventtokenactivationdialogfromclosing","displayName":"Prevent Token Activation dialog from closing","description":"This policy setting allows you to prevent the Token Activation prompt for activation dialog from closing.\r\n\r\nIf you enable this policy setting, the \"Close\" button and the \"X\" button at the upper right of the dialog are suppressed. If the user proceeds with activation and fails, the buttons will be enabled the next time the dialog appears.\r\n\r\nIf you disable or do not configure this policy setting, the user may close the dialog when prompted for activation.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_preventtokenactivationdialogfromclosing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_preventtokenactivationdialogfromclosing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_useonlytokenactivation","displayName":"Use only Token Activation","description":"This policy setting allows you to specify Token Activation as the only volume activation method for volume editions of Office. This policy setting only applies if a Token Activation Issuance License has been installed on the computer.\r\n\r\nIf you enable this policy setting, Token Activation is the only method that may be used to activate Office.\r\n\r\nIf you disable or do not configure this policy setting, Key Management Service (KMS) or Token Activation may be used as methods to activate Office.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_useonlytokenactivation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v2~policy~l_microsoftofficemachine~l_volumeactivation_l_useonlytokenactivation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine","displayName":"Default Office theme","description":"This policy setting allows you to select the user interface (UI) theme used by Office, if the user has not already selected an Office theme.\r\n\r\nNote: This setting only applies to Version 1903 or later of Office.\r\n\r\nIf you enable this policy setting, you may choose the Office theme used in cases where the user has not selected an Office theme themselves.\r\n\r\nIf you disable or do not configure this policy setting, Office will use the Colorful theme in cases where the user has not selected an Office theme themselves.\r\n\r\nRegardless of how you configure this policy setting, users can change their Office theme by going to File > Account > Office Theme (or, in Outlook, by going to File > Office Account > Office Theme).\r\n\r\nNote: This policy setting takes precedence over the “Default Office theme” policy setting located under User Configuration.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum","displayName":"Theme: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum_0","displayName":"Colorful","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum_3","displayName":"Dark Gray","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum_4","displayName":"Black","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_globaloptionsmachine~l_customizemachine_l_defaultuithememachine_l_defaultuithemeenum_5","displayName":"White","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_licensingsettings_l_dbs","displayName":"Use a device-based license for Office 365 ProPlus","description":"This policy setting controls whether Office 365 ProPlus uses a device-based license instead of a user-based license.\r\n\r\nImportant: For eligibility requirements and configuration steps to use a device-based license with Office 365 ProPlus, see https://go.microsoft.com/fwlink/p/?linkid=2094216.\r\n\r\nIf you enable this policy setting, Office 365 ProPlus will use a device-based license instead of a user-based license.\r\n\r\nIf you disable or don’t configure this policy setting, Office 365 ProPlus will use a user-based license. Therefore, the user who signs in and activates Office must have an Office license.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_licensingsettings_l_dbs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_licensingsettings_l_dbs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_deferupdatedays","displayName":"Delay downloading and installing updates for Office","description":"This policy setting allows you to delay downloading and installing updates for Office by a specified number of days.\r\n\r\nNote: This policy setting won’t apply if you are using some other method to manage updates. For example, if you use System Center Configuration Manager to deploy Office updates or if you use Group Policy to specify a target version. Also, updates won’t be delayed if you are switching Office to a different update channel.\r\n\r\nIf you enable this policy setting, Office will delay downloading and applying updates by the number of days specified. The maximum value that you can specify is 14. If you specify 0, Office will download and apply updates as soon as Office detects that updates are available.\r\n\r\nNote: If you have also specified a deadline for updates to be installed, the deadline won't be considered until after the delay that you specify with this policy setting.\r\n\r\nIf you disable or don’t configure this policy setting, Office will download and apply updates as soon as Office detects that updates are available.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Office 365 ProPlus, as well as subscription versions of Visio and Project.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_deferupdatedays_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_deferupdatedays_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_deferupdatedays_l_deferupdatedaysid","displayName":"Days: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_preventteamsinstall","displayName":"Don’t install Microsoft Teams with new installations or updates of Office","description":"This policy setting allows you to control whether Microsoft Teams is installed with a new installation of Office or when an existing installation of Office is updated.\r\n\r\nNote: This policy setting only applies to versions of Office, such as Office 365 ProPlus, where Teams is installed with a new installation or an update of Office.\r\n\r\nIf you enable this policy setting, Teams won’t be installed with a new installation or an update of Office.\r\n\r\nIf you disable or don’t configure this policy setting, Teams will be installed as part of a new installation or an update of Office, unless you have used some other method, such as the Office Deployment Tool, to exclude the installation of Teams.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_preventteamsinstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v3~policy~l_microsoftofficemachine~l_updates_l_preventteamsinstall_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v4~policy~l_microsoftofficemachine~l_licensingsettings_l_extendedofflinesubscription","displayName":"Allow extended offline use for Office 365 ProPlus","description":"This policy setting allows Office 365 ProPlus to remain activated for more than 31 days in locations without regular internet connectivity.\r\n\r\nUsually Office 365 ProPlus needs to contact the Office Licensing Service on the internet at least once every 31 days to verify the status of the Office 365 subscription and renew its license to remain activated. Otherwise, Office 365 ProPlus will go into reduced functionality mode.\r\n\r\nIMPORTANT: This policy setting requires special permission from Microsoft and additional configuration by Microsoft before you can start using it.\r\n\r\nIf you enable this policy setting, Office 365 ProPlus will receive a license that’s valid for more than 31 days. Your organization’s agreement with Microsoft to use this policy setting will determine how long the license is valid for.\r\n\r\nIf you disable or don’t configure this policy setting, Office 365 ProPlus will receive a license that’s valid for only 31 days.\r\n\r\nNote: This policy setting also applies to subscription versions of Project and Visio.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v4~policy~l_microsoftofficemachine~l_licensingsettings_l_extendedofflinesubscription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v4~policy~l_microsoftofficemachine~l_licensingsettings_l_extendedofflinesubscription_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v5~policy~l_microsoftofficemachine~l_updates_l_preventbinginstall","displayName":"Don’t install extension for Microsoft Search in Bing that makes Bing the default search engine","description":"This policy setting allows you to control whether an extension for Microsoft Search in Bing is installed that makes Bing the default search engine for Google Chrome and Firefox web browsers. This extension is installed with a new installation of Office or when an existing installation of Office is updated.\r\n\r\nIf you enable this policy setting, the extension won’t be installed and Bing won’t be made the default search engine.\r\n\r\nIf you disable or don’t configure this policy setting, the extension will be installed and Bing will be made the default search engine, unless you have used some other method, such as the Office Deployment Tool, to exclude the extension from being installed.\r\n\r\nNote: Even if Bing is made the default search engine, users can still change the default search engine in Google Chrome or Firefox.\r\n\r\nFor more information, see https://go.microsoft.com/fwlink/p/?linkid=2109345.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v5~policy~l_microsoftofficemachine~l_updates_l_preventbinginstall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v5~policy~l_microsoftofficemachine~l_updates_l_preventbinginstall_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v6~policy~l_microsoftofficemachine~l_licensingsettings_l_viewermode","displayName":"Use Viewer Mode","description":"This policy setting controls whether Office, Project, and Visio open in Viewer mode, which means the user can only view and print the contents of the file. Viewer mode, which is turned off by default, is intended for users who aren’t licensed for Office, Project, or Visio.\r\n\r\nIf you enable this policy setting, Office, Project, and Visio will open in Viewer mode. Also, the Activate Product button under File > Account will be hidden. Note: If you enable this policy setting, you can’t use shared computer activation.\r\n\r\nIf you disable or don’t configure this policy setting, an unlicensed user will be prompted to activate Office, Project, or Visio each time they open the app. If the user doesn’t activate, the user can only view and print the contents of the file.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v6~policy~l_microsoftofficemachine~l_licensingsettings_l_viewermode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v6~policy~l_microsoftofficemachine~l_licensingsettings_l_viewermode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine","displayName":"Show the option for the Office Update Channel experience","description":"This policy setting controls whether the option for Update Channel experience is shown under File > Account on an Office app, such as Word.\r\n\r\nBy showing this option, a user can choose to receive Office updates from the Office update channels that the administrator chooses to expose to the users.\r\n\r\nIf you enable this policy setting, the option for Update Channel experience is shown under File > Account.\r\n\r\nNote: This policy supersedes the “Show the option for Office Insider” in cases where both policies are configured.\r\n\r\nNote: If you enable this policy setting, you shouldn’t enable and configure the “Target Version”, “Update Channel” or the “Update Path” policy setting under Computer Configuration\\Policies\\Administrative Templates\\Microsoft Office 2016 (Machine)\\Updates. If you do, those policy settings will take precedence, blocking user access to the Office Update Channel experience.\r\n\r\nIf you disable this policy setting, the option for Office Channel experience is not shown under File > Account.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderfast","displayName":"Beta Channel (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderfast_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderfast_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderslow","displayName":"Current Channel (Preview) (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderslow_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_insiderslow_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_mec","displayName":"Monthly Enterprise Channel (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_mec_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_mec_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_production","displayName":"Current Channel (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_production_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_production_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_sae","displayName":"Semi-Annual Enterprise Channel (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_sae_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_sae_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_saepreview","displayName":"Semi-Annual Enterprise Channel (Preview) (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_saepreview_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_office16v9~policy~l_microsoftofficemachine~l_miscellaneous_l_updatechannelselectormachine_l_uc_saepreview_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard","displayName":"Silently move Windows known folders to OneDrive","description":"This setting lets you redirect known folders to OneDrive without any user interaction. In sync app builds below 18.171.0823.0001, this setting only redirects empty known folders to OneDrive (or known folders already redirected to a different OneDrive account). In later builds, it redirects known folders that contain content and moves the content to OneDrive. We recommend using this setting together with \"Prompt users to move Windows known folders to OneDrive.\" If moving the known folders silently does not succeed, users will be prompted to correct the error and continue.\r\n\r\nIf you enable this setting and provide your tenant ID, you can choose whether to display a notification to users after their folders have been redirected.\r\n\r\nYou can move all folders at once or select the folders you want to move. After a folder is moved, this policy will not affect that folder again, even if you clear the check box for the folder. \r\n\r\nIf you disable or do not configure this setting, your users' known folders will not be silently redirected and/or moved to OneDrive.\r\n\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_desktop_checkbox","displayName":"Desktop (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_desktop_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_desktop_checkbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_documents_checkbox","displayName":"Documents (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_documents_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_documents_checkbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown","displayName":"Show notification to users after folders have been redirected: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown_0","displayName":"No","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_pictures_checkbox","displayName":"Pictures (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_pictures_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_pictures_checkbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2.updates~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_textbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_allowtenantlist","displayName":"Allow syncing OneDrive accounts for only specific organizations","description":"This setting lets you prevent users from easily uploading files to other organizations by specifying a list of allowed tenant IDs.\r\n\r\nIf you enable this setting, users will get an error if they attempt to add an account from an organization that is not allowed. If a user has already added the account, the files will stop syncing.\r\n\r\nIf you disable or do not configure this setting, users can add accounts from any organization.\r\n\r\nTo block specific organizations instead, use \"Block syncing OneDrive accounts for specific organizations.\"\r\n\r\nThis setting will take priority over the \"Block syncing OneDrive accounts for specific organizations.\" Do not enable both policies at the same time.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_allowtenantlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_allowtenantlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_allowtenantlist_allowtenantlistbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automaticuploadbandwidthpercentage","displayName":"Limit the sync app upload rate to a percentage of throughput","description":"This setting lets you balance the performance of different upload tasks on a computer by specifying the percentage of the computer's upload throughput that the OneDrive sync app (OneDrive.exe) can use to upload files. Setting this as a percentage lets the sync app respond to both increases and decreases in throughput. The lower the percentage you set, the slower files will upload. We recommend a value of 50% or higher. The sync app will periodically upload without restriction for one minute and then slow down to the upload percentage you set. This lets small files upload quickly while preventing large uploads from dominating the computer's upload throughput.\r\n\r\n If you enable this setting, computers will use the percentage of upload throughput that you specify when uploading files to OneDrive, and users will not be able to change it.\r\n\r\n If you disable or do not configure this setting, users can choose to limit the upload rate to a fixed value (in KB/second), or set it to \"Adjust automatically\" which will use 70% of upload throughput to respond to increases and decreases in throughput.\r\n\r\n Important: If you enable or disable this setting, and then change it back to Not Configured, the last configuration will remain in effect. We recommend enabling this setting instead of \"Limit the sync app upload speed to a fixed rate\" to limit the upload rate. You should not enable both settings at the same time.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automaticuploadbandwidthpercentage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automaticuploadbandwidthpercentage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automaticuploadbandwidthpercentage_bandwidthspinbox","displayName":"Bandwidth: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites","displayName":"Configure team site libraries to sync automatically","description":"This setting lets you specify SharePoint team site libraries to sync automatically the next time users sign in to the OneDrive sync app (OneDrive.exe). It may take up to 8 hours after a users signs in before the library begins to sync. To use the setting, you must enable OneDrive Files On-Demand, and the setting applies only for users on computers running Windows 10 (1709) Fall Creators Update or later. Do not enable this setting for the same library to more than 1,000 devices. To ensure a good sync experience, avoid enabling this feature on large libraries sets (For the most up to date guidance see https://docs.microsoft.com/en-us/onedrive/use-group-policy#AutoMountTeamSites). This feature is not enabled for on-premises SharePoint sites.\r\n \r\nIf you enable this setting, the OneDrive sync app will automatically download the contents of the libraries you specified as online-only files the next time the user signs in. The user won't be able to stop syncing the libraries.\r\n \r\nIf you disable this setting, team site libraries that you've specified won't be automatically synced for new users. Existing users can choose to stop syncing the libraries, but the libraries won't stop syncing automatically.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox","displayName":"Libraries: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_automountteamsites_automountteamsiteslistbox_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockexternalsync","displayName":"Prevent users from syncing libraries and folders shared from other organizations","description":"This setting controls whether users in your organization are allowed to sync OneDrive for Business or SharePoint content that has been shared by users in a different organization. This is a collaboration feature called B2B Sync.\r\n\r\nIf you enable this setting, users will not be able to start syncing a OneDrive for Business or SharePoint library or folder that was shared from an external organization. Any shared libraries or folders already being synced will stop syncing.\r\n\r\nIf you disable or do not configure this setting, users will be able to sync OneDrive for Business and SharePoint libraries and folders that have been shared from external organizations.\r\n\r\nFor more info about B2B Sync, see: https://docs.microsoft.com/en-us/onedrive/b2b-sync","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockexternalsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockexternalsync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockknownfoldermove","displayName":"Prevent users from moving their Windows known folders to OneDrive","description":"This setting prevents users from moving their Documents, Pictures, and Desktop folders to any OneDrive for Business account.\r\nNote: Moving known folders to personal OneDrive accounts is already blocked on domain-joined PCs.\r\n\r\nIf you enable this setting, users won't be prompted with the \"Set up protection of important folders\" window, and the \"Start protection\" command will be disabled. If the user has already moved their known folders, the files in those folders will remain in OneDrive. This setting will not take effect if you enable \"Prompt users to move Windows known folders to OneDrive\" or \"Silently move Windows known folders to OneDrive.\"\r\n\r\nIf you disable or do not configure this setting, users can choose to move their known folders.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockknownfoldermove_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blockknownfoldermove_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blocktenantlist","displayName":"Block syncing OneDrive accounts for specific organizations","description":"This setting lets you prevent users from easily uploading files to another organization by specifying a list of blocked tenant IDs.\r\n\r\nIf you enable this setting, users will get an error if they attempt to add an account from an organization that is blocked. If a user has already added the account, the files will stop syncing.\r\n\r\nIf you disable or do not configure this setting, users can add accounts from any organization.\r\n\r\nTo specify a list of allowed organizations instead, use \"Allow syncing OneDrive accounts for only specific organizations.\"\r\n\r\nThis setting will NOT work if you have the \"Allow syncing OneDrive accounts for only specific organizations.\" enabled. Do not enable both policies at the same time.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blocktenantlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blocktenantlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_blocktenantlist_blocktenantlistbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_dehydratesyncedteamsites","displayName":"Convert synced team site files to online-only files","description":"This setting is used in conjunction with OneDrive Files On-Demand. When many users sync the same team sites, this setting lets you conserve bandwidth and free up space across devices by making synced team site files online-only files.\r\n\r\nIf you enable this setting, team site files that were syncing before OneDrive Files On-Demand was enabled, will be converted (as a one-time action) to online-only files.\r\n\r\nIf you disable or do not configure this setting, team site files will remain locally available unless users choose to make them online only.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_dehydratesyncedteamsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_dehydratesyncedteamsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb","displayName":"Set the maximum size of a user's OneDrive that can download automatically","description":"This setting is used in conjunction with \"Silently sign in users to the OneDrive sync app with their Windows credentials.\" This setting lets you prompt users who have more than a specified amount of content in OneDrive to choose folders to sync during setup of the OneDrive sync app (OneDrive.exe).\r\n\r\nIf you enable this setting, users who have more content than the value you specify will be shown the Choose Folders dialog box by default during OneDrive Setup.\r\n\r\nIf you disable or do not configure this setting, when users set up the sync app, all files will be selected to sync.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_diskspacecheckthresholdmblist","displayName":"Max size: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_diskspacecheckthresholdmblist_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_diskspacecheckthresholdmb_diskspacecheckthresholdmblist_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_filesondemandenabled","displayName":"Use OneDrive Files On-Demand","description":"This setting lets you control whether OneDrive Files On-Demand is enabled for your organization.\r\n\r\nIf you enable this setting, OneDrive Files On-Demand will be turned on by default.\r\n\r\nIf you disable this setting, OneDrive Files On-Demand will be explicitly disabled and users can't turn it on.\r\n\r\nIf you do not configure this setting, users can turn OneDrive Files On-Demand on or off.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_filesondemandenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_filesondemandenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_forcedlocalmassdeletedetection","displayName":"Require users to confirm large delete operations","description":"This setting makes users confirm that they want to delete files in the cloud when they delete a large number of synced files.\r\n\r\nIf you enable this setting, a warning will always appear when users delete a large number of synced files. If a user does not confirm a delete operation within 7 days, the files will not be deleted.\r\n\r\nIf you disable or do not configure this setting, users can choose to hide the warning and always delete files in the cloud.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_forcedlocalmassdeletedetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_forcedlocalmassdeletedetection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering","displayName":"Set the sync app update ring","description":"Updates to the OneDrive sync app (OneDrive.exe) are released to the public through three rings-first to Insiders, then Production, and finally Deferred. This setting lets you specify the sync app version for users in your organization. When you enable this setting and select a ring, users won't be able to change it.\r\n\r\nInsiders ring users will receive builds that let them preview new features coming to OneDrive.\r\n\r\nProduction ring users will get the latest features as they become available.\r\n\r\nDeferred ring users get new features, bug fixes, and performance improvements last. This ring lets you deploy updates from an internal network location and control the timing of the deployment (within a 60-day window).\r\n\r\nIf you disable or do not configure this setting, users will get OneDrive sync app updates when they become available in the Production ring. Users can join the Office or Windows Insiders programs to get updates on the Insiders ring.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_gposetupdatering_dropdown","displayName":"Update ring: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_gposetupdatering_dropdown_0","displayName":"Deferred","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_gposetupdatering_dropdown_5","displayName":"Production","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_gposetupdatering_gposetupdatering_dropdown_4","displayName":"Insiders","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmblockoptout","displayName":"Prevent users from redirecting their Windows known folders to their PC","description":"This setting forces users to keep their Documents, Pictures, and Desktop folders directed to OneDrive.\r\n\r\nIf you enable this setting, the \"Stop protecting\" button in the \"Your IT department wants you to protect your important folders\" window will be disabled and users will receive an error if they try to stop syncing a known folder.\r\n\r\nIf you disable or do not configure this setting, users can choose to redirect their known folders back to their PC. ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmblockoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmblockoptout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard","displayName":"Silently move Windows known folders to OneDrive","description":"This setting lets you redirect known folders to OneDrive without any user interaction. In sync client builds below 18.171.0823.0001, this setting only redirects empty known folders to OneDrive (or known folders already redirected to a different OneDrive account). In later builds, it redirects known folders that contain content and moves the content to OneDrive. We recommend using this setting together with \"Prompt users to move Windows known folders to OneDrive.\" If moving the known folders silently does not succeed, users will be prompted to correct the error and continue.\r\n\r\nIf you enable this setting and provide your tenant ID, you can choose whether to display a notification to users after their folders have been redirected.\r\n\r\nIf you disable or do not configure this setting, your users' known folders will not be silently redirected and/or moved to OneDrive.\r\n\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown","displayName":"Show notification to users after folders have been redirected: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown_0","displayName":"No","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_dropdown_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinnowizard_kfmoptinnowizard_textbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinwithwizard","displayName":"Prompt users to move Windows known folders to OneDrive","description":"This setting displays the \"Your IT department wants you to protect your important folders\" window that prompts users to move their Documents, Pictures, and Desktop folders to OneDrive. This feature is not enabled for on-premises SharePoint.\r\n\r\nIf you enable this setting and provide your tenant ID, users who are syncing their OneDrive will see the \"Your IT department wants you to protect your important folders\" window when they're signed in. If they close the window, a reminder notification will appear in the activity center until they move all three known folders. If a user has already redirected their known folders to a different OneDrive account, they will be prompted to direct the folders to the account for your organization (leaving existing files behind).\r\n\r\nIf you disable or do not configure this setting, the \"Your IT department wants you to protect your important folders\" window won't appear automatically.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinwithwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinwithwizard_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_kfmoptinwithwizard_kfmoptinwithwizard_textbox","displayName":"Tenant ID: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_preventnetworktrafficpreusersignin","displayName":"Prevent the sync app from generating network traffic until users sign in","description":"This setting lets you block the OneDrive sync app (OneDrive.exe) from generating network traffic (checking for updates, etc.) until users sign in to the sync app or start syncing files to the computer.\r\n\r\nIf you enable this setting, users must sign in to the OneDrive sync app on the computer, or select to sync OneDrive or SharePoint files on the computer, for the sync app to start automatically.\r\n\r\nIf you disable or do not configure this setting, the OneDrive sync app will start automatically when users sign in to Windows.\r\n\r\nImportant: If you enable or disable this setting, and then change it back to Not Configured, the last configuration will remain in effect. ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_preventnetworktrafficpreusersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_preventnetworktrafficpreusersignin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl","displayName":"Specify SharePoint Server URL and organization name","description":"This setting lets you enable users to use the OneDrive sync app (OneDrive.exe) to sync files in SharePoint Server 2019. The URL defines the location of the SharePoint Server and enables the sync app to authenticate and set up sync. The organization name lets you specify the OneDrive and SharePoint folder names that will be created in File Explorer. The organization name is optional. If you don't provide it, the sync app will use the first segment of the URL as the name. For example, office.sharepoint.com would become \"Office,\" and the OneDrive folder name would be \"OneDrive - Office.\"\r\n\r\nIf you enable this setting and provide the SharePoint Server URL, users will be able to sync files in SharePoint Server 2019.\r\n\r\nIf you disable or do not configure this setting, or do not provide the SharePoint Server URL, users will not be able to sync files in SharePoint Server 2019. ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl_sharepointonpremfrontdoorurlbox","displayName":"SharePoint Server 2019 URL: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremfrontdoorurl_sharepointonpremtenantnamebox","displayName":"Organization name: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization","displayName":"Specify the OneDrive location in a hybrid environment","description":"This setting defines whether the OneDrive sync app (OneDrive.exe) should authenticate against SharePoint Online or SharePoint Server 2019 if the identity exists in both identity providers. To use this setting, you must also enable \"Specify SharePoint Server URL and organization name\". This setting affects only OneDrive for Business sync functionality. It does not impact syncing team sites in SharePoint Online or SharePoint Server 2019.\r\n\r\nIf you enable this setting, you can select one of two options:\r\n\r\nSharePoint Online: The sync app will look first in SharePoint Online for a user's OneDrive. If the sync app is already configured with SharePoint Online for the user, it will attempt to configure a OneDrive for Business instance in SharePoint Server 2019 for that user.\r\n\r\nSharePoint Server 2019: The sync app will look first in SharePoint Server 2019 for a user's OneDrive for Business. If the sync app is already configured with SharePoint Server 2019 for the user, it will attempt to configure a OneDrive instance in SharePoint Online for that user.\r\n\r\nIf you disable or do not configure this setting, the sync app will look first in SharePoint Online for the user's OneDrive.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_sharepointonpremprioritization_dropdown","displayName":"Authenticate first against: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_sharepointonpremprioritization_dropdown_0","displayName":"SharePoint Online","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_sharepointonpremprioritization_sharepointonpremprioritization_dropdown_1","displayName":"SharePoint Server 2019","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_silentaccountconfig","displayName":"Silently sign in users to the OneDrive sync app with their Windows credentials","description":"This setting lets you silently sign in users to the OneDrive sync app (OneDrive.exe) with their Windows credentials.\r\n\r\nIf you enable this setting, users who are signed in on the PC with the primary Windows account (the account used to join the PC to the domain) can set up the sync app without entering the credentials for the account. Users will still be shown OneDrive Setup so they can select folders to sync and change the location of their OneDrive folder. If a user is using the previous OneDrive for Business sync app (Groove.exe), the new sync app will attempt to take over syncing the user's OneDrive from the previous app and preserve the user's sync settings. This setting is frequently used together with \"Set the maximum size of a user's OneDrive that can download automatically\" on PCs that don't have Files On-Demand, and \"Set the default location for the OneDrive folder.\"\r\n\r\nIf you disable or do not configure this setting, users will need to sign in with their work or school account to set up sync.\r\n\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_silentaccountconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv2~policy~onedrivengsc_silentaccountconfig_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_enableautomaticuploadbandwidthmanagement","displayName":"Enable automatic upload bandwidth management for OneDrive","description":"This setting lets the OneDrive sync app (OneDrive.exe) upload data in the background only when unused bandwidth is available. It prevents the sync app from interfering with other apps that are using the network. This setting is powered by the Windows LEDBAT (Low Extra Delay Background Transport) protocol. When LEDBAT detects increased latency that indicates other TCP connections are consuming bandwidth, the sync app will reduce its own consumption to prevent interference. When network latency decreases again and bandwidth is freed up, the sync app will increase the upload rate and consume the unused bandwidth.\r\n\r\nIf you enable this setting, the sync app upload rate will be set to \"Adjust automatically\" based on bandwidth availability and users won't be able to change it.\r\n\r\nIf you disable or do not configure this setting, users can choose to limit the upload rate to a fixed value (in KB/second), or set it to \"Adjust automatically\".\r\n\r\nImportant\r\nIf you enable or disable this setting, and then change it back to Not Configured, the last configuration will remain in effect. We recommend enabling this setting instead of \"Limit the sync app upload speed to a fixed rate.\" You should not enable both settings at the same time. This setting will override \"Limit the sync app upload rate to a percentage of throughput\" if both are enabled on the same device.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_enableautomaticuploadbandwidthmanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_enableautomaticuploadbandwidthmanagement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_localmassdeletefiledeletethreshold","displayName":"Prompt users when they delete multiple OneDrive files on their local computer","description":"This policy sets the threshold for how many files a user can delete from a local OneDrive folder before the user is notified that the files will also be deleted from the cloud.\r\n \r\nIf you enable this policy, users will see a notification if they delete more than the specified number of files from OneDrive on their local computer. The user will be given the option to continue to remove the cloud files, or restore the local files.\r\nNote: Even if you enable this policy, users won't receive notifications if they've selected the \"Always remove files\" check box on a previous notification, or if they've cleared the \"Notify me when many files are deleted in the cloud\" check box in OneDrive sync app settings.\r\n\r\nIf you disable this policy, users will not receive a notification when they delete numerous OneDrive files on their local computer.\r\n\r\nIf you do not configure this policy, users will see a notification when they delete more than 200 files within a short period of time.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_localmassdeletefiledeletethreshold_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_localmassdeletefiledeletethreshold_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_localmassdeletefiledeletethreshold_lmdfiledeletethresholdbox","displayName":"Number of files: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_mindiskspacelimitinmb","displayName":"Block file downloads when users are low on disk space","description":"This setting lets you specify a minimum amount of available disk space and block the OneDrive sync app (OneDrive.exe) from downloading files when users have less than this amount.\r\n\r\nUsers will be prompted with options to help free up space.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_mindiskspacelimitinmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_mindiskspacelimitinmb_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_mindiskspacelimitinmb_mindiskspacemb","displayName":"Minimum available disk space: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_permitdisablepermissioninheritance","displayName":"Allow OneDrive to disable Windows permission inheritance in folders synced read-only","description":"This setting lets the OneDrive sync app remove all inherited permissions within read-only folders syncing on a user's PC.\r\n\r\nIf you enable this setting, the OneDrive sync app can disable permission inheritance in read-only folders to improve sync speed.\r\n\r\nIf you disable or do not configure this setting, the OneDrive sync app will preserve permission inheritance in read-only folders. Sync speed may be significantly slower.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_permitdisablepermissioninheritance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_permitdisablepermissioninheritance_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_warningmindiskspacelimitinmb","displayName":"Warn users who are low on disk space","description":"This setting lets you specify a minimum amount of available disk space and warn users when the OneDrive sync app (OneDrive.exe) downloads a file that causes them to have less than this amount.\r\n\r\nUsers will be prompted with options to help free up space.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_warningmindiskspacelimitinmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_warningmindiskspacelimitinmb_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv3~policy~onedrivengsc_warningmindiskspacelimitinmb_warningmindiskspacemb","displayName":"Minimum available disk space: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_disablefirstdeletedialog","displayName":"Hide the \"Deleted files are removed everywhere\" reminder","description":"When a user deletes local files from a synced location, a warning message appears that the files will no longer be available across all the user's devices and on the web. This setting lets you hide the warning message.\r\n\r\nIf you enable this setting, users won't see the \"Deleted files are removed everywhere\" reminder when they delete files locally.\r\n\r\nIf you disable or do not configure this setting, the reminder will appear until users select \"Don't show this reminder again.\"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_disablefirstdeletedialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_disablefirstdeletedialog_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_enableodignorelistfromgpo","displayName":"Exclude specific kinds of files from being uploaded","description":"This setting lets you enter keywords to prevent the OneDrive sync app (OneDrive.exe) from uploading certain files to OneDrive or SharePoint. You can enter complete names, such as \"setup.exe\" or use the asterisk (*) as a wildcard character to represent a series of characters. \r\n\r\nIf you enable this setting, the sync app doesn't upload new files that match the keywords you specified. No errors appear for the skipped files, and the files remain in the local OneDrive folder. The OneDrive sync app must be restarted after this setting is enabled for the setting to take effect. \r\n\r\nIf you disable or do not configure this setting, the sync app uploads all supported files in all synced folders.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_enableodignorelistfromgpo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_enableodignorelistfromgpo_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_enableodignorelistfromgpo_enableodignorelistfromgpolistbox","displayName":"Keywords: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_ignorewebproxy","displayName":"Cause sync client to ignore normal web proxy detection logic","description":"\r\n This setting controls whether the OneDrive sync client does its default web proxy detection logic or not.\r\n\r\n If you enable this setting, the sync client will not do its normal web proxy detection and will attempt direct connections to the internet web endpoints it needs to communicate with. This is equivalent of having no web proxy settings configured and no automatic proxy script.\r\n\r\n If you disable or do not configure this setting, the sync client will detect if a web proxy is configured on your network and use it if so.\r\n\r\n For more info see https://docs.microsoft.com/en-us/troubleshoot/windows-client/networking/use-group-policy-apply-winhttp-proxy-settings ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_ignorewebproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_ignorewebproxy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_kfmforcewindowsdisplaylanguage","displayName":"Always use the user's Windows display language when provisioning known folders in OneDrive","description":"When you move Windows known folders to OneDrive, they will be provisioned in the user's Windows display language by default, unless the user sets a different preferred language. This setting lets you override the user's preferred language setting. It works with both Known Folder Move settings (\"Silently move Windows known folders to OneDrive\" and \"Prompt users to move Windows known folders to OneDrive\").\r\n\r\nIf you enable this setting, known folders will be provisioned using the user's Windows display language, even if the user sets a different preferred language.\r\n\r\nIf you disable or do not configure this setting, and the user set a preferred language, their known folders will be provisioned in OneDrive using that language. The known folders on their PC will appear in their preferred language.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_kfmforcewindowsdisplaylanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv4~policy~onedrivengsc_kfmforcewindowsdisplaylanguage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv5~policy~onedrivengsc_syncadminreports","displayName":"Sync Admin Reports","description":"This setting enables the Sync Admin Reports.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv5~policy~onedrivengsc_syncadminreports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv5~policy~onedrivengsc_syncadminreports_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv5~policy~onedrivengsc_syncadminreports_syncadminreports_textbox","displayName":"Tenant Association Key: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_blockexternallistsync","displayName":"Blocks syncing of external lists via Lists sync","description":"\r\n Enabling this setting prevents users at your organization from syncing lists that are shared from other organizations. After the setting is enabled (value 1) on a computer, lists shared from other organizations won't sync. Disable the setting (value 0) to allow your users to sync external lists.\r\n\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_blockexternallistsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_blockexternallistsync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsync","displayName":"Disables Lists sync on this device.","description":"\r\n By default, Lists sync is turned on for users of Microsoft Lists. If you enable this policy, Lists sync will be blocked from running on the device.\r\n\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsyncsilentconfig","displayName":"Disables silent configuration of Lists sync on this device.","description":"\r\n If you enable this setting, users at your organization will not be opted into Lists sync automatically. They will be required to install the Office web extension to use Nucleus.\r\n\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsyncsilentconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~nucleuslistsync_disablelistsyncsilentconfig_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disableautoconfig","displayName":"Disable silently sign in users to the OneDrive sync app with an existing credential that is made available to Microsoft applications","description":"This setting determines whether or not the Sync client can automatically sign in.\r\n\r\nIf admins enable this setting (value 1), it prevents Sync from automatically signing with an existing AAD credential that is made available to Microsoft applications.\r\n\r\nIf admins disable (value 0) or do not configure this setting, Sync will automatically sign in.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disableautoconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disableautoconfig_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_disableautoconfig_disableautoconfigtypes","displayName":"Disabled Account Types: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport","displayName":"Allow users to contact Microsoft for feedback and support","description":"\r\n This setting specifies whether users in your organization can communicate directly with Microsoft through user experiences in the sync app. Letting users share their thoughts helps us improve OneDrive.\r\n\r\n If you enable or do not configure this setting, users can use the experiences in the OneDrive sync app to contact Microsoft directly for feedback and support.\r\n\r\n If you disable this setting, users will be unable to contact Microsoft for support, feedback, or suggestions within the sync app. Users will still have access to help content and self-help tools.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_contactsupport_checkbox","displayName":"Contact OneDrive Support​ (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_contactsupport_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_contactsupport_checkbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_receivesurveys_checkbox","displayName":"Receive user satisfication surveys (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_receivesurveys_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_receivesurveys_checkbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_sendfeedback_checkbox","displayName":"Send Feedback (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_sendfeedback_checkbox_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablefeedbackandsupport_granularfeedbackcontrol_sendfeedback_checkbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablesyncadminreports","displayName":"Enable sync health reporting for OneDrive","description":"\r\n The OneDrive sync health dashboard provides reporting on sync app devices and health. This setting lets the OneDrive sync app compile sync device and health data into administrative reports. These reports allow you to proactively identify, investigate, and resolve common errors across an organization.\r\n\r\n If you enable this setting, the OneDrive sync app will report device and health data into administrative reports. You must enable this setting on the devices you want to get reports from.\r\n\r\n If you disable or do not configure this setting, OneDrive sync app device and health data will not appear in the OneDrive sync health dashboard.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablesyncadminreports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv6~policy~onedrivengsc_enablesyncadminreports_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_disablenewaccountdetection","displayName":"Disable a toast and activity center message to encourage a user to sign in OneDrive using an existing credential that is made available to Microsoft applications","description":"If admins enable this setting (value 1), the user won't see the toast and the activity center message about new accounts that can be used to sign-in with OneDrive.\r\n\r\nIf admins disable (value 0) or do not configure this setting, the user will see the toast and the activity center message when OneDrive detects a new account on the device.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_disablenewaccountdetection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_disablenewaccountdetection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_sharedcontentdeleteconfirmation","displayName":"Prompt user to confirm when they delete shared content","description":"When local synced files are deleted, which multiple users have access, a dialog appears informing the user that other users will no longer have access to that content, and asking them to confirm the action before OneDrive propagates deletes online. After confirming, deletes of other shared content for a short period of time do not cause additional confirmations. Other content continues to sync.\r\n\r\nEnable this setting to prevent users from hiding the confirmation dialog. Each time the user deletes shared content, their confirmation is required before the item is deleted for everyone online.\r\n\r\nDisable this setting to not show the delete confirmation message. Deletes will immediately be made in the cloud.\r\n\r\nDo not configure this setting so users can choose to hide the warning, with the effects mentioned above.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_sharedcontentdeleteconfirmation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_onedrivengscv7~policy~onedrivengsc_sharedcontentdeleteconfirmation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_allowhibernate","displayName":"Allow Hibernate","description":"This policy setting decides if hibernate on the machine is allowed or not. Supported values: 0 – Disable hibernate. 1 (default) - Allow hibernate.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#allowhibernate"],"options":[{"id":"device_vendor_msft_policy_config_power_allowhibernate_0","displayName":"Block","description":"Disable hibernate.","helpText":null},{"id":"device_vendor_msft_policy_config_power_allowhibernate_1","displayName":"Allow","description":"Allow hibernate.","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_allowstandbystateswhensleepingonbattery","displayName":"Allow standby states (S1-S3) when sleeping (on battery)","description":"This policy setting manages whether or not Windows is allowed to use standby states when putting the computer in a sleep state.\r\n\r\nIf you enable or do not configure this policy setting, Windows uses standby states to put the computer in a sleep state.\r\n\r\nIf you disable this policy setting, standby states (S1-S3) are not allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-allowstandbystateswhensleepingonbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_allowstandbystateswhensleepingonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_allowstandbystateswhensleepingonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_allowstandbywhensleepingpluggedin","displayName":"Allow standby states (S1-S3) when sleeping (plugged in)","description":"This policy setting manages whether or not Windows is allowed to use standby states when putting the computer in a sleep state.\r\n\r\nIf you enable or do not configure this policy setting, Windows uses standby states to put the computer in a sleep state.\r\n\r\nIf you disable this policy setting, standby states (S1-S3) are not allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-allowstandbywhensleepingpluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_allowstandbywhensleepingpluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_allowstandbywhensleepingpluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery","displayName":"Turn off the display (on battery)","description":"This policy setting allows you to specify the period of inactivity before Windows turns off the display.\r\n\r\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the display.\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n\r\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the display from turning off. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-displayofftimeoutonbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_displayofftimeoutonbattery_entervideodcpowerdowntimeout","displayName":"On battery power, turn display off after (seconds)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin","displayName":"Turn off the display (plugged in)","description":"This policy setting allows you to specify the period of inactivity before Windows turns off the display.\r\n\r\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the display.\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n\r\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the display from turning off. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-displayofftimeoutpluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_displayofftimeoutpluggedin_entervideoacpowerdowntimeout","displayName":"When plugged in, turn display off after (seconds)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_power_enableenergysaver","displayName":"Enable Energy Saver","description":"This policy will extend battery life and reduce energy consumption by enabling Energy Saver to always be on. Energy Saver will always be on for desktops as well as laptops regardless of battery level for both AC and DC. If you disable or don't configure this policy setting, then Energy Saver will turn on based on the EnergySaverBatteryThreshold group policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#enableenergysaver"],"options":[{"id":"device_vendor_msft_policy_config_power_enableenergysaver_0","displayName":"Disable energy saver policy","description":"Disable energy saver policy","helpText":null},{"id":"device_vendor_msft_policy_config_power_enableenergysaver_1","displayName":"Enable energy saver always-on mode.","description":"Enable energy saver always-on mode.","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_energysaverbatterythresholdonbattery","displayName":"Energy Saver Battery Threshold On Battery","description":"This policy setting allows you to specify battery charge level at which Energy Saver is turned on. If you enable this policy setting, you must provide a percent value, indicating the battery charge level. Energy Saver will be automatically turned on at (and below) the specified level. If you disable or do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#energysaverbatterythresholdonbattery"],"options":null},{"id":"device_vendor_msft_policy_config_power_energysaverbatterythresholdpluggedin","displayName":"Energy Saver Battery Threshold Plugged In","description":"This policy setting allows you to specify battery charge level at which Energy Saver is turned on. If you enable this policy setting, you must provide a percent value, indicating the battery charge level. Energy Saver will be automatically turned on at (and below) the specified level. If you disable or do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#energysaverbatterythresholdpluggedin"],"options":null},{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery","displayName":"Specify the system hibernate timeout (on battery)","description":"This policy setting allows you to specify the period of inactivity before Windows transitions the system to hibernate.\r\n\r\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to hibernate.\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n\r\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-hibernatetimeoutonbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutonbattery_enterdchibernatetimeout","displayName":"System Hibernate Timeout (seconds):","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutpluggedin","displayName":"Specify the system hibernate timeout (plugged in)","description":"This policy setting allows you to specify the period of inactivity before Windows transitions the system to hibernate.\r\n\r\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to hibernate.\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n\r\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-hibernatetimeoutpluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutpluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutpluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_hibernatetimeoutpluggedin_enterachibernatetimeout","displayName":"System Hibernate Timeout (seconds):","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakesonbattery","displayName":"Require a password when a computer wakes (on battery)","description":"This policy setting specifies whether or not the user is prompted for a password when the system resumes from sleep.\r\n\r\nIf you enable or do not configure this policy setting, the user is prompted for a password when the system resumes from sleep.\r\n\r\nIf you disable this policy setting, the user is not prompted for a password when the system resumes from sleep.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-requirepasswordwhencomputerwakesonbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakesonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakesonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakespluggedin","displayName":"Require a password when a computer wakes (plugged in)","description":"This policy setting specifies whether or not the user is prompted for a password when the system resumes from sleep.\r\n\r\nIf you enable or do not configure this policy setting, the user is prompted for a password when the system resumes from sleep.\r\n\r\nIf you disable this policy setting, the user is not prompted for a password when the system resumes from sleep.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-requirepasswordwhencomputerwakespluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakespluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_requirepasswordwhencomputerwakespluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery","displayName":"Select Lid Close Action On Battery","description":"This policy setting specifies the action that Windows takes when a user closes the lid on a mobile PC. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectlidcloseactiononbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactiononbattery_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin","displayName":"Select Lid Close Action Plugged In","description":"This policy setting specifies the action that Windows takes when a user closes the lid on a mobile PC. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectlidcloseactionpluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectlidcloseactionpluggedin_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery","displayName":"Select Power Button Action On Battery","description":"This policy setting specifies the action that Windows takes when a user presses the power button. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectpowerbuttonactiononbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactiononbattery_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin","displayName":"Select Power Button Action Plugged In","description":"This policy setting specifies the action that Windows takes when a user presses the power button. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectpowerbuttonactionpluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectpowerbuttonactionpluggedin_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactiononbattery","displayName":"Select Sleep Button Action On Battery","description":"This policy setting specifies the action that Windows takes when a user presses the sleep button. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectsleepbuttonactiononbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactiononbattery_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactiononbattery_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactiononbattery_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactiononbattery_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin","displayName":"Select Sleep Button Action Plugged In","description":"This policy setting specifies the action that Windows takes when a user presses the sleep button. Possible actions include: 0 - Take no action 1 - Sleep 2 - Hibernate 3 - Shut down If you enable this policy setting, you must select the desired action. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#selectsleepbuttonactionpluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_0","displayName":"Take no action","description":"Take no action","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_1","displayName":"Sleep","description":"Sleep","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_2","displayName":"System hibernate sleep state","description":"System hibernate sleep state","helpText":null},{"id":"device_vendor_msft_policy_config_power_selectsleepbuttonactionpluggedin_3","displayName":"System shutdown","description":"System shutdown","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_standbytimeoutonbattery","displayName":"Specify the system sleep timeout (on battery)","description":"This policy setting allows you to specify the period of inactivity before Windows transitions the system to sleep.\r\n\r\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to sleep.\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n\r\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-standbytimeoutonbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_standbytimeoutonbattery_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_standbytimeoutonbattery_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_standbytimeoutonbattery_enterdcstandbytimeout","displayName":"System Sleep Timeout (seconds):","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin","displayName":"Specify the system sleep timeout (plugged in)","description":"This policy setting allows you to specify the period of inactivity before Windows transitions the system to sleep.\r\n\r\nIf you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to sleep.\r\n\r\nIf you disable or do not configure this policy setting, users control this setting.\r\n\r\nIf the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-power#power-standbytimeoutpluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_power_standbytimeoutpluggedin_enteracstandbytimeout","displayName":"System Sleep Timeout (seconds):","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeponbattery","displayName":"Turn Off Hybrid Sleep On Battery","description":"This policy setting allows you to turn off hybrid sleep. If you set this to 0, a hiberfile is not generated when the system transitions to sleep (Stand By). If you do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#turnoffhybridsleeponbattery"],"options":[{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeponbattery_0","displayName":"","description":"","helpText":null},{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeponbattery_1","displayName":"hybrid sleep","description":"hybrid sleep","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeppluggedin","displayName":"Turn Off Hybrid Sleep Plugged In","description":"This policy setting allows you to turn off hybrid sleep. If you set this to 0, a hiberfile is not generated when the system transitions to sleep (Stand By). If you do not configure this policy setting, users control this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#turnoffhybridsleeppluggedin"],"options":[{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeppluggedin_0","displayName":"","description":"","helpText":null},{"id":"device_vendor_msft_policy_config_power_turnoffhybridsleeppluggedin_1","displayName":"hybrid sleep","description":"hybrid sleep","helpText":null}]},{"id":"device_vendor_msft_policy_config_power_unattendedsleeptimeoutonbattery","displayName":"Unattended Sleep Timeout On Battery","description":"This policy setting allows you to specify the period of inactivity before Windows transitions to sleep automatically when a user is not present at the computer. If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows automatically transitions to sleep when left unattended. If you specify 0 seconds, Windows does not automatically transition to sleep. If you disable or do not configure this policy setting, users control this setting. If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#unattendedsleeptimeoutonbattery"],"options":null},{"id":"device_vendor_msft_policy_config_power_unattendedsleeptimeoutpluggedin","displayName":"Unattended Sleep Timeout Plugged In","description":"This policy setting allows you to specify the period of inactivity before Windows transitions to sleep automatically when a user is not present at the computer. If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows automatically transitions to sleep when left unattended. If you specify 0 seconds, Windows does not automatically transition to sleep. If you disable or do not configure this policy setting, users control this setting. If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring. The \"Prevent enabling lock screen slide show\" policy setting can be used to disable the slide show feature.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Power#unattendedsleeptimeoutpluggedin"],"options":null},{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt","displayName":"Turn on an external converter as the default for a file extension","description":"This policy setting allows you to enable an external file format converter as the default for a particular file extension on a computer. To set this policy you need to specify the file extension (e.g. \"odp\") for Value Name and the external file format converter via the converter's classname (e.g. \"TestConverter\") for Value.\r\n\r\nIf you enable this policy setting for a particular file extension, the file format converter specified for that extension is used as the default converter for loading the files.\r\n\r\nIf you do not configure this policy setting for a particular file extension, Microsoft PowerPoint processes files with that extension in an application defined manner.\r\n\r\nNote: This policy can only be specified once per file extension.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_l_listofexternalconvertersppt","displayName":"List of external file format converters to customize (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_l_listofexternalconvertersppt_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_ppt16v2~policy~l_microsoftofficepowerpointmachine~l_convertersmachineppt_l_externalconverterasdefaultforfileextensionppt_l_listofexternalconvertersppt_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_printers_approvedusbprintdevices","displayName":"List of Approved USB-connected print devices","description":"\r\n\r\n This setting is a component of the Device Control Printing Restrictions. To use this setting, enable Device Control Printing by enabling the \"Enable Device Control Printing Restrictions\" setting.\r\n\r\n When Device Control Printing is enabled, the system uses the specified list of vid/pid values to determine if the current USB connected printer is approved for local printing.\r\n\r\n Type all the approved vid/pid combinations (separated by commas) that correspond to approved USB printer models. When a user tries to print to a USB printer queue the device vid/pid will be compared to the approved list.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-approvedusbprintdevices"],"options":[{"id":"device_vendor_msft_policy_config_printers_approvedusbprintdevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_approvedusbprintdevices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_approvedusbprintdevices_approvedusbprintdevices_list","displayName":"vid/pid (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy","displayName":"Manage processing of Queue-specific files","description":"\r\nManages how Queue-specific files are processed during printer installation. At printer installation time, a vendor-supplied installation application can specify a set of files, of any type, to be associated with a particular print queue. The files are downloaded to each client that connects to the print server.\r\n\r\nYou can enable this setting to change the default behavior involving queue-specific files. To use this setting, select one of the options below from the \"Manage processing of Queue-specific files\" box.\r\n\r\nIf you disable or do not configure this policy setting, the default behavior is \"Limit Queue-specific files to Color profiles\".\r\n\r\n-- \"Do not allow Queue-specific files\" specifies that no queue-specific files will be allowed/processed during print queue/printer connection installation.\r\n\r\n-- \"Limit Queue-specific files to Color profiles\" specifies that only queue-specific files that adhere to the standard color profile scheme will be allowed. This means entries using the Registry Key CopyFiles\\ICM, containing a Directory value of COLOR and supporting mscms.dll as the Module value. \"Limit Queue-specific files to Color profiles\" is the default behavior.\r\n\r\n-- \"Allow all Queue-specific files\" specifies that all queue-specific files will be allowed/processed during print queue/printer connection installation.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurecopyfilespolicy"],"options":[{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_copyfilespolicy_enum","displayName":"Manage processing of Queue-Specific files: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_copyfilespolicy_enum_0","displayName":"Do not allow Queue-specific files","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_copyfilespolicy_enum_1","displayName":"Limit Queue-specific files to Color profiles","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurecopyfilespolicy_copyfilespolicy_enum_2","displayName":"Allow all Queue-specfic files","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel","displayName":"Manage Print Driver signature validation","description":"\r\n This policy setting controls the print driver signature validation mechanism. This policy controls the type of digital signature that is required for a print driver to be considered valid and installed on the system.\r\n\r\n As part of this validation the catalog/embedded signature is verified and all files in the driver must be a part of the catalog or have their own embedded signature that can be used for validation.\r\n\r\n You can enable this setting to change the default signature validation method. To use this setting, select one of the options below from the \"Select the driver signature mechanism for this computer\" box.\r\n\r\n If you disable or do not configure this policy setting, the default method is \"Allow all validly signed drivers\".\r\n\r\n -- \"Require inbox signed drivers\" specifies only drivers that are shipped as part of a Windows image are allowed on this computer.\r\n\r\n -- \"Allow inbox and PrintDrivers Trusted Store signed drivers\" specifies only drivers that are shipped as part of a Windows image or drivers that are signed by certificates installed in the 'PrintDrivers' certificate store are allowed on this computer.\r\n\r\n -- \"Allow inbox, PrintDrivers Trusted Store, and WHQL signed drivers\" specifies the only drivers allowed on this computer are those that are: shipped as part of a Windows image, signed by certificates installed in the 'PrintDrivers' certificate store, or signed by the Windows Hardware Quality Lab (WHQL).\r\n\r\n -- \"Allow inbox, PrintDrivers Trusted Store, WHQL, and Trusted Publishers Store signed drivers\" specifies the only drivers allowed on this computer are those that are: shipped as part of a Windows image, signed by certificates installed in the 'PrintDrivers' certificate store, signed by the Windows Hardware Quality Lab (WHQL), or signed by certificates installed in the 'Trusted Publishers' certificate store.\r\n\r\n -- \"Allow all validly signed drivers\" specfies that any print driver that has a valid embedded signature or can be validated against the print driver catalog can be installed on this computer.\r\n\r\n The 'PrintDrivers' certificate store needs to be created by an administrator under the local machine store location.\r\n\r\n The 'Trusted Publishers' certificate store can contain certificates from sources that are not related to print drivers.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configuredrivervalidationlevel"],"options":[{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum","displayName":"Select the driver signature mechanism for this computer: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_0","displayName":"Require inbox signed drivers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_1","displayName":"Allow inbox and Print Drivers Trusted Store signed drivers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_2","displayName":"Allow inbox, Print Drivers Trusted Store, and WHQL signed drivers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_3","displayName":"Allow inbox, Print Drivers Trusted Store, WHQL, and Trusted Publisher Store signed drivers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configuredrivervalidationlevel_drivervalidationlevel_enum_4","displayName":"Allow all validly signed drivers","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configureipppagecountspolicy","displayName":"Always send job page count information for IPP printers","description":"\r\nDetermines whether to always send page count information for accounting purposes for printers using the Microsoft IPP Class Driver.\r\n\r\nBy default, pages are sent to the printer as soon as they are rendered and page count information is not sent to the printer unless pages must be reordered.\r\n\r\nIf you enable this setting the system will render all print job pages up front and send the printer the total page count for the print job.\r\n\r\nIf you disable this setting or do not configure it, pages are printed as soon as they are rendered and page counts are only sent when page reordering is required to process the job.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configureipppagecountspolicy"],"options":[{"id":"device_vendor_msft_policy_config_printers_configureipppagecountspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configureipppagecountspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy","displayName":"Configure Redirection Guard","description":"\r\nDetermines whether Redirection Guard is enabled for the print spooler.\r\n\r\nYou can enable this setting to configure the Redirection Guard policy being applied to spooler.\r\n\r\nIf you disable or do not configure this policy setting, Redirection Guard will default to being 'Enabled'.\r\n\r\nIf you enable this setting you may select the following options:\r\n\r\n-- Enabled : Redirection Guard will prevent any file redirections from being followed\r\n\r\n-- Disabed : Redirection Guard will not be enabled and file redirections may be used within the spooler process\r\n\r\n-- Audit : Redirection Guard will log events as though it were enabled but will not actually prevent file redirections from being used within the spooler.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configureredirectionguardpolicy"],"options":[{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy_redirectionguardpolicy_enum","displayName":"Redirection Guard Options (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy_redirectionguardpolicy_enum_0","displayName":"Redirection Guard Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy_redirectionguardpolicy_enum_1","displayName":"Redirection Guard Enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configureredirectionguardpolicy_redirectionguardpolicy_enum_2","displayName":"Redirection Guard Audit Only","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpcauthnlevelprivacyenabled","displayName":"Configure RPC packet level privacy setting for incoming connections","description":"\r\nThis policy setting controls whether packet level privacy is enabled for RPC for incoming connections.\r\n\r\nBy default packet level privacy is enabled for RPC for incoming connections.\r\n\r\nIf you enable or do not configure this policy setting, packet level privacy is enabled for RPC for incoming connections.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurerpcauthnlevelprivacyenabled"],"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpcauthnlevelprivacyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcauthnlevelprivacyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy","displayName":"Configure RPC connection settings","description":"\r\nThis policy setting controls which protocol and protocol settings to use for outgoing RPC connections to a remote print spooler.\r\n\r\nBy default, RPC over TCP is used and authentication is always enabled. For RPC over named pipes, authentication is always enabled for domain joined machines but disabled for non domain joined machines.\r\n\r\nProtocol to use for outgoing RPC connections:\r\n -- \"RPC over TCP\": Use RPC over TCP for outgoing RPC connections to a remote print spooler\r\n -- \"RPC over named pipes\": Use RPC over named pipes for outgoing RPC connections to a remote print spooler\r\n\r\nUse authentication for outgoing RPC over named pipes connections:\r\n -- \"Default\": By default domain joined computers enable RPC authentication for RPC over named pipes while non domain joined computers disable RPC authentication for RPC over named pipes\r\n -- \"Authentication enabled\": RPC authentication will be used for outgoing RPC over named pipes connections\r\n -- \"Authentication disabled\": RPC authentication will not be used for outgoing RPC over named pipes connections\r\n\r\nIf you disable or do not configure this policy setting, the above defaults will be used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurerpcconnectionpolicy"],"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionauthentication_enum","displayName":"Use authentication for outgoing RPC connections: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionauthentication_enum_0","displayName":"Default","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionauthentication_enum_1","displayName":"Authentication enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionauthentication_enum_2","displayName":"Authentication disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionprotocol_enum","displayName":"Protocol to use for outgoing RPC connections: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionprotocol_enum_0","displayName":"RPC over TCP","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpcconnectionpolicy_rpcconnectionprotocol_enum_1","displayName":"RPC over named pipes","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy","displayName":"Configure RPC listener settings","description":"\r\nThis policy setting controls which protocols incoming RPC connections to the print spooler are allowed to use.\r\n\r\nBy default, RPC over TCP is enabled and Negotiate is used for the authentication protocol.\r\n\r\nProtocols to allow for incoming RPC connections:\r\n -- \"RPC over named pipes\": Incoming RPC connections are only allowed over named pipes\r\n -- \"RPC over TCP\": Incoming RPC connections are only allowed over TCP (the default option)\r\n -- \"RPC over named pipes and TCP\": Incoming RPC connections will be allowed over TCP and named pipes\r\n\r\nAuthentication protocol to use for incoming RPC connections:\r\n -- \"Negotiate\": Use the Negotiate authentication protocol (the default option)\r\n -- \"Kerberos\": Use the Kerberos authentication protocol\r\n\r\nIf you disable or do not configure this policy setting, the above defaults will be used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurerpclistenerpolicy"],"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpcauthenticationprotocol_enum","displayName":"Authentication protocol to use for incoming RPC connections: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpcauthenticationprotocol_enum_0","displayName":"Negotiate","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpcauthenticationprotocol_enum_1","displayName":"Kerberos","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpclistenerprotocols_enum","displayName":"Protocols to allow for incoming RPC connections: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpclistenerprotocols_enum_3","displayName":"RPC over named pipes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpclistenerprotocols_enum_5","displayName":"RPC over TCP","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpclistenerpolicy_rpclistenerprotocols_enum_7","displayName":"RPC over named pipes and TCP","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpctcpport","displayName":"Configure RPC over TCP port","description":"\r\nThis policy setting controls which port is used for RPC over TCP for incoming connections to the print spooler and outgoing connections to remote print spoolers.\r\n\r\nBy default dynamic TCP ports are used.\r\n\r\nRPC over TCP port:\r\n -- The port to use for RPC over TCP. A value of 0 is the default and indicates that dynamic TCP ports will be used\r\n\r\nIf you disable or do not configure this policy setting, dynamic TCP ports are used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurerpctcpport"],"options":[{"id":"device_vendor_msft_policy_config_printers_configurerpctcpport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurerpctcpport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_configurerpctcpport_rpctcpport","displayName":"RPC over TCP port: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_printers_configurewindowsprotectedprint","displayName":"Configure Windows protected print","description":"\r\nDetermines whether Windows protected print is enabled on this computer.\r\n\r\nBy default, Windows protected print is not enabled and there are not any restrictions on the print drivers that can be installed or print functionality.\r\n\r\nIf you enable this setting, the computer will operate in Windows protected print mode which only allows printing to printers that support a subset of inbox Windows print drivers.\r\n\r\nIf you disable this setting or do not configure it, there are not any restrictions on the print drivers that can be installed or print functionality.\r\n\r\nFor more information, please see https://learn.microsoft.com/en-us/windows-hardware/drivers/print/windows-protected-print-mode\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-configurewindowsprotectedprint"],"options":[{"id":"device_vendor_msft_policy_config_printers_configurewindowsprotectedprint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_configurewindowsprotectedprint_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_enabledevicecontrol","displayName":"Enable Device Control Printing Restrictions","description":"\r\n Determines whether Device Control Printing Restrictions are enforced for printing on this computer.\r\n\r\n By default, there are no restrictions to printing based on connection type or printer Make/Model.\r\n\r\n If you enable this setting, the computer will restrict printing to printer connections on the corporate network or approved USB-connected printers.\r\n\r\n If you disable this setting or do not configure it, there are no restrictions to printing based on connection type or printer Make/Model.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-enabledevicecontrol"],"options":[{"id":"device_vendor_msft_policy_config_printers_enabledevicecontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_enabledevicecontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist","displayName":"Manage Print Driver exclusion list","description":"\r\nThis policy setting controls the print driver exclusion list. The exclusion list allows an administrator to curate a list of printer drivers that are not allowed to be installed on the system.\r\n\r\nThis checks outranks the signature check and allows drivers that have a valid signature level for the Print Driver signature validation policy to be excluded.\r\n\r\nEntries in the exclusion list consist of a SHA256 hash (or SHA1 hash for Win7) of the INF file and/or main driver DLL file of the driver and the name of the file.\r\n\r\nIf you disable or do not configure this policy setting, the registry key and values associated with this policy setting will be deleted, if currently set to a value.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-managedriverexclusionlist"],"options":[{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_driver_exclusionlistentry","displayName":"File Hash File Name: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_driver_exclusionlistentry_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_printers_managedriverexclusionlist_driver_exclusionlistentry_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions","displayName":"Point and Print Restrictions","description":"This policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients, and only to computers that are members of a domain.\r\n\r\n If you enable this policy setting:\r\n -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client, a printer connection will be made. If a compatible print driver is not available on the client, no connection will be made.\r\n -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print, or when printer connection drivers need to be updated.\r\n\r\n If you do not configure this policy setting:\r\n -Windows Vista client computers can point and print to any server.\r\n -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print.\r\n -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated.\r\n -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print.\r\n\r\n If you disable this policy setting:\r\n -Windows Vista client computers can create a printer connection to any server using Point and Print.\r\n -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print.\r\n -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated.\r\n -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print.\r\n -The \"Users can only point and print to computers in their forest\" setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-pointandprintrestrictions"],"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationoninstall_enum","displayName":"When installing drivers for a new connection: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationoninstall_enum_0","displayName":"Show warning and elevation prompt","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationoninstall_enum_1","displayName":"Do not show warning or elevation prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationonupdate_enum","displayName":"When updating drivers for an existing connection: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationonupdate_enum_0","displayName":"Show warning and elevation prompt","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationonupdate_enum_1","displayName":"Show warning only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_nowarningnoelevationonupdate_enum_2","displayName":"Do not show warning or elevation prompt","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedforest_chk","displayName":"Users can only point and print to machines in their forest (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedforest_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedforest_chk_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedservers_chk","displayName":"Users can only point and print to these servers: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedservers_chk_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedservers_chk_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_pointandprintrestrictions_pointandprint_trustedservers_edit","displayName":"Enter fully qualified server names separated by semicolons (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_printers_publishprinters","displayName":"Allow printers to be published","description":"Determines whether the computer's shared printers can be published in Active Directory.\r\n\r\n If you enable this setting or do not configure it, users can use the \"List in directory\" option in the Printer's Properties' Sharing tab to publish shared printers in Active Directory.\r\n\r\n If you disable this setting, this computer's shared printers cannot be published in Active Directory, and the \"List in directory\" option is not available.\r\n\r\n Note: This settings takes priority over the setting \"Automatically publish new printers in the Active Directory\".","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-publishprinters"],"options":[{"id":"device_vendor_msft_policy_config_printers_publishprinters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_publishprinters_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_requireippspolicy","displayName":"Require Ipps Policy","description":"Allows restricting IPP printer installation to only allow printers supporting IPPS to be installed. This ensures TLS is used for printer communication","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Printers#requireippspolicy"],"options":[{"id":"device_vendor_msft_policy_config_printers_requireippspolicy_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_printers_requireippspolicy_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_printers_restrictdriverinstallationtoadministrators","displayName":"Limits print driver installation to Administrators","description":"\r\nDetermines whether users that aren't Administrators can install print drivers on this computer.\r\n\r\nBy default, users that aren't Administrators can't install print drivers on this computer.\r\n\r\nIf you enable this setting or do not configure it, the system will limit installation of print drivers to Administrators of this computer.\r\n\r\nIf you disable this setting, the system won't limit installation of print drivers to this computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-printers#printers-restrictdriverinstallationtoadministrators"],"options":[{"id":"device_vendor_msft_policy_config_printers_restrictdriverinstallationtoadministrators_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_printers_restrictdriverinstallationtoadministrators_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_allowautoacceptpairingandprivacyconsentprompts","displayName":"Allow Auto Accept Pairing And Privacy Consent Prompts","description":"Allows or disallows the automatic acceptance of the pairing and privacy user consent dialog when launching apps. NoteThere were issues reported with the previous release of this policy and a fix was Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#allowautoacceptpairingandprivacyconsentprompts"],"options":[{"id":"device_vendor_msft_policy_config_privacy_allowautoacceptpairingandprivacyconsentprompts_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_allowautoacceptpairingandprivacyconsentprompts_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_allowcrossdeviceclipboard","displayName":"Allow Cross Device Clipboard","description":"Allows syncing of Clipboard across devices under the same Microsoft account.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#allowcrossdeviceclipboard"],"options":[{"id":"device_vendor_msft_policy_config_privacy_allowcrossdeviceclipboard_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_allowcrossdeviceclipboard_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_allowinputpersonalization","displayName":"Allow Input Personalization","description":"Updated in Windows 10, version 1809. This policy specifies whether users on the device have the option to enable online speech recognition. When enabled, users can use their voice for dictation and to talk to Cortana and other apps that use Microsoft cloud-based speech recognition. Microsoft will use voice input to help improve our speech services. If the policy value is set to 0, online speech recognition will be disabled and users cannot enable online speech recognition via settings. If policy value is set to 1 or is not configured, control is deferred to users. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#allowinputpersonalization"],"options":[{"id":"device_vendor_msft_policy_config_privacy_allowinputpersonalization_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_allowinputpersonalization_1","displayName":"Allow","description":"Choice deferred to user's preference.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_disableadvertisingid","displayName":"Disable Advertising ID","description":"Enables or disables the Advertising ID. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#disableadvertisingid"],"options":[{"id":"device_vendor_msft_policy_config_privacy_disableadvertisingid_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_disableadvertisingid_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_disableadvertisingid_65535","displayName":"Not Configured","description":"Not Configured","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_disableprivacyexperience","displayName":"Disable Privacy Experience","description":"Enabling this policy prevents the privacy experience from launching during user logon for new and upgraded users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#disableprivacyexperience"],"options":[{"id":"device_vendor_msft_policy_config_privacy_disableprivacyexperience_0","displayName":"Disabled","description":"Allow the 'choose privacy settings for your device' screen for a new user during their first logon or when an existing user logs in for the first time after an upgrade.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_disableprivacyexperience_1","displayName":"Enabled","description":"Do not allow the 'choose privacy settings for your device' screen when a new user logs in or an existing user logs in for the first time after an upgrade.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_enableactivityfeed","displayName":"Enable Activity Feed","description":"Enables ActivityFeed, which is responsible for mirroring different activity types (as applicable) across device graph of the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#enableactivityfeed"],"options":[{"id":"device_vendor_msft_policy_config_privacy_enableactivityfeed_0","displayName":"Disabled","description":"Disabled. Apps/OS can't publish the activities and roaming is disabled. (not published to the cloud).","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_enableactivityfeed_1","displayName":"Enabled","description":"Enabled. Apps/OS can publish the activities and will be roamed across device graph.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo","displayName":"Let Apps Access Account Info","description":"This policy setting specifies whether Windows apps can access account information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessaccountinfo"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_forceallowtheseapps","displayName":"Let Apps Access Account Info Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessaccountinfo_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_forcedenytheseapps","displayName":"Let Apps Access Account Info Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessaccountinfo_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessaccountinfo_userincontroloftheseapps","displayName":"Let Apps Access Account Info User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the account information privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessaccountinfo_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception","displayName":"Let Apps Access Background Spatial Perception","description":"This policy setting specifies whether Windows apps can access the movement of the user's head, hands, motion controllers, and other tracked objects, while the apps are running in the background.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessbackgroundspatialperception"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_forceallowtheseapps","displayName":"Let Apps Access Background Spatial Perception Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the user's movements while the apps are running in the background. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessbackgroundspatialperception_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_forcedenytheseapps","displayName":"Let Apps Access Background Spatial Perception Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the user's movements while the apps are running in the background. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessbackgroundspatialperception_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessbackgroundspatialperception_userincontroloftheseapps","displayName":"Let Apps Access Background Spatial Perception User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the user movements privacy setting for the listed apps. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessbackgroundspatialperception_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar","displayName":"Let Apps Access Calendar","description":"This policy setting specifies whether Windows apps can access the calendar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscalendar"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_forceallowtheseapps","displayName":"Let Apps Access Calendar Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscalendar_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_forcedenytheseapps","displayName":"Let Apps Access Calendar Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscalendar_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscalendar_userincontroloftheseapps","displayName":"Let Apps Access Calendar User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the calendar privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscalendar_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory","displayName":"Let Apps Access Call History","description":"This policy setting specifies whether Windows apps can access call history.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscallhistory"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_forceallowtheseapps","displayName":"Let Apps Access Call History Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscallhistory_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_forcedenytheseapps","displayName":"Let Apps Access Call History Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscallhistory_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscallhistory_userincontroloftheseapps","displayName":"Let Apps Access Call History User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the call history privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscallhistory_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera","displayName":"Let Apps Access Camera","description":"This policy setting specifies whether Windows apps can access the camera.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscamera"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_forceallowtheseapps","displayName":"Let Apps Access Camera Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscamera_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_forcedenytheseapps","displayName":"Let Apps Access Camera Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscamera_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscamera_userincontroloftheseapps","displayName":"Let Apps Access Camera User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscamera_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts","displayName":"Let Apps Access Contacts","description":"This policy setting specifies whether Windows apps can access contacts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscontacts"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_forceallowtheseapps","displayName":"Let Apps Access Contacts Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscontacts_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_forcedenytheseapps","displayName":"Let Apps Access Contacts Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscontacts_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesscontacts_userincontroloftheseapps","displayName":"Let Apps Access Contacts User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesscontacts_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail","displayName":"Let Apps Access Email","description":"This policy setting specifies whether Windows apps can access email.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessemail"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_forceallowtheseapps","displayName":"Let Apps Access Email Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessemail_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_forcedenytheseapps","displayName":"Let Apps Access Email Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessemail_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessemail_userincontroloftheseapps","displayName":"Let Apps Access Email User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessemail_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgazeinput","displayName":"Let Apps Access Gaze Input","description":"This policy setting specifies whether Windows apps can access the eye tracker.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgazeinput"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgazeinput_forceallowtheseapps","displayName":"Let Apps Access Gaze Input Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the eye tracker. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgazeinput_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgazeinput_forcedenytheseapps","displayName":"Let Apps Access Gaze Input Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the eye tracker. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgazeinput_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgazeinput_userincontroloftheseapps","displayName":"Let Apps Access Gaze Input User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the eye tracker privacy setting for the listed apps. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgazeinput_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscaptureprogrammatic","displayName":"Let Apps Access Graphics Capture Programmatic","description":"This policy setting specifies whether Windows apps can use screen capture on arbitrary windows or displays.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscaptureprogrammatic"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscaptureprogrammatic_forceallowtheseapps","displayName":"Let Apps Access Graphics Capture Programmatic Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to use screen capture on arbitrary windows or displays. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscaptureprogrammatic_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscaptureprogrammatic_forcedenytheseapps","displayName":"Let Apps Access Graphics Capture Programmatic Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the use of screen capture on arbitrary windows or displays. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscaptureprogrammatic_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscaptureprogrammatic_userincontroloftheseapps","displayName":"Let Apps Access Graphics Capture Programmatic User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the programmatic screen capture setting for the listed apps. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscaptureprogrammatic_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscapturewithoutborder","displayName":"Let Apps Access Graphics Capture Without Border","description":"This policy setting specifies whether Windows apps can disable the screen capture border.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscapturewithoutborder"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscapturewithoutborder_forceallowtheseapps","displayName":"Let Apps Access Graphics Capture Without Border Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to disable the screen capture border. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscapturewithoutborder_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscapturewithoutborder_forcedenytheseapps","displayName":"Let Apps Access Graphics Capture Without Border Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied configuration access to the screen capture border. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscapturewithoutborder_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessgraphicscapturewithoutborder_userincontroloftheseapps","displayName":"Let Apps Access Graphics Capture Without Border User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the screen capture border privacy setting for the listed apps. This setting overrides the default LetAppsAccessGraphicsCaptureWithoutBorder policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessgraphicscapturewithoutborder_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation","displayName":"Let Apps Access Location","description":"This policy setting specifies whether Windows apps can access location.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesslocation"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_forceallowtheseapps","displayName":"Let Apps Access Location Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesslocation_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_forcedenytheseapps","displayName":"Let Apps Access Location Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesslocation_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesslocation_userincontroloftheseapps","displayName":"Let Apps Access Location User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesslocation_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging","displayName":"Let Apps Access Messaging","description":"This policy setting specifies whether Windows apps can read or send messages (text or MMS).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmessaging"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_forceallowtheseapps","displayName":"Let Apps Access Messaging Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmessaging_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_forcedenytheseapps","displayName":"Let Apps Access Messaging Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmessaging_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmessaging_userincontroloftheseapps","displayName":"Let Apps Access Messaging User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmessaging_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone","displayName":"Let Apps Access Microphone","description":"This policy setting specifies whether Windows apps can access the microphone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmicrophone"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_forceallowtheseapps","displayName":"Let Apps Access Microphone Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmicrophone_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_forcedenytheseapps","displayName":"Let Apps Access Microphone Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmicrophone_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmicrophone_userincontroloftheseapps","displayName":"Let Apps Access Microphone User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmicrophone_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion","displayName":"Let Apps Access Motion","description":"This policy setting specifies whether Windows apps can access motion data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmotion"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_forceallowtheseapps","displayName":"Let Apps Access Motion Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmotion_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_forcedenytheseapps","displayName":"Let Apps Access Motion Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmotion_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessmotion_userincontroloftheseapps","displayName":"Let Apps Access Motion User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessmotion_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications","displayName":"Let Apps Access Notifications","description":"This policy setting specifies whether Windows apps can access notifications.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessnotifications"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_forceallowtheseapps","displayName":"Let Apps Access Notifications Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessnotifications_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_forcedenytheseapps","displayName":"Let Apps Access Notifications Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessnotifications_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessnotifications_userincontroloftheseapps","displayName":"Let Apps Access Notifications User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessnotifications_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone","displayName":"Let Apps Access Phone","description":"This policy setting specifies whether Windows apps can make phone calls","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessphone"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_forceallowtheseapps","displayName":"Let Apps Access Phone Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessphone_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_forcedenytheseapps","displayName":"Let Apps Access Phone Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessphone_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessphone_userincontroloftheseapps","displayName":"Let Apps Access Phone User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessphone_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios","displayName":"Let Apps Access Radios","description":"This policy setting specifies whether Windows apps have access to control radios.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessradios"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_forceallowtheseapps","displayName":"Let Apps Access Radios Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessradios_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_forcedenytheseapps","displayName":"Let Apps Access Radios Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessradios_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccessradios_userincontroloftheseapps","displayName":"Let Apps Access Radios User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccessradios_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesssystemaimodels","displayName":"Let Apps Access System AI Models","description":"This policy setting specifies whether Windows apps can use text and image generation features of Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesssystemaimodels"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesssystemaimodels_forceallowtheseapps","displayName":"Let Apps Access System AI Models Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to use text and image generation features of Windows. This setting overrides the default LetAppsAccessSystemAIModels policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesssystemaimodels_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesssystemaimodels_forcedenytheseapps","displayName":"Let Apps Access System AI Models Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the use text and image generation features of Windows. This setting overrides the default LetAppsAccessSystemAIModels policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesssystemaimodels_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesssystemaimodels_userincontroloftheseapps","displayName":"Let Apps Access System AI Models User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the text and image generation setting for the listed apps. This setting overrides the default LetAppsAccessSystemAIModels policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesssystemaimodels_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstasks","displayName":"Let Apps Access Tasks","description":"This policy setting specifies whether Windows apps can access tasks.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstasks"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstasks_forceallowtheseapps","displayName":"Let Apps Access Tasks Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstasks_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstasks_forcedenytheseapps","displayName":"Let Apps Access Tasks Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstasks_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstasks_userincontroloftheseapps","displayName":"Let Apps Access Tasks User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstasks_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices","displayName":"Let Apps Access Trusted Devices","description":"This policy setting specifies whether Windows apps can access trusted devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstrusteddevices"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_forceallowtheseapps","displayName":"Let Apps Access Trusted Devices Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstrusteddevices_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_forcedenytheseapps","displayName":"Let Apps Access Trusted Devices Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstrusteddevices_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsaccesstrusteddevices_userincontroloftheseapps","displayName":"Let Apps Access Trusted Devices User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsaccesstrusteddevices_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoice","displayName":"Let Apps Activate With Voice","description":"This policy setting specifies whether Windows apps can be activated by voice.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsactivatewithvoice"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoice_0","displayName":"User in control. Users can decide if Windows apps can be activated by voice using Settings > Privacy options on the device.","description":"User in control. Users can decide if Windows apps can be activated by voice using Settings > Privacy options on the device.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoice_1","displayName":"Force allow. Windows apps can be activated by voice and users cannot change it.","description":"Force allow. Windows apps can be activated by voice and users cannot change it.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoice_2","displayName":"Force deny. Windows apps cannot be activated by voice and users cannot change it.","description":"Force deny. Windows apps cannot be activated by voice and users cannot change it.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoiceabovelock","displayName":"Let Apps Activate With Voice Above Lock","description":"This policy setting specifies whether Windows apps can be activated by voice while the system is locked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsactivatewithvoiceabovelock"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoiceabovelock_0","displayName":"User in control. Users can decide if Windows apps can be activated by voice while the screen is locked using Settings > Privacy options on the device.","description":"User in control. Users can decide if Windows apps can be activated by voice while the screen is locked using Settings > Privacy options on the device.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoiceabovelock_1","displayName":"Force allow. Windows apps can be activated by voice while the screen is locked, and users cannot change it.","description":"Force allow. Windows apps can be activated by voice while the screen is locked, and users cannot change it.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsactivatewithvoiceabovelock_2","displayName":"Force deny. Windows apps cannot be activated by voice while the screen is locked, and users cannot change it.","description":"Force deny. Windows apps cannot be activated by voice while the screen is locked, and users cannot change it.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo","displayName":"Let Apps Get Diagnostic Info","description":"This policy setting specifies whether Windows apps can get diagnostic information about other apps, including user names.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsgetdiagnosticinfo"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_forceallowtheseapps","displayName":"Let Apps Get Diagnostic Info Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed to get diagnostic information about other apps, including user names. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsgetdiagnosticinfo_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_forcedenytheseapps","displayName":"Let Apps Get Diagnostic Info Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are not allowed to get diagnostic information about other apps, including user names. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsgetdiagnosticinfo_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsgetdiagnosticinfo_userincontroloftheseapps","displayName":"Let Apps Get Diagnostic Info User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the app diagnostics privacy setting for the listed Windows apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsgetdiagnosticinfo_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground","displayName":"Let Apps Run In Background","description":"This policy setting specifies whether Windows apps can run in the background.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsruninbackground"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_0","displayName":"User in control (default).","description":"User in control (default).","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_forceallowtheseapps","displayName":"Force Allow These Apps to Run in Background","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsruninbackground_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_forcedenytheseapps","displayName":"Let Apps Run In Background Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are not allowed to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsruninbackground_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappsruninbackground_userincontroloftheseapps","displayName":"Let Apps Run In Background User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the background apps privacy setting for the listed Windows apps. This setting overrides the default LetAppsRunInBackground policy setting for the specified Windows apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappsruninbackground_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices","displayName":"Let Apps Sync With Devices","description":"This policy setting specifies whether Windows apps can communicate with unpaired wireless devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappssyncwithdevices"],"options":[{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_1","displayName":"Force allow.","description":"Force allow.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_2","displayName":"Force deny.","description":"Force deny.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_forceallowtheseapps","displayName":"Let Apps Sync With Devices Force Allow These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappssyncwithdevices_forceallowtheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_forcedenytheseapps","displayName":"Let Apps Sync With Devices Force Deny These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not be allowed to communicate with unpaired wireless devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappssyncwithdevices_forcedenytheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_letappssyncwithdevices_userincontroloftheseapps","displayName":"Let Apps Sync With Devices User In Control Of These Apps","description":"List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'Communicate with unpaired wireless devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#letappssyncwithdevices_userincontroloftheseapps"],"options":null},{"id":"device_vendor_msft_policy_config_privacy_publishuseractivities","displayName":"Publish User Activities","description":"Allows apps/system to publish 'User Activities' into ActivityFeed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#publishuseractivities"],"options":[{"id":"device_vendor_msft_policy_config_privacy_publishuseractivities_0","displayName":"Disabled","description":"Disabled. Apps/OS can't publish the user activities.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_publishuseractivities_1","displayName":"Enabled","description":"Enabled. Apps/OS can publish the user activities.","helpText":null}]},{"id":"device_vendor_msft_policy_config_privacy_uploaduseractivities","displayName":"Upload User Activities","description":"Allows ActivityFeed to upload published 'User Activities'.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Privacy#uploaduseractivities"],"options":[{"id":"device_vendor_msft_policy_config_privacy_uploaduseractivities_0","displayName":"Disabled","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_privacy_uploaduseractivities_1","displayName":"Enabled","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_quiettime_allowusertochangesetting","displayName":"Allow user to change setting","description":"Disallowing end users from changing this setting will prevent them from editing their global quiet time settings. Note: If Non-working time policy is applied to the user, they will be prevented from editing their global quiet time settings by default.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_quiettime_allowusertochangesetting_0","displayName":"No","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_allowusertochangesetting_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday","displayName":"Mute notifications all day","description":null,"helpText":null,"infoUrls":[],"options":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_1","displayName":"Require","description":null,"helpText":null}},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek","displayName":"Days of the week","description":null,"helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_0","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_1","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_4","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_5","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsallday_daysoftheweek_6","displayName":"Saturday","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsclockedout","displayName":"Mute notifications","description":"This will automatically mute Microsoft Teams notifications when managed account is in non-working time. Note: Configuring this setting will prevent end users from editing their global quiet time settings.","helpText":null,"infoUrls":[],"options":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsclockedout_1","displayName":"Require","description":null,"helpText":null}},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily","displayName":"Mute notifications daily","description":null,"helpText":null,"infoUrls":[],"options":{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_1","displayName":"Require","description":null,"helpText":null}},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_daysoftheweek","displayName":"Days of the week","description":null,"helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_daysoftheweek_0","displayName":"Sunday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_daysoftheweek_1","displayName":"Monday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_daysoftheweek_2","displayName":"Tuesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_daysoftheweek_3","displayName":"Wednesday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_daysoftheweek_4","displayName":"Thursday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_daysoftheweek_5","displayName":"Friday","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_daysoftheweek_6","displayName":"Saturday","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_endtime","displayName":"End time","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_quiettime_mutenotificationsdaily_starttime","displayName":"Start time","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_quiettime_rangesettings_endtime","displayName":"End","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_quiettime_rangesettings_starttime","displayName":"Start","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages","displayName":"Customize warning messages","description":"This policy setting lets you customize warning messages.\r\n\r\nThe \"Display warning message before sharing control\" policy setting allows you to specify a custom message to display before a user shares control of his or her computer.\r\n\r\nThe \"Display warning message before connecting\" policy setting allows you to specify a custom message to display before a user allows a connection to his or her computer.\r\n\r\nIf you enable this policy setting, the warning message you specify overrides the default message that is seen by the novice.\r\n\r\nIf you disable this policy setting, the user sees the default warning message.\r\n\r\nIf you do not configure this policy setting, the user sees the default warning message.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteassistance#remoteassistance-customizewarningmessages"],"options":[{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages_ra_options_connect_message","displayName":"Display warning message before connecting: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteassistance_customizewarningmessages_ra_options_share_control_message","displayName":"Display warning message before sharing control: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteassistance_sessionlogging","displayName":"Turn on session logging","description":"This policy setting allows you to turn logging on or off. Log files are located in the user's Documents folder under Remote Assistance.\r\n\r\nIf you enable this policy setting, log files are generated.\r\n\r\nIf you disable this policy setting, log files are not generated.\r\n\r\nIf you do not configure this setting, application-based settings are used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteassistance#remoteassistance-sessionlogging"],"options":[{"id":"device_vendor_msft_policy_config_remoteassistance_sessionlogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_sessionlogging_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance","displayName":"Configure Solicited Remote Assistance","description":"This policy setting allows you to turn on or turn off Solicited (Ask for) Remote Assistance on this computer.\r\n\r\nIf you enable this policy setting, users on this computer can use email or file transfer to ask someone for help. Also, users can use instant messaging programs to allow connections to this computer, and you can configure additional Remote Assistance settings.\r\n\r\nIf you disable this policy setting, users on this computer cannot use email or file transfer to ask someone for help. Also, users cannot use instant messaging programs to allow connections to this computer.\r\n\r\nIf you do not configure this policy setting, users can turn on or turn off Solicited (Ask for) Remote Assistance themselves in System Properties in Control Panel. Users can also configure Remote Assistance settings.\r\n\r\nIf you enable this policy setting, you have two ways to allow helpers to provide Remote Assistance: \"Allow helpers to only view the computer\" or \"Allow helpers to remotely control the computer.\"\r\n\r\nThe \"Maximum ticket time\" policy setting sets a limit on the amount of time that a Remote Assistance invitation created by using email or file transfer can remain open.\r\n\r\nThe \"Select the method for sending email invitations\" setting specifies which email standard to use to send Remote Assistance invitations. Depending on your email program, you can use either the Mailto standard (the invitation recipient connects through an Internet link) or the SMAPI (Simple MAPI) standard (the invitation is attached to your email message). This policy setting is not available in Windows Vista since SMAPI is the only method supported.\r\n\r\nIf you enable this policy setting you should also enable appropriate firewall exceptions to allow Remote Assistance communications.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteassistance#remoteassistance-solicitedremoteassistance"],"options":[{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_control_list","displayName":"Permit remote control of this computer:","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_control_list_1","displayName":"Allow helpers to remotely control the computer","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_control_list_0","displayName":"Allow helpers to only view the computer","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expireunits_list","displayName":"Maximum ticket time (units):","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expireunits_list_0","displayName":"Minutes","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expireunits_list_1","displayName":"Hours","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expireunits_list_2","displayName":"Days","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_expirevalue_edt","displayName":"Maximum ticket time (value):","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_mailto_list","displayName":"Method for sending email invitations:","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_mailto_list_0","displayName":"Simple MAPI","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_solicitedremoteassistance_ra_solicit_mailto_list_1","displayName":"Mailto","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance","displayName":"Configure Offer Remote Assistance","description":"This policy setting allows you to turn on or turn off Offer (Unsolicited) Remote Assistance on this computer.\r\n\r\nIf you enable this policy setting, users on this computer can get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance.\r\n\r\nIf you disable this policy setting, users on this computer cannot get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance.\r\n\r\nIf you do not configure this policy setting, users on this computer cannot get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance.\r\n\r\nIf you enable this policy setting, you have two ways to allow helpers to provide Remote Assistance: \"Allow helpers to only view the computer\" or \"Allow helpers to remotely control the computer.\" When you configure this policy setting, you also specify the list of users or user groups that are allowed to offer remote assistance.\r\n\r\nTo configure the list of helpers, click \"Show.\" In the window that opens, you can enter the names of the helpers. Add each user or group one by one. When you enter the name of the helper user or user groups, use the following format:\r\n\r\n\\ or\r\n\r\n\\\r\n\r\nIf you enable this policy setting, you should also enable firewall exceptions to allow Remote Assistance communications. The firewall exceptions required for Offer (Unsolicited) Remote Assistance depend on the version of Windows you are running.\r\n\r\nWindows Vista and later\r\n\r\nEnable the Remote Assistance exception for the domain profile. The exception must contain:\r\nPort 135:TCP\r\n%WINDIR%\\System32\\msra.exe\r\n%WINDIR%\\System32\\raserver.exe\r\n\r\nWindows XP with Service Pack 2 (SP2) and Windows XP Professional x64 Edition with Service Pack 1 (SP1)\r\n\r\nPort 135:TCP\r\n%WINDIR%\\PCHealth\\HelpCtr\\Binaries\\Helpsvc.exe\r\n%WINDIR%\\PCHealth\\HelpCtr\\Binaries\\Helpctr.exe\r\n%WINDIR%\\System32\\Sessmgr.exe\r\n\r\nFor computers running Windows Server 2003 with Service Pack 1 (SP1)\r\n\r\nPort 135:TCP\r\n%WINDIR%\\PCHealth\\HelpCtr\\Binaries\\Helpsvc.exe\r\n%WINDIR%\\PCHealth\\HelpCtr\\Binaries\\Helpctr.exe\r\nAllow Remote Desktop Exception","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteassistance#remoteassistance-unsolicitedremoteassistance"],"options":[{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_ra_unsolicit_control_list","displayName":"Permit remote control of this computer: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_ra_unsolicit_control_list_1","displayName":"Allow helpers to remotely control the computer","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_ra_unsolicit_control_list_0","displayName":"Allow helpers to only view the computer","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteassistance_unsolicitedremoteassistance_ra_unsolicit_dacl_edit","displayName":"Helpers: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_allowuserstoconnectremotely","displayName":"Allow users to connect remotely by using Remote Desktop Services","description":"This policy setting allows you to configure remote access to computers by using Remote Desktop Services.\r\n\r\nIf you enable this policy setting, users who are members of the Remote Desktop Users group on the target computer can connect remotely to the target computer by using Remote Desktop Services.\r\n\r\nIf you disable this policy setting, users cannot connect remotely to the target computer by using Remote Desktop Services. The target computer will maintain any current connections, but will not accept any new incoming connections.\r\n\r\nIf you do not configure this policy setting, Remote Desktop Services uses the Remote Desktop setting on the target computer to determine whether the remote connection is allowed. This setting is found on the Remote tab in the System properties sheet. By default, remote connections are not allowed. \r\n\r\nNote: You can limit which clients are able to connect remotely by using Remote Desktop Services by configuring the policy setting at Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Security\\Require user authentication for remote connections by using Network Level Authentication. \r\n\r\nYou can limit the number of users who can connect simultaneously by configuring the policy setting at Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Connections\\Limit number of connections, or by configuring the policy setting Maximum Connections by using the Remote Desktop Session Host WMI Provider.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-allowuserstoconnectremotely"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_allowuserstoconnectremotely_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_allowuserstoconnectremotely_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel","displayName":"Set client connection encryption level","description":"Specifies whether to require the use of a specific encryption level to secure communications between client computers and RD Session Host servers during Remote Desktop Protocol (RDP) connections. This policy only applies when you are using native RDP encryption. However, native RDP encryption (as opposed to SSL encryption) is not recommended. This policy does not apply to SSL encryption.\r\n\r\nIf you enable this policy setting, all communications between clients and RD Session Host servers during remote connections must use the encryption method specified in this setting. By default, the encryption level is set to High. The following encryption methods are available:\r\n\r\n* High: The High setting encrypts data sent from the client to the server and from the server to the client by using strong 128-bit encryption. Use this encryption level in environments that contain only 128-bit clients (for example, clients that run Remote Desktop Connection). Clients that do not support this encryption level cannot connect to RD Session Host servers.\r\n\r\n* Client Compatible: The Client Compatible setting encrypts data sent between the client and the server at the maximum key strength supported by the client. Use this encryption level in environments that include clients that do not support 128-bit encryption.\r\n\r\n* Low: The Low setting encrypts only data sent from the client to the server by using 56-bit encryption.\r\n\r\nIf you disable or do not configure this setting, the encryption level to be used for remote connections to RD Session Host servers is not enforced through Group Policy.\r\n\r\nImportant\r\n\r\nFIPS compliance can be configured through the System cryptography. Use FIPS compliant algorithms for encryption, hashing, and signing settings in Group Policy (under Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options.) The FIPS compliant setting encrypts and decrypts data sent from the client to the server and from the server to the client, with the Federal Information Processing Standard (FIPS) 140 encryption algorithms, by using Microsoft cryptographic modules. Use this encryption level when communications between clients and RD Session Host servers requires the highest level of encryption.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-clientconnectionencryptionlevel"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_ts_encryption_level","displayName":"Encryption Level","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_ts_encryption_level_1","displayName":"Low Level","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_ts_encryption_level_2","displayName":"Client Compatible","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_clientconnectionencryptionlevel_ts_encryption_level_3","displayName":"High Level","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlocklegacyauthn","displayName":"Disconnect remote session on lock for legacy authentication","description":"This policy setting allows you to configure the user experience when the Remote Desktop session is locked by the user or by a policy. You can specify whether the remote session will show the remote lock screen or disconnect when the remote session is locked. Disconnecting the remote session ensures that a remote session cannot be left on the lock screen and cannot reconnect automatically due to loss of network connectivity.\r\n\r\nThis policy applies only when using legacy authentication to authenticate to the remote PC. Legacy authentication is limited to username and password, or certificates like smartcards. Legacy authentication doesn't leverage the Microsoft identity platform, such as Microsoft Entra ID. Legacy authentication includes the NTLM, CredSSP, RDSTLS, TLS, and RDP basic authentication protocols.\r\n\r\nIf you enable this policy setting, Remote Desktop connections using legacy authentication will disconnect the remote session when the remote session is locked. Users can reconnect when they're ready and re-enter their credentials when prompted.\r\n\r\nIf you disable or do not configure this policy setting, Remote Desktop connections using legacy authentication will show the remote lock screen when the remote session is locked. Users can unlock the remote session using their username and password, or certificates.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-disconnectonlocklegacyauthn"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlocklegacyauthn_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlocklegacyauthn_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlockmicrosoftidentityauthn","displayName":"Disconnect remote session on lock for Microsoft identity platform authentication","description":"This policy setting allows you to configure the user experience when the Remote Desktop session is locked by the user or by a policy. You can specify whether the remote session will show the remote lock screen or disconnect when the remote session is locked. Disconnecting the remote session ensures that a remote session cannot be left on the lock screen and cannot reconnect automatically due to loss of network connectivity.\r\n\r\nThis policy applies only when using an identity provider that uses the Microsoft identity platform, such as Microsoft Entra ID, to authenticate to the remote PC. This policy doesn't apply when using Legacy authentication which includes the NTLM, CredSSP, RDSTLS, TLS, and RDP basic authentication protocols.\r\n\r\nIf you enable or do not configure this policy setting, Remote Desktop connections using the Microsoft identity platform will disconnect the remote session when the remote session is locked. Users can reconnect when they're ready and can use passwordless authentication if configured.\r\n\r\nIf you disable this policy setting, Remote Desktop connections using the Microsoft identity platform will show the remote lock screen when the remote session is locked. Users can unlock the remote session using their username and password, or certificates.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-disconnectonlockmicrosoftidentityauthn"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlockmicrosoftidentityauthn_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_disconnectonlockmicrosoftidentityauthn_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowdriveredirection","displayName":"Do not allow drive redirection","description":"This policy setting specifies whether to prevent the mapping of client drives in a Remote Desktop Services session (drive redirection).\r\n\r\nBy default, an RD Session Host server maps client drives automatically upon connection. Mapped drives appear in the session folder tree in File Explorer or Computer in the format on . You can use this policy setting to override this behavior.\r\n\r\nIf you enable this policy setting, client drive redirection is not allowed in Remote Desktop Services sessions, and Clipboard file copy redirection is not allowed on computers running Windows Server 2003, Windows 8, and Windows XP.\r\n\r\nIf you disable this policy setting, client drive redirection is always allowed. In addition, Clipboard file copy redirection is always allowed if Clipboard redirection is allowed.\r\n\r\nIf you do not configure this policy setting, client drive redirection and Clipboard file copy redirection are not specified at the Group Policy level.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-donotallowdriveredirection"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowdriveredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowdriveredirection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowpasswordsaving","displayName":"Do not allow passwords to be saved","description":"Controls whether passwords can be saved on this computer from Remote Desktop Connection.\r\n\r\nIf you enable this setting the password saving checkbox in Remote Desktop Connection will be disabled and users will no longer be able to save passwords. When a user opens an RDP file using Remote Desktop Connection and saves his settings, any password that previously existed in the RDP file will be deleted.\r\n\r\nIf you disable this setting or leave it not configured, the user will be able to save passwords using Remote Desktop Connection.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-donotallowpasswordsaving"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowpasswordsaving_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowpasswordsaving_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowwebauthnredirection","displayName":"Do not allow WebAuthn redirection","description":"This policy setting lets you control the redirection of web authentication (WebAuthn) requests from a Remote Desktop session to the local device. This redirection enables users to authenticate to resources inside the Remote Desktop session using their local authenticator (e.g., Windows Hello for Business, security key, or other).\r\n\r\nBy default, Remote Desktop allows redirection of WebAuthn requests.\r\n\r\nIf you enable this policy setting, users can't use their local authenticator inside the Remote Desktop session.\r\n\r\nIf you disable or do not configure this policy setting, users can use local authenticators inside the Remote Desktop session.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-donotallowwebauthnredirection"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowwebauthnredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_donotallowwebauthnredirection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection","displayName":"Restrict clipboard transfer from client to server","description":"This policy setting allows you to restrict clipboard data transfers from client to server.\r\n\r\nIf you enable this policy setting, you must choose from the following behaviors:\r\n\r\n- Disable clipboard transfers from client to server.\r\n\r\n- Allow plain text copying from client to server.\r\n\r\n- Allow plain text and images copying from client to server.\r\n\r\n- Allow plain text, images and Rich Text Format copying from client to server.\r\n\r\n- Allow plain text, images, Rich Text Format and HTML copying from client to server.\r\n\r\nIf you disable or do not configure this policy setting, users can copy arbitrary contents from client to server if clipboard redirection is enabled.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the stricter restriction will be used.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-limitclienttoserverclipboardredirection"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text","displayName":"Restrict clipboard transfer from client to server: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_0","displayName":"Disable clipboard transfers from client to server","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_1","displayName":"Allow plain text","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_2","displayName":"Allow plain text and images","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_3","displayName":"Allow plain text, images and Rich Text Format","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitclienttoserverclipboardredirection_ts_cs_clipboard_restriction_text_4","displayName":"Allow plain text, images, Rich Text Format and HTML","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection","displayName":"Restrict clipboard transfer from server to client","description":"This policy setting allows you to restrict clipboard data transfers from server to client.\r\n\r\nIf you enable this policy setting, you must choose from the following behaviors:\r\n\r\n- Disable clipboard transfers from server to client.\r\n\r\n- Allow plain text copying from server to client.\r\n\r\n- Allow plain text and images copying from server to client.\r\n\r\n- Allow plain text, images and Rich Text Format copying from server to client.\r\n\r\n- Allow plain text, images, Rich Text Format and HTML copying from server to client.\r\n\r\nIf you disable or do not configure this policy setting, users can copy arbitrary contents from server to client if clipboard redirection is enabled.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the stricter restriction will be used.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-limitservertoclientclipboardredirection"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text","displayName":"Restrict clipboard transfer from server to client: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_0","displayName":"Disable clipboard transfers from server to client","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_1","displayName":"Allow plain text","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_2","displayName":"Allow plain text and images","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_3","displayName":"Allow plain text, images and Rich Text Format","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_limitservertoclientclipboardredirection_ts_sc_clipboard_restriction_text_4","displayName":"Allow plain text, images, Rich Text Format and HTML","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_promptforpassworduponconnection","displayName":"Always prompt for password upon connection","description":"This policy setting specifies whether Remote Desktop Services always prompts the client for a password upon connection.\r\n\r\nYou can use this setting to enforce a password prompt for users logging on to Remote Desktop Services, even if they already provided the password in the Remote Desktop Connection client.\r\n\r\nBy default, Remote Desktop Services allows users to automatically log on by entering a password in the Remote Desktop Connection client.\r\n\r\nIf you enable this policy setting, users cannot automatically log on to Remote Desktop Services by supplying their passwords in the Remote Desktop Connection client. They are prompted for a password to log on.\r\n\r\nIf you disable this policy setting, users can always log on to Remote Desktop Services automatically by supplying their passwords in the Remote Desktop Connection client.\r\n\r\nIf you do not configure this policy setting, automatic logon is not specified at the Group Policy level.\r\n","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-promptforpassworduponconnection"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_promptforpassworduponconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_promptforpassworduponconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_requiresecurerpccommunication","displayName":"Require secure RPC communication","description":"Specifies whether a Remote Desktop Session Host server requires secure RPC communication with all clients or allows unsecured communication.\r\n\r\nYou can use this setting to strengthen the security of RPC communication with clients by allowing only authenticated and encrypted requests.\r\n\r\nIf the status is set to Enabled, Remote Desktop Services accepts requests from RPC clients that support secure requests, and does not allow unsecured communication with untrusted clients.\r\n\r\nIf the status is set to Disabled, Remote Desktop Services always requests security for all RPC traffic. However, unsecured communication is allowed for RPC clients that do not respond to the request.\r\n\r\nIf the status is set to Not Configured, unsecured communication is allowed.\r\n\r\nNote: The RPC interface is used for administering and configuring Remote Desktop Services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-requiresecurerpccommunication"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_requiresecurerpccommunication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_requiresecurerpccommunication_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotedesktopservices_ts_server_remoteapp_use_shellappruntime","displayName":"Enable enhanced shell experience for RemoteApp","description":"This policy setting enables an enhanced shell experience for RemoteApp sessions, offering support for default file associations, Run/RunOnce registry keys, and more. This policy setting applies only to RemoteApp sessions and does not apply to Remote Desktop sessions.\r\n\r\nIf you enable or do not configure this policy setting, RemoteApp sessions on RD Session Host servers will have the enhanced shell experience.\r\n\r\nIf you disable this policy setting, RemoteApp sessions will not have the enhanced shell experience and will use the legacy shell behavior. This may be needed if compatibility issues arise in published RemoteApp programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-ts-server-remoteapp-use-shellappruntime"],"options":[{"id":"device_vendor_msft_policy_config_remotedesktopservices_ts_server_remoteapp_use_shellappruntime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotedesktopservices_ts_server_remoteapp_use_shellappruntime_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_client","displayName":"Allow Basic authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication.\r\n\r\nIf you enable this policy setting, the WinRM client uses Basic authentication. If WinRM is configured to use HTTP transport, the user name and password are sent over the network as clear text.\r\n\r\nIf you disable or do not configure this policy setting, the WinRM client does not use Basic authentication.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowbasicauthentication-client"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_client_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_client_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_service","displayName":"Allow Basic authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication from a remote client.\r\n\r\n If you enable this policy setting, the WinRM service accepts Basic authentication from a remote client.\r\n\r\n If you disable or do not configure this policy setting, the WinRM service does not accept Basic authentication from a remote client.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowbasicauthentication-service"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_service_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowbasicauthentication_service_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationclient","displayName":"Allow CredSSP authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses CredSSP authentication.\r\n\r\nIf you enable this policy setting, the WinRM client uses CredSSP authentication.\r\n\r\nIf you disable or do not configure this policy setting, the WinRM client does not use CredSSP authentication.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowcredsspauthenticationclient"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationclient_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationclient_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationservice","displayName":"Allow CredSSP authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts CredSSP authentication from a remote client.\r\n\r\n If you enable this policy setting, the WinRM service accepts CredSSP authentication from a remote client.\r\n\r\n If you disable or do not configure this policy setting, the WinRM service does not accept CredSSP authentication from a remote client.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowcredsspauthenticationservice"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowcredsspauthenticationservice_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement","displayName":"Allow remote server management through WinRM","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service automatically listens on the network for requests on the HTTP transport over the default HTTP port.\r\n\r\nIf you enable this policy setting, the WinRM service automatically listens on the network for requests on the HTTP transport over the default HTTP port.\r\n\r\nTo allow WinRM service to receive requests over the network, configure the Windows Firewall policy setting with exceptions for Port 5985 (default port for HTTP).\r\n\r\nIf you disable or do not configure this policy setting, the WinRM service will not respond to requests from a remote computer, regardless of whether or not any WinRM listeners are configured.\r\n\r\nThe service listens on the addresses specified by the IPv4 and IPv6 filters. The IPv4 filter specifies one or more ranges of IPv4 addresses, and the IPv6 filter specifies one or more ranges of IPv6addresses. If specified, the service enumerates the available IP addresses on the computer and uses only addresses that fall within one of the filter ranges.\r\n\r\nYou should use an asterisk (*) to indicate that the service listens on all available IP addresses on the computer. When * is used, other ranges in the filter are ignored. If the filter is left blank, the service does not listen on any addresses.\r\n\r\nFor example, if you want the service to listen only on IPv4 addresses, leave the IPv6 filter empty.\r\n\r\nRanges are specified using the syntax IP1-IP2. Multiple ranges are separated using \",\" (comma) as the delimiter.\r\n\r\nExample IPv4 filters:\\n2.0.0.1-2.0.0.20, 24.0.0.1-24.0.0.22\r\nExample IPv6 filters:\\n3FFE:FFFF:7654:FEDA:1245:BA98:0000:0000-3FFE:FFFF:7654:FEDA:1245:BA98:3210:4562","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowremoteservermanagement"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement_allowautoconfig_ipv4filter","displayName":"IPv4 filter: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowremoteservermanagement_allowautoconfig_ipv6filter","displayName":"IPv6 filter: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_client","displayName":"Allow unencrypted traffic","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the network.\r\n\r\nIf you enable this policy setting, the WinRM client sends and receives unencrypted messages over the network.\r\n\r\nIf you disable or do not configure this policy setting, the WinRM client sends or receives only encrypted messages over the network.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowunencryptedtraffic-client"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_client_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_client_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_service","displayName":"Allow unencrypted traffic","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network.\r\n\r\nIf you enable this policy setting, the WinRM client sends and receives unencrypted messages over the network.\r\n\r\nIf you disable or do not configure this policy setting, the WinRM client sends or receives only encrypted messages over the network.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-allowunencryptedtraffic-service"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_service_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_allowunencryptedtraffic_service_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_disallowdigestauthentication","displayName":"Disallow Digest authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Digest authentication.\r\n\r\nIf you enable this policy setting, the WinRM client does not use Digest authentication.\r\n\r\nIf you disable or do not configure this policy setting, the WinRM client uses Digest authentication.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-disallowdigestauthentication"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_disallowdigestauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_disallowdigestauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationclient","displayName":"Disallow Negotiate authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Negotiate authentication.\r\n\r\nIf you enable this policy setting, the WinRM client does not use Negotiate authentication.\r\n\r\nIf you disable or do not configure this policy setting, the WinRM client uses Negotiate authentication.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-disallownegotiateauthenticationclient"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationclient_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationclient_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationservice","displayName":"Disallow Negotiate authentication","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Negotiate authentication from a remote client.\r\n\r\n If you enable this policy setting, the WinRM service does not accept Negotiate authentication from a remote client.\r\n\r\n If you disable or do not configure this policy setting, the WinRM service accepts Negotiate authentication from a remote client.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-disallownegotiateauthenticationservice"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_disallownegotiateauthenticationservice_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_disallowstoringofrunascredentials","displayName":"Disallow WinRM from storing RunAs credentials","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not allow RunAs credentials to be stored for any plug-ins.\r\n\r\nIf you enable this policy setting, the WinRM service will not allow the RunAsUser or RunAsPassword configuration values to be set for any plug-ins. If a plug-in has already set the RunAsUser and RunAsPassword configuration values, the RunAsPassword configuration value will be erased from the credential store on this computer.\r\n\r\nIf you disable or do not configure this policy setting, the WinRM service will allow the RunAsUser and RunAsPassword configuration values to be set for plug-ins and the RunAsPassword value will be stored securely.\r\n\r\nIf you enable and then disable this policy setting,any values that were previously configured for RunAsPassword will need to be reset.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-disallowstoringofrunascredentials"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_disallowstoringofrunascredentials_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_disallowstoringofrunascredentials_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel","displayName":"Specify channel binding token hardening level","description":"This policy setting allows you to set the hardening level of the Windows Remote Management (WinRM) service with regard to channel binding tokens.\r\n\r\n If you enable this policy setting, the WinRM service uses the level specified in HardeningLevel to determine whether or not to accept a received request, based on a supplied channel binding token.\r\n\r\n If you disable or do not configure this policy setting, you can configure the hardening level locally on each computer.\r\n\r\n If HardeningLevel is set to Strict, any request not containing a valid channel binding token is rejected.\r\n\r\n If HardeningLevel is set to Relaxed (default value), any request containing an invalid channel binding token is rejected. However, a request that does not contain a channel binding token is accepted (though it is not protected from credential-forwarding attacks).\r\n\r\n If HardeningLevel is set to None, all requests are accepted (though they are not protected from credential-forwarding attacks).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-specifychannelbindingtokenhardeninglevel"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_hardeninglevelcombo","displayName":"Hardening Level: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_hardeninglevelcombo_none","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_hardeninglevelcombo_relaxed","displayName":"Relaxed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_specifychannelbindingtokenhardeninglevel_hardeninglevelcombo_strict","displayName":"Strict","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_trustedhosts","displayName":"Trusted Hosts","description":"This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses the list specified in TrustedHostsList to determine if the destination host is a trusted entity.\r\n\r\nIf you enable this policy setting, the WinRM client uses the list specified in TrustedHostsList to determine if the destination host is a trusted entity. The WinRM client uses this list when neither HTTPS nor Kerberos are used to authenticate the identity of the host.\r\n\r\nIf you disable or do not configure this policy setting and the WinRM client needs to use the list of trusted hosts, you must configure the list of trusted hosts locally on each computer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-trustedhosts"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_trustedhosts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_trustedhosts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_trustedhosts_trustedhosts_list","displayName":"TrustedHostsList: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttplistener","displayName":"Turn On Compatibility HTTP Listener","description":"This policy setting turns on or turns off an HTTP listener created for backward compatibility purposes in the Windows Remote Management (WinRM) service.\r\n\r\n If you enable this policy setting, the HTTP listener always appears.\r\n\r\n If you disable or do not configure this policy setting, the HTTP listener never appears.\r\n\r\n When certain port 80 listeners are migrated to WinRM 2.0, the listener port number changes to 5985.\r\n\r\n A listener might be automatically created on port 80 to ensure backward compatibility.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-turnoncompatibilityhttplistener"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttplistener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttplistener_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttpslistener","displayName":"Turn On Compatibility HTTPS Listener","description":"This policy setting turns on or turns off an HTTPS listener created for backward compatibility purposes in the Windows Remote Management (WinRM) service.\r\n\r\n If you enable this policy setting, the HTTPS listener always appears.\r\n\r\n If you disable or do not configure this policy setting, the HTTPS listener never appears.\r\n\r\n When certain port 443 listeners are migrated to WinRM 2.0, the listener port number changes to 5986.\r\n\r\n A listener might be automatically created on port 443 to ensure backward compatibility.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remotemanagement#remotemanagement-turnoncompatibilityhttpslistener"],"options":[{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttpslistener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remotemanagement_turnoncompatibilityhttpslistener_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients","displayName":"Restrict Unauthenticated RPC clients","description":"This policy setting controls how the RPC server runtime handles unauthenticated RPC clients connecting to RPC servers.\r\n\r\nThis policy setting impacts all RPC applications. In a domain environment this policy setting should be used with caution as it can impact a wide range of functionality including group policy processing itself. Reverting a change to this policy setting can require manual intervention on each affected machine. This policy setting should never be applied to a domain controller.\r\n\r\nIf you disable this policy setting, the RPC server runtime uses the value of \"Authenticated\" on Windows Client, and the value of \"None\" on Windows Server versions that support this policy setting. \r\n\r\nIf you do not configure this policy setting, it remains disabled. The RPC server runtime will behave as though it was enabled with the value of \"Authenticated\" used for Windows Client and the value of \"None\" used for Server SKUs that support this policy setting. \r\n\r\nIf you enable this policy setting, it directs the RPC server runtime to restrict unauthenticated RPC clients connecting to RPC servers running on a machine. A client will be considered an authenticated client if it uses a named pipe to communicate with the server or if it uses RPC Security. RPC Interfaces that have specifically requested to be accessible by unauthenticated clients may be exempt from this restriction, depending on the selected value for this policy setting.\r\n\r\n-- \"None\" allows all RPC clients to connect to RPC Servers running on the machine on which the policy setting is applied.\r\n\r\n-- \"Authenticated\" allows only authenticated RPC Clients (per the definition above) to connect to RPC Servers running on the machine on which the policy setting is applied. Exemptions are granted to interfaces that have requested them.\r\n\r\n-- \"Authenticated without exceptions\" allows only authenticated RPC Clients (per the definition above) to connect to RPC Servers running on the machine on which the policy setting is applied. No exceptions are allowed.\r\n\r\nNote: This policy setting will not be applied until the system is rebooted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteprocedurecall#remoteprocedurecall-restrictunauthenticatedrpcclients"],"options":[{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients_rpcrestrictremoteclientslist","displayName":"RPC Runtime Unauthenticated Client Restriction to Apply:","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients_rpcrestrictremoteclientslist_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients_rpcrestrictremoteclientslist_1","displayName":"Authenticated","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_restrictunauthenticatedrpcclients_rpcrestrictremoteclientslist_2","displayName":"Authenticated without exceptions","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_rpcendpointmapperclientauthentication","displayName":"Enable RPC Endpoint Mapper Client Authentication","description":"This policy setting controls whether RPC clients authenticate with the Endpoint Mapper Service when the call they are making contains authentication information. The Endpoint Mapper Service on computers running Windows NT4 (all service packs) cannot process authentication information supplied in this manner. \r\n\r\nIf you disable this policy setting, RPC clients will not authenticate to the Endpoint Mapper Service, but they will be able to communicate with the Endpoint Mapper Service on Windows NT4 Server.\r\n\r\nIf you enable this policy setting, RPC clients will authenticate to the Endpoint Mapper Service for calls that contain authentication information. Clients making such calls will not be able to communicate with the Windows NT4 Server Endpoint Mapper Service.\r\n\r\nIf you do not configure this policy setting, it remains disabled. RPC clients will not authenticate to the Endpoint Mapper Service, but they will be able to communicate with the Windows NT4 Server Endpoint Mapper Service.\r\n\r\nNote: This policy will not be applied until the system is rebooted.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteprocedurecall#remoteprocedurecall-rpcendpointmapperclientauthentication"],"options":[{"id":"device_vendor_msft_policy_config_remoteprocedurecall_rpcendpointmapperclientauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteprocedurecall_rpcendpointmapperclientauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteshell_allowremoteshellaccess","displayName":"Allow Remote Shell Access","description":"This policy setting configures access to remote shells.\r\n\r\nIf you enable or do not configure this policy setting, new remote shell connections are accepted by the server.\r\n\r\nIf you set this policy to ‘disabled’, new remote shell connections are rejected by the server.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-allowremoteshellaccess"],"options":[{"id":"device_vendor_msft_policy_config_remoteshell_allowremoteshellaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_allowremoteshellaccess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteshell_maxconcurrentusers","displayName":"MaxConcurrentUsers","description":"This policy setting configures the maximum number of users able to concurrently perform remote shell operations on the system.\r\n\r\nThe value can be any number from 1 to 100.\r\n\r\nIf you enable this policy setting, the new shell connections are rejected if they exceed the specified limit.\r\n\r\nIf you disable or do not configure this policy setting, the default number is five users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-maxconcurrentusers"],"options":[{"id":"device_vendor_msft_policy_config_remoteshell_maxconcurrentusers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_maxconcurrentusers_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteshell_maxconcurrentusers_maxconcurrentusers","displayName":"MaxConcurrentUsers (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifyidletimeout","displayName":"Specify idle Timeout","description":"This policy setting configures the maximum time in milliseconds remote shell will stay open without any user activity until it is automatically deleted.\r\n\r\nAny value from 0 to 0x7FFFFFFF can be set. A minimum of 60000 milliseconds (1 minute) is used for smaller values.\r\n\r\nIf you enable this policy setting, the server will wait for the specified amount of time since the last received message from the client before terminating the open shell.\r\n\r\nIf you do not configure or disable this policy setting, the default value of 900000 or 15 min will be used.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifyidletimeout"],"options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifyidletimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifyidletimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteshell_specifyidletimeout_idletimeout","displayName":"IdleTimeout (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxmemory","displayName":"Specify maximum amount of memory in MB per Shell","description":"This policy setting configures the maximum total amount of memory in megabytes that can be allocated by any active remote shell and all its child processes.\r\n\r\nAny value from 0 to 0x7FFFFFFF can be set, where 0 equals unlimited memory, which means the ability of remote operations to allocate memory is only limited by the available virtual memory.\r\n\r\nIf you enable this policy setting, the remote operation is terminated when a new allocation exceeds the specified quota.\r\n\r\nIf you disable or do not configure this policy setting, the value 150 is used by default.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifymaxmemory"],"options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxmemory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxmemory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxmemory_maxmemorypershellmb","displayName":"MaxMemoryPerShellMB (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxprocesses","displayName":"Specify maximum number of processes per Shell","description":"This policy setting configures the maximum number of processes a remote shell is allowed to launch.\r\n\r\nIf you enable this policy setting, you can specify any number from 0 to 0x7FFFFFFF to set the maximum number of process per shell. Zero (0) means unlimited number of processes.\r\n\r\nIf you disable or do not configure this policy setting, the limit is five processes per shell.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifymaxprocesses"],"options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxprocesses_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxprocesses_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxprocesses_maxprocessespershell","displayName":"MaxProcessesPerShell (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxremoteshells","displayName":"Specify maximum number of remote shells per user","description":"This policy setting configures the maximum number of concurrent shells any user can remotely open on the same system.\r\n\r\nAny number from 0 to 0x7FFFFFFF cand be set, where 0 means unlimited number of shells.\r\n\r\nIf you enable this policy setting, the user cannot open new remote shells if the count exceeds the specified limit.\r\n\r\nIf you disable or do not configure this policy setting, by default the limit is set to two remote shells per user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifymaxremoteshells"],"options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxremoteshells_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxremoteshells_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteshell_specifymaxremoteshells_maxshellsperuser","displayName":"MaxShellsPerUser (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifyshelltimeout","displayName":"Specify Shell Timeout","description":"\r\nThis policy setting is deprecated and has no effect when set to any state: Enabled, Disabled, or Not Configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-remoteshell#remoteshell-specifyshelltimeout"],"options":[{"id":"device_vendor_msft_policy_config_remoteshell_specifyshelltimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_remoteshell_specifyshelltimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_remoteshell_specifyshelltimeout_shelltimeout","displayName":"ShellTimeOut (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_search_allowcloudsearch","displayName":"Allow Cloud Search","description":"Allow search and Cortana to search cloud sources like OneDrive and SharePoint. This policy allows corporate administrators to control whether employees can turn off/on the search of these cloud sources. The default policy value is to allow employees access to the setting that controls search of cloud sources.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowcloudsearch"],"options":[{"id":"device_vendor_msft_policy_config_search_allowcloudsearch_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowcloudsearch_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_allowcortanainaad","displayName":"Allow Cortana In AAD","description":"This features allows you to show the cortana opt-in page during Windows Setup","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowcortanainaad"],"options":[{"id":"device_vendor_msft_policy_config_search_allowcortanainaad_0","displayName":"Block","description":"Not allowed. The Cortana consent page will not appear in AAD OOBE during setup.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowcortanainaad_1","displayName":"Allow","description":"Allowed. The Cortana consent page will appear in Azure AAD OOBE during setup.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_allowfindmyfiles","displayName":"Allow Find My Files","description":"This feature allows you to disable find my files completely on the machine","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowfindmyfiles"],"options":[{"id":"device_vendor_msft_policy_config_search_allowfindmyfiles_1","displayName":"Find My Files feature can be toggled (still off by default), and the settings UI is present.","description":"Find My Files feature can be toggled (still off by default), and the settings UI is present.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowfindmyfiles_0","displayName":"Find My Files feature is turned off completely, and the settings UI is disabled.","description":"Find My Files feature is turned off completely, and the settings UI is disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_allowindexingencryptedstoresoritems","displayName":"Allow Indexing Encrypted Stores Or Items","description":"Allows or disallows the indexing of items. This switch is for the Windows Search Indexer, which controls whether it will index items that are encrypted, such as the Windows Information Protection (WIP) protected files. When the policy is enabled, WIP protected items are indexed and the metadata about them are stored in an unencrypted location. The metadata includes things like file path and date modified. When the policy is disabled, the WIP protected items are not indexed and do not show up in the results in Cortana or file explorer. There may also be a performance impact on photos and Groove apps if there are a lot of WIP protected media files on the device. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowindexingencryptedstoresoritems"],"options":[{"id":"device_vendor_msft_policy_config_search_allowindexingencryptedstoresoritems_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowindexingencryptedstoresoritems_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_allowsearchhighlights","displayName":"Allow Search Highlights","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowsearchhighlights"],"options":null},{"id":"device_vendor_msft_policy_config_search_allowsearchtouselocation","displayName":"Allow Search To Use Location","description":"Specifies whether search can leverage location information. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowsearchtouselocation"],"options":[{"id":"device_vendor_msft_policy_config_search_allowsearchtouselocation_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowsearchtouselocation_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_allowstoringimagesfromvisionsearch","displayName":"Allow Storing Images From Vision Search","description":"This policy has been deprecated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowstoringimagesfromvisionsearch"],"options":[{"id":"device_vendor_msft_policy_config_search_allowstoringimagesfromvisionsearch_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowstoringimagesfromvisionsearch_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_allowusingdiacritics","displayName":"Allow Using Diacritics","description":"Allows the use of diacritics. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowusingdiacritics"],"options":[{"id":"device_vendor_msft_policy_config_search_allowusingdiacritics_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_allowusingdiacritics_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_allowwindowsindexer","displayName":"Allow Windows Indexer","description":"Allow Windows indexer. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#allowwindowsindexer"],"options":null},{"id":"device_vendor_msft_policy_config_search_alwaysuseautolangdetection","displayName":"Always Use Auto Lang Detection","description":"Specifies whether to always use automatic language detection when indexing content and properties. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#alwaysuseautolangdetection"],"options":[{"id":"device_vendor_msft_policy_config_search_alwaysuseautolangdetection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_search_alwaysuseautolangdetection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode","displayName":"Configure Search On Taskbar Mode","description":"Configures search on the taskbar. If you disable this policy setting or do not configure it, users can see and change this setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#configuresearchontaskbarmode"],"options":[{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode_0","displayName":"Hide","description":"Hide","helpText":null},{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode_1","displayName":"Search icon only","description":"Search icon only","helpText":null},{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode_2","displayName":"Search icon and label","description":"Search icon and label","helpText":null},{"id":"device_vendor_msft_policy_config_search_configuresearchontaskbarmode_3","displayName":"Search box","description":"Search box","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_disablebackoff","displayName":"Disable Backoff","description":"If enabled, the search indexer backoff feature will be disabled. Indexing will continue at full speed even when system activity is high. If disabled, backoff logic will be used to throttle back indexing activity when system activity is high. Default is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#disablebackoff"],"options":[{"id":"device_vendor_msft_policy_config_search_disablebackoff_0","displayName":"Disable.","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_disablebackoff_1","displayName":"Enable.","description":"Enable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_disableremovabledriveindexing","displayName":"Disable Removable Drive Indexing","description":"This policy setting configures whether or not locations on removable drives can be added to libraries. If you enable this policy setting, locations on removable drives cannot be added to libraries. In addition, locations on removable drives cannot be indexed. If you disable or do not configure this policy setting, locations on removable drives can be added to libraries. In addition, locations on removable drives can be indexed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#disableremovabledriveindexing"],"options":[{"id":"device_vendor_msft_policy_config_search_disableremovabledriveindexing_0","displayName":"Disable.","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_disableremovabledriveindexing_1","displayName":"Enable.","description":"Enable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_disablesearch","displayName":"Disable Search","description":"Enabling this policy completely disables Search UI and all its entry points such as keyboard shortcuts and touchpad gestures. It removes the Search button from the Taskbar and the corresponding option in the Settings. It also disables type-to-search in the Start menu and removes the Start menu's search box.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#disablesearch"],"options":[{"id":"device_vendor_msft_policy_config_search_disablesearch_0","displayName":"Do not disable.","description":"Do not disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_disablesearch_1","displayName":"Disable.","description":"Disable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_donotusewebresults","displayName":"Do Not Use Web Results","description":"Don't search the web or display web results in Search. This policy setting allows you to control whether or not Search can perform queries on the web, and if the web results are displayed in Search. If you enable this policy setting, queries won't be performed on the web and web results won't be displayed when a user performs a query in Search. If you disable this policy setting, queries will be performed on the web and web results will be displayed when a user performs a query in Search.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#donotusewebresults"],"options":[{"id":"device_vendor_msft_policy_config_search_donotusewebresults_0","displayName":"Not allowed. Queries won't be performed on the web and web results won't be displayed when a user performs a query in Search.","description":"Not allowed. Queries won't be performed on the web and web results won't be displayed when a user performs a query in Search.","helpText":null},{"id":"device_vendor_msft_policy_config_search_donotusewebresults_1","displayName":"Allowed. Queries will be performed on the web and web results will be displayed when a user performs a query in Search.","description":"Allowed. Queries will be performed on the web and web results will be displayed when a user performs a query in Search.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_preventindexinglowdiskspacemb","displayName":"Prevent Indexing Low Disk Space MB","description":"Enabling this policy prevents indexing from continuing after less than the specified amount of hard drive space is left on the same drive as the index location. Select between 0 and 1. Enable this policy if computers in your environment have extremely limited hard drive space. When this policy is disabled or not configured, Windows Desktop Search automatically manages your index size.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#preventindexinglowdiskspacemb"],"options":[{"id":"device_vendor_msft_policy_config_search_preventindexinglowdiskspacemb_0","displayName":"Disable.","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_preventindexinglowdiskspacemb_1","displayName":"Enable.","description":"Enable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_search_preventremotequeries","displayName":"Prevent Remote Queries","description":"If enabled, clients will be unable to query this computer's index remotely. Thus, when they are browsing network shares that are stored on this computer, they will not search them using the index. If disabled, client search requests will use this computer's index. .","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Search#preventremotequeries"],"options":[{"id":"device_vendor_msft_policy_config_search_preventremotequeries_0","displayName":"Disable.","description":"Disable.","helpText":null},{"id":"device_vendor_msft_policy_config_search_preventremotequeries_1","displayName":"Enable.","description":"Enable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash","displayName":"Block Flash activation in Office documents","description":"This policy setting controls whether the Adobe Flash control can be activated by Office documents. Note that activation blocking applies only within Office processes.\r\n\r\nIf you enable this policy setting, you can choose from three options to control whether and how Flash is blocked from activation:\r\n\r\n1. \"Block all activation\" prevents the Flash control from being loaded, whether directly referenced by the document or indirectly by another embedded object.\r\n\r\n2. \"Block embedding/linking, allow other activation\" prevents the Flash control from being loaded when directly referenced by the document, but does not prevent activation through another object.\r\n\r\n3. \"Allow all activation\" restores Office's default behavior, allowing the Flash control to be activated.\r\n\r\nBecause this setting is not a true Group Policy setting and \"tattoos\" the registry, enabling the \"Allow all activation\" option is the only way to restore default behavior after either of the \"Block\" options has been applied. We do not recommend configuring this setting to \"Disabled,\" nor to \"Not Configured\" after it has been enabled.\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_pol_secguide_block_flash","displayName":"Block Flash player in Office (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_pol_secguide_block_flash_block all flash activation","displayName":"Block all activation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_pol_secguide_block_flash_block embedded flash activation only","displayName":"Block embedding/linking, allow other activation","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_a001_block_flash_pol_secguide_block_flash_allow all flash activation","displayName":"Allow all activation","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript","displayName":"Restrict legacy JScript execution for Office","description":"This policy setting controls JScript execution per Security Zone within Internet Explorer and WebBrowser Control (WebOC) for Office applications.\r\n\r\nIt's important to determine whether legacy JScript is being used to provide business-critical functionality before you enable this setting.\r\n\r\nIf Enabled, Office applications will not execute legacy JScript for the Internet or Restricted Sites zones and users aren’t notified by the application that legacy JScript execution is restricted. Modern JScript9 will continue to function for all zones.\r\n\r\nIf Disabled or Not Configured JScript will function without any restrictions.\r\n\r\nThe values are set in hexadecimal and should be converted prior to changing the setting value. To learn more about Internet Explorer Feature Control Key and the Restrict JScript process-level policy for Windows, please refer to: https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/general-info/ee330734(v=vs.85)#restrict-jscript-at-a-process-level ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_excel","displayName":"Excel: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_msaccess","displayName":"Access: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_mspub","displayName":"Publisher: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_onenote","displayName":"OneNote: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_outlook","displayName":"Outlook: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_powerpnt","displayName":"PowerPoint: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_visio","displayName":"Visio: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_winproj","displayName":"Project: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secguidev22h2~policy~cat_secguide_pol_secguide_legacy_jscript_pol_sg_winword","displayName":"Word: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_secureboot_configurehighconfidenceoptout","displayName":"Configure High Confidence Opt Out","description":"This policy provides permission to opt out of high confidence buckets that will automatically be applied as part of the LCU.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SecureBoot#configurehighconfidenceoptout"],"options":[{"id":"device_vendor_msft_policy_config_secureboot_configurehighconfidenceoptout_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_secureboot_configurehighconfidenceoptout_1","displayName":"(Enabled) Opt out of high confidence buckets that will automatically be applied as part of the LCU","description":"(Enabled) Opt out of high confidence buckets that will automatically be applied as part of the LCU","helpText":null}]},{"id":"device_vendor_msft_policy_config_secureboot_configuremicrosoftupdatemanagedoptin","displayName":"Configure Microsoft Update Managed Opt In","description":"This policy controls provides permission to opt-in to CFR servicing (Microsoft Managed)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SecureBoot#configuremicrosoftupdatemanagedoptin"],"options":[{"id":"device_vendor_msft_policy_config_secureboot_configuremicrosoftupdatemanagedoptin_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_secureboot_configuremicrosoftupdatemanagedoptin_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_secureboot_enablesecurebootcertificateupdates","displayName":"Enable Secureboot Certificate Updates","description":"This policy enables the Secure Boot certificate update process. Setting this to Enabled causes the new Secure Boot certificates to be installed and installs the 2023 signed boot manager for all devices where the policy is applied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SecureBoot#enablesecurebootcertificateupdates"],"options":[{"id":"device_vendor_msft_policy_config_secureboot_enablesecurebootcertificateupdates_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_secureboot_enablesecurebootcertificateupdates_22852","displayName":"(Enabled) Initiates the deployment of new secure boot certificates and related updates.","description":"(Enabled) Initiates the deployment of new secure boot certificates and related updates.","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_allowaddprovisioningpackage","displayName":"Allow Add Provisioning Package","description":"Specifies whether to allow the runtime configuration agent to install provisioning packages.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#allowaddprovisioningpackage"],"options":[{"id":"device_vendor_msft_policy_config_security_allowaddprovisioningpackage_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_security_allowaddprovisioningpackage_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_allowremoveprovisioningpackage","displayName":"Allow Remove Provisioning Package","description":"Specifies whether to allow the runtime configuration agent to remove provisioning packages.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#allowremoveprovisioningpackage"],"options":[{"id":"device_vendor_msft_policy_config_security_allowremoveprovisioningpackage_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_security_allowremoveprovisioningpackage_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_cleartpmifnotready","displayName":"Clear TPM If Not Ready","description":"Admin access is required. The prompt will appear on first admin logon after a reboot when the TPM is in a non-ready state that can be remediated with a TPM Clear. The prompt will have a description of what clearing the TPM does and that it requires a reboot. The user can dismiss it, but it will appear on next admin logon after restart.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#cleartpmifnotready"],"options":[{"id":"device_vendor_msft_policy_config_security_cleartpmifnotready_0","displayName":"Disabled","description":"Will not force recovery from a non-ready TPM state.","helpText":null},{"id":"device_vendor_msft_policy_config_security_cleartpmifnotready_1","displayName":"Enabled","description":"Will prompt to clear the TPM if the TPM is in a non-ready state (or reduced functionality) which can be remediated with a TPM Clear.","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_configurewindowspasswords","displayName":"Configure Windows Passwords","description":"Configures the use of passwords for Windows features","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#configurewindowspasswords"],"options":[{"id":"device_vendor_msft_policy_config_security_configurewindowspasswords_0","displayName":"-Disallow passwords (Asymmetric credentials will be promoted to replace passwords on Windows features)","description":"-Disallow passwords (Asymmetric credentials will be promoted to replace passwords on Windows features)","helpText":null},{"id":"device_vendor_msft_policy_config_security_configurewindowspasswords_1","displayName":"Allow passwords (Passwords continue to be allowed to be used for Windows features)","description":"Allow passwords (Passwords continue to be allowed to be used for Windows features)","helpText":null},{"id":"device_vendor_msft_policy_config_security_configurewindowspasswords_2","displayName":"as per SKU and device capabilities. Windows 10 S devices will exhibit \"Disallow passwords\" default, and all other devices will default to \"Allow passwords\")","description":"as per SKU and device capabilities. Windows 10 S devices will exhibit \"Disallow passwords\" default, and all other devices will default to \"Allow passwords\")","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_preventautomaticdeviceencryptionforazureadjoineddevices","displayName":"Prevent Automatic Device Encryption For Azure AD Joined Devices","description":"Specifies whether to allow automatic device encryption during OOBE when the device is Azure AD joined.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#preventautomaticdeviceencryptionforazureadjoineddevices"],"options":[{"id":"device_vendor_msft_policy_config_security_preventautomaticdeviceencryptionforazureadjoineddevices_0","displayName":"Encryption enabled.","description":"Encryption enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_security_preventautomaticdeviceencryptionforazureadjoineddevices_1","displayName":"Encryption disabled.","description":"Encryption disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_recoveryenvironmentauthentication","displayName":"Recovery Environment Authentication","description":"This policy controls the requirement of Admin Authentication in RecoveryEnvironment.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#recoveryenvironmentauthentication"],"options":[{"id":"device_vendor_msft_policy_config_security_recoveryenvironmentauthentication_0","displayName":"current) behavior","description":"current) behavior","helpText":null},{"id":"device_vendor_msft_policy_config_security_recoveryenvironmentauthentication_1","displayName":"RequireAuthentication: Admin Authentication is always required for components in RecoveryEnvironment","description":"RequireAuthentication: Admin Authentication is always required for components in RecoveryEnvironment","helpText":null},{"id":"device_vendor_msft_policy_config_security_recoveryenvironmentauthentication_2","displayName":"NoRequireAuthentication: Admin Authentication is not required for components in RecoveryEnvironment","description":"NoRequireAuthentication: Admin Authentication is not required for components in RecoveryEnvironment","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_requiredeviceencryption","displayName":"Require Device Encryption","description":"Allows enterprise to turn on internal storage encryption. Most restricted value is 1. Important. If encryption has been enabled, it cannot be turned off by using this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#requiredeviceencryption"],"options":[{"id":"device_vendor_msft_policy_config_security_requiredeviceencryption_0","displayName":"Encryption is not required.","description":"Encryption is not required.","helpText":null},{"id":"device_vendor_msft_policy_config_security_requiredeviceencryption_1","displayName":"Encryption is required.","description":"Encryption is required.","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_requireprovisioningpackagesignature","displayName":"Require Provisioning Package Signature","description":"Specifies whether provisioning packages must have a certificate signed by a device trusted authority.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#requireprovisioningpackagesignature"],"options":[{"id":"device_vendor_msft_policy_config_security_requireprovisioningpackagesignature_0","displayName":"Not required.","description":"Not required.","helpText":null},{"id":"device_vendor_msft_policy_config_security_requireprovisioningpackagesignature_1","displayName":"Required.","description":"Required.","helpText":null}]},{"id":"device_vendor_msft_policy_config_security_requireretrievehealthcertificateonboot","displayName":"Require Retrieve Health Certificate On Boot","description":"Specifies whether to retrieve and post TCG Boot logs, and get or cache an encrypted or signed Health Attestation Report from the Microsoft Health Attestation Service (HAS) when a device boots or reboots. Setting this policy to 1 (Required):Determines whether a device is capable of Remote Device Health Attestation, by verifying if the device has TPM 2. 0. Improves the performance of the device by enabling the device to fetch and cache data to reduce the latency during Device Health Verification. Note We recommend that this policy is set to Required after MDM enrollment.  Most restricted value is 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Security#requireretrievehealthcertificateonboot"],"options":[{"id":"device_vendor_msft_policy_config_security_requireretrievehealthcertificateonboot_0","displayName":"Not required.","description":"Not required.","helpText":null},{"id":"device_vendor_msft_policy_config_security_requireretrievehealthcertificateonboot_1","displayName":"Required.","description":"Required.","helpText":null}]},{"id":"device_vendor_msft_policy_config_servicecontrolmanager_svchostprocessmitigation","displayName":"Enable svchost.exe mitigation options","description":"This policy setting enables process mitigation options on svchost.exe processes.\r\n\r\nIf you enable this policy setting, built-in system services hosted in svchost.exe processes will have stricter security policies enabled on them.\r\n\r\nThis includes a policy requiring all binaries loaded in these processes to be signed by microsoft, as well as a policy disallowing dynamically-generated code.\r\n\r\nIf you disable or do not configure this policy setting, these stricter security settings will not be applied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-servicecontrolmanager#servicecontrolmanager-svchostprocessmitigation"],"options":[{"id":"device_vendor_msft_policy_config_servicecontrolmanager_svchostprocessmitigation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_servicecontrolmanager_svchostprocessmitigation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowdatasense","displayName":"Allow Data Sense","description":"Allows the user to change Data Sense settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowdatasense"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowdatasense_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowdatasense_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowdatetime","displayName":"Allow Date Time","description":"Allows the user to change date and time settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowdatetime"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowdatetime_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowdatetime_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowlanguage","displayName":"Allow Language","description":"Allows the user to change the language settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowlanguage"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowlanguage_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowlanguage_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowonlinetips","displayName":"Allow Online Tips","description":"Enables or disables the retrieval of online tips and help for the Settings app. If disabled, Settings will not contact Microsoft content services to retrieve tips and help content.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowonlinetips"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowonlinetips_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowonlinetips_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowpowersleep","displayName":"Allow Power Sleep","description":"Allows the user to change power and sleep settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowpowersleep"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowpowersleep_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowpowersleep_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowregion","displayName":"Allow Region","description":"Allows the user to change the region settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowregion"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowregion_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowregion_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowsigninoptions","displayName":"Allow Sign In Options","description":"Allows the user to change sign-in options.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowsigninoptions"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowsigninoptions_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowsigninoptions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowvpn","displayName":"Allow VPN","description":"Allows the user to change VPN settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowvpn"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowvpn_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowvpn_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowworkplace","displayName":"Allow Workplace","description":"Allows user to change workplace settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowworkplace"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowworkplace_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowworkplace_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_allowyouraccount","displayName":"Allow Your Account","description":"Allows user to change account settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#allowyouraccount"],"options":[{"id":"device_vendor_msft_policy_config_settings_allowyouraccount_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_settings_allowyouraccount_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_settings_pagevisibilitylist","displayName":"Page Visibility List","description":"Allows IT Admins to either prevent specific pages in the System Settings app from being visible or accessible, or to do so for all pages except those specified. The mode will be specified by the policy string beginning with either the string showonly: or hide:.  Pages are identified by a shortened version of their already published URIs, which is the URI minus the ms-settings: prefix. For example, if the URI for a settings page is ms-settings:bluetooth, the page identifier used in the policy will be just bluetooth. Multiple page identifiers are separated by semicolons. The following example illustrates a policy that would allow access only to the about and bluetooth pages, which have URI ms-settings:about and ms-settings:bluetooth respectively:showonly:about;bluetooth. If the policy is not specified, the behavior will be that no pages are affected. If the policy string is formatted incorrectly, it will be ignored entirely (i. e. treated as not set) to prevent the machine from becoming unserviceable if data corruption occurs. Note that if a page is already hidden for another reason, then it will remain hidden even if it is in a showonly: list. The format of the PageVisibilityList value is as follows: The value is a unicode string up to 10,000 characters long, which will be used without case sensitivity. There are two variants: one that shows only the given pages and one which hides the given pages. The first variant starts with the string showonly: and the second with the string hide:. Following the variant identifier is a semicolon-delimited list of page identifiers, which must not have any extra whitespace. Each page identifier is the ms-settings:xyz URI for the page, minus the ms-settings: prefix, so the identifier for the page with URI ms-settings:network-wifi would be just network-wifi. The default value for this setting is an empty string, which is interpreted as show everything. Example 1, specifies that only the wifi and bluetooth pages should be shown (they have URIs ms-settings:network-wifi and ms-settings:bluetooth). All other pages (and the categories they're in) will be hidden:showonly:network-wifi;bluetooth. Example 2, specifies that the wifi page should not be shown:hide:network-wifi","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Settings#pagevisibilitylist"],"options":null},{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync","displayName":"Do not sync accessibility settings","description":"\r\n Prevent the \"accessibility\" group from syncing to and from this PC. This turns off and disables the \"accessibility\" group on the \"Windows backup\" settings page in PC settings.\r\n\r\nIf you enable this policy setting, the \"accessibility\" group will not be synced.\r\n\r\nUse the option \"Allow users to turn accessibility syncing on\" so that syncing is turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, syncing of the \"accessibility\" group is on by default and configurable by the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-settingssync#settingssync-disableaccessibilitysettingsync"],"options":[{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_checkbox_useroverride","displayName":"Allow users to turn \"accessibility\" syncing on. (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_disableaccessibilitysettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync","displayName":"Do not sync language preferences settings","description":"\r\n Prevent the \"language preferences\" group from syncing to and from this PC. This turns off and disables the \"languages preferences\" group on the \"Windows backup\" settings page in PC settings.\r\n\r\nIf you enable this policy setting, the \"language preferences\" group will not be synced.\r\n\r\nUse the option \"Allow users to turn language preferences syncing on\" so that syncing is turned off by default but not disabled.\r\n\r\nIf you do not set or disable this setting, syncing of the \"language preferences\" group is on by default and configurable by the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-settingssync#settingssync-disablelanguagesettingsync"],"options":[{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_checkbox_useroverride","displayName":"Allow users to turn \"language preferences\" syncing on. (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_checkbox_useroverride_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_disablelanguagesettingsync_checkbox_useroverride_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_settingssync_enablewindowsbackup","displayName":"Enable Windows Backup","description":"This policy setting allows administrators to configure and manage windows backup for their organization.\r\n\r\nIf you enable this policy setting, windows backup will occur periodically.\r\n\r\nIf you disable or do not configure this policy setting, windows backup will not take place.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-settingssync#settingssync-enablewindowsbackup"],"options":[{"id":"device_vendor_msft_policy_config_settingssync_enablewindowsbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_settingssync_enablewindowsbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol","displayName":"Enable App Install Control","description":"This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-smartscreen#enableappinstallcontrol"],"options":[{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol_0","displayName":"Disable","description":"Turns off Application Installation Control, allowing users to download and install files from anywhere on the web.","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol_1","displayName":"Enable","description":"Turns on Application Installation Control, allowing users to only install apps from the Store.","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol_2","displayName":"Turns on Application Installation Control, letting users know that there's a comparable app in the Store","description":"Turns on Application Installation Control, letting users know that there's a comparable app in the Store","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_enableappinstallcontrol_3","displayName":"Turns on Application Installation Control, warning users before installing apps from outside the Store","description":"Turns on Application Installation Control, warning users before installing apps from outside the Store","helpText":null}]},{"id":"device_vendor_msft_policy_config_smartscreen_enablesmartscreeninshell","displayName":"Enable Smart Screen In Shell","description":" Allows IT Admins to configure SmartScreen for Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-smartscreen#enablesmartscreeninshell"],"options":[{"id":"device_vendor_msft_policy_config_smartscreen_enablesmartscreeninshell_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_enablesmartscreeninshell_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_smartscreen_preventoverrideforfilesinshell","displayName":"Prevent Override For Files In Shell","description":"Allows IT Admins to control whether users can ignore SmartScreen warnings and run malicious files.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-smartscreen#preventoverrideforfilesinshell"],"options":[{"id":"device_vendor_msft_policy_config_smartscreen_preventoverrideforfilesinshell_0","displayName":"Disabled","description":"Do not prevent override.","helpText":null},{"id":"device_vendor_msft_policy_config_smartscreen_preventoverrideforfilesinshell_1","displayName":"Enabled","description":"Prevent override.","helpText":null}]},{"id":"device_vendor_msft_policy_config_speech_allowspeechmodelupdate","displayName":"Allow Speech Model Update","description":"Specifies whether the device will receive updates to the speech recognition and speech synthesis models. A speech model contains data used by the speech engine to convert audio to text (or vice-versa). The models are periodically updated to improve accuracy and performance. Models are non-executable data files. If enabled, the device will periodically check for updated speech models and then download them from a Microsoft service using the Background Internet Transfer Service (BITS).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Speech#allowspeechmodelupdate"],"options":[{"id":"device_vendor_msft_policy_config_speech_allowspeechmodelupdate_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_speech_allowspeechmodelupdate_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdocuments","displayName":"Allow Pinned Folder Documents","description":"This policy controls the visibility of the Documents shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderdocuments"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdocuments_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdocuments_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdocuments_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdownloads","displayName":"Allow Pinned Folder Downloads","description":"This policy controls the visibility of the Downloads shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderdownloads"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdownloads_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdownloads_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderdownloads_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderfileexplorer","displayName":"Allow Pinned Folder File Explorer","description":"This policy controls the visibility of the File Explorer shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderfileexplorer"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderfileexplorer_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderfileexplorer_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderfileexplorer_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderhomegroup","displayName":"Allow Pinned Folder Home Group","description":"This policy controls the visibility of the HomeGroup shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderhomegroup"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderhomegroup_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderhomegroup_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderhomegroup_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldermusic","displayName":"Allow Pinned Folder Music","description":"This policy controls the visibility of the Music shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfoldermusic"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldermusic_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldermusic_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldermusic_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldernetwork","displayName":"Allow Pinned Folder Network","description":"This policy controls the visibility of the Network shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfoldernetwork"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldernetwork_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldernetwork_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldernetwork_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpersonalfolder","displayName":"Allow Pinned Folder Personal Folder","description":"This policy controls the visibility of the PersonalFolder shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderpersonalfolder"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpersonalfolder_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpersonalfolder_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpersonalfolder_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpictures","displayName":"Allow Pinned Folder Pictures","description":"This policy controls the visibility of the Pictures shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfolderpictures"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpictures_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpictures_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfolderpictures_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldersettings","displayName":"Allow Pinned Folder Settings","description":"This policy controls the visibility of the Settings shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfoldersettings"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldersettings_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldersettings_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldersettings_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldervideos","displayName":"Allow Pinned Folder Videos","description":"This policy controls the visibility of the Videos shortcut on the Start menu. The possible values are 0 - means that the shortcut should be hidden and grays out the corresponding toggle in the Settings app, 1 - means that the shortcut should be visible and grays out the corresponding toggle in the Settings app, 65535 - means that there is no enforced configuration and the setting can be changed by the user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#allowpinnedfoldervideos"],"options":[{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldervideos_0","displayName":"The shortcut is hidden and disables the setting in the Settings app.","description":"The shortcut is hidden and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldervideos_1","displayName":"The shortcut is visible and disables the setting in the Settings app.","description":"The shortcut is visible and disables the setting in the Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_allowpinnedfoldervideos_65535","displayName":"There is no enforced configuration and the setting can be changed by the user.","description":"There is no enforced configuration and the setting can be changed by the user.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_configurestartpins","displayName":"Configure Start Pins","description":"Allows admin to override the default items pinned to Start.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#configurestartpins"],"options":null},{"id":"device_vendor_msft_policy_config_start_disablecontextmenus","displayName":"Disable Context Menus","description":"Enabling this policy prevents context menus from being invoked in the Start Menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#disablecontextmenus"],"options":[{"id":"device_vendor_msft_policy_config_start_disablecontextmenus_0","displayName":"Disabled","description":"Do not disable.","helpText":null},{"id":"device_vendor_msft_policy_config_start_disablecontextmenus_1","displayName":"Enabled","description":"Disable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_disableeditingquicksettings","displayName":"Disable Editing Quick Settings","description":"Allows admin to disable editing Quick Settings, such as by accessing the 'Edit quick settings' context through right-clicking on Quick Settings buttons.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#disableeditingquicksettings"],"options":[{"id":"device_vendor_msft_policy_config_start_disableeditingquicksettings_0","displayName":"Enable editing Quick Settings.","description":"Enable editing Quick Settings.","helpText":null},{"id":"device_vendor_msft_policy_config_start_disableeditingquicksettings_1","displayName":"Disable editing Quick Settings.","description":"Disable editing Quick Settings.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_forcestartsize","displayName":"Force Start Size","description":"Forces the start screen size. If there is policy configuration conflict, the latest configuration request is applied to the device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#forcestartsize"],"options":[{"id":"device_vendor_msft_policy_config_start_forcestartsize_0","displayName":"Do not force size of Start.","description":"Do not force size of Start.","helpText":null},{"id":"device_vendor_msft_policy_config_start_forcestartsize_1","displayName":"Force non-fullscreen size of Start.","description":"Force non-fullscreen size of Start.","helpText":null},{"id":"device_vendor_msft_policy_config_start_forcestartsize_2","displayName":"Force a fullscreen size of Start.","description":"Force a fullscreen size of Start.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hideapplist","displayName":"Hide App List","description":"Setting the value of this policy to 1 or 2 collapses the app list. Setting the value of this policy to 3 removes the app list entirely. Setting the value of this policy to 2 or 3 disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideapplist"],"options":[{"id":"device_vendor_msft_policy_config_start_hideapplist_0","displayName":"None.","description":"None.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideapplist_1","displayName":"Hide all apps list.","description":"Hide all apps list.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideapplist_2","displayName":"Hide all apps list, and Disable \"Show app list in Start menu\" in Settings app.","description":"Hide all apps list, and Disable \"Show app list in Start menu\" in Settings app.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideapplist_3","displayName":"Hide all apps list, remove all apps button, and Disable \"Show app list in Start menu\" in Settings app.","description":"Hide all apps list, remove all apps button, and Disable \"Show app list in Start menu\" in Settings app.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hidecategoryview","displayName":"Hide Category View","description":"This policy setting allows you to hide the category view in the Start Menu. If you enable this policy setting, the Start Menu will no longer show the category view as an option and will default to grid view.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidecategoryview"],"options":[{"id":"device_vendor_msft_policy_config_start_hidecategoryview_0","displayName":"Category view shown.","description":"Category view shown.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidecategoryview_1","displayName":"Category view hidden.","description":"Category view hidden.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hidechangeaccountsettings","displayName":"Hide Change Account Settings","description":"Enabling this policy hides \"Change account settings\" from appearing in the user tile in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidechangeaccountsettings"],"options":[{"id":"device_vendor_msft_policy_config_start_hidechangeaccountsettings_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidechangeaccountsettings_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hidefrequentlyusedapps","displayName":"Hide Frequently Used Apps","description":"Enabling this policy hides the most used apps from appearing on the start menu and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidefrequentlyusedapps"],"options":[{"id":"device_vendor_msft_policy_config_start_hidefrequentlyusedapps_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidefrequentlyusedapps_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hidehibernate","displayName":"Hide Hibernate","description":"Enabling this policy hides \"Hibernate\" from appearing in the power button in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidehibernate"],"options":[{"id":"device_vendor_msft_policy_config_start_hidehibernate_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidehibernate_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hidelock","displayName":"Hide Lock","description":"Enabling this policy hides \"Lock\" from appearing in the user tile in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidelock"],"options":[{"id":"device_vendor_msft_policy_config_start_hidelock_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidelock_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hidepowerbutton","displayName":"Hide Power Button","description":"Enabling this policy hides the power button from appearing in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidepowerbutton"],"options":[{"id":"device_vendor_msft_policy_config_start_hidepowerbutton_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidepowerbutton_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hiderecentjumplists","displayName":"Hide Recent Jumplists","description":"Enabling this policy hides recent jumplists from appearing on the start menu/taskbar and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hiderecentjumplists"],"options":[{"id":"device_vendor_msft_policy_config_start_hiderecentjumplists_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hiderecentjumplists_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hiderecentlyaddedapps","displayName":"Hide Recently Added Apps","description":"Enabling this policy hides recently added apps from appearing on the start menu and disables the corresponding toggle in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hiderecentlyaddedapps"],"options":[{"id":"device_vendor_msft_policy_config_start_hiderecentlyaddedapps_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hiderecentlyaddedapps_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hiderestart","displayName":"Hide Restart","description":"Enabling this policy hides \"Restart/Update and restart\" from appearing in the power button in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hiderestart"],"options":[{"id":"device_vendor_msft_policy_config_start_hiderestart_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hiderestart_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hideshutdown","displayName":"Hide Shut Down","description":"Enabling this policy hides \"Shut down/Update and shut down\" from appearing in the power button in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideshutdown"],"options":[{"id":"device_vendor_msft_policy_config_start_hideshutdown_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideshutdown_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hidesignout","displayName":"Hide Sign Out","description":"Enabling this policy hides \"Sign out\" from appearing in the user tile in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidesignout"],"options":[{"id":"device_vendor_msft_policy_config_start_hidesignout_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidesignout_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hidesleep","displayName":"Hide Sleep","description":"Enabling this policy hides \"Sleep\" from appearing in the power button in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hidesleep"],"options":[{"id":"device_vendor_msft_policy_config_start_hidesleep_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hidesleep_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hideswitchaccount","displayName":"Hide Switch Account","description":"Enabling this policy hides \"Switch account\" from appearing in the user tile in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideswitchaccount"],"options":[{"id":"device_vendor_msft_policy_config_start_hideswitchaccount_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideswitchaccount_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_hideusertile","displayName":"Hide User Tile","description":"Enabling this policy hides the user tile from appearing in the start menu.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#hideusertile"],"options":[{"id":"device_vendor_msft_policy_config_start_hideusertile_0","displayName":"Disabled","description":"Do not hide.","helpText":null},{"id":"device_vendor_msft_policy_config_start_hideusertile_1","displayName":"Enabled","description":"Hide.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_importedgeassets","displayName":"Import Edge Assets","description":"This policy setting allows you to import Edge assets to be used with StartLayout policy. Start layout can contain secondary tile from Edge app which looks for Edge local asset file. Edge local asset would not exist and cause Edge secondary tile to appear empty in this case. This policy only gets applied when StartLayout policy is modified.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#importedgeassets"],"options":null},{"id":"device_vendor_msft_policy_config_start_nopinningtotaskbar","displayName":"No Pinning To Taskbar","description":"This policy setting allows you to control pinning programs to the Taskbar. If you enable this policy setting, users cannot change the programs currently pinned to the Taskbar. If any programs are already pinned to the Taskbar, these programs continue to show in the Taskbar. However, users cannot unpin these programs already pinned to the Taskbar, and they cannot pin new programs to the Taskbar. If you disable or do not configure this policy setting, users can change the programs currently pinned to the Taskbar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#nopinningtotaskbar"],"options":[{"id":"device_vendor_msft_policy_config_start_nopinningtotaskbar_0","displayName":"Disabled","description":"Pinning enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_start_nopinningtotaskbar_1","displayName":"Enabled","description":"Pinning disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_simplifyquicksettings","displayName":"Simplify Quick Settings","description":"Allows admin to control the Quick Settings layout. If enabled, fewer Quick Settings buttons will be shown (only WiFi, Bluetooth, VPN, and Accessibility). If disabled or not configured, the regular Quick Settings layout will be loaded.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#simplifyquicksettings"],"options":[{"id":"device_vendor_msft_policy_config_start_simplifyquicksettings_0","displayName":"Load regular Quick Settings layout.","description":"Load regular Quick Settings layout.","helpText":null},{"id":"device_vendor_msft_policy_config_start_simplifyquicksettings_1","displayName":"Load simplified Quick Settings layout.","description":"Load simplified Quick Settings layout.","helpText":null}]},{"id":"device_vendor_msft_policy_config_start_startlayout","displayName":"Start Layout","description":"Important For more information, see Policy scope. Allows you to override the default Start layout and prevents the user from changing it. If both user and device policies are set, the user policy will be used. Apps pinned to the taskbar can also be changed with this policyFor further details on how to customize the Start layout, please see Customize and export Start layout and Configure Windows 10 taskbar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Start#startlayout"],"options":null},{"id":"device_vendor_msft_policy_config_storage_allowdiskhealthmodelupdates","displayName":"Allow Disk Health Model Updates","description":"Allows disk health model updates. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#allowdiskhealthmodelupdates"],"options":[{"id":"device_vendor_msft_policy_config_storage_allowdiskhealthmodelupdates_0","displayName":"Do not allow","description":"Do not allow","helpText":null},{"id":"device_vendor_msft_policy_config_storage_allowdiskhealthmodelupdates_1","displayName":"Allow","description":"Allow","helpText":null}]},{"id":"device_vendor_msft_policy_config_storage_allowstoragesenseglobal","displayName":"Allow Storage Sense Global","description":"Storage Sense can automatically clean some of the user’s files to free up disk space. By default, Storage Sense is automatically turned on when the machine runs into low disk space and is set to run whenever the machine runs into storage pressure. This cadence can be changed in Storage settings or set with the Storage/ConfigStorageSenseGlobalCadence group policy. If you enable this policy setting without setting a cadence, Storage Sense is turned on for the machine with the default cadence of during low free disk space. Users cannot disable Storage Sense, but they can adjust the cadence (unless you also configure the Storage/ConfigStorageSenseGlobalCadence group policy). If you disable this policy setting, the machine will turn off Storage Sense. Users cannot enable Storage Sense. If you do not configure this policy setting, Storage Sense is turned off by default until the user runs into low disk space or the user enables it manually. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#allowstoragesenseglobal"],"options":[{"id":"device_vendor_msft_policy_config_storage_allowstoragesenseglobal_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_storage_allowstoragesenseglobal_0","displayName":"Block","description":"Block","helpText":null}]},{"id":"device_vendor_msft_policy_config_storage_allowstoragesensetemporaryfilescleanup","displayName":"Allow Storage Sense Temporary Files Cleanup","description":"When Storage Sense runs, it can delete the user’s temporary files that are not in use. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, Storage Sense will delete the user’s temporary files that are not in use. Users cannot disable this setting in Storage settings. If you disable this policy setting, Storage Sense will not delete the user’s temporary files. Users cannot enable this setting in Storage settings. If you do not configure this policy setting, Storage Sense will delete the user’s temporary files by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#allowstoragesensetemporaryfilescleanup"],"options":[{"id":"device_vendor_msft_policy_config_storage_allowstoragesensetemporaryfilescleanup_1","displayName":"Allow","description":"Allow","helpText":null},{"id":"device_vendor_msft_policy_config_storage_allowstoragesensetemporaryfilescleanup_0","displayName":"Block","description":"Block","helpText":null}]},{"id":"device_vendor_msft_policy_config_storage_configstoragesensecloudcontentdehydrationthreshold","displayName":"Config Storage Sense Cloud Content Dehydration Threshold","description":"When Storage Sense runs, it can dehydrate cloud-backed content that hasn’t been opened in a certain amount of days. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, you must provide the minimum number of days a cloud-backed file can remain unopened before Storage Sense dehydrates it. Supported values are: 0–365. If you set this value to zero, Storage Sense will not dehydrate any cloud-backed content. The default value is 0, which never dehydrates cloud-backed content. If you disable or do not configure this policy setting, then Storage Sense will not dehydrate any cloud-backed content by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#configstoragesensecloudcontentdehydrationthreshold"],"options":null},{"id":"device_vendor_msft_policy_config_storage_configstoragesensedownloadscleanupthreshold","displayName":"Config Storage Sense Downloads Cleanup Threshold","description":"When Storage Sense runs, it can delete files in the user’s Downloads folder if they haven’t been opened for more than a certain number of days. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, you must provide the minimum number of days a file can remain unopened before Storage Sense deletes it from the Downloads folder. Supported values are: 0-365. If you set this value to zero, Storage Sense will not delete files in the user’s Downloads folder. The default is 0, or never deleting files in the Downloads folder. If you disable or do not configure this policy setting, then Storage Sense will not delete files in the user’s Downloads folder by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#configstoragesensedownloadscleanupthreshold"],"options":null},{"id":"device_vendor_msft_policy_config_storage_configstoragesenseglobalcadence","displayName":"Config Storage Sense Global Cadence","description":"Storage Sense can automatically clean some of the user’s files to free up disk space. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, you must provide the desired Storage Sense cadence. The following are supported options:1 – Daily7 – Weekly30 – Monthly0 – During low free disk spaceThe default is 0 (during low free disk space). If you do not configure this policy setting, then the Storage Sense cadence is set to “during low free disk space” by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#configstoragesenseglobalcadence"],"options":null},{"id":"device_vendor_msft_policy_config_storage_configstoragesenserecyclebincleanupthreshold","displayName":"Config Storage Sense Recycle Bin Cleanup Threshold","description":"When Storage Sense runs, it can delete files in the user’s Recycle Bin if they have been there for over a certain amount of days. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect. If you enable this policy setting, you must provide the minimum age threshold (in days) of a file in the Recycle Bin before Storage Sense will delete it. Supported values are: 0–365. If you set this value to zero, Storage Sense will not delete files in the user’s Recycle Bin. The default is 30 days. If you disable or do not configure this policy setting, Storage Sense will delete files in the user’s Recycle Bin that have been there for over 30 days by default. Users can configure this setting in Storage settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#configstoragesenserecyclebincleanupthreshold"],"options":null},{"id":"device_vendor_msft_policy_config_storage_enhancedstoragedevices","displayName":"Do not allow Windows to activate Enhanced Storage devices","description":"This policy setting configures whether or not Windows will activate an Enhanced Storage device.\r\n\r\nIf you enable this policy setting, Windows will not activate unactivated Enhanced Storage devices.\r\n\r\nIf you disable or do not configure this policy setting, Windows will activate unactivated Enhanced Storage devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-storage#storage-enhancedstoragedevices"],"options":[{"id":"device_vendor_msft_policy_config_storage_enhancedstoragedevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_storage_enhancedstoragedevices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_storage_removablediskdenywriteaccess","displayName":"Removable Disk Deny Write Access","description":"If you enable this policy setting, write access is denied to this removable storage class. If you disable or do not configure this policy setting, write access is allowed to this removable storage class. Note: To require that users write data to BitLocker-protected storage, enable the policy setting \"Deny write access to drives not protected by BitLocker,\" which is located in \"Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\Removable Data Drives.\"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Storage#removablediskdenywriteaccess"],"options":[{"id":"device_vendor_msft_policy_config_storage_removablediskdenywriteaccess_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_storage_removablediskdenywriteaccess_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_sudo_enablesudo","displayName":"Enable Sudo","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Sudo#enablesudo"],"options":[{"id":"device_vendor_msft_policy_config_sudo_enablesudo_0","displayName":"Sudo is disabled.","description":"Sudo is disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_sudo_enablesudo_1","displayName":"Sudo is allowed in 'force new window' mode.","description":"Sudo is allowed in 'force new window' mode.","helpText":null},{"id":"device_vendor_msft_policy_config_sudo_enablesudo_2","displayName":"Sudo is allowed in 'disable input' mode.","description":"Sudo is allowed in 'disable input' mode.","helpText":null},{"id":"device_vendor_msft_policy_config_sudo_enablesudo_3","displayName":"Sudo is allowed in 'inline' mode.","description":"Sudo is allowed in 'inline' mode.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowbuildpreview","displayName":"Allow Build Preview","description":"Note This policy setting applies only to devices running Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education, Windows 10 Mobile, and Windows 10 Mobile Enterprise. This policy setting determines whether users can access the Insider build controls in the Advanced Options for Windows Update. These controls are located under Get Insider builds, and enable users to make their devices available for downloading and installing Windows preview software. If you enable or do not configure this policy setting, users can download and install Windows preview software on their devices. If you disable this policy setting, the item Get Insider builds will be unavailable.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowbuildpreview"],"options":[{"id":"device_vendor_msft_policy_config_system_allowbuildpreview_0","displayName":"Not allowed. The item \"Get Insider builds\" is unavailable, users are unable to make their devices available for preview software.","description":"Not allowed. The item \"Get Insider builds\" is unavailable, users are unable to make their devices available for preview software.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowbuildpreview_1","displayName":"Allowed. Users can make their devices available for downloading and installing preview software.","description":"Allowed. Users can make their devices available for downloading and installing preview software.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowbuildpreview_2","displayName":"Not configured. Users can make their devices available for downloading and installing preview software.","description":"Not configured. Users can make their devices available for downloading and installing preview software.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowcommercialdatapipeline","displayName":"Allow Commercial Data Pipeline","description":"AllowCommercialDataPipeline controls whether Microsoft is a processor or controller for Windows diagnostic data collected from this device. If you enable this policy Microsoft will be the processor of Windows diagnostic data collected from the Windows device and the customer will be the controller. The device must be registered in Azure AD for this policy to succeed. If you disable or don't configure this policy setting, Microsoft will be the controller of Windows diagnostic data collected from this device. This policy only controls if Microsoft is a processor for Windows diagnostic data from this device. Configuring this setting does not change whether diagnostic data is collected or the ability of the user to change the level. To configure collection level please use the "Allow Diagnostic Data" policy, and to restrict users on this device from changing the diagnostic data level please use the "Configure diagnostic data opt-in settings user interface" policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowcommercialdatapipeline"],"options":[{"id":"device_vendor_msft_policy_config_system_allowcommercialdatapipeline_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowcommercialdatapipeline_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowdesktopanalyticsprocessing","displayName":"Allow Desktop Analytics Processing","description":"Allows IT admins to enable diagnostic data from this device to be processed by Desktop Analytics. The following list shows the supported values: 0 (default)– Diagnostic data is not processed by Desktop Analytics. 2 – Diagnostic data is allowed to be processed by Desktop Analytics. If you disable or do not configure this policy setting, diagnostic data from this device will not be processed by Desktop Analytics.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowdesktopanalyticsprocessing"],"options":[{"id":"device_vendor_msft_policy_config_system_allowdesktopanalyticsprocessing_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowdesktopanalyticsprocessing_2","displayName":"Allowed","description":"Allowed","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowdevicenameindiagnosticdata","displayName":"Allow device name to be sent in Windows diagnostic data","description":"This policy allows the device name to be sent to Microsoft as part of Windows diagnostic data. If you disable or do not configure this policy setting, then device name will not be sent to Microsoft as part of Windows diagnostic data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowdevicenameindiagnosticdata"],"options":[{"id":"device_vendor_msft_policy_config_system_allowdevicenameindiagnosticdata_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowdevicenameindiagnosticdata_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowembeddedmode","displayName":"Allow Embedded Mode","description":"Specifies whether set general purpose device to be in embedded mode. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowembeddedmode"],"options":[{"id":"device_vendor_msft_policy_config_system_allowembeddedmode_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowembeddedmode_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowexperimentation","displayName":"Allow Experimentation","description":"NoteThis policy is not supported in Windows 10, version 1607. This policy setting determines the level that Microsoft can experiment with the product to study user preferences or device behavior. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowexperimentation"],"options":[{"id":"device_vendor_msft_policy_config_system_allowexperimentation_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowexperimentation_1","displayName":"Permits Microsoft to configure device settings only.","description":"Permits Microsoft to configure device settings only.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowexperimentation_2","displayName":"Allows Microsoft to conduct full experimentation.","description":"Allows Microsoft to conduct full experimentation.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowfontproviders","displayName":"Allow Font Providers","description":"Boolean policy setting that determines whether Windows is allowed to download fonts and font catalog data from an online font provider. If you enable this setting, Windows periodically queries an online font provider to determine whether a new font catalog is available. Windows may also download font data if needed to format or render text. If you disable this policy setting, Windows does not connect to an online font provider and only enumerates locally-installed fonts. This MDM setting corresponds to the EnableFontProviders Group Policy setting. If both the Group Policy and the MDM settings are configured, the group policy setting takes precedence. If neither is configured, the behavior depends on a DisableFontProviders registry value. In server editions, this registry value is set to 1 by default, so the default behavior is false (disabled). In all other editions, the registry value is not set by default, so the default behavior is true (enabled). This setting is used by lower-level components for text display and fond handling and has not direct effect on web browsers, which may download web fonts used in web content. NoteReboot is required after setting the policy; alternatively you can stop and restart the FontCache service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowfontproviders"],"options":[{"id":"device_vendor_msft_policy_config_system_allowfontproviders_0","displayName":"Not allowed. No traffic to fs.microsoft.com and only locally installed fonts are available.","description":"Not allowed. No traffic to fs.microsoft.com and only locally installed fonts are available.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowfontproviders_1","displayName":"Allowed. There may be network traffic to fs.microsoft.com and downloadable fonts are available to apps that support them.","description":"Allowed. There may be network traffic to fs.microsoft.com and downloadable fonts are available to apps that support them.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowlocation","displayName":"Allow Location","description":"Specifies whether to allow app access to the Location service. Most restricted value is 0. While the policy is set to 0 (Force Location Off) or 2 (Force Location On), any Location service call from an app would trigger the value set by this policy. When switching the policy back from 0 (Force Location Off) or 2 (Force Location On) to 1 (User Control), the app reverts to its original Location service setting. For example, an app's original Location setting is Off. The administrator then sets the AllowLocation policy to 2 (Force Location On. ) The Location service starts working for that app, overriding the original setting. Later, if the administrator switches the AllowLocation policy back to 1 (User Control), the app will revert to using its original setting of Off.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowlocation"],"options":[{"id":"device_vendor_msft_policy_config_system_allowlocation_0","displayName":"Force Location Off. All Location Privacy settings are toggled off and grayed out. Users cannot change the settings, and no apps are allowed access to the Location service, including Cortana and Search.","description":"Force Location Off. All Location Privacy settings are toggled off and grayed out. Users cannot change the settings, and no apps are allowed access to the Location service, including Cortana and Search.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowlocation_1","displayName":"Location service is allowed. The user has control and can change Location Privacy settings on or off.","description":"Location service is allowed. The user has control and can change Location Privacy settings on or off.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowlocation_2","displayName":"Force Location On. All Location Privacy settings are toggled on and grayed out. Users cannot change the settings and all consent permissions will be automatically suppressed.","description":"Force Location On. All Location Privacy settings are toggled on and grayed out. Users cannot change the settings and all consent permissions will be automatically suppressed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowmicrosoftmanageddesktopprocessing","displayName":"Allow Microsoft Managed Desktop Processing","description":"Allows diagnostic data from this device to be processed by Microsoft Managed Desktop. The following list shows the supported values: 0 (default)– Diagnostic data is not processed by Microsoft Managed Desktop. 32 – Diagnostic data is processed by Microsoft Managed Desktop. If this policy is disabled or not configured, diagnostic data from this device will not be processed by Microsoft Managed Desktop.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowmicrosoftmanageddesktopprocessing"],"options":[{"id":"device_vendor_msft_policy_config_system_allowmicrosoftmanageddesktopprocessing_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowmicrosoftmanageddesktopprocessing_32","displayName":"Allowed","description":"Allowed","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowoobeupdates","displayName":"Allow OOBE Updates","description":"Allows or disallows updating device during OOBE via NDUP. By default devices are allowed to update during OOBE.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowoobeupdates"],"options":[{"id":"device_vendor_msft_policy_config_system_allowoobeupdates_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowoobeupdates_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowstoragecard","displayName":"Allow Storage Card","description":"Controls whether the user is allowed to use the storage card for device storage. This setting prevents programmatic access to the storage card. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowstoragecard"],"options":[{"id":"device_vendor_msft_policy_config_system_allowstoragecard_0","displayName":"SD card use is not allowed and USB drives are disabled. This setting does not prevent programmatic access to the storage card.","description":"SD card use is not allowed and USB drives are disabled. This setting does not prevent programmatic access to the storage card.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowstoragecard_1","displayName":"Allow a storage card.","description":"Allow a storage card.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowtelemetry","displayName":"Allow Telemetry","description":"Allow the device to send diagnostic and usage telemetry data, such as Watson. For more information about diagnostic data for Windows, including what is and what is not collected by Windows, see Configure Windows diagnostic data in your organization. Note: This value is only applicable to Windows Enterprise, Windows Education, Windows Mobile Enterprise, Windows IoT Core (IoT Core), Windows Server 2016, and Windows CPC OS. The following tables describe the supported values:Windows 8. 1 Values:0 - Not allowed. 1 - Allowed, except for Secondary Data Requests. 2 (default) - Allowed. Windows 10 Values:0 - Security. Information that is required to help keep Windows or Windows CPC OS more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender. Note: This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows IoT Core (IoT Core), Windows Server 2016, and Windows CPC OS. Using this setting on other devices is equivalent to setting the value of 1. 1 - Basic. Basic device info, including: quality-related data, app compatibility, app usage data, and data from the Security level. 2 - Enhanced. Additional insights, including: how Windows, Windows Server, System Center, Windows CPC OS, and apps are used, how they perform, advanced reliability data, and data from both the Basic and the Security levels. 3 - Full. All data necessary to identify and help to fix problems, plus data from the Security, Basic, and Enhanced levels. Important lf you are using Windows 8. 1 MDM server and set a value of 0 using the legacy AllowTelemetry policy on a Windows 10 Mobile device, then the value is not respected and the telemetry level is silently set to level 1. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowtelemetry"],"options":[{"id":"device_vendor_msft_policy_config_system_allowtelemetry_0","displayName":"Security","description":"Security. Information that is required to help keep Windows more secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.\nNote: This value is only applicable to Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, Windows 10 IoT Core (IoT Core), and Windows Server 2016. Using this setting on other devices is equivalent to setting the value of 1.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowtelemetry_1","displayName":"Basic","description":"Basic. Basic device info, including: quality-related data, app compatibility, app usage data, and data from the Security level.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowtelemetry_3","displayName":"Full","description":"Full. All data necessary to identify and help to fix problems, plus data from the Security, Basic, and Enhanced levels.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowupdatecomplianceprocessing","displayName":"Allow Update Compliance Processing","description":"Allows IT admins to enable diagnostic data from this device to be processed by Update Compliance. The following list shows the supported values: 0 (default)– Diagnostic data is not processed by Update Compliance. 16 – Diagnostic data is allowed to be processed by Update Compliance. If you disable or do not configure this policy setting, diagnostic data from this device will not be processed by Update Compliance.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowupdatecomplianceprocessing"],"options":[{"id":"device_vendor_msft_policy_config_system_allowupdatecomplianceprocessing_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowupdatecomplianceprocessing_16","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowusertoresetphone","displayName":"Allow User To Reset Phone","description":"Specifies whether to allow the user to factory reset the device by using control panel and hardware key combination. Most restricted value is 0. Tip, This policy is also applicable to Windows 10 and not exclusive to phone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowusertoresetphone"],"options":[{"id":"device_vendor_msft_policy_config_system_allowusertoresetphone_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowusertoresetphone_1","displayName":"Allowed to reset to factory default settings.","description":"Allowed to reset to factory default settings.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_allowwufbcloudprocessing","displayName":"Allow WUfB Cloud Processing","description":"Allows IT admins to enable diagnostic data from this device to be processed by Windows Update for Business cloud. The following list shows the supported values: 0 (default)– Diagnostic data is not processed by Windows Update for Business cloud.. 8 – Diagnostic data is allowed to be processed by Windows Update for Business cloud.. If you disable or do not configure this policy setting, diagnostic data from this device will not be processed by Windows Update for Business cloud.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#allowwufbcloudprocessing"],"options":[{"id":"device_vendor_msft_policy_config_system_allowwufbcloudprocessing_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_system_allowwufbcloudprocessing_8","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization","displayName":"Boot-Start Driver Initialization Policy","description":"This policy setting allows you to specify which boot-start drivers are initialized based on a classification determined by an Early Launch Antimalware boot-start driver. The Early Launch Antimalware boot-start driver can return the following classifications for each boot-start driver:\r\n- Good: The driver has been signed and has not been tampered with.\r\n- Bad: The driver has been identified as malware. It is recommended that you do not allow known bad drivers to be initialized.\r\n- Bad, but required for boot: The driver has been identified as malware, but the computer cannot successfully boot without loading this driver.\r\n- Unknown: This driver has not been attested to by your malware detection application and has not been classified by the Early Launch Antimalware boot-start driver.\r\n\r\nIf you enable this policy setting you will be able to choose which boot-start drivers to initialize the next time the computer is started.\r\n\r\nIf you disable or do not configure this policy setting, the boot start drivers determined to be Good, Unknown or Bad but Boot Critical are initialized and the initialization of drivers determined to be Bad is skipped.\r\n\r\nIf your malware detection application does not include an Early Launch Antimalware boot-start driver or if your Early Launch Antimalware boot-start driver has been disabled, this setting has no effect and all boot-start drivers are initialized.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-bootstartdriverinitialization"],"options":[{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy","displayName":"Choose the boot-start drivers that can be initialized:","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy_8","displayName":"Good only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy_1","displayName":"Good and unknown","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy_3","displayName":"Good, unknown and bad but critical","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_bootstartdriverinitialization_selectdriverloadpolicy_7","displayName":"All","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_system_configuremicrosoft365uploadendpoint","displayName":"Configure Microsoft 365 Upload Endpoint","description":"This policy sets the upload endpoint for this device’s diagnostic data as part of the Microsoft 365 Update Readiness program. If your organization is participating in the program and has been instructed to configure a custom upload endpoint, then use this setting to define that endpoint. The value for this setting will be provided by Microsoft as part of the onboarding process for the program. Value type is string.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#configuremicrosoft365uploadendpoint"],"options":null},{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinchangenotification","displayName":"Configure Telemetry Opt In Change Notification","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#configuretelemetryoptinchangenotification"],"options":[{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinchangenotification_0","displayName":"Enable telemetry change notifications.","description":"Enable telemetry change notifications.","helpText":null},{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinchangenotification_1","displayName":"Disable telemetry change notifications.","description":"Disable telemetry change notifications.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinsettingsux","displayName":"Configure Telemetry Opt In Settings Ux","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#configuretelemetryoptinsettingsux"],"options":[{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinsettingsux_0","displayName":"Enable Telemetry opt-in Settings.","description":"Enable Telemetry opt-in Settings.","helpText":null},{"id":"device_vendor_msft_policy_config_system_configuretelemetryoptinsettingsux_1","displayName":"Disable Telemetry opt-in Settings.","description":"Disable Telemetry opt-in Settings.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_disablechpe","displayName":"Disable CHPE","description":"This policy setting controls whether loading CHPE binaries is disabled on the ARM64 device. This policy has no effect on x64 devices. If you enable this policy setting, ARM64 devices will not load CHPE binaries. This setting is required for hotpatching on ARM64 devices. If you disable or do not configure this policy setting, ARM64 devices will load CHPE binaries.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disablechpe"],"options":[{"id":"device_vendor_msft_policy_config_system_disablechpe_0","displayName":"CHPE Binaries Enabled (Default)","description":"CHPE Binaries Enabled (Default)","helpText":null},{"id":"device_vendor_msft_policy_config_system_disablechpe_1","displayName":"CHPE Binaries Disabled","description":"CHPE Binaries Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_disabledevicedelete","displayName":"Disable Device Delete","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disabledevicedelete"],"options":[{"id":"device_vendor_msft_policy_config_system_disabledevicedelete_0","displayName":"Not disabled.","description":"Not disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disabledevicedelete_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_disablediagnosticdataviewer","displayName":"Disable Diagnostic Data Viewer","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disablediagnosticdataviewer"],"options":[{"id":"device_vendor_msft_policy_config_system_disablediagnosticdataviewer_0","displayName":"Not disabled.","description":"Not disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disablediagnosticdataviewer_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_disabledirectxdatabaseupdate","displayName":"Disable Direct X Database Update","description":"This group policy allows control over whether the DirectX Database Updater task will be run on the system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disabledirectxdatabaseupdate"],"options":[{"id":"device_vendor_msft_policy_config_system_disabledirectxdatabaseupdate_0","displayName":"Not disabled.","description":"Not disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disabledirectxdatabaseupdate_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_disableenterpriseauthproxy","displayName":"Disable Enterprise Auth Proxy","description":"This policy setting blocks the Connected User Experience and Telemetry service from automatically using an authenticated proxy to send data back to Microsoft on Windows 10. If you disable or do not configure this policy setting, the Connected User Experience and Telemetry service will automatically use an authenticated proxy to send data back to Microsoft. Enabling this policy will block the Connected User Experience and Telemetry service from automatically using an authenticated proxy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disableenterpriseauthproxy"],"options":[{"id":"device_vendor_msft_policy_config_system_disableenterpriseauthproxy_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_system_disableenterpriseauthproxy_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_disableonedrivefilesync","displayName":"Disable One Drive File Sync","description":"This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: users can’t access OneDrive from the OneDrive app and file picker; Microsoft Store apps can’t access OneDrive using the WinRT API; OneDrive doesn’t appear in the navigation pane in File Explorer; OneDrive files aren’t kept in sync with the cloud; Users can’t automatically upload photos and videos from the camera roll folder. If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disableonedrivefilesync"],"options":[{"id":"device_vendor_msft_policy_config_system_disableonedrivefilesync_0","displayName":"Sync enabled.","description":"Sync enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disableonedrivefilesync_1","displayName":"Sync disabled.","description":"Sync disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_disableonesettingsdownloads","displayName":"Disable One Settings Downloads","description":"This policy setting controls whether Windows attempts to connect with the OneSettings service. If you enable this policy, Windows will not attempt to connect with the OneSettings Service. If you disable or don't configure this policy setting, Windows will periodically attempt to connect with the OneSettings service to download configuration settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#disableonesettingsdownloads"],"options":[{"id":"device_vendor_msft_policy_config_system_disableonesettingsdownloads_0","displayName":"Not disabled.","description":"Not disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_disableonesettingsdownloads_1","displayName":"Disabled.","description":"Disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_disablesystemrestore","displayName":"Turn off System Restore","description":"Allows you to disable System Restore.\r\n\r\nThis policy setting allows you to turn off System Restore.\r\n\r\nSystem Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. By default, System Restore is turned on for the boot volume.\r\n\r\nIf you enable this policy setting, System Restore is turned off, and the System Restore Wizard cannot be accessed. The option to configure System Restore or create a restore point through System Protection is also disabled.\r\n\r\nIf you disable or do not configure this policy setting, users can perform System Restore and configure System Restore settings through System Protection.\r\n\r\nAlso, see the \"Turn off System Restore configuration\" policy setting. If the \"Turn off System Restore\" policy setting is disabled or not configured, the \"Turn off System Restore configuration\" policy setting is used to determine whether the option to configure System Restore is available.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-system#system-disablesystemrestore"],"options":[{"id":"device_vendor_msft_policy_config_system_disablesystemrestore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_system_disablesystemrestore_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_system_enablehotpatchautoremediation","displayName":"Enable Hotpatch Auto Remediation","description":"This policy setting controls whether Automatic Remediation is enabled on the hotpatch enrolled device. This policy has no effect on devices that does not have hotpatch updates installed. If you enable this policy setting, Automatic Remediation is enabled on the hotpatch enrolled device. If you disable or do not configure this policy setting, Automatic Remediation is disabled on the hotpatch enrolled device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#enablehotpatchautoremediation"],"options":[{"id":"device_vendor_msft_policy_config_system_enablehotpatchautoremediation_0","displayName":"Automatic Remediation is not enabled (Default)","description":"Automatic Remediation is not enabled (Default)","helpText":null},{"id":"device_vendor_msft_policy_config_system_enablehotpatchautoremediation_1","displayName":"Automatic Remediation is enabled","description":"Automatic Remediation is enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_enableonesettingsauditing","displayName":"Enable One Settings Auditing","description":"This policy setting controls whether Windows records attempts to connect with the OneSettings service to the EventLog. If you enable this policy, Windows will record attempts to connect with the OneSettings service to the Microsoft\\Windows\\Privacy-Auditing\\Operational EventLog channel. If you disable or don't configure this policy setting, Windows will not record attempts to connect with the OneSettings service to the EventLog.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#enableonesettingsauditing"],"options":[{"id":"device_vendor_msft_policy_config_system_enableonesettingsauditing_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_enableonesettingsauditing_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_feedbackhubalwayssavediagnosticslocally","displayName":"Feedback Hub Always Save Diagnostics Locally","description":"Diagnostic files created when a feedback is filed in the Feedback Hub app will always be saved locally. If this policy is not present or set to false, users will be presented with the option to save locally. The default is to not save locally.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#feedbackhubalwayssavediagnosticslocally"],"options":[{"id":"device_vendor_msft_policy_config_system_feedbackhubalwayssavediagnosticslocally_0","displayName":"False. The Feedback Hub will not always save a local copy of diagnostics that may be created when a feedback is submitted. The user will have the option to do so.","description":"False. The Feedback Hub will not always save a local copy of diagnostics that may be created when a feedback is submitted. The user will have the option to do so.","helpText":null},{"id":"device_vendor_msft_policy_config_system_feedbackhubalwayssavediagnosticslocally_1","displayName":"True. The Feedback Hub should always save a local copy of diagnostics that may be created when a feedback is submitted.","description":"True. The Feedback Hub should always save a local copy of diagnostics that may be created when a feedback is submitted.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_limitdiagnosticlogcollection","displayName":"Limit Diagnostic Log Collection","description":"This policy setting specifies whether diagnostic log data can be collected when more information is needed to troubleshoot a problem. The diagnostic data logs are collected, only if we have permission to collect optional diagnostic data, and only if the device meets the criteria for additional data collection. If you disable or do not configure this policy setting, we may occasionally collect advanced diagnostic data if the user has opted to send optional diagnostic data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#limitdiagnosticlogcollection"],"options":[{"id":"device_vendor_msft_policy_config_system_limitdiagnosticlogcollection_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_limitdiagnosticlogcollection_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_limitdumpcollection","displayName":"Limit Dump Collection","description":"This policy setting limits the type of dumps that can be collected when more information is needed to troubleshoot a problem. These dumps are not sent unless we have permission to collect optional diagnostic data. By enabling this policy setting, Windows Error Reporting is limited to sending kernel mini dumps and user mode triage dumps only. If you disable or do not configure this policy setting, we may occasionally collect full or heap dumps if the user has opted to send optional diagnostic data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#limitdumpcollection"],"options":[{"id":"device_vendor_msft_policy_config_system_limitdumpcollection_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_limitdumpcollection_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_limitenhanceddiagnosticdatawindowsanalytics","displayName":"Limit Enhanced Diagnostic Data Windows Analytics","description":"This policy setting, in combination with the Allow Telemetry policy setting, enables organizations to send Microsoft a specific set of diagnostic data for IT insights via Windows Analytics services. By configuring this setting, you're not stopping people from changing their Telemetry Settings; however, you are stopping them from choosing a higher level than you've set for the organization. To enable this behavior, you must complete two steps: 1. Enable this policy setting 2. Set Allow Telemetry to level 2 (Enhanced).If you configure these policy settings together, you'll send the Basic level of diagnostic data plus any additional events that are required for Windows Analytics, to Microsoft. The additional events are documented here: https://go.Microsoft.com/fwlink/?linked=847594. If you enable Enhanced diagnostic data in the Allow Telemetry policy setting, but you don't configure this policy setting, you'll send the required events for Windows Analytics, plus any additional Enhanced level telemetry data to Microsoft. This setting has no effect on computers configured to send Full, Basic, or Security level diagnostic data to Microsoft. If you disable or don't configure this policy setting, then the level of diagnostic data sent to Microsoft is determined by the Allow Telemetry policy setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#limitenhanceddiagnosticdatawindowsanalytics"],"options":[{"id":"device_vendor_msft_policy_config_system_limitenhanceddiagnosticdatawindowsanalytics_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_system_limitenhanceddiagnosticdatawindowsanalytics_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_system_telemetryproxy","displayName":"Telemetry Proxy","description":"Allows you to specify the fully qualified domain name (FQDN) or IP address of a proxy server to forward Connected User Experiences and Telemetry requests. The format for this setting is :. The connection is made over a Secure Sockets Layer (SSL) connection. If the named proxy fails, or if there is no proxy specified when this policy is enabled, the Connected User Experiences and Telemetry data will not be transmitted and will remain on the local device. If you disable or do not configure this policy setting, Connected User Experiences and Telemetry will go to Microsoft using the default proxy configuration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#telemetryproxy"],"options":null},{"id":"device_vendor_msft_policy_config_system_turnofffilehistory","displayName":"Turn Off File History","description":"This policy setting allows you to turn off File History. If you enable this policy setting, File History cannot be activated to create regular, automatic backups. If you disable or do not configure this policy setting, File History can be activated to create regular, automatic backups.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-System#turnofffilehistory"],"options":[{"id":"device_vendor_msft_policy_config_system_turnofffilehistory_0","displayName":"Allow file history.","description":"Allow file history.","helpText":null},{"id":"device_vendor_msft_policy_config_system_turnofffilehistory_1","displayName":"Turn off file history.","description":"Turn off file history.","helpText":null}]},{"id":"device_vendor_msft_policy_config_systemservices_configurehomegrouplistenerservicestartupmode","displayName":"Configure Home Group Listener Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurehomegrouplistenerservicestartupmode"],"options":null},{"id":"device_vendor_msft_policy_config_systemservices_configurehomegroupproviderservicestartupmode","displayName":"Configure Home Group Provider Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurehomegroupproviderservicestartupmode"],"options":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxaccessorymanagementservicestartupmode","displayName":"Configure Xbox Accessory Management Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurexboxaccessorymanagementservicestartupmode"],"options":[{"id":"device_vendor_msft_policy_config_systemservices_configurexboxaccessorymanagementservicestartupmode_2","displayName":"Automatic","description":"Automatic","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxaccessorymanagementservicestartupmode_3","displayName":"Manual","description":"Manual","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxaccessorymanagementservicestartupmode_4","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxliveauthmanagerservicestartupmode","displayName":"Configure Xbox Live Auth Manager Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurexboxliveauthmanagerservicestartupmode"],"options":[{"id":"device_vendor_msft_policy_config_systemservices_configurexboxliveauthmanagerservicestartupmode_2","displayName":"Automatic","description":"Automatic","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxliveauthmanagerservicestartupmode_3","displayName":"Manual","description":"Manual","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxliveauthmanagerservicestartupmode_4","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivegamesaveservicestartupmode","displayName":"Configure Xbox Live Game Save Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurexboxlivegamesaveservicestartupmode"],"options":[{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivegamesaveservicestartupmode_2","displayName":"Automatic","description":"Automatic","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivegamesaveservicestartupmode_3","displayName":"Manual","description":"Manual","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivegamesaveservicestartupmode_4","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivenetworkingservicestartupmode","displayName":"Configure Xbox Live Networking Service Startup Mode","description":"This setting determines whether the service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-SystemServices#configurexboxlivenetworkingservicestartupmode"],"options":[{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivenetworkingservicestartupmode_2","displayName":"Automatic","description":"Automatic","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivenetworkingservicestartupmode_3","displayName":"Manual","description":"Manual","helpText":null},{"id":"device_vendor_msft_policy_config_systemservices_configurexboxlivenetworkingservicestartupmode_4","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_taskmanager_allowendtask","displayName":"Allow End Task","description":"This setting determines whether non-administrators can use Task Manager to end tasks - enabled (1) or disabled (0). Default: enabled","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TaskManager#allowendtask"],"options":[{"id":"device_vendor_msft_policy_config_taskmanager_allowendtask_0","displayName":"Block","description":"Disabled. EndTask functionality is blocked in TaskManager.","helpText":null},{"id":"device_vendor_msft_policy_config_taskmanager_allowendtask_1","displayName":"Allow","description":"Enabled. Users can perform EndTask in TaskManager.","helpText":null}]},{"id":"device_vendor_msft_policy_config_taskscheduler_enablexboxgamesavetask","displayName":"Enable Xbox Game Save Task","description":"This setting determines whether the specific task is enabled (1) or disabled (0). Default: Enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TaskScheduler#enablexboxgamesavetask"],"options":[{"id":"device_vendor_msft_policy_config_taskscheduler_enablexboxgamesavetask_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_taskscheduler_enablexboxgamesavetask_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions","displayName":"Cloud Policy Details","description":"\r\n This setting enables and configures the device-based tenant restrictions feature for Azure Active Directory.\r\n\r\n When you enable this setting, compliant applications will be prevented from accessing disallowed tenants, according to a policy set in your Azure AD tenant.\r\n\r\n Note: Creation of a policy in your home tenant is required, and additional security measures for managed devices are recommended for best protection. Refer to Azure AD Tenant Restrictions for more details.\r\n\r\n https://go.microsoft.com/fwlink/?linkid=2148762\r\n\r\n Before enabling firewall protection, ensure that an App Control for Business policy that correctly tags applications has been applied to the target devices. Enabling firewall protection without a corresponding App Control for Business policy will prevent all applications from reaching Microsoft endpoints. This firewall setting is not supported on all versions of Windows - see the following link for more information.\r\n For details about setting up WDAC with tenant restrictions, see https://go.microsoft.com/fwlink/?linkid=2155230","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-tenantrestrictions#tenantrestrictions-configuretenantrestrictions"],"options":[{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_enforcefirewall","displayName":"Enable firewall protection of Microsoft endpoints (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_enforcefirewall_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_enforcefirewall_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadcloudid","displayName":"Cloud ID (optional): (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadhostnamesid","displayName":"Hostnames (optional): (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadiprangesid","displayName":"IP Ranges (optional): (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadpolicyid","displayName":"Policy GUID: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadsubdomainsupportedhostnamesid","displayName":"Subdomain Supported Hostnames (optional): (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_tenantrestrictions_configuretenantrestrictions_payloadtenantid","displayName":"Azure AD Directory ID: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking","displayName":"Enable watermarking","description":"This policy setting allows you to specify whether watermarking is enabled for a remote session.\r\nIf you enable this policy setting, then the RD Session Host server will instruct the client to project the watermarking QR code in a remote session. \r\n\r\nIf client is not compatible with watermarking, then connection will be denied.\r\n\r\nIf you disable or do not configure this policy setting, then the watermarking will be disabled.\r\n\r\nNote: You can choose the Device ID option for QR code embedded content only if the target device is Azure AD joined or Hybrid Azure AD joined. \r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingcontent","displayName":"QR code embedded content (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingcontent_0","displayName":"Connection ID","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingcontent_1","displayName":"Device ID","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingheightfactor","displayName":"Height of grid box in percent relative to QR code bitmap height (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingopacity","displayName":"QR code bitmap opacity (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingqrscale","displayName":"QR code bitmap scale factor (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1.upadtes~policy~avd_gp_node_avd_server_watermarking_part_watermarkingwidthfactor","displayName":"Width of grid box in percent relative to QR code bitmap width (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_connection_interval_graphics_data","displayName":"Enable Graphics related data logging for every connection interval","description":"\r\n This policy setting lets you enable graphics related data logging for every connection interval.\r\n\r\n If you enable this policy setting, the RD Session Host server logs graphics related data for every connection interval.\r\n\r\n If you disable or don’t configure this policy setting, the RD Session Host server logs graphics related data for only connection intervals with graphics issues.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_connection_interval_graphics_data_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_connection_interval_graphics_data_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection","displayName":"Enable screen capture protection","description":"This policy setting allows you to specify whether protection against screen capture is enabled for a remote session across client and server. \r\n\r\nIf you enable this policy setting to block screen capture on client, the RD Session Host Server will instruct the client to enable the screen capture protection for a remote session. If a compatible client is used, it will prevent screen capture of the applications running in the remote session. \r\n\r\nIf you enable this policy setting to block screen capture on client and server, it will block on the client as described above in addition to instructing the session host to prevent tools and services within the session host from capturing the screen. This option requires the session host to be OS version Windows 11, version 22H2 or later.\r\n\r\nIf the client is not compatible with screen capture protection, the connection will be denied. \r\n\r\nIf you disable or not configure this policy setting, the screen capture protection will be disabled. \r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection_avd_server_screen_capture_protection_level","displayName":"Screen Capture Protection Options (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection_avd_server_screen_capture_protection_level_1","displayName":" Block screen capture on client ","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_screen_capture_protection_avd_server_screen_capture_protection_level_2","displayName":" Block screen capture on client and server ","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_port_redirector","displayName":"Enable RDP Shortpath for managed networks","description":"This policy setting lets you enable RDP Shortpath for managed networks.\r\n\r\nIf you enable this policy setting, Azure Virtual Desktop clients connected over managed networks will use UDP to connect to the session host.\r\n\r\nIf you disable or don’t configure this policy setting, the clients won’t use RDP Shortpath for managed networks to connect to the session host.\r\n\r\nIf you enable this policy setting, you should also enable the required firewall exceptions that will allow RDP Shortpath for managed networks to work properly.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_port_redirector_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_port_redirector_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_port_redirector_part_udpredirectorport","displayName":"UDP port (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_stun_client_port_range","displayName":"Use port range for RDP Shortpath for unmanaged networks","description":"This policy setting allows you to specify the UDP port range the Azure Virtual Desktop client will use to communicate with the session host when RDP Shortpath for public networks is used. \r\nIf you enable this policy setting, the Azure Virtual Desktop client will randomly select the port from the range for every connection. If the specified port range is exhausted, the client's operating system will choose a port to use.\r\nIf you disable or do not configure this policy setting, the operating system on the client will select a port used for the session (recommended)\r\n\r\nIf you enable this policy setting, we recommend configuring firewall rules on the client to allow inbound UDP connection in this port range for Azure Virtual Desktop clients. If you do not configure firewall rules, Windows Defender Firewall may prompt the user to allow communication.\r\nIf you enable this policy setting, you can also customize a UDP port range for the Azure Virtual Desktop client. \r\nWhen choosing the base and pool size, consider the number of ports setting to ensure that the upper bound does not exceed 49151. For example, if you select 38300 as a port base and 1000 as pool size, the upper bound will be 39299.\r\n\r\nUDP port base:\r\nThis setting allows you to customize the base for the UDP port range. The default base port is 38300 (recommended). You can select any value in the 1024-49151 range for the base. \r\n\r\nPort pool size:\r\nThis setting allows you to select how many ports will be in the UDP port range. Default (recommended) is 1000. \r\n\r\n","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_stun_client_port_range_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_stun_client_port_range_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_stun_client_port_range_part_iceclientportbase","displayName":"UDP port base (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_udp_stun_client_port_range_part_iceclientportrange","displayName":"Port pool size (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking","displayName":"[Deprecated] Enable watermarking","description":"This policy setting allows you to specify whether watermarking is enabled for a remote session.\r\nIf you enable this policy setting, then the RD Session Host server will instruct the client to project the watermarking QR code in a remote session. \r\n\r\nIf client is not compatible with watermarking, then connection will be denied.\r\n\r\nIf you disable or do not configure this policy setting, then the watermarking will be disabled.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_part_watermarkingheightfactor","displayName":"[Deprecated] Height of grid box in percent relative to QR code bitmap height (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_part_watermarkingopacity","displayName":"[Deprecated] QR code bitmap opacity (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_part_watermarkingqrscale","displayName":"[Deprecated] QR code bitmap scale factor (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv1~policy~avd_gp_node_avd_server_watermarking_part_watermarkingwidthfactor","displayName":"[Deprecated] Width of grid box in percent relative to QR code bitmap width (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv2~policy~avd_gp_node_avd_server_hevc","displayName":"Configure H.265/HEVC hardware encoding for Remote Desktop Connections","description":"This policy setting lets you enable HEVC hardware encoding support for Remote Desktop Connections. \r\n \r\nWhen you enable HEVC, this policy will supersede the Configure H.264/AVC hardware encoding for Remote Desktop Connections GP. \r\n \r\nWhen you enable HEVC, if an error occurs, we will attempt to use AVC software encoding. If you disable or do not configure this policy, HEVC will not be leveraged. \r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv2~policy~avd_gp_node_avd_server_hevc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv2~policy~avd_gp_node_avd_server_hevc_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_direct","displayName":"Enable RDP Shortpath for managed network using NAT traversal","description":"This policy lets you control RDP Shortpath for managed networks. It's a direct UDP connection between a client device and session host using a private connection, such as ExpressRoute private peering or a virtual private network (VPN). When the RDP Shortpath listener isn't enabled on session hosts and an inbound port isn't allowed, ICE/STUN is used to discover available IP addresses and a dynamic port that can be used for a connection. \r\n \r\nIf you enable or do not configure the policy this policy setting, Remote Desktop Protocol will consider managed networks paths to establish connection with the session host. \r\n \r\nIf you disable this policy, Remote Desktop Protocol will NOT consider managed networks path to establish connection with the session host.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_direct_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_direct_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_public","displayName":"Enable RDP Shortpath for public network using NAT traversal","description":"This policy lets you control RDP Shortpath for public networks using NAT traversal. It is a direct UDP connection between the client device and session host, using the Simple Traversal Underneath NAT (STUN) protocol. Inbound ports on the session host aren't required to be allowed. \r\n \r\nIf you enable or do not configure this policy setting, Remote Desktop Protocol will consider public networks non-relayed paths to establish connection with the session host. \r\n \r\nIf you disable this policy, Remote Desktop Protocol will NOT consider public networks non-relayed paths to establish connection with the session host. \r\n\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_public_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_public_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_relay","displayName":"Enable RDP Shortpath for public network using Relay (TURN)","description":"This policy lets you control RDP Shortpath for public networks using the Traversal Using Relay NAT (TURN). A relayed UDP is a connection between a client device and session host using a public connection where TURN relays traffic through an intermediate server between a client and session host \r\n \r\nIf you enable or do not configure this policy setting, Remote Desktop Protocol will consider public networks relayed paths to establish connection with the session host. \r\n \r\nIf you disable this policy, Remote Desktop Protocol will NOT consider public networks relayed paths to establish connection with the session host.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_relay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_terminalserver-avdv3~policy~avd_gp_node~avd_transport_gp_node_avd_server_udp_shortpath_relay_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowhardwarekeyboardtextsuggestions","displayName":"Allow Hardware Keyboard Text Suggestions","description":"Placeholder only. Do not use in production environment.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowhardwarekeyboardtextsuggestions"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowhardwarekeyboardtextsuggestions_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowhardwarekeyboardtextsuggestions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowimelogging","displayName":"Allow IME Logging","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the user to turn on and off the logging for incorrect conversion and saving auto-tuning result to a file and history-based predictive input. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowimelogging"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowimelogging_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowimelogging_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowimenetworkaccess","displayName":"Allow IME Network Access","description":"Allows the user to turn on Open Extended Dictionary, Internet search integration, or cloud candidate features to provide input suggestions that do not exist in the device's local dictionary. Most restricted value is 0. In Windows 10, version 1803, we introduced new suggestion services in Japanese IME in addition to cloud suggestion. When AllowIMENetworkAccess is set to 1, all suggestion services are available as predictive input.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowimenetworkaccess"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowimenetworkaccess_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowimenetworkaccess_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowinputpanel","displayName":"Allow Input Panel","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the IT admin to disable the touch/handwriting keyboard on Windows. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowinputpanel"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowinputpanel_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowinputpanel_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseimesurrogatepaircharacters","displayName":"Allow Japanese IME Surrogate Pair Characters","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the Japanese IME surrogate pair characters. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowjapaneseimesurrogatepaircharacters"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseimesurrogatepaircharacters_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseimesurrogatepaircharacters_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseivscharacters","displayName":"Allow Japanese IVS Characters","description":"Note The policy is only enforced in Windows 10 for desktop. Allows Japanese Ideographic Variation Sequence (IVS) characters. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowjapaneseivscharacters"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseivscharacters_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseivscharacters_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowjapanesenonpublishingstandardglyph","displayName":"Allow Japanese Non Publishing Standard Glyph","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the Japanese non-publishing standard glyph. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowjapanesenonpublishingstandardglyph"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowjapanesenonpublishingstandardglyph_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowjapanesenonpublishingstandardglyph_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseuserdictionary","displayName":"Allow Japanese User Dictionary","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the Japanese user dictionary. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowjapaneseuserdictionary"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseuserdictionary_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowjapaneseuserdictionary_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowkeyboardtextsuggestions","displayName":"Allow Keyboard Text Suggestions","description":"Note The policy is only enforced in Windows 10 for desktop. Specifies whether text prediction is enabled or disabled for the on-screen keyboard, touch keyboard, and handwriting recognition tool. When this policy is set to disabled, text prediction is disabled. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowkeyboardtextsuggestions"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowkeyboardtextsuggestions_0","displayName":"Block","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowkeyboardtextsuggestions_1","displayName":"Allow","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowlanguagefeaturesuninstall","displayName":"Allow Language Features Uninstall","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the uninstall of language features, such as spell checkers, on a device. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowlanguagefeaturesuninstall"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowlanguagefeaturesuninstall_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowlanguagefeaturesuninstall_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_allowlinguisticdatacollection","displayName":"Allow Linguistic Data Collection","description":"This policy setting controls the ability to send inking and typing data to Microsoft to improve the language recognition and suggestion capabilities of apps and services running on Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#allowlinguisticdatacollection"],"options":[{"id":"device_vendor_msft_policy_config_textinput_allowlinguisticdatacollection_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_allowlinguisticdatacollection_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_configurejapaneseimeversion","displayName":"Configure Japanese IME Version","description":"This policy allows the IT admin to configure the Microsoft Japanese IME version in the desktop. The following list shows the supported values: 0 (default) – The new Microsoft Japanese IME is on by default. Allow to control Microsoft Japanese IME version to use. 1 - The previous version of Microsoft Japanese IME is always selected. Not allowed to control Microsoft Japanese IME version to use. 2 - The new Microsoft Japanese IME is always selected. Not allowed to control Microsoft Japanese IME version to use.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#configurejapaneseimeversion"],"options":[{"id":"device_vendor_msft_policy_config_textinput_configurejapaneseimeversion_0","displayName":"Allows you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is configured by default.","description":"Allows you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is configured by default.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configurejapaneseimeversion_1","displayName":"Does not allow you to configure which Microsoft Japanese IME version to use. The previous version of Microsoft Japanese IME is always selected.","description":"Does not allow you to configure which Microsoft Japanese IME version to use. The previous version of Microsoft Japanese IME is always selected.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configurejapaneseimeversion_2","displayName":"Does not allow you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is always selected.","description":"Does not allow you to configure which Microsoft Japanese IME version to use. The new Microsoft Japanese IME version is always selected.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_configuresimplifiedchineseimeversion","displayName":"Configure Simplified Chinese IME Version","description":"This policy allows the IT admin to configure the Microsoft Simplified Chinese IME version in the desktop. The following list shows the supported values: 0 (default) – The new Microsoft Simplified Chinese IME is on by default. Allow to control Microsoft Simplified Chinese IME version to use. 1 - The previous version of Microsoft Simplified Chinese IME is always selected. Not allowed to control Microsoft Simplified Chinese IME version to use. 2 - The new Microsoft Simplified Chinese IME is always selected. Not allowed to control Microsoft Simplified Chinese IME version to use.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#configuresimplifiedchineseimeversion"],"options":[{"id":"device_vendor_msft_policy_config_textinput_configuresimplifiedchineseimeversion_0","displayName":"Allows you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is configured by default.","description":"Allows you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is configured by default.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configuresimplifiedchineseimeversion_1","displayName":"Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The previous version of Microsoft Simplified Chinese IME is always selected.","description":"Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The previous version of Microsoft Simplified Chinese IME is always selected.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configuresimplifiedchineseimeversion_2","displayName":"Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is always selected.","description":"Does not allow you to configure which Microsoft Simplified Chinese IME version to use. The new Microsoft Simplified Chinese IME version is always selected.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_configuretraditionalchineseimeversion","displayName":"Configure Traditional Chinese IME Version","description":"This policy allows the IT admin to configure the Microsoft Traditional Chinese IME version in the desktop. The following list shows the supported values: 0 (default) – The new Microsoft Traditional Chinese IME is on by default. Allow to control Microsoft Traditional Chinese IME version to use. 1 - The previous version of Microsoft Traditional Chinese IME is always selected. Not allowed to control Microsoft Traditional Chinese IME version to use. 2 - The new Microsoft Traditional Chinese IME is always selected. Not allowed to control Microsoft Traditional Chinese IME version to use.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#configuretraditionalchineseimeversion"],"options":[{"id":"device_vendor_msft_policy_config_textinput_configuretraditionalchineseimeversion_0","displayName":"Allows you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is configured by default.","description":"Allows you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is configured by default.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configuretraditionalchineseimeversion_1","displayName":"Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The previous version of Microsoft Traditional Chinese IME is always selected.","description":"Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The previous version of Microsoft Traditional Chinese IME is always selected.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_configuretraditionalchineseimeversion_2","displayName":"Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is always selected.","description":"Does not allow you to configure which Microsoft Traditional Chinese IME version to use. The new Microsoft Traditional Chinese IME version is always selected.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_enabletouchkeyboardautoinvokeindesktopmode","displayName":"Enable Touch Keyboard Auto Invoke In Desktop Mode","description":"This policy allows the IT admin to enable the touch keyboard to automatically show up when the device is in the desktop mode. The touch keyboard is enabled in both the tablet and desktop mode. In the tablet mode, when you touch a textbox, the touch keyboard automatically shows up. But in the desktop mode, by default, the touch keyboard does not automatically show up when you touch a textbox. The user must click the system tray to enable the touch keyboard. When this policy is enabled, the touch keyboard automatically shows up when the device is in the desktop mode. This policy corresponds to Show the touch keyboard when not in tablet mode and there's no keyboard attached in the Settings app.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#enabletouchkeyboardautoinvokeindesktopmode"],"options":[{"id":"device_vendor_msft_policy_config_textinput_enabletouchkeyboardautoinvokeindesktopmode_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_enabletouchkeyboardautoinvokeindesktopmode_1","displayName":"Enabled","description":"Enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_enabletouchkeyboardautoinvokeindesktopmode_2","displayName":"Always.","description":"Always.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208","displayName":"Exclude Japanese IME Except JIS0208","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the users to restrict character code range of conversion by setting the character filter.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#excludejapaneseimeexceptjis0208"],"options":[{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208_0","displayName":"No characters are filtered.","description":"No characters are filtered.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208_1","displayName":"All characters except JIS0208 are filtered.","description":"All characters except JIS0208 are filtered.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208andeudc","displayName":"Exclude Japanese IME Except JIS0208and EUDC","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the users to restrict character code range of conversion by setting the character filter.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#excludejapaneseimeexceptjis0208andeudc"],"options":[{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208andeudc_0","displayName":"No characters are filtered.","description":"No characters are filtered.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptjis0208andeudc_1","displayName":"All characters except JIS0208 and EUDC are filtered.","description":"All characters except JIS0208 and EUDC are filtered.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptshiftjis","displayName":"Exclude Japanese IME Except Shift JIS","description":"Note The policy is only enforced in Windows 10 for desktop. Allows the users to restrict character code range of conversion by setting the character filter.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#excludejapaneseimeexceptshiftjis"],"options":[{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptshiftjis_0","displayName":"No characters are filtered.","description":"No characters are filtered.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_excludejapaneseimeexceptshiftjis_1","displayName":"All characters except ShiftJIS are filtered.","description":"All characters except ShiftJIS are filtered.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_forcetouchkeyboarddockedstate","displayName":"Force Touch Keyboard Docked State","description":"Specifies the touch keyboard is always docked. When this policy is set to enabled, the touch keyboard is always docked.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#forcetouchkeyboarddockedstate"],"options":[{"id":"device_vendor_msft_policy_config_textinput_forcetouchkeyboarddockedstate_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_forcetouchkeyboarddockedstate_1","displayName":"Touch keyboard is always docked.","description":"Touch keyboard is always docked.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_forcetouchkeyboarddockedstate_2","displayName":"Touch keyboard docking can be changed.","description":"Touch keyboard docking can be changed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboarddictationbuttonavailability","displayName":"Touch Keyboard Dictation Button Availability","description":"Specifies whether the dictation input button is enabled or disabled for the touch keyboard. When this policy is set to disabled, the dictation input button on touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboarddictationbuttonavailability"],"options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboarddictationbuttonavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboarddictationbuttonavailability_1","displayName":"Dictation button on the keyboard is always available.","description":"Dictation button on the keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboarddictationbuttonavailability_2","displayName":"Dictation button on the keyboard is always disabled.","description":"Dictation button on the keyboard is always disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardemojibuttonavailability","displayName":"Touch Keyboard Emoji Button Availability","description":"Specifies whether the emoji button is enabled or disabled for the touch keyboard. When this policy is set to disabled, the emoji button on touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardemojibuttonavailability"],"options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardemojibuttonavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardemojibuttonavailability_1","displayName":"Emoji button on keyboard is always available.","description":"Emoji button on keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardemojibuttonavailability_2","displayName":"Emoji button on keyboard is always disabled.","description":"Emoji button on keyboard is always disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardfullmodeavailability","displayName":"Touch Keyboard Full Mode Availability","description":"Specifies whether the full keyboard mode is enabled or disabled for the touch keyboard. When this policy is set to disabled, the full keyboard mode for touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardfullmodeavailability"],"options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardfullmodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardfullmodeavailability_1","displayName":"Full keyboard is always available.","description":"Full keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardfullmodeavailability_2","displayName":"Full keyboard is always disabled.","description":"Full keyboard is always disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardhandwritingmodeavailability","displayName":"Touch Keyboard Handwriting Mode Availability","description":"Specifies whether the handwriting input panel is enabled or disabled. When this policy is set to disabled, the handwriting input panel is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardhandwritingmodeavailability"],"options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardhandwritingmodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardhandwritingmodeavailability_1","displayName":"Handwriting input panel is always available.","description":"Handwriting input panel is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardhandwritingmodeavailability_2","displayName":"Handwriting input panel is always disabled.","description":"Handwriting input panel is always disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardnarrowmodeavailability","displayName":"Touch Keyboard Narrow Mode Availability","description":"Specifies whether the narrow keyboard mode is enabled or disabled for the touch keyboard. When this policy is set to disabled, the narrow keyboard mode for touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardnarrowmodeavailability"],"options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardnarrowmodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardnarrowmodeavailability_1","displayName":"Narrow keyboard is always available.","description":"Narrow keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardnarrowmodeavailability_2","displayName":"Narrow keyboard is always disabled.","description":"Narrow keyboard is always disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardsplitmodeavailability","displayName":"Touch Keyboard Split Mode Availability","description":"Specifies whether the split keyboard mode is enabled or disabled for the touch keyboard. When this policy is set to disabled, the split keyboard mode for touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardsplitmodeavailability"],"options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardsplitmodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardsplitmodeavailability_1","displayName":"Split keyboard is always available.","description":"Split keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardsplitmodeavailability_2","displayName":"Split keyboard is always disabled.","description":"Split keyboard is always disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardwidemodeavailability","displayName":"Touch Keyboard Wide Mode Availability","description":"Specifies whether the wide keyboard mode is enabled or disabled for the touch keyboard. When this policy is set to disabled, the wide keyboard mode for touch keyboard is disabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TextInput#touchkeyboardwidemodeavailability"],"options":[{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardwidemodeavailability_0","displayName":"The OS determines when it's most appropriate to be available.","description":"The OS determines when it's most appropriate to be available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardwidemodeavailability_1","displayName":"Wide keyboard is always available.","description":"Wide keyboard is always available.","helpText":null},{"id":"device_vendor_msft_policy_config_textinput_touchkeyboardwidemodeavailability_2","displayName":"Wide keyboard is always disabled.","description":"Wide keyboard is always disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_timelanguagesettings_allowset24hourclock","displayName":"Allow Set24 Hour Clock","description":"This policy is deprecated.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#allowset24hourclock"],"options":[{"id":"device_vendor_msft_policy_config_timelanguagesettings_allowset24hourclock_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_timelanguagesettings_allowset24hourclock_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_timelanguagesettings_blockcleanupofunusedpreinstalledlangpacks","displayName":"Block Cleanup Of Unused Preinstalled Lang Packs","description":"This policy setting controls whether the LPRemove or Language Packs Uninstaller task will run to clean up language packs installed on a machine but are not used by any users on that machine.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#blockcleanupofunusedpreinstalledlangpacks"],"options":[{"id":"device_vendor_msft_policy_config_timelanguagesettings_blockcleanupofunusedpreinstalledlangpacks_0","displayName":"Block","description":"Not blocked.","helpText":null},{"id":"device_vendor_msft_policy_config_timelanguagesettings_blockcleanupofunusedpreinstalledlangpacks_1","displayName":"Allow","description":"Blocked.","helpText":null}]},{"id":"device_vendor_msft_policy_config_timelanguagesettings_configuretimezone","displayName":"Configure Time Zone","description":"Specifies the time zone to be applied to the device. This is the standard Windows name for the target time zone.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#configuretimezone"],"options":null},{"id":"device_vendor_msft_policy_config_timelanguagesettings_machineuilanguageoverwrite","displayName":"Machine UI Language Overwrite","description":"This policy setting controls which UI language is used for computers with more than one UI language installed. If you enable this setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to the machine language.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#machineuilanguageoverwrite"],"options":[{"id":"device_vendor_msft_policy_config_timelanguagesettings_machineuilanguageoverwrite_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_timelanguagesettings_machineuilanguageoverwrite_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall","displayName":"Restrict Language Packs And Features Install","description":"This policy setting restricts the install of language packs and language features, such as spell checkers, on a device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-TimeLanguageSettings#restrictlanguagepacksandfeaturesinstall"],"options":[{"id":"device_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall_0","displayName":"Disabled","description":"Not restricted.","helpText":null},{"id":"device_vendor_msft_policy_config_timelanguagesettings_restrictlanguagepacksandfeaturesinstall_1","displayName":"Enabled","description":"Restricted.","helpText":null}]},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations","displayName":"Allow Recommendations","description":"This policy setting applies recommended troubleshooting for known problems on the device and lets administrators configure how it's applied to their domains/IT environments. Not configuring this policy setting will allow the user to configure if and how recommended troubleshooting is applied. Enabling this policy allows you to configure how recommended troubleshooting is applied on the user's device. You can select from one of the following values: 0 = Turn this feature off. 1 = Turn this feature off but still apply critical troubleshooting. 2 = Notify users when recommended troubleshooting is available, then allow the user to run or ignore it. 3 = Run recommended troubleshooting automatically and notify the user after it's been successfully run. 4 = Run recommended troubleshooting automatically without notifying the user. 5 = Allow the user to choose their own recommended troubleshooting settings.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Troubleshooting#allowrecommendations"],"options":[{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_0","displayName":"Turn this feature off.","description":"Turn this feature off.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_1","displayName":"Turn this feature off but still apply critical troubleshooting.","description":"Turn this feature off but still apply critical troubleshooting.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_2","displayName":"Notify users when recommended troubleshooting is available, then allow the user to run or ignore it.","description":"Notify users when recommended troubleshooting is available, then allow the user to run or ignore it.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_3","displayName":"Run recommended troubleshooting automatically and notify the user after it's been successfully run.","description":"Run recommended troubleshooting automatically and notify the user after it's been successfully run.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_4","displayName":"Run recommended troubleshooting automatically without notifying the user.","description":"Run recommended troubleshooting automatically without notifying the user.","helpText":null},{"id":"device_vendor_msft_policy_config_troubleshooting_allowrecommendations_5","displayName":"Allow the user to choose their own recommended troubleshooting settings.","description":"Allow the user to choose their own recommended troubleshooting settings.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_activehoursend","displayName":"Active Hours End","description":"Allows the IT admin (when used with Update/ActiveHoursStart) to manage a range of active hours where update reboots are not scheduled. This value sets the end time. There is a 12 hour maximum from start time. Note The default maximum difference from start time has been increased to 18 in Windows 10, version 1703. In this version of Windows 10, the maximum range of active hours can now be configured. See Update/ActiveHoursMaxRange below for more information. Supported values are 0-23, where 0 is 12 AM, 1 is 1 AM, etc. The default is 17 (5 PM).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#activehoursend"],"options":null},{"id":"device_vendor_msft_policy_config_update_activehoursmaxrange","displayName":"Active Hours Max Range","description":"Allows the IT admin to specify the max active hours range. This value sets max number of active hours from start time. Supported values are 8-18. The default value is 18 (hours).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#activehoursmaxrange"],"options":null},{"id":"device_vendor_msft_policy_config_update_activehoursstart","displayName":"Active Hours Start","description":"Allows the IT admin (when used with Update/ActiveHoursEnd) to manage a range of hours where update reboots are not scheduled. This value sets the start time. There is a 12 hour maximum from end time. Note The default maximum difference from end time has been increased to 18 in Windows 10, version 1703. In this version of Windows 10, the maximum range of active hours can now be configured. See Update/ActiveHoursMaxRange above for more information. Supported values are 0-23, where 0 is 12 AM, 1 is 1 AM, etc. The default value is 8 (8 AM).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#activehoursstart"],"options":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate","displayName":"Allow Auto Update","description":"Enables the IT admin to manage automatic update behavior to scan, download, and install updates. Supported operations are Get and Replace. Important. This option should be used only for systems under regulatory compliance, as you will not get security updates as well. If the policy is not configured, end-users get the default behavior (Auto install and restart).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowautoupdate"],"options":[{"id":"device_vendor_msft_policy_config_update_allowautoupdate_0","displayName":"Notify the user before downloading the update. This policy is used by the enterprise who wants to enable the end-users to manage data usage. With this option users are notified when there are updates that apply to the device and are ready for download. Users can download and install the updates from the Windows Update control panel.","description":"Notify the user before downloading the update. This policy is used by the enterprise who wants to enable the end-users to manage data usage. With this option users are notified when there are updates that apply to the device and are ready for download. Users can download and install the updates from the Windows Update control panel.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_1","displayName":"Auto install the update and then notify the user to schedule a device restart. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates immediately. If the installation requires a restart, the end-user is prompted to schedule the restart time. The end-user has up to seven days to schedule the restart and after that, a restart of the device is forced. Enabling the end-user to control the start time reduces the risk of accidental data loss caused by applications that do not shutdown properly on restart.","description":"Auto install the update and then notify the user to schedule a device restart. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates immediately. If the installation requires a restart, the end-user is prompted to schedule the restart time. The end-user has up to seven days to schedule the restart and after that, a restart of the device is forced. Enabling the end-user to control the start time reduces the risk of accidental data loss caused by applications that do not shutdown properly on restart.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_2","displayName":"Auto install and restart. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This is the default behavior for unmanaged devices. Devices are updated quickly, but it increases the risk of accidental data loss caused by an application that does not shutdown properly on restart.","description":"Auto install and restart. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This is the default behavior for unmanaged devices. Devices are updated quickly, but it increases the risk of accidental data loss caused by an application that does not shutdown properly on restart.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_3","displayName":"Auto install and restart at a specified time. The IT specifies the installation day and time. If no day and time are specified, the default is 3 AM daily. Automatic installation happens at this time and device restart happens after a 15-minute countdown. If the user is logged in when Windows is ready to restart, the user can interrupt the 15-minute countdown to delay the restart.","description":"Auto install and restart at a specified time. The IT specifies the installation day and time. If no day and time are specified, the default is 3 AM daily. Automatic installation happens at this time and device restart happens after a 15-minute countdown. If the user is logged in when Windows is ready to restart, the user can interrupt the 15-minute countdown to delay the restart.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_4","displayName":"Auto install and restart without end-user control. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This setting option also sets the end-user control panel to read-only.","description":"Auto install and restart without end-user control. Updates are downloaded automatically on non-metered networks and installed during \"Automatic Maintenance\" when the device is not in use and is not running on battery power. If automatic maintenance is unable to install updates for two days, Windows Update will install updates right away. If a restart is required, then the device is automatically restarted when the device is not actively being used. This setting option also sets the end-user control panel to read-only.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautoupdate_5","displayName":"Turn off automatic updates.","description":"Turn off automatic updates.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_allowautowindowsupdatedownloadovermeterednetwork","displayName":"Allow Auto Windows Update Download Over Metered Network","description":"Option to download updates automatically over metered connections (off by default). Value type is integer. A significant number of devices primarily use cellular data and do not have Wi-Fi access, which leads to a lower number of devices getting updates. Since a large number of devices have large data plans or unlimited data, this policy can unblock devices from getting updates. This policy is accessible through the Update setting in the user interface or Group Policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowautowindowsupdatedownloadovermeterednetwork"],"options":[{"id":"device_vendor_msft_policy_config_update_allowautowindowsupdatedownloadovermeterednetwork_0","displayName":"Not allowed","description":"Not allowed","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowautowindowsupdatedownloadovermeterednetwork_1","displayName":"Allowed","description":"Allowed","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_allowmuupdateservice","displayName":"Allow MU Update Service","description":"Allows the IT admin to manage whether to scan for app updates from Microsoft Update.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowmuupdateservice"],"options":[{"id":"device_vendor_msft_policy_config_update_allowmuupdateservice_0","displayName":"Not allowed or not configured.","description":"Not allowed or not configured.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowmuupdateservice_1","displayName":"Allowed. Accepts updates received through Microsoft Update.","description":"Allowed. Accepts updates received through Microsoft Update.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_allownonmicrosoftsignedupdate","displayName":"Allow Non Microsoft Signed Update","description":"Allows the IT admin to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when the update is found at the UpdateServiceUrl location. This policy supports using WSUS for 3rd party software and patch distribution. Supported operations are Get and Replace. This policy is specific to desktop and local publishing via WSUS for 3rd party updates (binaries and updates not hosted on Microsoft Update) and allows IT to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when the update is found on an intranet Microsoft update service location.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allownonmicrosoftsignedupdate"],"options":[{"id":"device_vendor_msft_policy_config_update_allownonmicrosoftsignedupdate_0","displayName":"Block","description":"Not allowed or not configured. Updates from an intranet Microsoft update service location must be signed by Microsoft.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allownonmicrosoftsignedupdate_1","displayName":"Allow","description":"Allowed. Accepts updates received through an intranet Microsoft update service location, if they are signed by a certificate found in the 'Trusted Publishers' certificate store of the local computer.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent","displayName":"Allow Optional Content","description":"This policy enables devices to get optional updates (including gradual feature rollouts (CFRs) - learn more by visiting aka.ms/AllowOptionalContent)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowoptionalcontent"],"options":[{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent_0","displayName":"Don't receive optional updates","description":"Don't receive optional updates","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent_1","displayName":"Automatically receive optional updates (including CFRs)","description":"Automatically receive optional updates (including CFRs)","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent_2","displayName":"Automatically receive optional updates","description":"Automatically receive optional updates","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowoptionalcontent_3","displayName":"Users can select which optional updates to receive","description":"Users can select which optional updates to receive","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_allowtemporaryenterprisefeaturecontrol","displayName":"Allow Temporary Enterprise Feature Control","description":"Enable features that are off until the next feature update for managed devices\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowtemporaryenterprisefeaturecontrol"],"options":[{"id":"device_vendor_msft_policy_config_update_allowtemporaryenterprisefeaturecontrol_0","displayName":"Not allowed","description":"Not allowed","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowtemporaryenterprisefeaturecontrol_1","displayName":"Allowed","description":"Allowed","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_allowupdateservice","displayName":"Allow Update Service","description":"Specifies whether the device could use Microsoft Update, Windows Server Update Services (WSUS), or Microsoft Store. Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Microsoft Store. Enabling this policy will disable that functionality, and may cause connection to public services such as the Microsoft Store to stop working. Note This policy applies only when the desktop or device is configured to connect to an intranet update service using the Specify intranet Microsoft update service location policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#allowupdateservice"],"options":[{"id":"device_vendor_msft_policy_config_update_allowupdateservice_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_update_allowupdateservice_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_automaticmaintenancewakeup","displayName":"Automatic Maintenance Wake Up","description":"This policy setting allows you to configure Automatic Maintenance wake up policy. The maintenance wakeup policy specifies if Automatic Maintenance should make a wake request to the OS for the daily scheduled maintenance. Note, that if the OS power wake policy is explicitly disabled, then this setting has no effect. If you enable this policy setting, Automatic Maintenance will attempt to set OS wake policy and make a wake request for the daily scheduled time, if required. If you disable or do not configure this policy setting, the wake setting as specified in Security and Maintenance/Automatic Maintenance Control Panel will apply.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#automaticmaintenancewakeup"],"options":[{"id":"device_vendor_msft_policy_config_update_automaticmaintenancewakeup_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_automaticmaintenancewakeup_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_autorestartdeadlineperiodindays","displayName":"Auto Restart Deadline Period In Days","description":"For Quality Updates, this policy specifies the deadline in days before automatically executing a scheduled restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart is scheduled. The system will reboot on or after the specified deadline. The reboot is prioritized over any configured Active Hours and any existing system and user busy checks. Value type is integer. Default is 7 days. Supported values range: 2-30. Note that the PC must restart for certain updates to take effect. If you enable this policy, a restart will automatically occur the specified number of days after the restart was scheduled. If you disable or do not configure this policy, the PC will restart according to the default schedule. If any of the following two policies are enabled, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installations. Always automatically restart at scheduled time.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#autorestartdeadlineperiodindays"],"options":null},{"id":"device_vendor_msft_policy_config_update_autorestartdeadlineperiodindaysforfeatureupdates","displayName":"Auto Restart Deadline Period In Days For Feature Updates","description":"For Feature Updates, this policy specifies the deadline in days before automatically executing a scheduled restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart is scheduled. The system will reboot on or after the specified deadline. The reboot is prioritized over any configured Active Hours and any existing system and user busy checks. Value type is integer. Default is 7 days. Supported values range: 2-30. Note that the PC must restart for certain updates to take effect. If you enable this policy, a restart will automatically occur the specified number of days after the restart was scheduled. If you disable or do not configure this policy, the PC will restart according to the default schedule. If any of the following two policies are enabled, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installations. Always automatically restart at scheduled time.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#autorestartdeadlineperiodindaysforfeatureupdates"],"options":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule","displayName":"[Deprecated] Auto Restart Notification Schedule","description":"Allows the IT Admin to specify the period for auto-restart reminder notifications. The default value is 15 (minutes).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#update-autorestartnotificationschedule"],"options":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_v2","displayName":"Auto Restart Notification Schedule","description":"Allows the IT Admin to specify the period for auto-restart reminder notifications. The default value is 15 (minutes).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#autorestartnotificationschedule"],"options":[{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_15","displayName":"15 Minutes","description":"15 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_30","displayName":"30 Minutes","description":"30 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_60","displayName":"60 Minutes","description":"60 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_120","displayName":"120 Minutes","description":"120 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartnotificationschedule_240","displayName":"240 Minutes","description":"240 Minutes","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_autorestartrequirednotificationdismissal","displayName":"Auto Restart Required Notification Dismissal","description":"Allows the IT Admin to specify the method by which the auto-restart required notification is dismissed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#autorestartrequirednotificationdismissal"],"options":[{"id":"device_vendor_msft_policy_config_update_autorestartrequirednotificationdismissal_1","displayName":"Auto Dismissal.","description":"Auto Dismissal.","helpText":null},{"id":"device_vendor_msft_policy_config_update_autorestartrequirednotificationdismissal_2","displayName":"User Dismissal.","description":"User Dismissal.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_branchreadinesslevel","displayName":"Branch Readiness Level","description":"Allows the IT admin to set which branch a device receives their updates from. As of 1903, the branch readiness levels of Semi-Annual Channel (Targeted) and Semi-Annual Channel have been combined into one Semi-Annual Channel set with a value of 16. For devices on 1903 and later releases, the value of 32 is not a supported value.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#branchreadinesslevel"],"options":[{"id":"device_vendor_msft_policy_config_update_branchreadinesslevel_2","displayName":"{0x2} - Windows Insider build - Fast (added in Windows 10, version 1709)","description":"{0x2} - Windows Insider build - Fast (added in Windows 10, version 1709)","helpText":null},{"id":"device_vendor_msft_policy_config_update_branchreadinesslevel_4","displayName":"{0x4} - Windows Insider build - Slow (added in Windows 10, version 1709)","description":"{0x4} - Windows Insider build - Slow (added in Windows 10, version 1709)","helpText":null},{"id":"device_vendor_msft_policy_config_update_branchreadinesslevel_8","displayName":"{0x8} - Release Windows Insider build (added in Windows 10, version 1709)","description":"{0x8} - Release Windows Insider build (added in Windows 10, version 1709)","helpText":null},{"id":"device_vendor_msft_policy_config_update_branchreadinesslevel_16","displayName":"{0x10} - Semi-annual Channel (Targeted). Device gets all applicable feature updates from Semi-annual Channel (Targeted).","description":"{0x10} - Semi-annual Channel (Targeted). Device gets all applicable feature updates from Semi-annual Channel (Targeted).","helpText":null},{"id":"device_vendor_msft_policy_config_update_branchreadinesslevel_32","displayName":"2 {0x20} - Semi-annual Channel. Device gets feature updates from Semi-annual Channel. (*Only applicable to releases prior to 1903, for all releases 1903 and after the Semi-annual Channel and Semi-annual Channel (Targeted) into a single Semi-annual Channel with a value of 16)","description":"2 {0x20} - Semi-annual Channel. Device gets feature updates from Semi-annual Channel. (*Only applicable to releases prior to 1903, for all releases 1903 and after the Semi-annual Channel and Semi-annual Channel (Targeted) into a single Semi-annual Channel with a value of 16)","helpText":null},{"id":"device_vendor_msft_policy_config_update_branchreadinesslevel_64","displayName":"{0x40} - Release Preview of Quality Updates Only.","description":"{0x40} - Release Preview of Quality Updates Only.","helpText":null},{"id":"device_vendor_msft_policy_config_update_branchreadinesslevel_128","displayName":"{0x80} - Canary Channel.","description":"{0x80} - Canary Channel.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_configuredeadlineforfeatureupdates","displayName":"Configure Deadline For Feature Updates","description":"Number of days before feature updates are installed on devices automatically regardless of active hours. Before the deadline passes, users will be able to schedule restarts, and automatic restarts can happen outside of active hours. When set to 0, updates will download and install immediately, but might not finish within the day due to device availability and network connectivity.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlineforfeatureupdates"],"options":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlineforqualityupdates","displayName":"Quality Update Deadline Period (Days)","description":"Number of days before quality updates are installed on devices automatically regardless of active hours. Before the deadline passes, users will be able to schedule restarts, and automatic restarts can happen outside of active hours. When set to 0, updates will download and install immediately, but might not finish within the day due to device availability and network connectivity.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlineforqualityupdates"],"options":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinegraceperiod","displayName":"Configure Deadline Grace Period","description":"Also available in Windows 10, versions 1809, 1803, and 1709. Allows the IT admin (when used with Update/ConfigureDeadlineForFeatureUpdates or Update/ConfigureDeadlineForQualityUpdates) to specify a minimum number of days until restarts occur automatically. Setting the grace period may extend the effective deadline set by the deadline policies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinegraceperiod"],"options":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinegraceperiodforfeatureupdates","displayName":"Configure Deadline Grace Period For Feature Updates","description":"Minimum number of days from update installation until restarts occur automatically for feature updates. This policy only takes effect when Update/ConfigureDeadlineForFeatureUpdates is configured. If Update/ConfigureDeadlineForFeatureUpdates is configured but this policy is not, then the value configured by Update/ConfigureDeadlineGracePeriod will be used. If Update/ConfigureDeadlineGracePeriod is also not configured, then the default value of 2 days will take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinegraceperiodforfeatureupdates"],"options":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautoreboot","displayName":"Configure Deadline No Auto Reboot","description":"When enabled, devices will not automatically restart outside of active hours until the deadline and grace period have expired, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForQualityUpdates or Update/ConfigureDeadlineForFeatureUpdates is configured.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinenoautoreboot"],"options":[{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautoreboot_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautoreboot_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforfeatureupdates","displayName":"Configure Deadline No Auto Reboot For Feature Updates","description":"When enabled, devices will not automatically restart outside of active hours until the deadline and grace period have expired for feature updates, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForFeatureUpdates is configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinenoautorebootforfeatureupdates"],"options":[{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforfeatureupdates_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforfeatureupdates_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforqualityupdates","displayName":"Configure Deadline No Auto Reboot For Quality Updates","description":"When enabled, devices will not automatically restart outside of active hours until the deadline and grace period have expired for quality updates, even if an update is ready for restart. When disabled, an automatic restart may be attempted outside of active hours after update is ready for restart before the deadline is reached. Takes effect only if Update/ConfigureDeadlineForQualityUpdates is configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configuredeadlinenoautorebootforqualityupdates"],"options":[{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforqualityupdates_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_configuredeadlinenoautorebootforqualityupdates_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_configurefeatureupdateuninstallperiod","displayName":"Configure Feature Update Uninstall Period","description":"Enable enterprises/IT admin to configure feature update uninstall period","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#configurefeatureupdateuninstallperiod"],"options":null},{"id":"device_vendor_msft_policy_config_update_deferfeatureupdatesperiodindays","displayName":"Defer Feature Updates Period In Days","description":"Since this policy is not blocked, you will not get a failure message when you use it to configure a Windows 10 Mobile device. However, the policy will not take effect. Defers Feature Updates for the specified number of days. Supported values are 0-365 days. Important The default maximum number of days to defer an update has been increased from 180 (Windows 10, version 1607) to 365 in Windows 10, version 1703.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#deferfeatureupdatesperiodindays"],"options":null},{"id":"device_vendor_msft_policy_config_update_deferqualityupdatesperiodindays","displayName":"Defer Quality Updates Period (Days)","description":"Defers Quality Updates for the specified number of days. Supported values are 0-30.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#deferqualityupdatesperiodindays"],"options":null},{"id":"device_vendor_msft_policy_config_update_deferupdateperiod","displayName":"Defer Update Period","description":"Note. Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in Changes in Windows 10, version 1607 for update management. You can continue to use DeferUpdatePeriod for Windows 10, version 1511 devices. Allows IT Admins to specify update delays for up to 4 weeks. Supported values are 0-4, which refers to the number of weeks to defer updates. In Windows 10 Mobile Enterprise version 1511 devices set to automatic updates, for DeferUpdatePeriod to work, you must set the following:Update/RequireDeferUpgrade must be set to 1System/AllowTelemetry must be set to 1 or higherIf the Specify intranet Microsoft update service location policy is enabled, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect. If the Allow Telemetry policy is enabled and the Options value is set to 0, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect. OS upgrade:Maximum deferral: 8 monthsDeferral increment: 1 monthUpdate type/notes:Upgrade - 3689BDC8-B205-4AF4-8D4A-A63924C5E9D5Update:Maximum deferral: 1 monthDeferral increment: 1 weekUpdate type/notes:If a machine has Microsoft Update enabled, any Microsoft Updates in these categories will also observe Defer / Pause logic. - Security Update - 0FA1201D-4330-4FA8-8AE9-B877473B6441- Critical Update - E6CF1350-C01B-414D-A61F-263D14D133B4- Update Rollup - 28BC880E-0592-4CBF-8F95-C79B17911D5F- Service Pack - 68C5B0A3-D1A6-4553-AE49-01D3A7827828- Tools - B4832BD8-E735-4761-8DAF-37F882276DAB- Feature Pack - B54E7D24-7ADD-428F-8B75-90A396FA584F- Update - CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83- Driver - EBFC1FC5-71A4-4F7B-9ACA-3B9A503104A0Other/cannot defer:Maximum deferral: No deferralDeferral increment: No deferralUpdate type/notes:Any update category not specifically enumerated above falls into this category. - Definition Update - E0789628-CE08-4437-BE74-2495B842F43B","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#deferupdateperiod"],"options":null},{"id":"device_vendor_msft_policy_config_update_deferupgradeperiod","displayName":"Defer Upgrade Period","description":"NoteSince this policy is not blocked, you will not get a failure message when you use it to configure a Windows 10 Mobile device. However, the policy will not take effect. Don't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in Changes in Windows 10, version 1607 for update management. You can continue to use DeferUpgradePeriod for Windows 10, version 1511 devices. Allows IT Admins to specify additional upgrade delays for up to 8 months. Supported values are 0-8, which refers to the number of months to defer upgrades. If the Specify intranet Microsoft update service location policy is enabled, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect. If the Allow Telemetry policy is enabled and the Options value is set to 0, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#deferupgradeperiod"],"options":null},{"id":"device_vendor_msft_policy_config_update_detectionfrequency","displayName":"Detection Frequency","description":"Specifies the scan frequency from every 1 - 22 hours. Default is 22 hours.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#detectionfrequency"],"options":null},{"id":"device_vendor_msft_policy_config_update_disabledualscan","displayName":"Disable Dual Scan","description":"Do not allow update deferral policies to cause scans against Windows Update","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#disabledualscan"],"options":[{"id":"device_vendor_msft_policy_config_update_disabledualscan_0","displayName":"allow scan against Windows Update","description":"allow scan against Windows Update","helpText":null},{"id":"device_vendor_msft_policy_config_update_disabledualscan_1","displayName":"do not allow update deferral policies to cause scans against Windows Update","description":"do not allow update deferral policies to cause scans against Windows Update","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_disablewufbsafeguards_v2","displayName":"Disable WUfB Safeguards","description":"This policy setting specifies that a Windows Update for Business device should skip safeguards.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#disablewufbsafeguards"],"options":[{"id":"device_vendor_msft_policy_config_update_disablewufbsafeguards_0","displayName":"Safeguards are enabled and devices may be blocked for upgrades until the safeguard is cleared.","description":"Safeguards are enabled and devices may be blocked for upgrades until the safeguard is cleared.","helpText":null},{"id":"device_vendor_msft_policy_config_update_disablewufbsafeguards_1","displayName":"Safeguards are not enabled and upgrades will be deployed without blocking on safeguards.","description":"Safeguards are not enabled and upgrades will be deployed without blocking on safeguards.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_donotenforceenterprisetlscertpinningforupdatedetection","displayName":"Do Not Enforce Enterprise TLS Cert Pinning For Update Detection","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#donotenforceenterprisetlscertpinningforupdatedetection"],"options":[{"id":"device_vendor_msft_policy_config_update_donotenforceenterprisetlscertpinningforupdatedetection_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_donotenforceenterprisetlscertpinningforupdatedetection_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_engagedrestartdeadline","displayName":"Engaged Restart Deadline","description":"For Quality Updates, this policy specifies the deadline in days before automatically scheduling and executing a pending restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to automatically executed, within the specified period. The system will reboot on or after the specified deadline. The reboot is prioritized over any configured Active Hours and any existing system and user busy checks. Note. If Update/EngagedDeadline is the only policy set (Update/EngagedRestartTransitionSchedule and Update/EngagedRestartSnoozeSchedule are not set), the behavior goes from reboot required -> engaged behavior -> forced reboot after deadline is reached with a 3-day snooze period. Value type is integer. Default is 14. Supported value range: 2 - 30. If no deadline is specified or deadline is set to 0, the restart will not be automatically executed and will remain Engaged restart (e. g. pending user scheduling). If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestartdeadline"],"options":null},{"id":"device_vendor_msft_policy_config_update_engagedrestartdeadlineforfeatureupdates","displayName":"Engaged Restart Deadline For Feature Updates","description":"For Feature Updates, this policy specifies the deadline in days before automatically scheduling and executing a pending restart outside of active hours. The deadline can be set between 2 and 30 days from the time the restart becomes pending. If configured, the pending restart will transition from Auto-restart to Engaged restart (pending user schedule) to automatically executed, within the specified period. Value type is integer. Default is 14. Supported value range: 2 - 30. If no deadline is specified or deadline is set to 0, the restart will not be automatically executed and will remain Engaged restart (e. g. pending user scheduling). If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestartdeadlineforfeatureupdates"],"options":null},{"id":"device_vendor_msft_policy_config_update_engagedrestartsnoozeschedule","displayName":"Engaged Restart Snooze Schedule","description":"For Quality Updates, this policy specifies the number of days a user can snooze Engaged restart reminder notifications. The snooze period can be set between 1 and 3 days. Value type is integer. Default is 3 days. Supported value range: 1 - 3. If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestartsnoozeschedule"],"options":null},{"id":"device_vendor_msft_policy_config_update_engagedrestartsnoozescheduleforfeatureupdates","displayName":"Engaged Restart Snooze Schedule For Feature Updates","description":"For Feature Updates, this policy specifies the number of days a user can snooze Engaged restart reminder notifications. The snooze period can be set between 1 and 3 days. Value type is integer. Default is 3 days. Supported value range: 1 - 3. If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestartsnoozescheduleforfeatureupdates"],"options":null},{"id":"device_vendor_msft_policy_config_update_engagedrestarttransitionschedule","displayName":"Engaged Restart Transition Schedule","description":"For Quality Updates, this policy specifies the timing before transitioning from Auto restarts scheduled outside of active hours to Engaged restart, which requires the user to schedule. The period can be set between 2 and 30 days from the time the restart becomes pending. Value type is integer. Default value is 7 days. Supported value range: 2 - 30. If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestarttransitionschedule"],"options":null},{"id":"device_vendor_msft_policy_config_update_engagedrestarttransitionscheduleforfeatureupdates","displayName":"Engaged Restart Transition Schedule For Feature Updates","description":"For Feature Updates, this policy specifies the timing before transitioning from Auto restarts scheduled_outside of active hours to Engaged restart, which requires the user to schedule. The period can be set between 2 and 30 days from the time the restart becomes pending. Value type is integer. Default value is 7 days. Supported value range: 2 - 30. If you disable or do not configure this policy, the default behaviors will be used. If any of the following policies are configured, this policy has no effect:No auto-restart with logged on users for scheduled automatic updates installationsAlways automatically restart at scheduled timeSpecify deadline before auto-restart for update installation","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#engagedrestarttransitionscheduleforfeatureupdates"],"options":null},{"id":"device_vendor_msft_policy_config_update_excludewudriversinqualityupdate","displayName":"Exclude WU Drivers In Quality Update","description":"NoteSince this policy is not blocked, you will not get a failure message when you use it to configure a Windows 10 Mobile device. However, the policy will not take effect. Allows IT Admins to exclude Windows Update (WU) drivers during updates.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#excludewudriversinqualityupdate"],"options":[{"id":"device_vendor_msft_policy_config_update_excludewudriversinqualityupdate_0","displayName":"Allow Windows Update drivers.","description":"Allow Windows Update drivers.","helpText":null},{"id":"device_vendor_msft_policy_config_update_excludewudriversinqualityupdate_1","displayName":"Exclude Windows Update drivers.","description":"Exclude Windows Update drivers.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_fillemptycontenturls","displayName":"Fill Empty Content Urls","description":"Allows Windows Update Agent to determine the download URL when it is missing from the metadata. This scenario will occur when intranet update service stores the metadata files but the download contents are stored in the ISV file cache (specified as the alternate download URL). NoteThis setting should only be used in combination with an alternate download URL and configured to use ISV file cache. This setting is used when the intranet update service does not provide download URLs in the update metadata for files which are available on the alternate download server.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#fillemptycontenturls"],"options":[{"id":"device_vendor_msft_policy_config_update_fillemptycontenturls_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_fillemptycontenturls_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_ignoremoappdownloadlimit","displayName":"Ignore MO App Download Limit","description":"Specifies whether to ignore the MO download limit (allow unlimited downloading) over a cellular network for apps and their updates. If lower-level limits (for example, mobile caps) are required, those limits are controlled by external policies. WarningSetting this policy might cause devices to incur costs from MO operators.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#ignoremoappdownloadlimit"],"options":[{"id":"device_vendor_msft_policy_config_update_ignoremoappdownloadlimit_0","displayName":"Disabled","description":"Do not ignore MO download limit for apps and their updates.","helpText":null},{"id":"device_vendor_msft_policy_config_update_ignoremoappdownloadlimit_1","displayName":"Enabled","description":"Ignore MO download limit (allow unlimited downloading) for apps and their updates.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_ignoremoupdatedownloadlimit","displayName":"Ignore MO Update Download Limit","description":"Specifies whether to ignore the MO download limit (allow unlimited downloading) over a cellular network for OS updates. If lower-level limits (for example, mobile caps) are required, those limits are controlled by external policies. WarningSetting this policy might cause devices to incur costs from MO operators.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#ignoremoupdatedownloadlimit"],"options":[{"id":"device_vendor_msft_policy_config_update_ignoremoupdatedownloadlimit_0","displayName":"Disabled","description":"Do not ignore MO download limit for OS updates.","helpText":null},{"id":"device_vendor_msft_policy_config_update_ignoremoupdatedownloadlimit_1","displayName":"Enabled","description":"Ignore MO download limit (allow unlimited downloading) for OS updates.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds","displayName":"Manage Preview Builds","description":"Used to manage Windows 10 Insider Preview builds. Value type is integer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#managepreviewbuilds"],"options":[{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds_0","displayName":"Disable Preview builds","description":"Disable Preview builds","helpText":null},{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds_1","displayName":"Disable Preview builds once the next release is public","description":"Disable Preview builds once the next release is public","helpText":null},{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds_2","displayName":"Enable Preview builds","description":"Enable Preview builds","helpText":null},{"id":"device_vendor_msft_policy_config_update_managepreviewbuilds_3","displayName":"Preview builds is left to user selection","description":"Preview builds is left to user selection","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_noupdatenotificationsduringactivehours","displayName":"No Update Notifications During Active Hours","description":"When enabled, notifications will only be disabled during active hours. Takes effect only if Update/UpdateNotificationLevel is configured to 1 or 2. To ensure that the device stays secure, a notification will still be shown if this option is selected once “Specify deadlines for automatic updates and restarts” deadline has been reached if configured, regardless of active hours.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#noupdatenotificationsduringactivehours"],"options":[{"id":"device_vendor_msft_policy_config_update_noupdatenotificationsduringactivehours_0","displayName":"Disabled.","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_update_noupdatenotificationsduringactivehours_1","displayName":"Enabled.","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_pausedeferrals","displayName":"Pause Deferrals","description":"NoteDon't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in Changes in Windows 10, version 1607 for update management. You can continue to use PauseDeferrals for Windows 10, version 1511 devices. Allows IT Admins to pause updates and upgrades for up to 5 weeks. Paused deferrals will be reset after 5 weeks. If the Specify intranet Microsoft update service location policy is enabled, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect. If the Allow Telemetry policy is enabled and the Options value is set to 0, then the Defer upgrades by, Defer updates by and Pause Updates and Upgrades settings have no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausedeferrals"],"options":[{"id":"device_vendor_msft_policy_config_update_pausedeferrals_0","displayName":"Deferrals are not paused.","description":"Deferrals are not paused.","helpText":null},{"id":"device_vendor_msft_policy_config_update_pausedeferrals_1","displayName":"Deferrals are paused.","description":"Deferrals are paused.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_pausefeatureupdates","displayName":"Pause Feature Updates","description":"Since this policy is not blocked, you will not get a failure message when you use it to configure a Windows 10 Mobile device. However, the policy will not take effect. Allows IT Admins to pause Feature Updates for up to 60 days.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausefeatureupdates"],"options":[{"id":"device_vendor_msft_policy_config_update_pausefeatureupdates_0","displayName":"Feature Updates are not paused.","description":"Feature Updates are not paused.","helpText":null},{"id":"device_vendor_msft_policy_config_update_pausefeatureupdates_1","displayName":"Feature Updates are paused for 60 days or until value set to back to 0, whichever is sooner.","description":"Feature Updates are paused for 60 days or until value set to back to 0, whichever is sooner.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_pausefeatureupdatesstarttime","displayName":"Pause Feature Updates Start Time","description":"Specifies the date and time when the IT admin wants to start pausing the Feature Updates. Value type is string (yyyy-mm-dd, ex. 2018-10-28). Supported operations are Add, Get, Delete, and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausefeatureupdatesstarttime"],"options":null},{"id":"device_vendor_msft_policy_config_update_pausequalityupdates","displayName":"Pause Quality Updates","description":"Allows IT Admins to pause Quality Updates.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausequalityupdates"],"options":[{"id":"device_vendor_msft_policy_config_update_pausequalityupdates_0","displayName":"Quality Updates are not paused.","description":"Quality Updates are not paused.","helpText":null},{"id":"device_vendor_msft_policy_config_update_pausequalityupdates_1","displayName":"Quality Updates are paused for 35 days or until value set back to 0, whichever is sooner.","description":"Quality Updates are paused for 35 days or until value set back to 0, whichever is sooner.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_pausequalityupdatesstarttime","displayName":"Pause Quality Updates Start Time","description":"Specifies the date and time when the IT admin wants to start pausing the Quality Updates. Value type is string (yyyy-mm-dd, ex. 2018-10-28). Clearing the value of this setting to unpause updates manually. Paused updates resume automatically 35 days after the specified start date.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#pausequalityupdatesstarttime"],"options":null},{"id":"device_vendor_msft_policy_config_update_phoneupdaterestrictions","displayName":"Phone Update Restrictions","description":"This policy is deprecated. Use Update/RequireUpdateApproval instead.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#phoneupdaterestrictions"],"options":null},{"id":"device_vendor_msft_policy_config_update_productversion","displayName":"Product Version","description":"Enables IT administrators to specify the product version associated with the target feature update they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see Windows release information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#productversion"],"options":null},{"id":"device_vendor_msft_policy_config_update_requiredeferupgrade","displayName":"Require Defer Upgrade","description":"NoteDon't use this policy in Windows 10, version 1607 devices, instead use the new policies listed in Changes in Windows 10, version 1607 for update management. You can continue to use RequireDeferUpgrade for Windows 10, version 1511 devices. Allows the IT admin to set a device to Semi-Annual Channel train.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#requiredeferupgrade"],"options":[{"id":"device_vendor_msft_policy_config_update_requiredeferupgrade_0","displayName":"User gets upgrades from Semi-Annual Channel (Targeted).","description":"User gets upgrades from Semi-Annual Channel (Targeted).","helpText":null},{"id":"device_vendor_msft_policy_config_update_requiredeferupgrade_1","displayName":"User gets upgrades from Semi-Annual Channel.","description":"User gets upgrades from Semi-Annual Channel.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_requireupdateapproval","displayName":"Require Update Approval","description":"Note If you previously used the Update/PhoneUpdateRestrictions policy in previous versions of Windows, it has been deprecated. Please use this policy instead. Allows the IT admin to restrict the updates that are installed on a device to only those on an update approval list. It enables IT to accept the End User License Agreement (EULA) associated with the approved update on behalf of the end-user. EULAs are approved once an update is approved. Supported operations are Get and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#requireupdateapproval"],"options":[{"id":"device_vendor_msft_policy_config_update_requireupdateapproval_0","displayName":"Not configured. The device installs all applicable updates.","description":"Not configured. The device installs all applicable updates.","helpText":null},{"id":"device_vendor_msft_policy_config_update_requireupdateapproval_1","displayName":"The device only installs updates that are both applicable and on the Approved Updates list. Set this policy to 1 if IT wants to control the deployment of updates on devices, such as when testing is required prior to deployment.","description":"The device only installs updates that are both applicable and on the Approved Updates list. Set this policy to 1 if IT wants to control the deployment of updates on devices, such as when testing is required prior to deployment.","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday","displayName":"Scheduled Install Day","description":"Enables the IT admin to schedule the day of the update installation. The data type is a integer. Supported operations are Add, Delete, Get, and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallday"],"options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_0","displayName":"Every day","description":"Every day","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_1","displayName":"Sunday","description":"Sunday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_2","displayName":"Monday","description":"Monday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_3","displayName":"Tuesday","description":"Tuesday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_4","displayName":"Wednesday","description":"Wednesday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_5","displayName":"Thursday","description":"Thursday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_6","displayName":"Friday","description":"Friday","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallday_7","displayName":"Saturday","description":"Saturday","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_scheduledinstalleveryweek","displayName":"Scheduled Install Every Week","description":"Enables the IT admin to schedule the update installation on the every week. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every week","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstalleveryweek"],"options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstalleveryweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstalleveryweek_1","displayName":"update is scheduled every week","description":"update is scheduled every week","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_scheduledinstallfirstweek","displayName":"Scheduled Install First Week","description":"Enables the IT admin to schedule the update installation on the first week of the month. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every first week of the month","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallfirstweek"],"options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallfirstweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallfirstweek_1","displayName":"update is scheduled every first week of the month","description":"update is scheduled every first week of the month","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_scheduledinstallfourthweek","displayName":"Scheduled Install Fourth Week","description":"Enables the IT admin to schedule the update installation on the fourth week of the month. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every fourth week of the month","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallfourthweek"],"options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallfourthweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallfourthweek_1","displayName":"update is scheduled every fourth week of the month","description":"update is scheduled every fourth week of the month","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_scheduledinstallsecondweek","displayName":"Scheduled Install Second Week","description":"Enables the IT admin to schedule the update installation on the second week of the month. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every second week of the month","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallsecondweek"],"options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallsecondweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallsecondweek_1","displayName":"update is scheduled every second week of the month","description":"update is scheduled every second week of the month","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_scheduledinstallthirdweek","displayName":"Scheduled Install Third Week","description":"Enables the IT admin to schedule the update installation on the third week of the month. Value type is integer. Supported values:0 - no update in the schedule1 - update is scheduled every third week of the month","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstallthirdweek"],"options":[{"id":"device_vendor_msft_policy_config_update_scheduledinstallthirdweek_0","displayName":"no update in the schedule","description":"no update in the schedule","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduledinstallthirdweek_1","displayName":"update is scheduled every third week of the month","description":"update is scheduled every third week of the month","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_scheduledinstalltime","displayName":"Scheduled Install Time","description":"Note This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile EnterpriseEnables the IT admin to schedule the time of the update installation. The data type is a integer. Supported operations are Add, Delete, Get, and Replace. Supported values are 0-23, where 0 = 12 AM and 23 = 11 PM. The default value is 3.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduledinstalltime"],"options":null},{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning","displayName":"[Deprecated] Schedule Imminent Restart Warning","description":"Allows the IT Admin to specify the period for auto-restart imminent warning notifications. The default value is 15 (minutes).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#update-scheduleimminentrestartwarning"],"options":null},{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning_v2","displayName":"Schedule Imminent Restart Warning","description":"Allows the IT Admin to specify the period for auto-restart imminent warning notifications. The default value is 15 (minutes).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#scheduleimminentrestartwarning"],"options":[{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning_15","displayName":"15 Minutes","description":"15 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning_30","displayName":"30 Minutes","description":"30 Minutes","helpText":null},{"id":"device_vendor_msft_policy_config_update_scheduleimminentrestartwarning_60","displayName":"60 Minutes","description":"60 Minutes","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning","displayName":"Schedule Restart Warning","description":"Note This policy is available on Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile Enterprise Allows the IT Admin to specify the period for auto-restart warning reminder notifications. The default value is 4 (hours).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#schedulerestartwarning"],"options":[{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_2","displayName":"2 Hours","description":"2 Hours","helpText":null},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_4","displayName":"4 Hours","description":"4 Hours","helpText":null},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_8","displayName":"8 Hours","description":"8 Hours","helpText":null},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_12","displayName":"12 Hours","description":"12 Hours","helpText":null},{"id":"device_vendor_msft_policy_config_update_schedulerestartwarning_24","displayName":"24 Hours","description":"24 Hours","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setautorestartnotificationdisable","displayName":"Set Auto Restart Notification Disable","description":"Allows the IT Admin to disable auto-restart notifications for update installations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setautorestartnotificationdisable"],"options":[{"id":"device_vendor_msft_policy_config_update_setautorestartnotificationdisable_0","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_config_update_setautorestartnotificationdisable_1","displayName":"Disabled","description":"Disabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setdisablepauseuxaccess","displayName":"Block \"Pause Updates\" ability","description":"This policy allows the IT admin to disable the Pause Updates feature. When this policy is enabled, the user cannot access the Pause updates feature. Value type is integer. Default is 0. Supported values 0, 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setdisablepauseuxaccess"],"options":[{"id":"device_vendor_msft_policy_config_update_setdisablepauseuxaccess_1","displayName":"Block","description":"Enable","helpText":null},{"id":"device_vendor_msft_policy_config_update_setdisablepauseuxaccess_0","displayName":"Allow","description":"Disable","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setdisableuxwuaccess","displayName":"Set Disable UXWU Access","description":"This policy allows the IT admin to remove access to scan Windows Update. When this policy is enabled, the user cannot access the Windows Update scan, download, and install features. Value type is integer. Default is 0. Supported values 0, 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setdisableuxwuaccess"],"options":[{"id":"device_vendor_msft_policy_config_update_setdisableuxwuaccess_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_update_setdisableuxwuaccess_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setedurestart","displayName":"Set EDU Restart","description":"For devices in a cart, this policy skips all restart checks to ensure that the reboot will happen at ScheduledInstallTime. When you set this policy along with Update/ActiveHoursStart, Update/ActiveHoursEnd, and ShareCartPC, it will defer all the update processes (scan, download, install, and reboot) to a time after Active Hours. After a buffer period after ActiveHoursEnd, the device will wake up several times to complete the processes. All processes are blocked before ActiveHoursStart.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setedurestart"],"options":[{"id":"device_vendor_msft_policy_config_update_setedurestart_0","displayName":"not configured","description":"not configured","helpText":null},{"id":"device_vendor_msft_policy_config_update_setedurestart_1","displayName":"configured","description":"configured","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourcefordriverupdates","displayName":"Set Policy Driven Update Source For Driver Updates","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setpolicydrivenupdatesourcefordriverupdates"],"options":[{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourcefordriverupdates_0","displayName":"Detect, download and deploy Driver Updates from Windows Update","description":"Detect, download and deploy Driver Updates from Windows Update","helpText":null},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourcefordriverupdates_1","displayName":"Detect, download and deploy Driver Updates from Windows Server Update Services (WSUS)","description":"Detect, download and deploy Driver Updates from Windows Server Update Services (WSUS)","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforfeatureupdates","displayName":"Set Policy Driven Update Source For Feature Updates","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setpolicydrivenupdatesourceforfeatureupdates"],"options":[{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforfeatureupdates_0","displayName":"Detect, download and deploy Feature Updates from Windows Update","description":"Detect, download and deploy Feature Updates from Windows Update","helpText":null},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforfeatureupdates_1","displayName":"Detect, download and deploy Feature Updates from Windows Server Update Services (WSUS)","description":"Detect, download and deploy Feature Updates from Windows Server Update Services (WSUS)","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforotherupdates","displayName":"Set Policy Driven Update Source For Other Updates","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setpolicydrivenupdatesourceforotherupdates"],"options":[{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforotherupdates_0","displayName":"Detect, download and deploy other Updates from Windows Update","description":"Detect, download and deploy other Updates from Windows Update","helpText":null},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforotherupdates_1","displayName":"Detect, download and deploy other Updates from Windows Server Update Services (WSUS)","description":"Detect, download and deploy other Updates from Windows Server Update Services (WSUS)","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforqualityupdates","displayName":"Set Policy Driven Update Source For Quality Updates","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setpolicydrivenupdatesourceforqualityupdates"],"options":[{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforqualityupdates_0","displayName":"Detect, download and deploy Quality Updates from Windows Update","description":"Detect, download and deploy Quality Updates from Windows Update","helpText":null},{"id":"device_vendor_msft_policy_config_update_setpolicydrivenupdatesourceforqualityupdates_1","displayName":"Detect, download and deploy Quality Updates from Windows Server Update Services (WSUS)","description":"Detect, download and deploy Quality Updates from Windows Server Update Services (WSUS)","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_setproxybehaviorforupdatedetection","displayName":"Set Proxy Behavior For Update Detection","description":"","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#setproxybehaviorforupdatedetection"],"options":[{"id":"device_vendor_msft_policy_config_update_setproxybehaviorforupdatedetection_0","displayName":"Only use system proxy for detecting updates (default)","description":"Only use system proxy for detecting updates (default)","helpText":null},{"id":"device_vendor_msft_policy_config_update_setproxybehaviorforupdatedetection_1","displayName":"Allow user proxy to be used as a fallback if detection using system proxy fails","description":"Allow user proxy to be used as a fallback if detection using system proxy fails","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_targetreleaseversion","displayName":"Target Release Version","description":"Available in Windows 10, version 1803 and later. Enables IT administrators to specify which version they would like their device(s) to move to and/or stay on until they reach end of service or reconfigure the policy. For details about different Windows 10 versions, see Windows 10 release information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#targetreleaseversion"],"options":null},{"id":"device_vendor_msft_policy_config_update_updatenotificationlevel","displayName":"Update Notification Level","description":"Display options for update notifications. This policy allows you to define what Windows Update notifications users see. This policy doesn't control how and when updates are downloaded and installed. Options:0 (default) – Use the default Windows Update notifications1 – Turn off all notifications, excluding restart warnings2 – Turn off all notifications, including restart warnings. Important. If you choose not to get update notifications and also define other Group policies so that devices aren't automatically getting updates, neither you nor device users will be aware of critical security, quality, or feature updates, and your devices may be at risk.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#updatenotificationlevel"],"options":[{"id":"device_vendor_msft_policy_config_update_updatenotificationlevel_0","displayName":"Use the default Windows Update notifications","description":"Use the default Windows Update notifications","helpText":null},{"id":"device_vendor_msft_policy_config_update_updatenotificationlevel_1","displayName":"Turn off all notifications, excluding restart warnings","description":"Turn off all notifications, excluding restart warnings","helpText":null},{"id":"device_vendor_msft_policy_config_update_updatenotificationlevel_2","displayName":"Turn off all notifications, including restart warnings","description":"Turn off all notifications, including restart warnings","helpText":null}]},{"id":"device_vendor_msft_policy_config_update_updateserviceurl","displayName":"Update Service Url","description":"ImportantStarting in Windows 10, version 1703 this policy is not supported in Windows 10 Mobile Enterprise and IoT Mobile. Allows the device to check for updates from a WSUS server instead of Microsoft Update. This is useful for on-premises MDMs that need to update devices that cannot connect to the Internet. Supported operations are Get and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#updateserviceurl"],"options":null},{"id":"device_vendor_msft_policy_config_update_updateserviceurlalternate","displayName":"Update Service Url Alternate","description":"Specifies an alternate intranet server to host updates from Microsoft Update. You can then use this update service to automatically update computers on your network. This setting lets you specify a server on your network to function as an internal update service. The Automatic Updates client will search this service for updates that apply to the computers on your network. To use this setting, you must set two server name values: the server from which the Automatic Updates client detects and downloads updates, and the server to which updated workstations upload statistics. You can set both values to be the same server. An optional server name value can be specified to configure Windows Update agent, and download updates from an alternate download server instead of WSUS Server. Value type is string and the default value is an empty string, . If the setting is not configured, and if Automatic Updates is not disabled by policy or user preference, the Automatic Updates client connects directly to the Windows Update site on the Internet. NoteIf the Configure Automatic Updates Group Policy is disabled, then this policy has no effect. If the Alternate Download Server Group Policy is not set, it will use the WSUS server by default to download updates. This policy is not supported on Windows RT. Setting this policy will not have any effect on Windows RT PCs.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Update#updateserviceurlalternate"],"options":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultallowinstallation","displayName":"Allow installation default","description":"You can specify the default behavior of all channels to allow or block Microsoft Edge updates when Microsoft Edge Update is used.\r\n\r\nYou can override this policy for individual channels by enabling the 'Allow installation' policy for specific channels.\r\n\r\nIf you disable this policy, the installation of Microsoft Edge through Microsoft Edge Update is blocked. This only affects the installation of Microsoft Edge software only when users are running Microsoft Edge Update and when they haven't configured the 'Allow installation' policy.\r\n\r\nThis policy doesn't prevent Microsoft Edge Update from running or prevent users from installing Microsoft Edge software using other methods.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultallowinstallation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultallowinstallation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy","displayName":"Update policy override default","description":"Lets you specify the default behavior for all channels concerning the way Microsoft Edge Update handles available updates for Microsoft Edge. Can be overridden for individual channels by specifying the 'Update policy override' policy for those specific channels.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check.\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override' policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications_pol_defaultupdatepolicy_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy for a channel, users can install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you disable this policy for a channel, users cannot install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge through Microsoft Edge Update.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge","displayName":"Update policy override","description":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override default' policy. More information is not final: https://to-be-replaced.invalid/edge","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedge_pol_updatepolicymicrosoftedge_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy for a channel, users can install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you disable this policy for a channel, users cannot install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge through Microsoft Edge Update.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta","displayName":"Update policy override","description":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override default' policy. More information is not final: https://to-be-replaced.invalid/edgebeta","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgebeta_pol_updatepolicymicrosoftedgebeta_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy for a channel, users can install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you disable this policy for a channel, users cannot install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge through Microsoft Edge Update.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary","displayName":"Update policy override","description":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override default' policy. More information is not final: https://to-be-replaced.invalid/edgecanary","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgecanary_pol_updatepolicymicrosoftedgecanary_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy for a channel, users can install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you disable this policy for a channel, users cannot install that channel of Microsoft Edge through Microsoft Edge Update.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge through Microsoft Edge Update.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev","displayName":"Update policy override","description":"Specifies how Microsoft Edge Update handles available updates from Microsoft Edge.\r\n\r\n If you enable this policy, Microsoft Edge Update handles Microsoft Edge updates according to how you configure the following options:\r\n - Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.\r\n - Automatic silent updates only: Updates are applied only when they're found by the periodic update check.\r\n - Manual updates only: Updates are applied only when the user runs a manual update check. (Not all apps provide an interface for this option.)\r\n - Updates disabled: Updates are never applied.\r\n\r\n If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. If you disable updates, periodically check for updates, and distribute them to users.\r\n\r\n If you don't enable and configure this policy, Microsoft Edge Update handles available updates as specified by the 'Update policy override default' policy. More information is not final: https://to-be-replaced.invalid/edgedev","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy","displayName":"Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy_2","displayName":"Manual updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy_3","displayName":"Automatic silent updates only","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_applications~cat_microsoftedgedev_pol_updatepolicymicrosoftedgedev_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_autoupdatecheckperiod","displayName":"Auto-update check period override","description":"If enabled, this policy lets you set a value for the minimum number of minutes between automatic update checks. Otherwise, by default, auto-update checks for updates every 10 hours.\r\n\r\n If you want to disable all auto-update checks, set the value to 0 (not recommended).","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_autoupdatecheckperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_autoupdatecheckperiod_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_autoupdatecheckperiod_part_autoupdatecheckperiod","displayName":"Minutes between update checks (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod","displayName":"Time period in each day to suppress auto-update check","description":"If you enable this policy, update checks are suppressed each day starting at Hour:Minute for a period of Duration (in minutes). Duration isn't affected by daylight saving time. For example, if the start time is 22:00 and the duration is 480 minutes, updates will be suppressed for exactly 8 hours, regardless of whether daylight saving time starts or ends during this period.\r\n\r\n If you disable or don't configure this policy, update checks aren't suppressed during any specific period.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_part_updatechecksuppresseddurationmin","displayName":"Duration (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_part_updatechecksuppressedstarthour","displayName":"Hour (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_preferences_pol_updatechecksuppressedperiod_part_updatechecksuppressedstartmin","displayName":"Minute (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode","displayName":"Choose how to specify proxy server settings","description":"Allows you to specify the proxy server settings that are used by Microsoft Edge Update.\r\n\r\n If you enable this policy, you can choose between the following proxy server options:\r\n - If you choose to never use a proxy server and always connect directly, all other options are ignored.\r\n - If you choose to use system proxy settings or auto-detect the proxy server, all other options are ignored.\r\n - If you choose fixed server proxy mode, you can specify further options in 'Address or URL of proxy server'.\r\n - If you choose to use a .pac proxy script, you must specify the URL for the script in 'URL to a proxy .pac file'.\r\n\r\n If you enable this policy, users in your organization can't change the proxy settings in Microsoft Edge Update.\r\n\r\n If you disable or don't configure this policy, no proxy server settings are configured, but users in your organization can choose their own proxy settings for Microsoft Edge Update.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode","displayName":"Choose how to specify proxy server settings (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_direct","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_auto_detect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_pac_script","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_fixed_servers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxymode_part_proxymode_system","displayName":"Use system proxy settings","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxypacurl","displayName":"URL to a proxy .pac file","description":"Allows you to specify a URL for a proxy auto-config (PAC) file.\r\n\r\n If you enable this policy, you can specify a URL for a PAC file to automate how Microsoft Edge Update selects the appropriate proxy server for fetching a particular website.\r\n\r\n This policy is applied only if you have specified manual proxy settings in the 'Choose how to specify proxy server settings' policy.\r\n\r\n Don't configure this policy if you have selected a proxy setting other than manual in the 'Choose how to specify proxy server settings' policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxypacurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxypacurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxypacurl_part_proxypacurl","displayName":"URL to a proxy .pac file (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxyserver","displayName":"Address or URL of proxy server","description":"Allows you to specify the URL of the proxy server for Microsoft Edge Update to use.\r\n\r\n If you enable this policy, you can set the proxy server URL used by Microsoft Edge Update in your organization.\r\n\r\n This policy is applied only if you have selected manual proxy settings in the 'Choose how to specify proxy server settings' policy.\r\n\r\n Don't configure this policy if you have selected a proxy setting other than manual in the 'Choose how to specify proxy server settings' policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_update~policy~cat_google~cat_googleupdate~cat_proxyserver_pol_proxyserver_part_proxyserver","displayName":"Address or URL of proxy server (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation","displayName":"Allow installation default","description":"You can specify the default behavior of all channels to allow or block Microsoft Edge on domain-joined devices.\r\n\r\nYou can override this policy for individual channels by enabling the 'Allow installation' policy for specific channels.\r\n\r\nIf you disable this policy, the installation of Microsoft Edge is blocked. This only affects the installation of Microsoft Edge software when the 'Allow installation' policy is set to Not Configured.\r\n\r\nThis policy doesn't prevent Microsoft Edge Update from running or prevent users from installing Microsoft Edge software using other methods.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications_pol_defaultallowinstallation_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed on domain-joined devices.\r\n\r\n If you enable this policy for a channel, Microsoft Edge will not be blocked from installation.\r\n\r\n If you disable this policy for a channel (or set it to 'Installs disabled'), Microsoft Edge will be blocked from installation.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge.\r\n\r\nIf you set this policy to Always allow Machine-Wide Installs but not Per-User Installs, Microsoft Edge will only be deployed machine-wide.\r\n\r\nIf you set this policy to Force Installs (Machine-Wide), Microsoft Edge may only be deployed machine-wide if Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nIf you set this policy to Force Installs (Per-User), Microsoft Edge may only be deployed on a Per-User basis to all machines if Microsoft Edge Update is pre-installed Per-User. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_5","displayName":"Force Installs (Machine-Wide)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_4","displayName":"Always allow Machine-Wide Installs, but not Per-User Installs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_allowinstallationmicrosoftedge_part_installpolicy_6","displayName":"Force Installs (Per-User)","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed on domain-joined devices.\r\n\r\n If you enable this policy for a channel, Microsoft Edge will not be blocked from installation.\r\n\r\n If you disable this policy for a channel (or set it to 'Installs disabled'), Microsoft Edge will be blocked from installation.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge.\r\n\r\nIf you set this policy to Always allow Machine-Wide Installs but not Per-User Installs, Microsoft Edge Beta will only be deployed machine-wide.\r\n\r\nIf you set this policy to Force Installs (Machine-Wide), Microsoft Edge Beta may only be deployed machine-wide if Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nIf you set this policy to Force Installs (Per-User), Microsoft Edge Beta may only be deployed on a Per-User basis to all machines if Microsoft Edge Update is pre-installed Per-User. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_5","displayName":"Force Installs (Machine-Wide)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_4","displayName":"Always allow Machine-Wide Installs, but not Per-User Installs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_allowinstallationmicrosoftedgebeta_part_installpolicy_6","displayName":"Force Installs (Per-User)","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed on domain-joined devices.\r\n\r\n If you enable this policy for a channel, Microsoft Edge will not be blocked from installation.\r\n\r\n If you disable this policy for a channel (or set it to 'Installs disabled'), Microsoft Edge will be blocked from installation.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge.\r\n\r\nIf you set this policy to Force Installs (Per-User), Microsoft Edge Canary may only be deployed on a Per-User basis to all machines if Microsoft Edge Update is pre-installed Per-User. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_allowinstallationmicrosoftedgecanary_part_installpolicy_6","displayName":"Force Installs (Per-User)","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev","displayName":"Allow installation","description":"Specifies whether a Microsoft Edge channel can be installed on domain-joined devices.\r\n\r\n If you enable this policy for a channel, Microsoft Edge will not be blocked from installation.\r\n\r\n If you disable this policy for a channel (or set it to 'Installs disabled'), Microsoft Edge will be blocked from installation.\r\n\r\n If you don't configure this policy for a channel, the 'Allow installation default' policy configuration determines whether users can install that channel of Microsoft Edge.\r\n\r\nIf you set this policy to Always allow Machine-Wide Installs but not Per-User Installs, Microsoft Edge Dev will only be deployed machine-wide.\r\n\r\nIf you set this policy to Force Installs (Machine-Wide), Microsoft Edge Dev may only be deployed machine-wide if Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nIf you set this policy to Force Installs (Per-User), Microsoft Edge Dev may only be deployed on a Per-User basis to all machines if Microsoft Edge Update is pre-installed Per-User. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_5","displayName":"Force Installs (Machine-Wide)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_4","displayName":"Always allow Machine-Wide Installs, but not Per-User Installs","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updateupdates.1~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_allowinstallationmicrosoftedgedev_part_installpolicy_6","displayName":"Force Installs (Per-User)","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates","displayName":"Let users update all apps on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for all apps. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nUpdates disabled (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_part_defaultmeteredupdatespolicy","displayName":"Default Metered Updates policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_part_defaultmeteredupdatespolicy_1","displayName":"Default Metered Updates Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultmeteredupdates_part_defaultmeteredupdatespolicy_2","displayName":"Default Metered Updates Allowed","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut","displayName":"Remove Desktop Shortcuts upon update default","description":"Lets you specify the default behavior for all channels for creating a desktop shortcut when Microsoft Edge is installed.\r\n\r\n If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_part_removedesktopshortcut","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_part_removedesktopshortcut_1","displayName":"Force delete system-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_part_removedesktopshortcut_2","displayName":"Force delete system-level and user-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications_pol_defaultremovedesktopshortcut_part_removedesktopshortcut_0","displayName":"Prevent Desktop Shortcut creation on install","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewmicrosoftedge","displayName":"Allow users in the Windows Insider Program to be enrolled in Edge Preview","description":"Lets you specify whether users in the Windows Insider Program are enrolled in Edge Preview via Microsoft Edge Update.\r\n\r\n - If you enable (1) this policy, users in the Windows Insider Program are enrolled in Edge Preview via Microsoft Edge Update.\r\n\r\n - If you disable (0) this policy, users in the Windows Insider Program cannot be enrolled in Edge Preview via Microsoft Edge Update.\r\n\r\n - If you don't configure this policy, users in the Windows Insider Program are enrolled in Edge Preview via Microsoft Edge Update by default.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge","displayName":"Let users update on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for the Microsoft Edge browser. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nDisable updates (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_part_meteredupdatespolicy","displayName":"Metered Updates Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_part_meteredupdatespolicy_1","displayName":"Metered Disable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_meteredupdatesmicrosoftedge_part_meteredupdatespolicy_2","displayName":"Metered Updates Allowed","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge","displayName":"Remove Desktop Shortcuts upon update","description":"If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.\r\n\r\n If you don't configure this policy for a channel, the 'Remove Desktop Shortcuts upon update default' policy configuration determines desktop shortcut removal.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge_part_removedesktopshortcut","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge_part_removedesktopshortcut_1","displayName":"Force delete system-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge_part_removedesktopshortcut_2","displayName":"Force delete system-level and user-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_removedesktopshortcutmicrosoftedge_part_removedesktopshortcut_0","displayName":"Prevent Desktop Shortcut creation on install","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge","displayName":"Specify uninstall behavior for Microsoft Edge","description":"You can specify whether Microsoft Edge (stable channel) is uninstalled, or is blocked from being uninstalled, on domain-joined devices in the European Economic Area (EEA).\r\n\r\nIf this policy is set to 'Enabled', Microsoft Edge will be automatically uninstalled on all devices in the EEA where this policy is deployed. User data will be kept on the device. Microsoft Edge will be uninstalled the next time Microsoft Edge Update automatically checks for updates. If Microsoft Edge is uninstalled from the devices, applications, widgets (for example, News, Search, and Weather) or any other Progressive Web Applications (PWAs) that depend on Microsoft Edge will no longer be available.\r\n\r\nIf this policy is set to 'Enabled and delete user data' (Setting '2'), Microsoft Edge will be automatically uninstalled on all devices in the EEA where this policy is deployed, and user data will be deleted from the device.\r\n\r\nIf this policy is set to 'Disabled' (Setting '3'), all users in the EEA are prevented from uninstalling Microsoft Edge where this policy is deployed.\r\n\r\nIf the policy is 'Not configured' (default setting), a user's Windows region setting determines whether they can uninstall Microsoft Edge on a domain-joined device. Only users in EEA countries will be able to uninstall Microsoft Edge if they choose to do so. Users outside of this area will not be able to uninstall Microsoft Edge. \r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nIf Microsoft Edge needs to be reinstalled:\r\n- You can set the 'Install' Policy to Force Installs (Machine-Wide) to reinstall Microsoft Edge.\r\n- If you set the Install policy to Force Installs (Machine-Wide), and also set the Uninstall policy to Enabled, the Force Installs (Machine-Wide) policy will override the Uninstall policy.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy_1","displayName":"Enabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy_2","displayName":"Enabled and delete user data","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy_3","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_uninstalledgemicrosoftedge_part_uninstalledgepolicy_0","displayName":"Not Configured","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta","displayName":"Let users update on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for the Microsoft Edge browser. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nDisable updates (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_part_meteredupdatespolicy","displayName":"Metered Updates Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_part_meteredupdatespolicy_1","displayName":"Metered Disable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_meteredupdatesmicrosoftedgebeta_part_meteredupdatespolicy_2","displayName":"Metered Updates Allowed","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta","displayName":"Remove Desktop Shortcuts upon update","description":"If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.\r\n\r\n If you don't configure this policy for a channel, the 'Remove Desktop Shortcuts upon update default' policy configuration determines desktop shortcut removal.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_part_removedesktopshortcut","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_part_removedesktopshortcut_1","displayName":"Force delete system-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_part_removedesktopshortcut_2","displayName":"Force delete system-level and user-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_removedesktopshortcutmicrosoftedgebeta_part_removedesktopshortcut_0","displayName":"Prevent Desktop Shortcut creation on install","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary","displayName":"Let users update on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for the Microsoft Edge browser. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nDisable updates (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_part_meteredupdatespolicy","displayName":"Metered Updates Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_part_meteredupdatespolicy_1","displayName":"Metered Disable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_meteredupdatesmicrosoftedgecanary_part_meteredupdatespolicy_2","displayName":"Metered Updates Allowed","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary","displayName":"Remove Desktop Shortcuts upon update","description":"If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.\r\n\r\n If you don't configure this policy for a channel, the 'Remove Desktop Shortcuts upon update default' policy configuration determines desktop shortcut removal.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary_part_removedesktopshortcut","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary_part_removedesktopshortcut_1","displayName":"Force delete system-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary_part_removedesktopshortcut_2","displayName":"Force delete system-level and user-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_removedesktopshortcutmicrosoftedgecanary_part_removedesktopshortcut_0","displayName":"Prevent Desktop Shortcut creation on install","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev","displayName":"Let users update on metered connections","description":"Specifies whether Microsoft Edge Update will update on connections marked as metered, such as cellular connections or others where data usage is controlled for the Microsoft Edge browser. \r\n\r\nIf you don't enable and configure this policy, updates occur based the 'Download Updates over metered connections' toggle in the About Page of the Microsoft Edge browser. If a user doesn't make a choice, the Windows setting is used. You can find out more about the Windows setting here: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-update#allowautowindowsupdatedownloadovermeterednetwork\r\n\r\nAlways allow updates (2): Updates are always downloaded when found, either by automatic update check or by a manual update check.\r\n\r\nDisable updates (1): Updates are not downloaded when using a metered connection.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_part_meteredupdatespolicy","displayName":"Metered Updates Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_part_meteredupdatespolicy_1","displayName":"Metered Disable updates","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_meteredupdatesmicrosoftedgedev_part_meteredupdatespolicy_2","displayName":"Metered Updates Allowed","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev","displayName":"Remove Desktop Shortcuts upon update","description":"If you set this policy to \"Force delete system-level Desktop Shortcuts\" (1), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots.\r\n If you set this policy to \"Force delete system-level and user-level Desktop Shortcuts\" (2), any existing system-level Microsoft Edge desktop shortcuts will be deleted when the browser updates or the machine reboots and any existing user-level desktop shortcuts will be deleted when the browser updates. This includes user-level desktop shortcuts that users might have made themselves.\r\n If you don't configure this policy or disable it (0), nothing will happen to existing Microsoft Edge desktop shortcuts.\r\n\r\n If you don't configure this policy for a channel, the 'Remove Desktop Shortcuts upon update default' policy configuration determines desktop shortcut removal.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_part_removedesktopshortcut","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_part_removedesktopshortcut_1","displayName":"Force delete system-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_part_removedesktopshortcut_2","displayName":"Force delete system-level and user-level Desktop Shortcuts","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev127~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_removedesktopshortcutmicrosoftedgedev_part_removedesktopshortcut_0","displayName":"Prevent Desktop Shortcut creation on install","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge","displayName":"Edge Preview enrollment type","description":"Details for this policy will be available in a future release","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype","displayName":"Enrollment type (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype_1","displayName":"Allow Opt-out","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev128~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype_3","displayName":"Required","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge","displayName":"Edge preview enrollment type","description":"Specifies how a device is enrolled in Edge Preview.\r\n\r\nThis policy is only effective if the TargetChannel policy is set to Beta or Dev.\r\n\r\nIf you set this policy to Allow Opt-out (1) or don't configure it, the channel in the Edge Stable application will be determined by TargetChannel. End users will be able to exit the Edge Preview experience, to return to the Stable channel, at any time.\r\n\r\nIf you set this policy to Required (3), the channel within the Edge Stable application is determined by TargetChannel. End users won't be able to leave the Edge Preview experience.\r\n\r\nThis policy is available on Microsoft Edge version 143.0.3650.66 or later, and applies only to Windows devices joined to a Microsoft® Active Directory® domain.\r\n\r\nFor more details, see: https://go.microsoft.com/fwlink/?linkid=2348937.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype","displayName":"Edge preview enrollment type (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype_1","displayName":"Allow Opt-out","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev129~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_edgepreviewenrollmenttypemicrosoftedge_part_edgepreviewenrollmenttype_3","displayName":"Required","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev78diff~policy~cat_google~cat_googleupdate~cat_applications_pol_allowsidebysideexperience","displayName":"Allow Microsoft Edge Side by Side browser experience","description":"This policy lets a user run Microsoft Edge (Edge HTML) and Microsoft Edge (Chromium-based) side-by-side.\r\n\r\nIf this policy is set to “Not configured”, Microsoft Edge (Chromium-based) will replace Microsoft Edge (Edge HTML) after the Microsoft Edge (Chromium-based) stable channel and the November 2019 security updates are installed. This is the same behavior as the “Disabled” setting.\r\n\r\nThe “Disabled” setting blocks a side-by-side experience and Microsoft Edge (Chromium-based) will replace Microsoft Edge (Edge HTML) after the Microsoft Edge (Chromium-based) stable channel and the November 2019 security updates are installed. This is the same behavior as the “Not Configured” setting.\r\n\r\nWhen this policy is “Enabled”, Microsoft Edge (Chromium-based) and Microsoft Edge (Edge HTML) can run side-by-side after Microsoft Edge (Chromium-based) is installed.\r\n\r\nFor this group policy to take affect, it must be configured before the automatic install of Microsoft Edge (Chromium-based) by Windows Update. Note: ​A user can block the automatic update of Microsoft Edge (Chromium-based) by using the Microsoft Edge (Chromium-based) Blocker Toolkit.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev78diff~policy~cat_google~cat_googleupdate~cat_applications_pol_allowsidebysideexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev78diff~policy~cat_google~cat_googleupdate~cat_applications_pol_allowsidebysideexperience_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications_pol_defaultcreatedesktopshortcut","displayName":"Prevent Desktop Shortcut creation upon install default","description":"Lets you specify the default behavior for all channels for creating a desktop shortcut when Microsoft Edge is installed.\r\n\r\n If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications_pol_defaultcreatedesktopshortcut_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications_pol_defaultcreatedesktopshortcut_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_createdesktopshortcutmicrosoftedge","displayName":"Prevent Desktop Shortcut creation upon install","description":"If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.\r\n\r\n If you don't configure this policy for a channel, the 'CreateDesktopShortcut default' policy configuration determines shortcut creation when Microsoft Edge is installed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_createdesktopshortcutmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_createdesktopshortcutmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_createdesktopshortcutmicrosoftedgebeta","displayName":"Prevent Desktop Shortcut creation upon install","description":"If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.\r\n\r\n If you don't configure this policy for a channel, the 'CreateDesktopShortcut default' policy configuration determines shortcut creation when Microsoft Edge is installed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_createdesktopshortcutmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_createdesktopshortcutmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_createdesktopshortcutmicrosoftedgecanary","displayName":"Prevent Desktop Shortcut creation upon install","description":"If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.\r\n\r\n If you don't configure this policy for a channel, the 'CreateDesktopShortcut default' policy configuration determines shortcut creation when Microsoft Edge is installed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_createdesktopshortcutmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_createdesktopshortcutmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_createdesktopshortcutmicrosoftedgedev","displayName":"Prevent Desktop Shortcut creation upon install","description":"If you enable this policy a desktop shortcut is created when Microsoft Edge is installed.\r\n If you disable this policy, no desktop shortcut will be created when Microsoft Edge is installed.\r\n If you don’t configure this policy a desktop shortcut to Microsoft Edge will be created during installation. \r\n If Microsoft Edge is already installed, this policy will have no effect.\r\n\r\n If you don't configure this policy for a channel, the 'CreateDesktopShortcut default' policy configuration determines shortcut creation when Microsoft Edge is installed.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_createdesktopshortcutmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev83diff~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_createdesktopshortcutmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_rollbacktotargetversionmicrosoftedge","displayName":"Rollback to Target version","description":"Specifies that Microsoft Edge Update should rollback installations of Microsoft Edge to the version indicated in 'Target version override'.\r\n\r\nThis policy has no effect unless 'Target version override' is set and 'Update policy override' is set to one of the ON states (Always allow updates, Automatic silent updates only, Manual updates only).\r\n\r\nIf you disable this policy or don't configure it, installs that have a version higher than that specified by 'Target version override' will be left as-is.\r\n\r\nIf you enable this policy, installs that have a current version higher than specified by the 'Target version override' will be downgraded to the target version.\r\n\r\nWe recommend that users install the latest version of the Microsoft Edge browser to ensure protection by the latest security updates. Rollback to an earlier version risks exposure to known security issues. This policy is meant to be used as a temporary fix to address issues in a Microsoft Edge browser update.\r\n\r\nBefore temporarily rolling back your browser version, we recommend that you turn on Sync (https://go.microsoft.com/fwlink/?linkid=2133032) for all users in your organization. If you don't turn on Sync, there is a risk of permanent browsing data loss. Use this policy at your own risk.\r\n\r\nNote: All versions available for rollback can be viewed here https://aka.ms/EdgeEnterprise.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nThis policy applies to Microsoft Edge version 86 or later.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2133918 for more information. This policy is meant to serve as temporary measure when Enterprise Administrators need to downgrade for business reasons. To ensure users are protected by the latest security updates, the most recent version should be used. When versions are downgraded to older versions, there could be incompatibilities.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_rollbacktotargetversionmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_rollbacktotargetversionmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_rollbacktotargetversionmicrosoftedgebeta","displayName":"Rollback to Target version","description":"Specifies that Microsoft Edge Update should rollback installations of Microsoft Edge to the version indicated in 'Target version override'.\r\n\r\nThis policy has no effect unless 'Target version override' is set and 'Update policy override' is set to one of the ON states (Always allow updates, Automatic silent updates only, Manual updates only).\r\n\r\nIf you disable this policy or don't configure it, installs that have a version higher than that specified by 'Target version override' will be left as-is.\r\n\r\nIf you enable this policy, installs that have a current version higher than specified by the 'Target version override' will be downgraded to the target version.\r\n\r\nWe recommend that users install the latest version of the Microsoft Edge browser to ensure protection by the latest security updates. Rollback to an earlier version risks exposure to known security issues. This policy is meant to be used as a temporary fix to address issues in a Microsoft Edge browser update.\r\n\r\nBefore temporarily rolling back your browser version, we recommend that you turn on Sync (https://go.microsoft.com/fwlink/?linkid=2133032) for all users in your organization. If you don't turn on Sync, there is a risk of permanent browsing data loss. Use this policy at your own risk.\r\n\r\nNote: All versions available for rollback can be viewed here https://aka.ms/EdgeEnterprise.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nThis policy applies to Microsoft Edge version 86 or later.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2133918 for more information. This policy is meant to serve as temporary measure when Enterprise Administrators need to downgrade for business reasons. To ensure users are protected by the latest security updates, the most recent version should be used. When versions are downgraded to older versions, there could be incompatibilities.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_rollbacktotargetversionmicrosoftedgebeta_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgebeta_pol_rollbacktotargetversionmicrosoftedgebeta_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_rollbacktotargetversionmicrosoftedgecanary","displayName":"Rollback to Target version","description":"Specifies that Microsoft Edge Update should rollback installations of Microsoft Edge to the version indicated in 'Target version override'.\r\n\r\nThis policy has no effect unless 'Target version override' is set and 'Update policy override' is set to one of the ON states (Always allow updates, Automatic silent updates only, Manual updates only).\r\n\r\nIf you disable this policy or don't configure it, installs that have a version higher than that specified by 'Target version override' will be left as-is.\r\n\r\nIf you enable this policy, installs that have a current version higher than specified by the 'Target version override' will be downgraded to the target version.\r\n\r\nWe recommend that users install the latest version of the Microsoft Edge browser to ensure protection by the latest security updates. Rollback to an earlier version risks exposure to known security issues. This policy is meant to be used as a temporary fix to address issues in a Microsoft Edge browser update.\r\n\r\nBefore temporarily rolling back your browser version, we recommend that you turn on Sync (https://go.microsoft.com/fwlink/?linkid=2133032) for all users in your organization. If you don't turn on Sync, there is a risk of permanent browsing data loss. Use this policy at your own risk.\r\n\r\nNote: All versions available for rollback can be viewed here https://aka.ms/EdgeEnterprise.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nThis policy applies to Microsoft Edge version 86 or later.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2133918 for more information. This policy is meant to serve as temporary measure when Enterprise Administrators need to downgrade for business reasons. To ensure users are protected by the latest security updates, the most recent version should be used. When versions are downgraded to older versions, there could be incompatibilities.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_rollbacktotargetversionmicrosoftedgecanary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgecanary_pol_rollbacktotargetversionmicrosoftedgecanary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_rollbacktotargetversionmicrosoftedgedev","displayName":"Rollback to Target version","description":"Specifies that Microsoft Edge Update should rollback installations of Microsoft Edge to the version indicated in 'Target version override'.\r\n\r\nThis policy has no effect unless 'Target version override' is set and 'Update policy override' is set to one of the ON states (Always allow updates, Automatic silent updates only, Manual updates only).\r\n\r\nIf you disable this policy or don't configure it, installs that have a version higher than that specified by 'Target version override' will be left as-is.\r\n\r\nIf you enable this policy, installs that have a current version higher than specified by the 'Target version override' will be downgraded to the target version.\r\n\r\nWe recommend that users install the latest version of the Microsoft Edge browser to ensure protection by the latest security updates. Rollback to an earlier version risks exposure to known security issues. This policy is meant to be used as a temporary fix to address issues in a Microsoft Edge browser update.\r\n\r\nBefore temporarily rolling back your browser version, we recommend that you turn on Sync (https://go.microsoft.com/fwlink/?linkid=2133032) for all users in your organization. If you don't turn on Sync, there is a risk of permanent browsing data loss. Use this policy at your own risk.\r\n\r\nNote: All versions available for rollback can be viewed here https://aka.ms/EdgeEnterprise.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.\r\n\r\nThis policy applies to Microsoft Edge version 86 or later.\r\n\r\nSee https://go.microsoft.com/fwlink/?linkid=2133918 for more information. This policy is meant to serve as temporary measure when Enterprise Administrators need to downgrade for business reasons. To ensure users are protected by the latest security updates, the most recent version should be used. When versions are downgraded to older versions, there could be incompatibilities.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_rollbacktotargetversionmicrosoftedgedev_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev86~policy~cat_edgeupdate~cat_applications~cat_microsoftedgedev_pol_rollbacktotargetversionmicrosoftedgedev_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview","displayName":"Allow installation","description":"Lets you specify whether Microsoft Edge WebView can be installed using Microsoft Edge Update.\r\n\r\n If you enable this policy, users can install Microsoft Edge WebView through Microsoft Edge Update.\r\n\r\n If you disable this policy (or set it to 'Installs disabled'), users cannot install Microsoft Edge WebView through Microsoft Edge Update.\r\n\r\n If you set this policy to Always allow Machine-Wide Installs but not Per-User Installs, Microsoft Edge WebView will only be deployed machine-wide.\r\n\r\n If you set the policy to Force Installs (Machine-Wide), users can install Microsoft Edge WebView to all machines where Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\n If you don't configure this policy, the 'Allow installation default' policy configuration determines whether users can install Microsoft Edge WebView through Microsoft Edge Update.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy","displayName":"Install Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy_1","displayName":"Always allow Installs (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy_0","displayName":"Installs disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy_5","displayName":"Force Installs (Machine-Wide)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87.updates.1~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_part_installpolicy_4","displayName":"Always allow Machine-Wide Installs, but not Per-User Installs","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview","displayName":"Allow installation","description":"Lets you specify whether the WebView2 Runtime can be installed using Microsoft Edge Update.\r\n\r\n If you enable (1) this policy, users can install the WebView2 Runtime through Microsoft Edge Update.\r\n\r\n If you disable (0) this policy (or set it to 'Installs disabled'), users cannot install the WebView2 Runtime through Microsoft Edge Update.\r\n\r\n If you set this policy to Always allow Machine-Wide Installs but not Per-User Installs (4), the WebView2 Runtime will only be deployed machine-wide.\r\n\r\n If you set the policy to Force Installs (Machine-Wide) (5), users can install the WebView2 Runtime to all machines where Microsoft Edge Update is pre-installed. Requires Microsoft Edge Update 1.3.155.43 or higher.\r\n\r\n If you don't configure this policy, the WebView2 Runtime will be installed through Microsoft Edge Update.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_allowinstallationmicrosoftedgewebview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview","displayName":"Update policy override","description":"Lets you specify whether or not automatic updates are enabled for the WebView2 Runtime. The WebView2 Runtime is a component used by applications to display web content.\r\n Automatic updates are enabled by default. Disabling automatic updates for the WebView2 Runtime might cause compatibility issues with applications that depend on this component.\r\n\r\n If you enable this policy, Microsoft Edge Update handles the WebView2 Runtime updates according to how you configure the following options:\r\n - Always allow updates (1): Updates are automatically downloaded and applied\r\n - Updates disabled (0): Updates are never downloaded or applied\r\n\r\n If you don't enable this policy, updates are automatically downloaded and applied.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_part_updatepolicy","displayName":"Update Policy (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_part_updatepolicy_1","displayName":"Always allow updates (recommended)","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev87~policy~cat_edgeupdate~cat_webview_pol_updatepolicymicrosoftedgewebview_part_updatepolicy_0","displayName":"Updates disabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol","displayName":"Control updater's communication with the Experimentation and Configuration Service","description":"In Microsoft Edge Update, the Experimentation and Configuration Service is used to deploy experimentation payload.\r\n\r\nExperimentation payload consists of a list of early in development features that Microsoft is enabling for testing and feedback.\r\n\r\nIf you enable this policy, experimentation payload is downloaded from the Experimentation and Configuration Service.\r\n\r\nIf you disable this policy, communication with the Experimentation and Configuration Service is stopped completely.\r\n\r\nIf you don't configure this policy, on a managed device the behavior is same as policy 'disabled'.\r\n\r\nIf you don't configure this policy, on an unmanaged device the behavior is same as policy 'enabled'.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol_part_ecscontrol","displayName":"Control updater's communication with Experimentation and Configuration Service (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol_part_ecscontrol_0","displayName":"Disable communication with the Experimentation and Configuration Service","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev94~policy~cat_edgeupdate_pol_ecscontrol_part_ecscontrol_1","displayName":"Enable communication and download experiments","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge","displayName":"Target Channel override","description":"Specifies which Channel Microsoft Edge should be updated to.\r\n\r\nIf you enable this poicy, the Microsoft Edge will be updated to the Channel according to how you configure the following options:\r\n\r\n - Stable: Microsoft Edge will be updated to the latest stable version.\r\n - Beta: Microsoft Edge will be updated to the latest beta version.\r\n - Dev: Microsoft Edge will be updated to the latest dev version.\r\n - Extended Stable: Microsoft Edge will be updated to the latest extended stable version, which follows a longer release cadence than stable. For more information, visit https://go.microsoft.com/fwlink/?linkid=2163508.\r\n\r\nIf you do not configure this policy, Microsoft Edge will be updated to the latest version available for the default Channel.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel","displayName":"Target Channel (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel_stable","displayName":"Stable","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel_beta","displayName":"Beta","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel_dev","displayName":"Dev","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_updatev95~policy~cat_edgeupdate~cat_applications~cat_microsoftedge_pol_targetchannelmicrosoftedge_part_targetchannel_extended","displayName":"Extended Stable","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_userrights_accesscredentialmanagerastrustedcaller","displayName":"Access Credential Manager As Trusted Caller","description":"This user right is used by Credential Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned to Winlogon. Users' saved credentials might be compromised if this privilege is given to other entities.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#accesscredentialmanagerastrustedcaller"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_accessfromnetwork","displayName":"Access From Network","description":"This user right determines which users and groups are allowed to connect to the computer over the network. Remote Desktop Services are not affected by this user right.Note: Remote Desktop Services was called Terminal Services in previous versions of Windows Server.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#accessfromnetwork"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_actaspartoftheoperatingsystem","displayName":"Act As Part Of The Operating System","description":"This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user. Processes that require this privilege should use the LocalSystem account, which already includes this privilege, rather than using a separate user account with this privilege specially assigned. Caution:Assigning this user right can be a security risk. Only assign this user right to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#actaspartoftheoperatingsystem"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_allowlocallogon","displayName":"Allow Local Log On","description":"This user right determines which users can log on to the computer. Note: Modifying this setting may affect compatibility with clients, services, and applications. For compatibility information about this setting, see Allow log on locally (https://go.microsoft.com/fwlink/?LinkId=24268 ) at the Microsoft website. ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#allowlocallogon"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_backupfilesanddirectories","displayName":"Backup Files And Directories","description":"This user right determines which users can bypass file, directory, registry, and other persistent objects permissions when backing up files and directories.Specifically, this user right is similar to granting the following permissions to the user or group in question on all files and folders on the system:Traverse Folder/Execute File, Read. Caution: Assigning this user right can be a security risk. Since users with this user right can read any registry settings and files, only assign this user right to trusted users","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#backupfilesanddirectories"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_bypasstraversechecking","displayName":"Bypass Traverse Checking","description":"This user right determines which users can traverse directory trees even though the user may not have permissions on the traversed directory. This privilege does not allow the user to list the contents of a directory, only to traverse directories.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#bypasstraversechecking"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_changesystemtime","displayName":"Change System Time","description":"This user right determines which users and groups can change the time and date on the internal clock of the computer. Users that are assigned this user right can affect the appearance of event logs. If the system time is changed, events that are logged will reflect this new time, not the actual time that the events occurred.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#changesystemtime"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_changetimezone","displayName":"Change Time Zone","description":"This user right determines which users and groups can change the time zone used by the computer for displaying the local time, which is the computer's system time plus the time zone offset. System time itself is absolute and is not affected by a change in the time zone. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#changetimezone"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_createglobalobjects","displayName":"Create Global Objects","description":"This security setting determines whether users can create global objects that are available to all sessions. Users can still create objects that are specific to their own session if they do not have this user right. Users who can create global objects could affect processes that run under other users' sessions, which could lead to application failure or data corruption. Caution: Assigning this user right can be a security risk. Assign this user right only to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createglobalobjects"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_createpagefile","displayName":"Create Page File","description":"This user right determines which users and groups can call an internal application programming interface (API) to create and change the size of a page file. This user right is used internally by the operating system and usually does not need to be assigned to any users","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createpagefile"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_createpermanentsharedobjects","displayName":"Create Permanent Shared Objects","description":"This user right determines which accounts can be used by processes to create a directory object using the object manager. This user right is used internally by the operating system and is useful to kernel-mode components that extend the object namespace. Because components that are running in kernel mode already have this user right assigned to them, it is not necessary to specifically assign it.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createpermanentsharedobjects"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_createsymboliclinks","displayName":"Create Symbolic Links","description":"This user right determines if the user can create a symbolic link from the computer he is logged on to. Caution: This privilege should only be given to trusted users. Symbolic links can expose security vulnerabilities in applications that aren't designed to handle them. Note: This setting can be used in conjunction a symlink filesystem setting that can be manipulated with the command line utility to control the kinds of symlinks that are allowed on the machine. Type 'fsutil behavior set symlinkevaluation /?' at the command line to get more information about fsutil and symbolic links.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createsymboliclinks"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_createtoken","displayName":"Create Token","description":"This user right determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when the process uses an internal application programming interface (API) to create an access token. This user right is used internally by the operating system. Unless it is necessary, do not assign this user right to a user, group, or process other than Local System. Caution: Assigning this user right can be a security risk. Do not assign this user right to any user, group, or process that you do not want to take over the system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#createtoken"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_debugprograms","displayName":"Debug Programs","description":"This user right determines which users can attach a debugger to any process or to the kernel. Developers who are debugging their own applications do not need to be assigned this user right. Developers who are debugging new system components will need this user right to be able to do so. This user right provides complete access to sensitive and critical operating system components. Caution:Assigning this user right can be a security risk. Only assign this user right to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#debugprograms"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_denyaccessfromnetwork","displayName":"Deny Access From Network","description":"This user right determines which users are prevented from accessing a computer over the network. This policy setting supersedes the Access this computer from the network policy setting if a user account is subject to both policies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denyaccessfromnetwork"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_denylocallogon","displayName":"Deny Local Log On","description":"This security setting determines which service accounts are prevented from registering a process as a service. Note: This security setting does not apply to the System, Local Service, or Network Service accounts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denylocallogon"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_denylogonasbatchjob","displayName":"Deny Log On As Batch Job","description":"This security setting determines which accounts are prevented from being able to log on as a batch job. This policy setting supersedes the Log on as a batch job policy setting if a user account is subject to both policies.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denylogonasbatchjob"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_denylogonasservice","displayName":"Deny Log On As Service","description":"Deny log on as a service -This security setting determines which service accounts are prevented from registering a process as a service. This policy setting supersedes the Log on as a service policy setting if an account is subject to both policies. Note: This security setting does not apply to the System, Local Service, or Network Service accounts. Default: None.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denylogonasservice"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_denyremotedesktopserviceslogon","displayName":"Deny Remote Desktop Services Log On","description":"This user right determines which users and groups are prohibited from logging on as a Remote Desktop Services client.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#denyremotedesktopserviceslogon"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_enabledelegation","displayName":"Enable Delegation","description":"This user right determines which users can set the Trusted for Delegation setting on a user or computer object. The user or object that is granted this privilege must have write access to the account control flags on the user or computer object. A server process running on a computer (or under a user context) that is trusted for delegation can access resources on another computer using delegated credentials of a client, as long as the client account does not have the Account cannot be delegated account control flag set. Caution: Misuse of this user right, or of the Trusted for Delegation setting, could make the network vulnerable to sophisticated attacks using Trojan horse programs that impersonate incoming clients and use their credentials to gain access to network resources.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#enabledelegation"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_generatesecurityaudits","displayName":"Generate Security Audits","description":"This user right determines which accounts can be used by a process to add entries to the security log. The security log is used to trace unauthorized system access. Misuse of this user right can result in the generation of many auditing events, potentially hiding evidence of an attack or causing a denial of service. Shut down system immediately if unable to log security audits security policy setting is enabled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#generatesecurityaudits"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_impersonateclient","displayName":"Impersonate Client","description":"Assigning this user right to a user allows programs running on behalf of that user to impersonate a client. Requiring this user right for this kind of impersonation prevents an unauthorized user from convincing a client to connect (for example, by remote procedure call (RPC) or named pipes) to a service that they have created and then impersonating that client, which can elevate the unauthorized user's permissions to administrative or system levels. Caution: Assigning this user right can be a security risk. Only assign this user right to trusted users. Note: By default, services that are started by the Service Control Manager have the built-in Service group added to their access tokens. Component Object Model (COM) servers that are started by the COM infrastructure and that are configured to run under a specific account also have the Service group added to their access tokens. As a result, these services get this user right when they are started. In addition, a user can also impersonate an access token if any of the following conditions exist. 1) The access token that is being impersonated is for this user. 2) The user, in this logon session, created the access token by logging on to the network with explicit credentials. 3) The requested level is less than Impersonate, such as Anonymous or Identify. Because of these factors, users do not usually need this user right. Warning: If you enable this setting, programs that previously had the Impersonate privilege may lose it, and they may not run.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#impersonateclient"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_increaseprocessworkingset","displayName":"Increase Process Working Set","description":"Increase a process working set. This privilege determines which user accounts can increase or decrease the size of a process’s working set. The working set of a process is the set of memory pages currently visible to the process in physical RAM memory. These pages are resident and available for an application to use without triggering a page fault. The minimum and maximum working set sizes affect the virtual memory paging behavior of a process. Warning: Increasing the working set size for a process decreases the amount of physical memory available to the rest of the system.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#increaseprocessworkingset"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_increaseschedulingpriority","displayName":"Increase Scheduling Priority","description":"This user right determines which accounts can use a process with Write Property access to another process to increase the execution priority assigned to the other process. A user with this privilege can change the scheduling priority of a process through the Task Manager user interface.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#increaseschedulingpriority"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_loadunloaddevicedrivers","displayName":"Load Unload Device Drivers","description":"This user right determines which users can dynamically load and unload device drivers or other code in to kernel mode. This user right does not apply to Plug and Play device drivers. It is recommended that you do not assign this privilege to other users. Caution: Assigning this user right can be a security risk. Do not assign this user right to any user, group, or process that you do not want to take over the system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#loadunloaddevicedrivers"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_lockmemory","displayName":"Lock Memory","description":"This user right determines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk. Exercising this privilege could significantly affect system performance by decreasing the amount of available random access memory (RAM).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#lockmemory"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_logonasbatchjob","displayName":"Log On As Batch Job","description":"This security setting allows a user to be logged on by means of a batch-queue facility and is provided only for compatibility with older versions of Windows. For example, when a user submits a job by means of the task scheduler, the task scheduler logs that user on as a batch user rather than as an interactive user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#logonasbatchjob"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_logonasservice","displayName":"Log On As Service","description":"This security setting allows a security principal to log on as a service. Services can be configured to run under the Local System, Local Service, or Network Service accounts, which have a built in right to log on as a service. Any service that runs under a separate user account must be assigned the right.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#logonasservice"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_manageauditingandsecuritylog","displayName":"Manage Auditing And Security Log","description":"This user right determines which users can specify object access auditing options for individual resources, such as files, Active Directory objects, and registry keys. This security setting does not allow a user to enable file and object access auditing in general. You can view audited events in the security log of the Event Viewer. A user with this privilege can also view and clear the security log.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#manageauditingandsecuritylog"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_managevolume","displayName":"Manage Volume","description":"This user right determines which users and groups can run maintenance tasks on a volume, such as remote defragmentation. Use caution when assigning this user right. Users with this user right can explore disks and extend files in to memory that contains other data. When the extended files are opened, the user might be able to read and modify the acquired data.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#managevolume"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_modifyfirmwareenvironment","displayName":"Modify Firmware Environment","description":"This user right determines who can modify firmware environment values. Firmware environment variables are settings stored in the nonvolatile RAM of non-x86-based computers. The effect of the setting depends on the processor.On x86-based computers, the only firmware environment value that can be modified by assigning this user right is the Last Known Good Configuration setting, which should only be modified by the system. On Itanium-based computers, boot information is stored in nonvolatile RAM. Users must be assigned this user right to run bootcfg.exe and to change the Default Operating System setting on Startup and Recovery in System Properties. On all computers, this user right is required to install or upgrade Windows.Note: This security setting does not affect who can modify the system environment variables and user environment variables that are displayed on the Advanced tab of System Properties.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#modifyfirmwareenvironment"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_modifyobjectlabel","displayName":"Modify Object Label","description":"This user right determines which user accounts can modify the integrity label of objects, such as files, registry keys, or processes owned by other users. Processes running under a user account can modify the label of an object owned by that user to a lower level without this privilege.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#modifyobjectlabel"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_profilesingleprocess","displayName":"Profile Single Process","description":"This user right determines which users can use performance monitoring tools to monitor the performance of system processes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#profilesingleprocess"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_profilesystemperformance","displayName":"Profile System Performance","description":"This security setting determines which users can use performance monitoring tools to monitor the performance of system processes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#profilesystemperformance"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_remoteshutdown","displayName":"Remote Shutdown","description":"This user right determines which users are allowed to shut down a computer from a remote location on the network. Misuse of this user right can result in a denial of service.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#remoteshutdown"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_replaceprocessleveltoken","displayName":"Replace Process Level Token","description":"This security setting determines which user accounts can call the CreateProcessAsUser() application programming interface (API) so that one service can start another. An example of a process that uses this user right is Task Scheduler. For information about Task Scheduler, see Task Scheduler overview.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#replaceprocessleveltoken"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_restorefilesanddirectories","displayName":"Restore Files And Directories","description":"This user right determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and directories, and determines which users can set any valid security principal as the owner of an object. Specifically, this user right is similar to granting the following permissions to the user or group in question on all files and folders on the system:Traverse Folder/Execute File, Write. Caution: Assigning this user right can be a security risk. Since users with this user right can overwrite registry settings, hide data, and gain ownership of system objects, only assign this user right to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#restorefilesanddirectories"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_shutdownthesystem","displayName":"Shut Down The System","description":"This security setting determines which users who are logged on locally to the computer can shut down the operating system using the Shut Down command. Misuse of this user right can result in a denial of service.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#shutdownthesystem"],"options":null},{"id":"device_vendor_msft_policy_config_userrights_takeownership","displayName":"Take Ownership","description":"This user right determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, printers, registry keys, processes, and threads. Caution: Assigning this user right can be a security risk. Since owners of objects have full control of them, only assign this user right to trusted users.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-UserRights#takeownership"],"options":null},{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity","displayName":"Hypervisor Enforced Code Integrity","description":"Hypervisor-Protected Code Integrity: 0 - Turns off Hypervisor-Protected Code Integrity remotely if configured previously without UEFI Lock, 1 - Turns on Hypervisor-Protected Code Integrity with UEFI lock, 2 - Turns on Hypervisor-Protected Code Integrity without UEFI lock.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-VirtualizationBasedTechnology#hypervisorenforcedcodeintegrity"],"options":[{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity_0","displayName":"(Disabled) Turns off Hypervisor-Protected Code Integrity remotely if configured previously without UEFI Lock.","description":"(Disabled) Turns off Hypervisor-Protected Code Integrity remotely if configured previously without UEFI Lock.","helpText":null},{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity_1","displayName":"(Enabled with UEFI lock) Turns on Hypervisor-Protected Code Integrity with UEFI lock.","description":"(Enabled with UEFI lock) Turns on Hypervisor-Protected Code Integrity with UEFI lock.","helpText":null},{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity_2","displayName":"(Enabled without lock) Turns on Hypervisor-Protected Code Integrity without UEFI lock.","description":"(Enabled without lock) Turns on Hypervisor-Protected Code Integrity without UEFI lock.","helpText":null}]},{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_requireuefimemoryattributestable","displayName":"Require UEFI Memory Attributes Table","description":"Require UEFI Memory Attributes Table","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-VirtualizationBasedTechnology#requireuefimemoryattributestable"],"options":[{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_requireuefimemoryattributestable_0","displayName":"Do not require UEFI Memory Attributes Table","description":"Do not require UEFI Memory Attributes Table","helpText":null},{"id":"device_vendor_msft_policy_config_virtualizationbasedtechnology_requireuefimemoryattributestable_1","displayName":"Require UEFI Memory Attributes Table","description":"Require UEFI Memory Attributes Table","helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1.updates~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled","displayName":"Disable IntelliCode custom model training","description":"This policy disables the ability to train custom IntelliCode models for IntelliSense completions.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1.updates~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1.updates~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog","displayName":"Disable the send-a-smile feature","description":"This policy disables the Visual Studio send-a-smile feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablefeedbackdialog_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture","displayName":"Disables send-a-smile's screenshot capability","description":"This policy disables the screenshot capability in the send-a-smile feature.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~feedbacksettings_disablescreenshotcapture_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled","displayName":"Enable administrator updates","description":"Allows administrator updates to be visible to and applied to the client computer. \r\n \r\nIf set to 1 (enabled for WSUS/SCCM), then administrator updates delivered through WSUS and SCCM will be available to Active Direcotry (AD) joined client machines. \r\n \r\nIf set to 2 (enabled for WSUS/SCCM and Microsoft Updates/Intune), then administrator updates delivered through either WSUS/SCCM or Microsoft Updates/Intune will be available to either Active Directory (AD) or Azure Active Directory (Azure AD) joined machines that are enrolled in Windows Update for Business (WUfB). Note that the WUfB AllowMUUpdateServicePolicy must be turned on too.\r\n\r\nIf set to 0 (disabled) or missing entirely, then administrator updates will not be available to the machine. \r\n \r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_administratorupdatesenableddropid","displayName":"Microsoft Update Channel","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_administratorupdatesenableddropid_1","displayName":"WSUS/SCCM","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesenabled_administratorupdatesenableddropid_2","displayName":"WSUS/SCCM and Microsoft Updates/Intune","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesoptout","displayName":"Opt out of administrator updates","description":"Indicates that the user does not want to receive administrator updates to Visual Studio. \r\n \r\nIf set to 1 (enabled) then the Visual Studio user does not want to receive administrator updates to Visual Studio. This policy is for the developer user to set if they have admin permissions on the client machine. \r\n \r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_administratorupdatesoptout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_backgrounddownloaddisabled","displayName":"Disable downloading updates automatically","description":"Prevent setup from downloading updates automatically for all installed Visual Studio products. You can change the value anytime.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_backgrounddownloaddisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_backgrounddownloaddisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_cachepath","displayName":"Package manifest and payload cache path","description":"The directory where package manifests and, optionally, payloads are stored.\r\n\r\nThe Visual Studio Installer enforces a 50 character limit for the path.\r\n\r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_cachepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_cachepath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_cachepath_cachepath_textbox","displayName":"Package Manifest and Payload Cache Path (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_disablerollback","displayName":"Disable the ability to rollback or undo a Visual Studio update","description":"This policy determines whether the user can undo an update and rollback Visual Studio to the previously installed version.\r\n\r\nIf set to 1 (enabled), then users will be prevented from accessing the rollback capability, which will prevent Visual Studio from reverting the most recent update which may contain a security fix.\r\n\r\nIf set to 0 (disabled) or missing entirely, then users will be able to access the rollback feature in Visual Studio, and will be able to undo an update and rollback their Visual Studio instances to the previously installed version. Note: The default unconfigured setting enables the ability to rollback a Visual Studio update.\r\n\r\nThis policy applies to release instances of Visual Studio 2022 or higher that may be installed on the machine.\r\n\r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_disablerollback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_disablerollback_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_hideavailabletab","displayName":"Hide the Available tab shown in the Visual Studio Installer","description":"This policy determines whether the Available tab in the installer is visible or not. The Available tab contains suggested products that can be installed by the Visual Studio Installer.\r\n\r\nIf set to 1 (enabled), then users will be prevented from seeing the Available Tab, and thus will not have an ability to install new products from the Available Tab using the installer UI. Users will still be able to install products from the command line or directly through the bootstrapper.\r\n\r\nIf set to 0 (disabled) or missing entirely, users will be able to see the Available Tab and freely install new products that are advertised on the installer UI. Note: This is the default behavior.\r\n\r\nThis functionality requires the Visual Studio 2022 version 17.6 installer to be installed on the client machine.\r\n\r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_hideavailabletab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_hideavailabletab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_keepdownloadedpayloads","displayName":"Keep package payloads after installation","description":"Keep package payloads even after they are installed. You can change the value anytime. Disabling the policy removes any cached package payloads for the instance you repair or modify.\r\n\r\nEnabled by default.\r\n\r\nFor more information, see: http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_keepdownloadedpayloads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_keepdownloadedpayloads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_removeoutofsupport","displayName":"Remove out-of-support components during updates","description":"This setting will cause updates to automatically remove all components from all Visual Studio installations that have transitioned to an out-of-support state.\r\n \r\nIf set to 1 (enabled), then the Visual Studio installer will remove all out-of-support components during all subsequent updates. \r\n \r\nIf set to 0 (disabled) or missing entirely, then the remove out-of-support components behavior will respect other locations where this can be configured, such as commandline parameter or the Update Settings dialog.\r\n \r\nThis functionality requires the Visual Studio 2022 version 17.4 installer to be installed on the client machine. \r\n\r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_removeoutofsupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_removeoutofsupport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_sharedinstallationpath","displayName":"Shared installation path","description":"The directory where some packages shared across versions of instances of Visual Studio are installed. You can change the value anytime, but it will only affect future installs. Any products already installed to the old location must not be moved or they might not function correctly.\r\n\r\nThe Visual Studio Installer enforces a 150 character limit for the path.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_sharedinstallationpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_sharedinstallationpath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_sharedinstallationpath_sharedinstallationpath_textbox","displayName":"Shared Installation Path (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_updateconfigurationfile","displayName":"Custom path to the update configuration file","description":"The custom file path to the update configuration file used for configuring administrator updates. For more information, see https://aka.ms/vs/admin/updates/configurationfile.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_updateconfigurationfile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_updateconfigurationfile_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~installandupdatesettings_updateconfigurationfile_updateconfigurationfile_textbox","displayName":"Custom Path to the Update Config (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_directconnectionmode","displayName":"Require direct connection","description":"Prevents hosts from allowing relay-based guests from joining their session. Live Share already supports the “Live Share: Connection Mode” setting, and so this policy is effectively just enforcing it to “direct”. If this policy is disabled, the host can allow relay-based guests to join their session if the host has not configured the “Live Share: Connection Mode” setting.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_directconnectionmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_directconnectionmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disableanonymousguests","displayName":"Disable anonymous guests","description":"Disallow anonymous guests from joining a session. Live Share already has the “Live Share: Anonymous Guest Approval” setting, and so this policy is effectively just enforcing that to “reject”.\r\nFor more information, see: https://aka.ms/vsls-policies ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disableanonymousguests_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disableanonymousguests_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablereadwriteterminal","displayName":"Disable shared read write terminal","description":"Prevent the host from being able to explicitly share a new writeable terminal.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablereadwriteterminal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablereadwriteterminal_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablesharedserver","displayName":"Disable shared server","description":"Prevent the host from being able to explicitly share a new server. The policy also enforces “Live Share: Auto Share Servers” setting to false.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablesharedserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_disablesharedserver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_guestapprovalrequired","displayName":"Require guest approval","description":"Guest can join the session only after host approves. Live Share already has the “Live Share: Guest Approval required” setting, and so this policy is effectively just enforcing that to “true”.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_guestapprovalrequired_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_guestapprovalrequired_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_livesharedomainname","displayName":"Allow only company domain accounts","description":"Prevents users from being able to share their session with any guests who are not part of their company or any other company that has been given access. Users must be logged in with their company email to access Live Share. If this policy is disabled, any user from any organization can access a shared Live Share session. Use ; to separate out multiple domains. For example, set the domain name as contoso.com or contoso.com;foo.com \r\nFor more information, see: https://aka.ms/vsls-policies ","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_livesharedomainname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_livesharedomainname_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~livesharesettings_livesharedomainname_liveshare_domainname_textbox","displayName":"Enter Domain Name: (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled","displayName":"Disable IntelliCode custom model training","description":"This policy disables the ability to train custom IntelliCode models for IntelliSense completions.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_intellicoderemoteanalysisdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_telemetryoptin","displayName":"Enable the Visual Studio Customer Experience Improvement Program","description":"This policy enables Visual Studio telemetry to be sent to Microsoft as part of the Visual Studio Customer Experience Improvement Program. For more information, see: aka.ms/vs/admx/telemetry","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_telemetryoptin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov1~policy~visualstudio~privacysettings_telemetryoptin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol","displayName":"Allow standard users to execute installer operations","description":"Allows users without administrator permissions to manage their Visual Studio installations. \r\n \r\nIf set to 0 (disabled) or missing entirely, the installer will prompt for administrator permissions using UAC. \r\n\r\nIf set to 1 (enabled for Update and Rollback), users without administrator permissions can update or rollback without UAC. All other operations will ask for administrator permissions through UAC. \r\n \r\nIf set to 2 (enabled for all installer operations), users without administrator permissions can fully manage Visual Studio through the Visual Studio Installer without UAC.\r\n \r\nFor more information, see http://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_allowstandardusercontroldropid","displayName":"Define which installer commands Standard Users can execute","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_allowstandardusercontroldropid_1","displayName":"Enabled for Update and Rollback","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~installandupdatesettings_allowstandardusercontrol_allowstandardusercontroldropid_2","displayName":"Enabled for all installer operations","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~livesharesettings_disablechat","displayName":"Disable Chat","description":"Prevent the host and guest from using chat within the session.\r\nFor more information, see: https://aka.ms/vsls-policies","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~livesharesettings_disablechat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~livesharesettings_disablechat_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~visualstudiodevtunnelssettings_disablevisualstudiodevtunnels","displayName":"Disable dev tunnels in Visual Studio","description":"This policy disables dev tunnels in Visual Studio. For more information, see: https://aka.ms/devtunnels/vs/admx","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~visualstudiodevtunnelssettings_disablevisualstudiodevtunnels_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov2.1~policy~visualstudio~visualstudiodevtunnelssettings_disablevisualstudiodevtunnels_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov3~policy~visualstudio~installandupdatesettings_administratorupdatesnotifications","displayName":"Display administrator update notifications","description":"This setting enables Visual Studio to provide administrator update prompts and status information to end users via the Windows toast notification feature. \r\n \r\nIf set to a 1 (enabled), then Visual Studio will display administrator update notifications. \r\n\r\nThe Visual Studio administrator update notifications will report administrator update success or failure. In the case of administrator update failure, these notifications will provide information as to what the problem is, which should help facilitate diagnosis and resolution. One common reason that Visual Studio administrator updates fail to apply is because Visual Studio is open and in use. In this situation, the administrator update notifications will also prompt the user to close Visual Studio so that the administrator update can then be applied. \r\n\r\nThe administrator update notifications are governed by the settings that control Windows toast notifications on the client machine. \r\n\r\nFor more information, see https://aka.ms/vs/admin/updates/control.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov3~policy~visualstudio~installandupdatesettings_administratorupdatesnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov3~policy~visualstudio~installandupdatesettings_administratorupdatesnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilot","displayName":"Disable Copilot","description":"If this setting is enabled, it will prevent your users from using any GitHub Copilot license (GitHub Copilot for Business, GitHub Copilot for Enterprise, and Copilot for Individual). For more information, see: https://aka.ms/CopilotGroupPolicy","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilot_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilot_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilotforindividuals","displayName":"Disable Copilot for Individual","description":"If this setting is enabled, it will prevent your users from using GitHub Copilot for Individual. GitHub Copilot for Business and GitHub Copilot for Enterprise will still be enabled. For more information, see: https://aka.ms/CopilotGroupPolicy","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilotforindividuals_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov4~policy~visualstudio~copilotsettings_disablecopilotforindividuals_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov5~policy~visualstudio~installandupdatesettings_updatenotificationsoptout","displayName":"Disable update notifications in Visual Studio","description":"Allows an administrator to control the update notification in the Visual Studio IDE in specific situations.\r\n\r\nIf set to 0 (blocked) or missing entirely, update notifications will appear in the Visual Studio IDE whenever an update is detected.\r\n\r\nIf set to a 1, the update notification in the Visual Studio IDE will be suppressed for the Enterprise and Professional editions on the Release or LTSC channels, only if they are either receiving updates from a layout or if they are enrolled to receive Visual Studio Administrator Updates.\r\n\r\nFor more information, see https://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov5~policy~visualstudio~installandupdatesettings_updatenotificationsoptout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov5~policy~visualstudio~installandupdatesettings_updatenotificationsoptout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_productfeedbackdisabled","displayName":"Disables feedback mechanisms in the IDE and installer","description":"This policy disables feedback mechanisms throughout the IDE and installer, i.e. thumbs up or down, the feedback window pop-up, send-a-smile feature, info bars without survey links.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_productfeedbackdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_productfeedbackdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_surveysdisabled","displayName":"Disables external survey links throughout the IDE and installer","description":"This policy disables survey links throughout the IDE and installer, i.e. in the preview feature pane, bulletins, info bars with survey links.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_surveysdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~feedbacksettings_surveysdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~installandupdatesettings_availabletabproducts","displayName":"Control what products are available to install on the Visual Studio Installer's Available tab.","description":"This policy can be used to restrict which Visual Studio product shows up on the Installer's Available Tab. For example, including Microsoft.VisualStudio.Product.Professional in the list will cause the Visual Studio Professional edition to be the only available option to install. This policy is only applied to client machines that have just the Visual Studio Installer installed. For more information, see  https://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~installandupdatesettings_availabletabproducts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~installandupdatesettings_availabletabproducts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov6~policy~visualstudio~installandupdatesettings_availabletabproducts_availabletabproducts_textbox","displayName":"Product Ids to display in Available Tab of Visual Studio Installer (Device)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_config_visualstudiov7~policy~visualstudio~copilotsettings_disableagentmode","displayName":"Disable Agent Mode","description":"If this setting is enabled, it will prevent your users from using GitHub Copilot's Agent mode. For more information, see: https://aka.ms/CopilotGroupPolicy","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov7~policy~visualstudio~copilotsettings_disableagentmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov7~policy~visualstudio~copilotsettings_disableagentmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_visualstudiov8~policy~visualstudio~installandupdatesettings_disablemigrationdialog","displayName":"Disable the dialog in the IDE that prompts users to stay on the latest version of Visual Studio.","description":"If this setting is enabled, it will prevent your users from seeing the dialog that prompts users to stay on the latest version in the Visual Studio IDE. For more information, see: https://aka.ms/vs/setup/policies.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_visualstudiov8~policy~visualstudio~installandupdatesettings_disablemigrationdialog_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_visualstudiov8~policy~visualstudio~installandupdatesettings_disablemigrationdialog_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_webthreatdefense_automaticdatacollection","displayName":"Automatic Data Collection","description":"Automatically collect website or app content when additional analysis is needed to help identify security threats.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WebThreatDefense#automaticdatacollection"],"options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_automaticdatacollection_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_automaticdatacollection_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifymalicious","displayName":"Notify Malicious","description":"Configures Enhanced Phishing Protection notifications for malicious content.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_notifymalicious_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifymalicious_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifypasswordreuse","displayName":"Notify Password Reuse","description":"Configures Enhanced Phishing Protection notifications for protecting passwords from reuse.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_notifypasswordreuse_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifypasswordreuse_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifyunsafeapp","displayName":"Notify Unsafe App","description":"Configures Enhanced Phishing Protection notifications for protecting passwords typed into M365 Office applications, Notepad, and Wordpad.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_notifyunsafeapp_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_notifyunsafeapp_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_webthreatdefense_serviceenabled","displayName":"Service Enabled","description":"Enables Enhanced Phishing Protection in audit mode for Windows 11 H2.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_webthreatdefense_serviceenabled_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_webthreatdefense_serviceenabled_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_wifi_allowautoconnecttowifisensehotspots","displayName":"Allow Auto Connect To Wi Fi Sense Hotspots","description":"Allow or disallow the device to automatically connect to Wi-Fi hotspots. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowautoconnecttowifisensehotspots"],"options":[{"id":"device_vendor_msft_policy_config_wifi_allowautoconnecttowifisensehotspots_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowautoconnecttowifisensehotspots_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wifi_allowinternetsharing","displayName":"Allow Internet Sharing","description":"Allow or disallow internet sharing. Most restricted value is 0.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowinternetsharing"],"options":[{"id":"device_vendor_msft_policy_config_wifi_allowinternetsharing_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowinternetsharing_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wifi_allowmanualwificonfiguration","displayName":"Allow Manual Wi Fi Configuration","description":"Allow or block connections to Wi-Fi outside of MDM server-installed networks. If you change this setting to Block, you must deploy enterprise Wi-Fi profiles to the device using the Wi-Fi CSP before you apply this setting. Otherwise, the device will go offline since it won't be able to connect to Wi-Fi. Note that choosing to block Wi-Fi connections will delete any previously installed user-configured Wi-Fi profiles from the device, though not all non-MDM profiles will be deleted.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowmanualwificonfiguration"],"options":[{"id":"device_vendor_msft_policy_config_wifi_allowmanualwificonfiguration_0","displayName":"Block","description":"No Wi-Fi connection outside of MDM provisioned network is allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowmanualwificonfiguration_1","displayName":"Allow","description":"Adding new network SSIDs beyond the already MDM provisioned ones is allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wifi_allowwifi","displayName":"Allow Wi Fi","description":"This policy has been deprecated.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowwifi"],"options":[{"id":"device_vendor_msft_policy_config_wifi_allowwifi_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowwifi_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wifi_allowwifidirect","displayName":"Allow Wi Fi Direct","description":"Allow WiFi Direct connection. .","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#allowwifidirect"],"options":[{"id":"device_vendor_msft_policy_config_wifi_allowwifidirect_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wifi_allowwifidirect_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wifi_wlanscanmode","displayName":"WLAN Scan Mode","description":"Allow an enterprise to control the WLAN scanning behavior and how aggressively devices should be actively scanning for Wi-Fi networks to get devices connected. Supported values are 0-500, where 100 = normal scan frequency and 500 = low scan frequency. The default value is 0. Supported operations are Add, Delete, Get, and Replace.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-wifi#wlanscanmode"],"options":null},{"id":"device_vendor_msft_policy_config_windowsai_agentconnectorminimumpolicy","displayName":"Agent Connector Minimum Policy (Windows Insiders only)","description":"Configure the minimum policy value which controls how agent connectors run on the machine.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#agentconnectorminimumpolicy"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_agentconnectorminimumpolicy_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_agentconnectorminimumpolicy_1","displayName":"Restricted.","description":"Restricted.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_agentconnectorminimumpolicy_2","displayName":"Bypass.","description":"Bypass.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_allowrecallenablement","displayName":"Allow Recall Enablement","description":"This policy setting allows you to determine whether the Recall optional component is available for end users to enable on their device. By default, Recall is disabled for managed commercial devices. Recall isn’t available on managed devices by default, and individual users can’t enable Recall on their own. If this policy is not configured, end users will have the Recall component in a disabled state. If this policy is disabled, the Recall component will be in disabled state and the bits for Recall will be removed from the device. If snapshots were previously saved on the device, they will be deleted when this policy is disabled. Removing Recall requires a device restart. If the policy is enabled, end users will have Recall available on their device. Depending on the state of the DenyAIDataAnalysis policy (Turn off saving snapshots for use with Recall), end users will be able to choose if they want to save snapshots of their screen and use Recall to find things they've seen on their device.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#allowrecallenablement"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_allowrecallenablement_0","displayName":"Recall is not available","description":"Recall is not available","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_allowrecallenablement_1","displayName":"Recall is available","description":"Recall is available","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_allowrecallexport","displayName":"Allow Recall Export","description":"This policy allows you to determine whether users can export their own Recall and snapshot information. Exporting allows users to share their Recall and snapshot information with trusted apps or websites. Users can export from Settings > Privacy & security > Recall & snapshots > Advanced settings > Export snapshots > Export past snapshots > Export. Users can also choose to continuously export their snapshots if they turn on the option to Export snapshots from now on from Settings > Privacy & security > Recall & snapshots > Advanced settings > Export snapshots > Export. Before starting an export, the user must authenticate with Windows Hello and they are notified that their exported snapshots are encrypted since they might contain sensitive information. The user is also notified that they'll need to provide their Recall export code if they want to allow trusted apps or websites access to exported snapshots. The Recall export code is displayed to users during Recall setup even if this policy is set to disabled or not configured. For managed devices: When you set this policy to enabled, users will be able to export Recall and snapshot information. If the policy is set to disabled or not configured, users won't be able to export their Recall and snapshot information. Important: This setting applies to devices in the European Economic Area (EEA) only. Export of Recall and snapshot information is a user-initiated process and is per user. IT admins or other users can't initiate an export on behalf of another.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#allowrecallexport"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_allowrecallexport_0","displayName":"Deny export of Recall and snapshots information","description":"Deny export of Recall and snapshots information","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_allowrecallexport_1","displayName":"Allow export of Recall and snapshot information","description":"Allow export of Recall and snapshot information","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disableagentconnectors","displayName":"Disable Agent Connectors (Windows Insiders only)","description":"Enable or Disable Agent Connectors.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableagentconnectors"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disableagentconnectors_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableagentconnectors_1","displayName":"Force Enable.","description":"Force Enable.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableagentconnectors_2","displayName":"Force Disable.","description":"Force Disable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disableagentworkspaces","displayName":"Disable Agent Workspaces (Windows Insiders only)","description":"Enable or Disable Agent Workspaces.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableagentworkspaces"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disableagentworkspaces_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableagentworkspaces_1","displayName":"Force Enable.","description":"Force Enable.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableagentworkspaces_2","displayName":"Force Disable.","description":"Force Disable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disableaidataanalysis","displayName":"Disable AI Data Analysis","description":"This policy setting allows you to determine whether end users have the option to allow snapshots to be saved on their PCs. If disabled, end users will have a choice to save snapshots of their screen on their PC and then use Recall to find things they've seen. If the policy is enabled, end users will not be able to save snapshots on their PC. If the policy is not configured, end users will not be able to save snapshots on their PC.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableaidataanalysis"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disableaidataanalysis_0","displayName":"Enable Saving Snapshots for Windows.","description":"Enable Saving Snapshots for Windows.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableaidataanalysis_1","displayName":"Disable Saving Snapshots for Windows.","description":"Disable Saving Snapshots for Windows.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disableclicktodo","displayName":"Disable Click To Do","description":"Click to Do lets people take action on content on their screens. When activated, it takes a screenshot of their screen and analyzes it to present actions. Click to Do ends when they exit it, and it can't take screenshots while closed. Screenshot analysis is always performed locally on their device. By default, Click to Do is enabled for users. This policy setting allows you to determine whether Click to Do is available for users on their device. When the policy is enabled, the Click to Do component and entry points will not be available to users. When the policy is disabled, users will have Click to Do available on their device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableclicktodo"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disableclicktodo_0","displayName":"Click to Do is enabled","description":"Click to Do is enabled","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableclicktodo_1","displayName":"Click to Do is disabled.","description":"Click to Do is disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disablecocreator","displayName":"Disable Cocreator","description":"This policy setting allows you to control whether Cocreator functionality is disabled in the Windows Paint app. If this policy is enabled, Cocreator functionality will not be accessible in the Paint app. If this policy is disabled or not configured, users will be able to access Cocreator functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disablecocreator"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disablecocreator_0","displayName":"Cocreator is enabled.","description":"Cocreator is enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disablecocreator_1","displayName":"Cocreator is disabled.","description":"Cocreator is disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disablegenerativefill","displayName":"Disable Generative Fill","description":"This policy setting allows you to control whether generative fill functionality is disabled in the Windows Paint app. If this policy is enabled, generative fill functionality will not be accessible in the Paint app. If this policy is disabled or not configured, users will be able to access generative fill functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disablegenerativefill"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disablegenerativefill_0","displayName":"Generative fill is enabled.","description":"Generative fill is enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disablegenerativefill_1","displayName":"Generative fill is disabled.","description":"Generative fill is disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disableimagecreator","displayName":"Disable Image Creator","description":"This policy setting allows you to control whether Image Creator functionality is disabled in the Windows Paint app. If this policy is enabled, Image Creator functionality will not be accessible in the Paint app. If this policy is disabled or not configured, users will be able to access Image Creator functionality.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableimagecreator"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disableimagecreator_0","displayName":"Image Creator is enabled.","description":"Image Creator is enabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableimagecreator_1","displayName":"Image Creator is disabled.","description":"Image Creator is disabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disableremoteagentconnectors","displayName":"Disable Remote Agent Connectors (Windows Insiders only)","description":"Enable or Disable Remote Agent Connectors.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disableremoteagentconnectors"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disableremoteagentconnectors_0","displayName":"User in control.","description":"User in control.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableremoteagentconnectors_1","displayName":"Force Enable.","description":"Force Enable.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disableremoteagentconnectors_2","displayName":"Force Disable.","description":"Force Disable.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_disablesettingsagent","displayName":"Disable Settings Agent","description":"This policy setting allows you to determine whether Settings Agentic search experience is available for users on their device. When the policy is enabled, the agentic experience will not be available, limiting search results to statically indexed searches and semantic searches. When the policy is disabled, users will have Settings Agent search experience available on their device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#disablesettingsagent"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_disablesettingsagent_0","displayName":"Settings Agentic search experience is enabled","description":"Settings Agentic search experience is enabled","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_disablesettingsagent_1","displayName":"Settings Agentic search experience is not enabled","description":"Settings Agentic search experience is not enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp","displayName":"Remove Microsoft Copilot App","description":"This policy setting allows you to uninstall Microsoft Copilot from devices in a targeted way. It will apply to devices/users that meet the below conditions: Microsoft 365 Copilot and Microsoft Copilot are both installed; the Microsoft Copilot app was not installed by the user; the Microsoft Copilot app was not launched in the last 14 days. If this policy is enabled, the Microsoft Copilot app will be uninstalled. Users can still re-install if they choose to. This setting applies to Enterprise, Professional and Education client SKUs only.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#removemicrosoftcopilotapp"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp_0","displayName":"Removal Disabled.","description":"Removal Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_removemicrosoftcopilotapp_1","displayName":"Removal Enabled.","description":"Removal Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_setdatalosspreventionprovider","displayName":"Set Data Loss Prevention Provider","description":"This policy allows an admin to specify a DLP provider, which Recall will use if the provider is properly installed. You will need to get the string for this from your provider. It will look something like 'key:HKEY_LOCAL_MACHINE\\Software\\Contoso\\DLP; value:InstallPath; binary:contosoDLP.dll' (without any quotes in the value). Important: This setting applies to Enterprise and Education client SKUs only.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setdatalosspreventionprovider"],"options":null},{"id":"device_vendor_msft_policy_config_windowsai_setdenyapplistforrecall","displayName":"Set Deny App List For Recall","description":"This policy allows you to set a semicolon-separated list of app names which should not be collected in Recall Snapshots\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setdenyapplistforrecall"],"options":null},{"id":"device_vendor_msft_policy_config_windowsai_setdenyurilistforrecall","displayName":"Set Deny Uri List For Recall","description":"This policy allows you to set a semicolon-separated list of uris which should not be collected in Recall Snapshots\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setdenyurilistforrecall"],"options":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots","displayName":"Set Maximum Storage Duration For Recall Snapshots","description":"This policy setting allows you to control the maximum amount of time (in days) that Windows saves snapshots for Recall. The default value for this setting is '0' which doesn't set a time frame to delete snapshots. When the default is used, snapshots aren't deleted until the maximum storage allocation for Recall is reached and the oldest snapshots are deleted first. You can configure the maximum storage duration to be 30, 60, 90, or 180 days.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setmaximumstoragedurationforrecallsnapshots"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_0","displayName":"Let the OS define the maximum amount of time the snapshots will be saved","description":"Let the OS define the maximum amount of time the snapshots will be saved","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_30","displayName":"30 days","description":"30 days","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_60","displayName":"60 days","description":"60 days","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_90","displayName":"90 days","description":"90 days","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragedurationforrecallsnapshots_180","displayName":"180 days","description":"180 days","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots","displayName":"[Deprecated] Set Maximum Storage Space For Recall Snapshots (Windows Insiders only)","description":"This policy setting allows you to control the maximum amount of disk space that can be used by Windows to save snapshots for Recall. The default value of '0' will let the OS configure the amount of storage allocated to snapshots. When the default value of '0' is used, the OS configures the storage allocation for snapshots based on the device storage capacity. 25 GB is allocated when the device storage capacity is 256 GB. 75 GB is allocated when the device storage capacity is 512 GB. 150 GB is allocated when the device storage capacity is 1 TB or higher.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setmaximumstoragespaceforrecallsnapshots"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_0","displayName":"Let the OS define the maximum storage amount based on hard drive storage size","description":"Let the OS define the maximum storage amount based on hard drive storage size","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_10000","displayName":"10GB","description":"10GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_25000","displayName":"25GB","description":"25GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_50000","displayName":"50GB","description":"50GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_75000","displayName":"75GB","description":"75GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_100000","displayName":"100GB","description":"100GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_150000","displayName":"150GB","description":"150GB","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_v2","displayName":"Set Maximum Storage Space For Recall Snapshots","description":"This policy setting allows you to control the maximum amount of disk space that can be used by Windows to save snapshots for Recall. The default value of '0' will let the OS configure the amount of storage allocated to snapshots. When the default value of '0' is used, the OS configures the storage allocation for snapshots based on the device storage capacity. 25 GB is allocated when the device storage capacity is 256 GB. 75 GB is allocated when the device storage capacity is 512 GB. 150 GB is allocated when the device storage capacity is 1 TB or higher.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI#setmaximumstoragespaceforrecallsnapshots"],"options":[{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_0","displayName":"Let the OS define the maximum storage amount based on hard drive storage size","description":"Let the OS define the maximum storage amount based on hard drive storage size","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_10240","displayName":"10GB","description":"10GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_25600","displayName":"25GB","description":"25GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_51200","displayName":"50GB","description":"50GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_76800","displayName":"75GB","description":"75GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_102400","displayName":"100GB","description":"100GB","helpText":null},{"id":"device_vendor_msft_policy_config_windowsai_setmaximumstoragespaceforrecallsnapshots_153600","displayName":"150GB","description":"150GB","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsconnectionmanager_prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork","displayName":"Prohibit connection to non-domain networks when connected to domain authenticated network","description":"This policy setting prevents computers from connecting to both a domain based network and a non-domain based network at the same time.\r\n\r\nIf this policy setting is enabled, the computer responds to automatic and manual network connection attempts based on the following circumstances:\r\n\r\nAutomatic connection attempts\r\n- When the computer is already connected to a domain based network, all automatic connection attempts to non-domain networks are blocked.\r\n- When the computer is already connected to a non-domain based network, automatic connection attempts to domain based networks are blocked.\r\n\r\nManual connection attempts\r\n- When the computer is already connected to either a non-domain based network or a domain based network over media other than Ethernet, and a user attempts to create a manual connection to an additional network in violation of this policy setting, the existing network connection is disconnected and the manual connection is allowed.\r\n- When the computer is already connected to either a non-domain based network or a domain based network over Ethernet, and a user attempts to create a manual connection to an additional network in violation of this policy setting, the existing Ethernet connection is maintained and the manual connection attempt is blocked.\r\n\r\nIf this policy setting is not configured or is disabled, computers are allowed to connect simultaneously to both domain and non-domain networks.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowsconnectionmanager#windowsconnectionmanager-prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork"],"options":[{"id":"device_vendor_msft_policy_config_windowsconnectionmanager_prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowsconnectionmanager_prohitconnectiontonondomainnetworkswhenconnectedtodomainauthenticatednetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_companyname","displayName":"Company Name","description":"The company name that is displayed to the users. CompanyName is required for both EnableCustomizedToasts and EnableInAppCustomization. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display the contact options. Value type is string. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#companyname"],"options":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableaccountprotectionui","displayName":"Disable Account Protection UI","description":"Use this policy setting to specify if to display the Account protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disableaccountprotectionui"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableaccountprotectionui_0","displayName":"(Disable) The users can see the display of the Account protection area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the Account protection area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableaccountprotectionui_1","displayName":"(Enable) The users cannot see the display of the Account protection area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the Account protection area in Windows Defender Security Center.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableappbrowserui","displayName":"Disable App Browser UI","description":"Use this policy setting if you want to disable the display of the app and browser protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disableappbrowserui"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableappbrowserui_0","displayName":"(Disable) The users can see the display of the app and browser protection area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the app and browser protection area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableappbrowserui_1","displayName":"(Enable) The users cannot see the display of the app and browser protection area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the app and browser protection area in Windows Defender Security Center.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablecleartpmbutton","displayName":"Disable Clear Tpm Button","description":"Disable the Clear TPM button in Windows Security. Enabled:The Clear TPM button will be unavailable for use. Disabled:The Clear TPM button will be available for use on supported systems. Not configured:Same as Disabled. Supported values:0 - Disabled (default)1 - Enabled","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablecleartpmbutton"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablecleartpmbutton_0","displayName":"(Disabled or not configured) The security processor troubleshooting page shows a button that initiates the process to clear the security processor (TPM).","description":"(Disabled or not configured) The security processor troubleshooting page shows a button that initiates the process to clear the security processor (TPM).","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablecleartpmbutton_1","displayName":"(Enabled) The security processor troubleshooting page will not show a button to initiate the process to clear the security processor (TPM)","description":"(Enabled) The security processor troubleshooting page will not show a button to initiate the process to clear the security processor (TPM)","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabledevicesecurityui","displayName":"Disable Device Security UI","description":"Use this policy setting if you want to disable the display of the Device security area in the Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disabledevicesecurityui"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabledevicesecurityui_0","displayName":"(Disable) The users can see the display of the Device security area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the Device security area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabledevicesecurityui_1","displayName":"(Enable) The users cannot see the display of the Device security area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the Device security area in Windows Defender Security Center.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableenhancednotifications","displayName":"Disable Enhanced Notifications","description":"Use this policy if you want Windows Defender Security Center to only display notifications which are considered critical. If you disable or do not configure this setting, Windows Defender Security Center will display critical and non-critical notifications to users. NoteIf Suppress notification is enabled then users will not see critical or non-critical messages. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disableenhancednotifications"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableenhancednotifications_0","displayName":"(Disable) Windows Defender Security Center will display critical and non-critical notifications to users..","description":"(Disable) Windows Defender Security Center will display critical and non-critical notifications to users..","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disableenhancednotifications_1","displayName":"(Enable) Windows Defender Security Center only display notifications which are considered critical on clients.","description":"(Enable) Windows Defender Security Center only display notifications which are considered critical on clients.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablefamilyui","displayName":"Disable Family UI","description":"Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablefamilyui"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablefamilyui_0","displayName":"(Disable) The users can see the display of the family options area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the family options area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablefamilyui_1","displayName":"(Enable) The users cannot see the display of the family options area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the family options area in Windows Defender Security Center.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablehealthui","displayName":"Disable Health UI","description":"Use this policy setting if you want to disable the display of the device performance and health area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablehealthui"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablehealthui_0","displayName":"(Disable) The users can see the display of the device performance and health area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the device performance and health area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablehealthui_1","displayName":"(Enable) The users cannot see the display of the device performance and health area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the device performance and health area in Windows Defender Security Center.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenetworkui","displayName":"Disable Network UI","description":"Use this policy setting if you want to disable the display of the firewall and network protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablenetworkui"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenetworkui_0","displayName":"(Disable) The users can see the display of the firewall and network protection area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the firewall and network protection area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenetworkui_1","displayName":"(Enable) The users cannot see the display of the firewall and network protection area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the firewall and network protection area in Windows Defender Security Center.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenotifications","displayName":"Disable Notifications","description":"Use this policy setting if you want to disable the display of Windows Defender Security Center notifications. If you disable or do not configure this setting, Windows Defender Security Center notifications will display on devices. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablenotifications"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenotifications_0","displayName":"(Disable) The users can see the display of Windows Defender Security Center notifications.","description":"(Disable) The users can see the display of Windows Defender Security Center notifications.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablenotifications_1","displayName":"(Enable) The users cannot see the display of Windows Defender Security Center notifications.","description":"(Enable) The users cannot see the display of Windows Defender Security Center notifications.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabletpmfirmwareupdatewarning","displayName":"Disable Tpm Firmware Update Warning","description":"Hide the recommendation to update TPM Firmware when a vulnerable firmware is detected. Enabled:Users will not be shown a recommendation to update their TPM Firmware. Disabled:Users will see a recommendation to update their TPM Firmware if Windows Security detects the system contains a TPM with vulnerable firmware. Not configured:Same as Disabled. Supported values:0 - Disabled (default)1 - Enabled","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disabletpmfirmwareupdatewarning"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabletpmfirmwareupdatewarning_0","displayName":"(Disable or Not configured) A warning will be displayed if the firmware of the security processor (TPM) should be updated for TPMs that have a vulnerability.","description":"(Disable or Not configured) A warning will be displayed if the firmware of the security processor (TPM) should be updated for TPMs that have a vulnerability.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disabletpmfirmwareupdatewarning_1","displayName":"(Enabled) No warning will be displayed if the firmware of the security processor (TPM) should be updated.","description":"(Enabled) No warning will be displayed if the firmware of the security processor (TPM) should be updated.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablevirusui","displayName":"Disable Virus UI","description":"Use this policy setting if you want to disable the display of the virus and threat protection area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disablevirusui"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablevirusui_0","displayName":"(Disable) The users can see the display of the virus and threat protection area in Windows Defender Security Center.","description":"(Disable) The users can see the display of the virus and threat protection area in Windows Defender Security Center.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disablevirusui_1","displayName":"(Enable) The users cannot see the display of the virus and threat protection area in Windows Defender Security Center.","description":"(Enable) The users cannot see the display of the virus and threat protection area in Windows Defender Security Center.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disallowexploitprotectionoverride","displayName":"Disallow Exploit Protection Override","description":"Prevent users from making changes to the exploit protection settings area in the Windows Defender Security Center. If you disable or do not configure this setting, local users can make changes in the exploit protection settings area. Value type is integer. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#disallowexploitprotectionoverride"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disallowexploitprotectionoverride_0","displayName":"(Disable) Local users are allowed to make changes in the exploit protection settings area.","description":"(Disable) Local users are allowed to make changes in the exploit protection settings area.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_disallowexploitprotectionoverride_1","displayName":"(Enable) Local users cannot make changes in the exploit protection settings area.","description":"(Enable) Local users cannot make changes in the exploit protection settings area.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_email","displayName":"Email","description":"The email address that is displayed to users.  The default mail application is used to initiate email actions. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display contact options. Value type is string. Supported operations are Add, Get, Replace and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#email"],"options":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enablecustomizedtoasts","displayName":"Enable Customized Toasts","description":"Enable this policy to display your company name and contact options in the notifications. If you disable or do not configure this setting, or do not provide CompanyName and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will display a default notification text. Value type is integer. Supported operations are Add, Get, Replace, and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#enablecustomizedtoasts"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enablecustomizedtoasts_0","displayName":"(Disable) Notifications contain a default notification text.","description":"(Disable) Notifications contain a default notification text.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enablecustomizedtoasts_1","displayName":"(Enable) Notifications contain the company name and contact options.","description":"(Enable) Notifications contain the company name and contact options.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enableinappcustomization","displayName":"Enable In App Customization","description":"Enable this policy to have your company name and contact options displayed in a contact card fly out in Windows Defender Security Center. If you disable or do not configure this setting, or do not provide CompanyName and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will not display the contact card fly out notification. Value type is integer. Supported operations are Add, Get, Replace, and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#enableinappcustomization"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enableinappcustomization_0","displayName":"(Disable) Do not display the company name and contact options in the card fly out notification.","description":"(Disable) Do not display the company name and contact options in the card fly out notification.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_enableinappcustomization_1","displayName":"(Enable) Display the company name and contact options in the card fly out notification.","description":"(Enable) Display the company name and contact options in the card fly out notification.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hideransomwaredatarecovery","displayName":"Hide Ransomware Data Recovery","description":"Use this policy setting to hide the Ransomware data recovery area in Windows Defender Security Center.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#hideransomwaredatarecovery"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hideransomwaredatarecovery_0","displayName":"(Disable or not configured) The Ransomware data recovery area will be visible.","description":"(Disable or not configured) The Ransomware data recovery area will be visible.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hideransomwaredatarecovery_1","displayName":"(Enable) The Ransomware data recovery area is hidden.","description":"(Enable) The Ransomware data recovery area is hidden.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidesecureboot","displayName":"Hide Secure Boot","description":"Use this policy to hide the Secure boot area in the Windows Defender Security Center.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#hidesecureboot"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidesecureboot_0","displayName":"(Disable or not configured) The Secure boot area is displayed.","description":"(Disable or not configured) The Secure boot area is displayed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidesecureboot_1","displayName":"(Enable) The Secure boot area is hidden.","description":"(Enable) The Secure boot area is hidden.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidetpmtroubleshooting","displayName":"Hide TPM Troubleshooting","description":"Use this policy to hide the Security processor (TPM) troubleshooting area in the Windows Defender Security Center.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#hidetpmtroubleshooting"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidetpmtroubleshooting_0","displayName":"(Disable or not configured) The Security processor (TPM) troubleshooting area is displayed.","description":"(Disable or not configured) The Security processor (TPM) troubleshooting area is displayed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidetpmtroubleshooting_1","displayName":"(Enable) The Security processor (TPM) troubleshooting area is hidden.","description":"(Enable) The Security processor (TPM) troubleshooting area is hidden.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidewindowssecuritynotificationareacontrol","displayName":"Hide Windows Security Notification Area Control","description":"This policy setting hides the Windows Security notification area control. The user needs to either sign out and sign in or reboot the computer for this setting to take effect. Enabled:Windows Security notification area control will be hidden. Disabled:Windows Security notification area control will be shown. Not configured:Same as Disabled. Supported values:0 - Disabled (default)1 - Enabled","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#hidewindowssecuritynotificationareacontrol"],"options":[{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidewindowssecuritynotificationareacontrol_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_hidewindowssecuritynotificationareacontrol_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_phone","displayName":"Phone","description":"The phone number or Skype ID that is displayed to users.  Skype is used to initiate the call. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display contact options. Value type is string. Supported operations are Add, Get, Replace, and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#phone"],"options":null},{"id":"device_vendor_msft_policy_config_windowsdefendersecuritycenter_url","displayName":"URL","description":"The help portal URL this is displayed to users.  The default browser is used to initiate this action. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then the device will not display contact options. Value type is Value type is string. Supported operations are Add, Get, Replace, and Delete.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter#url"],"options":null},{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowsuggestedappsinwindowsinkworkspace","displayName":"Allow Suggested Apps In Windows Ink Workspace","description":"Show recommended app suggestions in the ink workspace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsInkWorkspace#allowsuggestedappsinwindowsinkworkspace"],"options":[{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowsuggestedappsinwindowsinkworkspace_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowsuggestedappsinwindowsinkworkspace_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowwindowsinkworkspace","displayName":"Allow Windows Ink Workspace","description":"Specifies whether to allow the user to access the ink workspace.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsInkWorkspace#allowwindowsinkworkspace"],"options":[{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowwindowsinkworkspace_0","displayName":"access to ink workspace is disabled. The feature is turned off.","description":"access to ink workspace is disabled. The feature is turned off.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowwindowsinkworkspace_1","displayName":"ink workspace is enabled (feature is turned on), but the user cannot access it above the lock screen.","description":"ink workspace is enabled (feature is turned on), but the user cannot access it above the lock screen.","helpText":null},{"id":"device_vendor_msft_policy_config_windowsinkworkspace_allowwindowsinkworkspace_2","displayName":"ink workspace is enabled (feature is turned on), and the user is allowed to use it above the lock screen.","description":"ink workspace is enabled (feature is turned on), and the user is allowed to use it above the lock screen.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_allowautomaticrestartsignon","displayName":"Sign-in and lock last interactive user automatically after a restart","description":"This policy setting controls whether a device will automatically sign in and lock the last interactive user after the system restarts or after a shutdown and cold boot.\r\n\r\nThis only occurs if the last interactive user didn’t sign out before the restart or shutdown.​\r\n\r\nIf the device is joined to Active Directory or Azure Active Directory, this policy only applies to Windows Update restarts. Otherwise, this will apply to both Windows Update restarts and user-initiated restarts and shutdowns.​\r\n\r\nIf you don’t configure this policy setting, it is enabled by default. When the policy is enabled, the user is automatically signed in and the session is automatically locked with all lock screen apps configured for that user after the device boots.​\r\n\r\nAfter enabling this policy, you can configure its settings through the ConfigAutomaticRestartSignOn policy, which configures the mode of automatically signing in and locking the last interactive user after a restart or cold boot​.\r\n\r\nIf you disable this policy setting, the device does not configure automatic sign in. The user’s lock screen apps are not restarted after the system restarts.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-allowautomaticrestartsignon"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_allowautomaticrestartsignon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_allowautomaticrestartsignon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon","displayName":"Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot","description":"This policy setting controls the configuration under which an automatic restart and sign on and lock occurs after a restart or cold boot. If you chose “Disabled” in the “Sign-in and lock last interactive user automatically after a restart” policy, then automatic sign on will not occur and this policy does not need to be configured.\r\n\r\nIf you enable this policy setting, you can choose one of the following two options:\r\n\r\n1. “Enabled if BitLocker is on and not suspended” specifies that automatic sign on and lock will only occur if BitLocker is active and not suspended during the reboot or shutdown. Personal data can be accessed on the device’s hard drive at this time if BitLocker is not on or suspended during an update. BitLocker suspension temporarily removes protection for system components and data but may be needed in certain circumstances to successfully update boot-critical components.\r\n BitLocker is suspended during updates if:\r\n - The device doesn’t have TPM 2.0 and PCR7, or\r\n - The device doesn’t use a TPM-only protector\r\n2. “Always Enabled” specifies that automatic sign on will happen even if BitLocker is off or suspended during reboot or shutdown. When BitLocker is not enabled, personal data is accessible on the hard drive. Automatic restart and sign on should only be run under this condition if you are confident that the configured device is in a secure physical location.\r\n\r\nIf you disable or don’t configure this setting, automatic sign on will default to the “Enabled if BitLocker is on and not suspended” behavior.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-configautomaticrestartsignon"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_configautomaticrestartsignondescription","displayName":"Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_configautomaticrestartsignondescription_0","displayName":"Enabled if BitLocker is on and not suspended","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_configautomaticrestartsignon_configautomaticrestartsignondescription_1","displayName":"Always Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_disablelockscreenappnotifications","displayName":"Turn off app notifications on the lock screen","description":"This policy setting allows you to prevent app notifications from appearing on the lock screen.\r\n\r\nIf you enable this policy setting, no app notifications are displayed on the lock screen.\r\n\r\nIf you disable or do not configure this policy setting, users can choose which apps display notifications on the lock screen.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-disablelockscreenappnotifications"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_disablelockscreenappnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_disablelockscreenappnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_dontdisplaynetworkselectionui","displayName":"Do not display network selection UI","description":"This policy setting allows you to control whether anyone can interact with available networks UI on the logon screen.\r\n\r\nIf you enable this policy setting, the PC's network connectivity state cannot be changed without signing into Windows.\r\n\r\nIf you disable or don't configure this policy setting, any user can disconnect the PC from the network or can connect the PC to other available networks without signing into Windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-dontdisplaynetworkselectionui"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_dontdisplaynetworkselectionui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_dontdisplaynetworkselectionui_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_enablefirstlogonanimation","displayName":"Enable First Logon Animation","description":"This policy setting allows you to control whether users see the first sign-in animation when signing in to the computer for the first time. This applies to both the first user of the computer who completes the initial setup and users who are added to the computer later. It also controls if Microsoft account users will be offered the opt-in prompt for services during their first sign-in. If you enable this policy setting, Microsoft account users will see the opt-in prompt for services, and users with other accounts will see the sign-in animation. If you disable this policy setting, users will not see the animation and Microsoft account users will not see the opt-in prompt for services. If you do not configure this policy setting, the user who completes the initial Windows setup will see the animation during their first sign-in. If the first user had already completed the initial setup and this policy setting is not configured, users new to this computer will not see the animation. Note: The first sign-in animation will not be shown on Server, so this policy will have no effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsLogon#enablefirstlogonanimation"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_enablefirstlogonanimation_0","displayName":"Disabled","description":"Disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_enablefirstlogonanimation_1","displayName":"Enabled","description":"Enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_enablemprnotifications","displayName":"Configure the transmission of the user's password in the content of MPR notifications sent by winlogon.","description":"This policy controls whether the user's password is included in the content of MPR notifications sent by winlogon in the system.\r\n\r\nIf you disable this setting or do not configure it, winlogon sends MPR notifications with empty password fields of the user's authentication info.\r\n\r\nIf you enable this setting, winlogon sends MPR notifications containing the user's password in the authentication info.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-enablemprnotifications"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_enablemprnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_enablemprnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_enumeratelocalusersondomainjoinedcomputers","displayName":"Enumerate local users on domain-joined computers","description":"This policy setting allows local users to be enumerated on domain-joined computers. \r\n\r\nIf you enable this policy setting, Logon UI will enumerate all local users on domain-joined computers.\r\n\r\nIf you disable or do not configure this policy setting, the Logon UI will not enumerate local users on domain-joined computers.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowslogon#windowslogon-enumeratelocalusersondomainjoinedcomputers"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_enumeratelocalusersondomainjoinedcomputers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_enumeratelocalusersondomainjoinedcomputers_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_hidefastuserswitching","displayName":"Hide Fast User Switching","description":"This policy setting allows you to hide the Switch User interface in the Logon UI, the Start menu and the Task Manager. If you enable this policy setting, the Switch User interface is hidden from the user who is attempting to log on or is logged on to the computer that has this policy applied. The locations that Switch User interface appear are in the Logon UI, the Start menu and the Task Manager. If you disable or do not configure this policy setting, the Switch User interface is accessible to the user in the three locations.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsLogon#hidefastuserswitching"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_hidefastuserswitching_0","displayName":"Disabled","description":"Disabled (visible).","helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_hidefastuserswitching_1","displayName":"Enabled","description":"Enabled (hidden).","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowslogon_overrideshellprogram","displayName":"Override Shell Program","description":"This policy is used by IT admin to override the registry based shell program.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsLogon#overrideshellprogram"],"options":[{"id":"device_vendor_msft_policy_config_windowslogon_overrideshellprogram_0","displayName":"Not Configured","description":"Not Configured","helpText":null},{"id":"device_vendor_msft_policy_config_windowslogon_overrideshellprogram_1","displayName":"Apply Lightweight shell","description":"Apply Lightweight shell","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging","displayName":"Turn on PowerShell Script Block Logging","description":"\r\n This policy setting enables logging of all PowerShell script input to the Microsoft-Windows-PowerShell/Operational event log. If you enable this policy setting,\r\n Windows PowerShell will log the processing of commands, script blocks, functions, and scripts - whether invoked interactively, or through automation.\r\n \r\n If you disable this policy setting, logging of PowerShell script input is disabled.\r\n \r\n If you enable the Script Block Invocation Logging, PowerShell additionally logs events when invocation of a command, script block, function, or script\r\n starts or stops. Enabling Invocation Logging generates a high volume of event logs.\r\n \r\n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowspowershell#windowspowershell-turnonpowershellscriptblocklogging"],"options":[{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging","displayName":"Log script block invocation start / stop events:","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging_0","displayName":"False","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_windowspowershell_turnonpowershellscriptblocklogging_enablescriptblockinvocationlogging_1","displayName":"True","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_windowssandbox_allowaudioinput","displayName":"Allow Audio Input","description":"Allow audio input in Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowaudioinput"],"options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowaudioinput_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowaudioinput_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowssandbox_allowclipboardredirection","displayName":"Allow Clipboard Redirection","description":"Allow clipboard sharing with Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowclipboardredirection"],"options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowclipboardredirection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowclipboardredirection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowssandbox_allownetworking","displayName":"Allow Networking","description":"Allow networking in Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allownetworking"],"options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allownetworking_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allownetworking_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowssandbox_allowprinterredirection","displayName":"Allow Printer Redirection","description":"Allow printer sharing with Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowprinterredirection"],"options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowprinterredirection_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowprinterredirection_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowssandbox_allowvgpu","displayName":"Allow VGPU","description":"Allow vGPU sharing for Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowvgpu"],"options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowvgpu_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowvgpu_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_windowssandbox_allowvideoinput","displayName":"Allow Video Input","description":"Allow video input in Windows Sandbox","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WindowsSandbox#allowvideoinput"],"options":[{"id":"device_vendor_msft_policy_config_windowssandbox_allowvideoinput_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_windowssandbox_allowvideoinput_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsadvertisement","displayName":"Allow Mdns Advertisement","description":"This policy setting allows you to turn off the Wireless Display multicast DNS service advertisement from a Wireless Display receiver.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowmdnsadvertisement"],"options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsadvertisement_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsadvertisement_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsdiscovery","displayName":"Allow Mdns Discovery","description":"This policy setting allows you to turn off discovering the display service advertised over multicast DNS by a Wireless Display receiver.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowmdnsdiscovery"],"options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsdiscovery_0","displayName":"Not allowed.","description":"Not allowed.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowmdnsdiscovery_1","displayName":"Allowed.","description":"Allowed.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompc","displayName":"Allow Projection From PC","description":"This policy allows you to turn off projection from a PC. If you set it to 0, your PC cannot discover or project to other devices. If you set it to 1, your PC can discover and project to other devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowprojectionfrompc"],"options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompc_0","displayName":"Your PC cannot discover or project to other devices.","description":"Your PC cannot discover or project to other devices.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompc_1","displayName":"Your PC can discover and project to other devices.","description":"Your PC can discover and project to other devices.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompcoverinfrastructure","displayName":"Allow Projection From PC Over Infrastructure","description":"This policy allows you to turn off projection from a PC over infrastructure. If you set it to 0, your PC cannot discover or project to other infrastructure devices, though it may still be possible to discover and project over WiFi Direct. If you set it to 1, your PC can discover and project to other devices over infrastructure.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowprojectionfrompcoverinfrastructure"],"options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompcoverinfrastructure_0","displayName":"Your PC cannot discover or project to other infrastructure devices, although it is possible to discover and project over WiFi Direct.","description":"Your PC cannot discover or project to other infrastructure devices, although it is possible to discover and project over WiFi Direct.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectionfrompcoverinfrastructure_1","displayName":"Your PC can discover and project to other devices over infrastructure.","description":"Your PC can discover and project to other devices over infrastructure.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopc","displayName":"Allow Projection To PC","description":"This policy setting allows you to turn off projection to a PC If you set it to 0, your PC can't be discoverable or projected to over Wi-Fi Direct. If you set it to 1, your PC can be discoverable and projected to over Wi-Fi Direct. The user has an option to turn it always on or off except for manual launch, too.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowprojectiontopc"],"options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopc_0","displayName":"Projection to PC is not allowed. Always off and the user cannot enable it.","description":"Projection to PC is not allowed. Always off and the user cannot enable it.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopc_1","displayName":"Projection to PC is allowed. Enabled only above the lock screen.","description":"Projection to PC is allowed. Enabled only above the lock screen.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopcoverinfrastructure","displayName":"Allow Projection To PC Over Infrastructure","description":"This policy setting allows you to turn off projection to a PC over infrastructure. If you set it to 0, your PC cannot be discoverable and can't be projected to over infrastructure, though it may still be possible to project over WiFi Direct. If you set it to 1, your PC can be discoverable and can be projected to over infrastructure.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowprojectiontopcoverinfrastructure"],"options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopcoverinfrastructure_0","displayName":"Your PC is not discoverable and other devices cannot project to it over infrastructure, although it is possible to project to it over WiFi Direct.","description":"Your PC is not discoverable and other devices cannot project to it over infrastructure, although it is possible to project to it over WiFi Direct.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowprojectiontopcoverinfrastructure_1","displayName":"Your PC is discoverable and other devices can project to it over infrastructure.","description":"Your PC is discoverable and other devices can project to it over infrastructure.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowuserinputfromwirelessdisplayreceiver","displayName":"Allow User Input From Wireless Display Receiver","description":"Setting this policy controls whether or not the wireless display can send input—keyboard, mouse, pen, and touch input if the display supports it—back to the source device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#allowuserinputfromwirelessdisplayreceiver"],"options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowuserinputfromwirelessdisplayreceiver_0","displayName":"Wireless display input disabled.","description":"Wireless display input disabled.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_allowuserinputfromwirelessdisplayreceiver_1","displayName":"Wireless display input enabled.","description":"Wireless display input enabled.","helpText":null}]},{"id":"device_vendor_msft_policy_config_wirelessdisplay_requirepinforpairing","displayName":"Require Pin For Pairing","description":"This policy setting allows you to require a pin for pairing. If you set this to 0, a pin isn't required for pairing. If you set this to 1, the pairing ceremony for new devices will always require a PIN. If you set this to 2, all pairings will require PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-WirelessDisplay#requirepinforpairing"],"options":[{"id":"device_vendor_msft_policy_config_wirelessdisplay_requirepinforpairing_0","displayName":"PIN is not required.","description":"PIN is not required.","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_requirepinforpairing_1","displayName":"Pairing ceremony for new devices will always require a PIN","description":"Pairing ceremony for new devices will always require a PIN","helpText":null},{"id":"device_vendor_msft_policy_config_wirelessdisplay_requirepinforpairing_2","displayName":"All pairings will require PIN","description":"All pairings will require PIN","helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdebugshell","displayName":"Allow the debug shell","description":"When set to disabled, this policy disables the debug shell (wsl.exe --debug-shell). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdebugshell_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdebugshell_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdiskmount","displayName":"Allow passthrough disk mount","description":"When set to disabled, this policy disables passthrough disk mounting in WSL2 (wsl.exe --mount). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdiskmount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowdiskmount_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowinboxwsl","displayName":"Allow the Inbox version of the Windows Subsystem For Linux","description":"When set to disabled, this policy disables the inbox version (optional component) of the Windows Subsystem For Linux. If this policy is disabled, only the store version of WSL can be used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowinboxwsl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowinboxwsl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl","displayName":"Allow the Windows Subsystem For Linux","description":"When set to disabled, this policy disables access to the Windows Subsystem For Linux for all users on the machine.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl1","displayName":"Allow WSL1","description":"When set to disabled, this policy disables WSL1. When disabled, only WSL2 distributions can be used.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_allowwsl1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelcommandlineusersettingconfigurable","displayName":"Allow kernel command line configuration","description":"When set to disabled, this policy disables kernel command line configuration via .wslconfig (wsl2.kernelCommandLine). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelcommandlineusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelcommandlineusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelusersettingconfigurable","displayName":"Allow custom kernel configuration","description":"When set to disabled, this policy disables custom kernel configuration via .wslconfig (wsl2.kernel). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customkernelusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customnetworkingusersettingconfigurable","displayName":"Allow custom networking configuration","description":"When set to disabled, this policy disables custom networking configuration via .wslconfig (wsl2.networkingmode). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customnetworkingusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customnetworkingusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customsystemdistrousersettingconfigurable","displayName":"Allow custom system distribution configuration","description":"When set to disabled, this policy disables custom system distribution configuration via .wslconfig (wsl2.systemDistro). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customsystemdistrousersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_customsystemdistrousersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_firewallusersettingconfigurable","displayName":"Allow user setting firewall configuration","description":"When set to disabled, this policy disables firewall configuration via .wslconfig (wsl2.firewall). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_firewallusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_firewallusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_kerneldebugusersettingconfigurable","displayName":"Allow kernel debugging","description":"When set to disabled, this policy disables kernel kernel debugging configuration via .wslconfig (wsl2.kernelDebugPort). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_kerneldebugusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_kerneldebugusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_nestedvirtualizationusersettingconfigurable","displayName":"Allow nested virtualization","description":"When set to disabled, this policy disables nested virtualization configuration via .wslconfig (wsl2.nestedVirtualization). This policy only applies to Store WSL.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_nestedvirtualizationusersettingconfigurable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv1~policy~wsl_nestedvirtualizationusersettingconfigurable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode","displayName":"Configure default networking mode","description":"This policy specifies the default networking mode to be used for WSL2.","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown","displayName":"Default Networking Mode (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown_1","displayName":"NAT","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown_3","displayName":"Mirrored","description":null,"helpText":null},{"id":"device_vendor_msft_policy_config_wslv3~policy~wsl_defaultnetworkingmode_defaultnetworkingmode_dropdown_4","displayName":"VirtioProxy","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_elevationclientsettings_allowelevationdetection","displayName":"(Preview) Automatically detect elevations","description":"","helpText":"When set to Yes, applications that need elevated permissions to run will automatically be elevated (based on the rules you set). Otherwise, the system only evaluates requests through the right-click menu or if they are set for automatic elevation.","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_allowelevationdetection_0","displayName":"No","description":"No","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_allowelevationdetection_1","displayName":"Yes","description":"Yes","helpText":null}]},{"id":"device_vendor_msft_policy_elevationclientsettings_defaultelevationresponse","displayName":"Default elevation response","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_defaultelevationresponse_0","displayName":"Deny all requests","description":"Deny all requests","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_defaultelevationresponse_1","displayName":"Require user confirmation","description":"Require user confirmation","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_defaultelevationresponse_2","displayName":"Require support approval","description":"Require support approval","helpText":null}]},{"id":"device_vendor_msft_policy_elevationclientsettings_enableepm","displayName":"Endpoint Privilege Management","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_enableepm_1","displayName":"Enabled","description":"Enabled","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_enableepm_0","displayName":"Disabled","description":"Turning off this feature will uninstall the companion client from assigned devices if one is already installed","helpText":"Turning off this feature will uninstall the companion client from assigned devices if one is already installed"}]},{"id":"device_vendor_msft_policy_elevationclientsettings_reportingscope","displayName":"Reporting scope","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_reportingscope_1","displayName":"Diagnostic data and managed elevations only","description":"Diagnostic data and managed elevations only","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_reportingscope_2","displayName":"Diagnostic data and all endpoint elevations","description":"Diagnostic data and all endpoint elevations","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_reportingscope_0","displayName":"Diagnostic data only","description":"Diagnostic data only","helpText":null}]},{"id":"device_vendor_msft_policy_elevationclientsettings_senddata","displayName":"Send elevation data for reporting","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_elevationclientsettings_senddata_1","displayName":"Yes","description":"Yes","helpText":null},{"id":"device_vendor_msft_policy_elevationclientsettings_senddata_0","displayName":"No","description":"No","helpText":null}]},{"id":"device_vendor_msft_policy_privilegemanagement_elevationclientsettings_defaultelevationresponse_validation","displayName":"Validation","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationclientsettings_defaultelevationresponse_validation_0","displayName":"Business justification","description":"Business Justification","helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationclientsettings_defaultelevationresponse_validation_1","displayName":"Windows authentication","description":"Windows Authentication","helpText":null}]},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}","displayName":"Elevation Rule Name","description":"Unique alpha numeric identifier for the rule. The rule name must not include a forward slash (/).","helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_appliesto","displayName":"Applies to","description":"","helpText":null,"infoUrls":[],"options":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_allusers","displayName":"All device users","description":null,"helpText":null}},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_arguments","displayName":"Restrict Arguments","description":"Specifies the argument values of the argument based elevation rule.","helpText":null,"infoUrls":[],"options":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_arguments_allow","displayName":"Allow","description":"These are arguments the end user can run elevated with the file specified in the rule.","helpText":null}},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_arguments_restrictargumentlist","displayName":"Argument List","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_certificatefileupload","displayName":"File upload","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_certificatepayloadwithreusablesetting","displayName":"Certificate","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_certificatetype","displayName":"Certificate type","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_publisher","displayName":"Publisher","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_issuingauthority","displayName":"Certificate authority","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_childprocessbehavior","displayName":"Child process behavior","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_allowrunelevated","displayName":"Allow all child processes to run elevated","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_allowrunelevatedrulerequired","displayName":"Require rule to elevate","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_deny","displayName":"Deny all","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_description","displayName":"Description","description":"Specifies the description of the rule.","helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_filedescription","displayName":"File description","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_filehash","displayName":"File hash","description":"Hash of the file that should be elevated","helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_filename","displayName":"File name","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_filepath","displayName":"File path","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_fileversion","displayName":"Minimum version","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_internalname","displayName":"Internal name","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_name","displayName":"Rule name","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_productname","displayName":"Product name","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype","displayName":"Elevation type","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_self","displayName":"User confirmed","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_automatic","displayName":"Automatic","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_deny","displayName":"Deny","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_supportarbitrated","displayName":"Support approved","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_userconfirmeduser","displayName":"Elevate as current user","description":null,"helpText":null}]},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_userconfirmeduservalidation","displayName":"Validation","description":"","helpText":"","infoUrls":[],"options":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_userconfirmeduservalidation_0","displayName":"Windows authentication","description":"Windows Authentication","helpText":null}},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_userconfirmeduservalidation_2","displayName":"Additional Validation Requirements","description":"","helpText":"","infoUrls":[],"options":{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_userconfirmeduservalidation_2_0","displayName":"Business justification","description":"Business Justification","helpText":null}},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_validation","displayName":"Validation","description":"","helpText":"","infoUrls":[],"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_validation_0","displayName":"Business justification","description":"Business Justification","helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_ruletype_validation_1","displayName":"Windows authentication","description":"Windows Authentication","helpText":null}]},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_signaturesource","displayName":"Signature source","description":"","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_signaturesource_0","displayName":"Use a certificate file in reusable settings","description":null,"helpText":null},{"id":"device_vendor_msft_policy_privilegemanagement_elevationrules_{elevationrulename}_signaturesource_1","displayName":"Upload a certificate file","description":null,"helpText":null}]},{"id":"device_vendor_msft_reboot_schedule_dailyrecurrent","displayName":"Daily Recurrent","description":"Value in ISO8601, time is required. A reboot will be scheduled each day at the configured time starting at the date and time. Setting a null (empty) date will delete the existing schedule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Reboot-csp/"],"options":null},{"id":"device_vendor_msft_reboot_schedule_single","displayName":"Single","description":"Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. Both the date and time are required. A reboot will be scheduled to occur at the specified date and time. Setting a null (empty) date will delete the existing schedule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Reboot-csp/"],"options":null},{"id":"device_vendor_msft_reboot_schedule_weeklyrecurrent","displayName":"Weekly Recurrent","description":"Value in ISO8601 date and time format (such as 2025-10-07T10:35:00) is required. While it is supported to set either DailyRecurrent or WeeklyRecurrent schedules, it is not supported to enable both settings simultaneously. A reboot will be scheduled to occur every week at the configured day and time starting at the specified date and time. Setting a null (empty) date will delete the existing schedule.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/Reboot-csp/"],"options":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_enableautoremediation","displayName":"Enable Auto Remediation (Windows Insiders only)","description":"Enable to automatically check for remediation solutions. Disable to check manually.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"options":[{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_enableautoremediation_true","displayName":"Auto remediation enabled","description":"Auto remediation enabled","helpText":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_enableautoremediation_false","displayName":"Auto remediation disabled","description":"Auto remediation disabled","helpText":null}]},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_setretryinterval","displayName":"Set Retry Interval (Windows Insiders only)","description":"Refers to the time in minutes that a device will wait before trying to look for solutions again. The retry interval should not be higher than the time to reboot, and will only take effect if auto remediation is on. Otherwise an invalid argument error will be returned and no changes will be made. A retry interval of 0 means that the device will look for solutions once without any retries.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"options":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_autoremediationsettings_settimetoreboot","displayName":"Set Time To Reboot (Windows Insiders only)","description":"Refers to the time in minutes that a device will spend in the recovery environment before attempting to reboot. The maximum time to reboot possible is 72 hours, should be greater than or equal to the retry interval, and only takes effect if auto remediation is on. Otherwise an invalid argument error will be returned and no changes will be made.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"options":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_enablecloudremediation","displayName":"Enable Cloud Remediation (Windows Insiders only)","description":"Enable or disable quick machine recovery, a feature that will search for device recovery solutions if your device fails to start.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"options":[{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_enablecloudremediation_true","displayName":"Cloud remediation enabled","description":"Cloud remediation enabled","helpText":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_enablecloudremediation_false","displayName":"Cloud remediation disabled","description":"Cloud remediation disabled","helpText":null}]},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpassword","displayName":"Network Password (Windows Insiders only)","description":"Refers to the password for the wifi network that the device will attempt to connect to during remediation. If a password is set without a SSID, then this will be ignored.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"options":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptionstore","displayName":"Network Password Encryption Store (Windows Insiders only)","description":"The encryption store that is specified if we are using a custom certificate for password encryption.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"options":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptiontype","displayName":"Network Password Encryption Type (Windows Insiders only)","description":"Refers to the type of encryption that can be used for the network password. If you specify \"Encrypt with custom certificate\" you must also enter the encryption store.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"options":[{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptiontype_1","displayName":"No encryption","description":"No encryption","helpText":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptiontype_2","displayName":"Encrypt using Mdm certificate","description":"Encrypt using Mdm certificate","helpText":null},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkpasswordencryptiontype_3","displayName":"Encrypt with custom certificate","description":"Encrypt with custom certificate","helpText":null}]},{"id":"device_vendor_msft_remoteremediation_cloudremediationsettings_networksettings_networkcredentials_networkssid","displayName":"Network SSID (Windows Insiders only)","description":"Refers to the wifi network SSID that the device will attempt to automatically connect to during remediation.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/RemoteRemediation-csp/"],"options":null},{"id":"device_vendor_msft_scepcertificate_certificatetype","displayName":"CertificateType","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_scepcertificate_certificatevalidityperiod","displayName":"Certificate validity period","description":"The amount of time remaining before the certificate expires. Enter a value that is equal to or lower than the validity period shown in the certificate template. Default is set at one year.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_scepcertificate_hashalgorithm","displayName":"Hash algorithm","description":"Use a hash algorithm type with the certificate. Make sure to select the strongest level of security that the connecting devices support.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_scepcertificate_keystorageprovider","displayName":"Key storage provider (KSP)","description":"Select where you want to store the certificate’s key.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_scepcertificate_keyusage","displayName":"Key usage","description":"Specify the cryptographic action that is required to exchange the certificate’s public key.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_scepcertificate_rootcertificate","displayName":"Root Certificate","description":"Choose a previously configured and assigned root CA certificate profile. The CA certificate must match the root certificate of the CA that is issuing the certificate for this profile (the one you are currently configuring).","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_scepcertificate_scepserverurls","displayName":"SCEP Server URLs","description":"Add one or more URLs for the NDES Server that issues certificates through SCEP.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_scepcertificate_subjectnameformat","displayName":"Subject name format","description":"Select how Intune automatically creates the subject name in the certificate request. If the certificate is for a user, you can also include the user's email address in the subject name.Please review subject name documentation on how to best use the Subject name format field.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/mem/intune/protect/certificates-profile-scep"],"options":null},{"id":"device_vendor_msft_trustedcertificate_certificatefile","displayName":"Certificate file","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_trustedcertificate_destinationstore","displayName":"Destination Store","description":"Destination store for trusted certificates.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_vpnconnection_connectionname","displayName":"Connection name","description":"This is a descriptive name for the VPN connection and will be displayed to end-users on their device.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_vpnconnection_connectiontype","displayName":"Connection type","description":"This is the type of VPN server you use in your company.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_vpnconnection_profilewithuserordevicescope","displayName":"Use this VPN profile with a user/device scope","description":"This is the scope for whether the VPN Profile will be per user, or per device","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_vpnconnection_servers","displayName":"Servers","description":"List of VPN servers. Exactly one needs to be marked as the default server.","helpText":"","infoUrls":[],"options":null},{"id":"device_vendor_msft_wifi_profile_{ssid}_proxy","displayName":"Company proxy settings","description":"The presence of the field enables WPAD for proxy lookup.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"options":null},{"id":"device_vendor_msft_wifi_profile_{ssid}_proxypacurl","displayName":"Connect Automatically when in range","description":"Connect to more preferred network if available","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"options":null},{"id":"device_vendor_msft_wifi_profile_{ssid}_proxywpad","displayName":"Connect to this network, even when its not broadcasting its SSID","description":"The presence of the field enables WPAD for proxy lookup.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"options":null},{"id":"device_vendor_msft_wifi_profile_{ssid}_wificost","displayName":"Metered connection limit","description":"If the policy is active selecting one of the values from the following list will set the cost of WLAN connection for the Wi-Fi profile. (1:Unrestricted - unlimited connection, 2: Fixed - capacity constraints up to a certain data limit, 3: Variable - costed on per byte basic) Default behaviour: Unrestricted","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"options":null},{"id":"device_vendor_msft_wifi_profile_{ssid}_wlanxml","displayName":"Wireless security type","description":"XML describing the network configuration and follows Windows WLAN_profile schema. Link to schema: http://msdn.microsoft.com/en-us/library/windows/desktop/ms707341(v=vs.85).aspx","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/wifi-csp"],"options":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_samplesharing","displayName":"Sample Sharing","description":"Return or set Windows Defender Advanced Threat Protection Sample Sharing configuration parameter: 0 - none, 1 - All","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_samplesharing_0","displayName":"None","description":null,"helpText":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_samplesharing_1","displayName":"All","description":null,"helpText":null}]},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_telemetryreportingfrequency","displayName":"[Deprecated] Telemetry Reporting Frequency","description":"Return or set Windows Defender Advanced Threat Protection telemetry reporting frequency. Allowed values are: 1 - Normal, 2 - Expedite. This setting is deprecated and no longer has impact on devices.","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_telemetryreportingfrequency_1","displayName":"Normal","description":null,"helpText":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configuration_telemetryreportingfrequency_2","displayName":"Expedite","description":null,"helpText":null}]},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configurationtype","displayName":"Microsoft Defender for Endpoint client configuration package type","description":"Microsoft Defender for Endpoint endpoint detection and response capabilities provide advanced attack detections that are near real-time and actionable. Security analysts can prioritize alerts effectively, gain visibility into the full scope of a breach, and take response actions to remediate threats.","helpText":null,"infoUrls":[],"options":[{"id":"device_vendor_msft_windowsadvancedthreatprotection_configurationtype_autofromconnector","displayName":"Auto from connector","description":null,"helpText":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configurationtype_onboard","displayName":"Onboard","description":null,"helpText":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_configurationtype_offboard","displayName":"Offboard","description":null,"helpText":null}]},{"id":"device_vendor_msft_windowsadvancedthreatprotection_offboarding","displayName":"Offboarding (Device)","description":"Set Windows Defender Advanced Threat Protection Offboarding blob and initiate offboarding","helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_onboarding","displayName":"Onboarding (Device)","description":"Set Windows Defender Advanced Threat Protection Onboarding blob and initiate onboarding to Windows Defender Advanced Threat Protection","helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_windowsadvancedthreatprotection_onboarding_fromconnector","displayName":"Onboarding blob from Connector","description":"Set Windows Defender Advanced Threat Protection Onboarding blob and initiate onboarding to Windows Defender Advanced Threat Protection","helpText":null,"infoUrls":[],"options":null},{"id":"device_vendor_msft_windowsbackupandrestore_enablewindowsrestore","displayName":"Enable Windows Restore","description":"Sets a policy to enable Windows Restore.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsBackupAndRestore-csp/"],"options":[{"id":"device_vendor_msft_windowsbackupandrestore_enablewindowsrestore_false","displayName":"Windows Restore Not Configured","description":"Windows Restore Not Configured","helpText":null},{"id":"device_vendor_msft_windowsbackupandrestore_enablewindowsrestore_true","displayName":"Windows Restore Enabled","description":"Windows Restore Enabled","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_audit_auditapplicationguard","displayName":"Audit Application Guard","description":"This policy setting allows you to decide whether auditing events can be collected from Microsoft Defender Application Guard. If you enable this setting, Application Guard inherits auditing policies from your device and logs system events from the Application Guard container to your host. If you disable this setting, event logs aren't collected from your Application Guard container.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_audit_auditapplicationguard_0","displayName":"Disabled","description":"Audit event logs aren't collected for Application Guard.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_audit_auditapplicationguard_1","displayName":"Enabled","description":"Application Guard inherits its auditing policies from system and starts to audit security events for Application Guard container.","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_installwindowsdefenderapplicationguard","displayName":"Install Windows defender application guard","description":"Initiates remote installation of Application Guard feature.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/windowsdefenderapplicationguard-csp/"],"options":{"id":"device_vendor_msft_windowsdefenderapplicationguard_installwindowsdefenderapplicationguard_install","displayName":"Install - Will initiate feature install","description":"Will initiate feature install.","helpText":null}},{"id":"device_vendor_msft_windowsdefenderapplicationguard_platformstatus","displayName":"Platform status","description":"Applies to Microsoft Office/Generic platform. Returns bitmask that indicates status of Application Guard platform installation and prerequisites on the device. Bit 0 - Set to 1 when Application Guard is enabled into enterprise manage mode. Bit 1 - Set to 1 when the client machine is Hyper-V capable. Bit 2 - Reserved for Microsoft. Bit 3 - Set to 1 when Application Guard is installed on the client machine. Bit 4 - Reserved for Microsoft. Bit 5 - Set to 1 when the client machine meets minimum hardware requirements.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/windowsdefenderapplicationguard-csp/"],"options":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowcameramicrophoneredirection","displayName":"Allow camera and microphone access","description":"This policy allows you to determine whether applications inside Microsoft Defender Application Guard can access the device’s camera and microphone when these settings are enabled on the user’s device. If you enable this policy, applications inside Microsoft Defender Application Guard will be able to access the camera and microphone on the user’s device. If you disable this policy, applications inside Microsoft Defender Application Guard will be unable to access the camera and microphone on the user’s device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowcameramicrophoneredirection_0","displayName":"Disabled","description":"Microsoft Defender Application Guard cannot access the device's camera and microphone. When the policy is not configured, it is the same as disabled (0).","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowcameramicrophoneredirection_1","displayName":"Enabled","description":"Turns on the functionality to allow Microsoft Defender Application Guard to access the device's camera and microphone.","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowpersistence","displayName":"Allow data persistence","description":"This policy setting allows you to decide whether data should persist across different sessions in Microsoft Defender Application Guard. If you enable this setting, Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowpersistence_0","displayName":"Disabled","description":"Application Guard discards user-downloaded files and other items (such as, cookies, Favorites, and so on) during machine restart or user log-off.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowpersistence_1","displayName":"Enabled","description":"Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions.","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowvirtualgpu","displayName":"Allow hardware-accelerated rendering","description":"This policy setting determines whether Microsoft Defender Application Guard renders graphics using hardware or software acceleration. If you enable this setting, Microsoft Defender Application Guard uses Hyper-V to access supported, high-security rendering graphics hardware (GPUs). These GPUs improve rendering performance and battery life while using Microsoft Defender Application Guard, particularly for video playback and other graphics-intensive use cases. If you enable this setting without connecting any high-security rendering graphics hardware, Microsoft Defender Application Guard will automatically revert to software-based (CPU) rendering.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowvirtualgpu_0","displayName":"Disabled","description":"Cannot access the vGPU and uses the CPU to support rendering graphics. When the policy is not configured, it is the same as disabled (0).","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowvirtualgpu_1","displayName":"Enabled","description":"Turns on the functionality to access the vGPU offloading graphics rendering from the CPU. This can create a faster experience when working with graphics intense websites or watching video within the container.","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowwindowsdefenderapplicationguard","displayName":"Turn on Microsoft Defender Application Guard","description":"This policy setting enables application isolation through Microsoft Defender Application Guard.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowwindowsdefenderapplicationguard_0","displayName":"Disabled","description":"Disable Microsoft Defender Application Guard","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowwindowsdefenderapplicationguard_1","displayName":"Enabled for Microsoft Edge ONLY","description":"Enable Microsoft Defender Application Guard for Microsoft Edge ONLY","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowwindowsdefenderapplicationguard_2","displayName":"Enabled for isolated Windows environments ONLY","description":"Enable Microsoft Defender Application Guard for isolated Windows environments ONLY","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_allowwindowsdefenderapplicationguard_3","displayName":"Enabled for Microsoft Edge AND isolated Windows environments","description":"Enable Microsoft Defender Application Guard for Microsoft Edge AND isolated Windows environments","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_certificatethumbprints","displayName":"Certificate Thumbprints","description":"This policy setting allows certain device level Root Certificates to be shared with the Microsoft Defender Application Guard container. If you enable this setting, certificates with a thumbprint matching the ones specified will be transferred into the container. Multiple certificates can be specified by using a comma to separate the thumbprints for each certificate you want to transfer. Here's an example: b4e72779a8a362c860c36a6461f31e3aa7e58c14,1b1d49f06d2a697a544a1059bd59a7b058cda924. If you disable or don’t configure this setting, certificates are not shared with the Microsoft Defender Application Guard container.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardfiletype","displayName":"Clipboard content options","description":"If you choose to enable copying, this policy determines the type of content that can be copied.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardfiletype_1","displayName":"Allow text copying","description":"Allow text copying.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardfiletype_2","displayName":"Allow image copying","description":"Allow image copying.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardfiletype_3","displayName":"Allow both text and image copying","description":"Allow text and image copying.","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings","displayName":"Clipboard behavior settings","description":"This policy setting allows you to decide how the clipboard behaves while in Microsoft Defender Application Guard.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings_0","displayName":"Disable clipboard functionality completely","description":"Completely turns Off the clipboard functionality for the Application Guard.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings_1","displayName":"Enable clipboard operation from Application Guard to the host","description":"Turns On clipboard operation from an isolated session to the host.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings_2","displayName":"Enable clipboard operation from the host to Application Guard","description":"Turns On clipboard operation from the host to an isolated session.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_clipboardsettings_3","displayName":"Enable clipboard operation in both directions","description":"Turns On clipboard operation in both the directions.","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings","displayName":"Print Settings","description":"This policy setting allows you to decide how the print functionality behaves while in Microsoft Defender Application Guard.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_0","displayName":"Disable all print functionality","description":"Disables all print functionality.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_1","displayName":"Enable XPS printing","description":"Enables only XPS printing.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_2","displayName":"Enable PDF printing","description":"Enables only PDF printing.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_4","displayName":"Enable local printing","description":"Enables only local printing.","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_printingsettings_8","displayName":"Enable network printing","description":"Enables only network printing.","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_savefilestohost","displayName":"Allow files to download and save to the host operating system","description":"This policy setting determines whether to save downloaded files to the host operating system from the Microsoft Defender Application Guard container. If you enable this setting, people can save downloaded files from the Microsoft Defender Application Guard container to the host operating system.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/WindowsDefenderApplicationGuard-csp/"],"options":[{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_savefilestohost_0","displayName":"Disabled","description":"The user cannot download files from Edge in the container to the host file system. When the policy is not configured, it is the same as disabled (0).","helpText":null},{"id":"device_vendor_msft_windowsdefenderapplicationguard_settings_savefilestohost_1","displayName":"Enabled","description":"Turns on the functionality to allow users to download files from Edge in the container to the host file system.","helpText":null}]},{"id":"device_vendor_msft_windowsdefenderapplicationguard_status","displayName":"Status","description":"Returns bitmask that indicates status of Application Guard installation for Microsoft Edge and prerequisites on the device.","helpText":"","infoUrls":["https://docs.microsoft.com/en-us/windows/client-management/mdm/windowsdefenderapplicationguard-csp/"],"options":null},{"id":"diskmanagement_diskmanagement","displayName":"com.apple.configuration.diskmanagement.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"diskmanagement_restrictions","displayName":"Restrictions","description":"Defines the restrictions for disks","helpText":null,"infoUrls":[],"options":null},{"id":"diskmanagement_restrictions_externalstorage","displayName":"External Storage","description":"Specifies the mount policy for external storage:\n* Allowed - external storage that is read-write or read-only will be mounted.\n* ReadOnly - only external storage that is read-only will be automatically mounted. Note that external storage that is read-write will not be mounted read-only.\n* Disallowed - no external storage will be mounted.","helpText":null,"infoUrls":[],"options":[{"id":"diskmanagement_restrictions_externalstorage_0","displayName":"Allowed","description":null,"helpText":null},{"id":"diskmanagement_restrictions_externalstorage_1","displayName":"ReadOnly","description":null,"helpText":null},{"id":"diskmanagement_restrictions_externalstorage_2","displayName":"Disallowed","description":null,"helpText":null}]},{"id":"diskmanagement_restrictions_networkstorage","displayName":"Network Storage","description":"Specifies the mount policy for network storage:\n* Allowed - network storage that is read-write or read-only will be mounted.\n* ReadOnly - only network storage that is read-only will be mounted. Note that network storage that is read-write will not be mounted read-only.\n* Disallowed - no network storage will be mounted.","helpText":null,"infoUrls":[],"options":[{"id":"diskmanagement_restrictions_networkstorage_0","displayName":"Allowed","description":null,"helpText":null},{"id":"diskmanagement_restrictions_networkstorage_1","displayName":"ReadOnly","description":null,"helpText":null},{"id":"diskmanagement_restrictions_networkstorage_2","displayName":"Disallowed","description":null,"helpText":null}]},{"id":"enforcement_detailsurl","displayName":"Details URL","description":"The URL of a web page that shows details that the organization provides about the enforced software update.","helpText":null,"infoUrls":[],"options":null},{"id":"enforcement_enforcement","displayName":"com.apple.configuration.softwareupdate.enforcement.specific","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"enforcement_targetbuildversion","displayName":"Target Build Version","description":"The target build version to update the device to by the appropriate time, for example, `20A242`. Use the build version for testing during seeding periods. The build version can include a supplemental version identifier, for example, `20A242a`.","helpText":null,"infoUrls":[],"options":null},{"id":"enforcement_targetlocaldatetime","displayName":"Target Date Time","description":"The local date time value that specifies when to force install the software update. If the user doesn’t trigger the software update before this time, the device force installs it","helpText":null,"infoUrls":[],"options":null},{"id":"enforcement_targetosversion","displayName":"Target OS Version","description":"The target OS version to update the device to by the appropriate time. This is the OS version number, for example, '16.1'. It may also include a supplemental version identifier, for example, '16.1.1'.","helpText":null,"infoUrls":[],"options":null},{"id":"enrollment_autopilot_dpp_accountype","displayName":"User account type","description":"Specify whether users are administrators or standard users on the device. Note that this setting does not apply to Global Administrator or Company Administrator accounts. These accounts cannot be standard users because they have access to all administrative features in Microsoft Entra ID.","helpText":"","infoUrls":[],"options":[{"id":"enrollment_autopilot_dpp_accountype_0","displayName":"Administrator","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_accountype_1","displayName":"Standard User","description":null,"helpText":null}]},{"id":"enrollment_autopilot_dpp_allowdiagnostics","displayName":"Show link to diagnostics","description":"","helpText":"A link will be displayed for users to collect diagnostic logs if deployment fails.","infoUrls":[],"options":[{"id":"enrollment_autopilot_dpp_allowdiagnostics_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_allowdiagnostics_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"enrollment_autopilot_dpp_allowedappids","displayName":"Allowed Applications","description":"Select up to 10 managed apps you want to reference with this deployment. These apps should be assigned to the device security group you selected earlier. You can check the installation status for these apps in the device details for devices in this deployment.","helpText":"","infoUrls":[],"options":null},{"id":"enrollment_autopilot_dpp_allowedpolicyids","displayName":"Allowed Policies","description":"Select up to 10 policies you want to reference with this deployment. These policies should already be assigned to the Device group you selected earlier. You can check the installation status for these policies in the Device status report for this deployment.","helpText":"","infoUrls":[],"options":null},{"id":"enrollment_autopilot_dpp_allowedscriptids","displayName":"Allowed Scripts","description":"Select up to 10 PowerShell scripts to install during this deployment. These scripts should be already assigned to the Device group selected earlier. You can check the installation status for these scripts in the device details for devices in this deployment.","helpText":"","infoUrls":[],"options":null},{"id":"enrollment_autopilot_dpp_allowskip","displayName":"Allow users to skip setup after multiple attempts","description":"Allow users to continue to desktop if deployment fails.","helpText":"","infoUrls":[],"options":[{"id":"enrollment_autopilot_dpp_allowskip_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_allowskip_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"enrollment_autopilot_dpp_applydevicerenametemplate","displayName":"Apply device name template","description":"Create a naming template to add names to your devices during enrollment.","helpText":"","infoUrls":[],"options":[{"id":"enrollment_autopilot_dpp_applydevicerenametemplate_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_applydevicerenametemplate_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"enrollment_autopilot_dpp_customerrormessage","displayName":"Custom error message","description":"This message will be displayed if an error occurs during deployment.","helpText":"","infoUrls":[],"options":null},{"id":"enrollment_autopilot_dpp_deploymentmode","displayName":"Deployment mode","description":"Deployment mode controls if a user needs to provide credentials in order to provision the device.","helpText":"","infoUrls":[],"options":{"id":"enrollment_autopilot_dpp_deploymentmode_0","displayName":"User-driven","description":"Devices are associated with the user enrolling the device and user credentials are required to provision the device","helpText":null}},{"id":"enrollment_autopilot_dpp_deploymenttype","displayName":"Deployment type","description":"","helpText":"","infoUrls":[],"options":{"id":"enrollment_autopilot_dpp_deploymenttype_0","displayName":"Single user","description":null,"helpText":null}},{"id":"enrollment_autopilot_dpp_devicerenametemplate","displayName":"Enter a name","description":"Create a unique name for your devices. Names must be 15 characters or less, and can contain letters (a-z, A-Z), numbers (0-9), and hyphens. Names must not contain only numbers. Names cannot include a blank space. Use the %SERIAL% macro to add a hardware-specific serial number. Alternatively, use the %RAND:x% macro to add a random string of numbers, where x equals the number of digits to add.","helpText":"","infoUrls":[],"options":null},{"id":"enrollment_autopilot_dpp_devicesecuritygroupids","displayName":"Device security group","description":"Choose a set of security groups to join the device to upon enrollment.","helpText":"","infoUrls":[],"options":null},{"id":"enrollment_autopilot_dpp_jointype","displayName":"Join type","description":"Specify how devices join an identity provider in your organization.","helpText":"","infoUrls":[],"options":{"id":"enrollment_autopilot_dpp_jointype_0","displayName":"Microsoft Entra joined","description":"Cloud-only without an on-premises Windows Server Active Directory","helpText":null}},{"id":"enrollment_autopilot_dpp_language","displayName":"Language (Region)","description":"Specify the language and region that will be used.","helpText":"","infoUrls":[],"options":[{"id":"enrollment_autopilot_dpp_language_0","displayName":"Operating system default","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_1","displayName":"User select","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_2","displayName":"Arabic (U.A.E.)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_3","displayName":"Arabic (Bahrain)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_4","displayName":"Arabic (Algeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_5","displayName":"Arabic (Egypt)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_6","displayName":"Arabic (Iraq)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_7","displayName":"Arabic (Jordan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_8","displayName":"Arabic (Kuwait)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_9","displayName":"Arabic (Lebanon)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_10","displayName":"Arabic (Libya)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_11","displayName":"Arabic (Morocco)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_12","displayName":"Arabic (Oman)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_13","displayName":"Arabic (Qatar)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_14","displayName":"Arabic (Saudi Arabia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_15","displayName":"Arabic (Syria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_16","displayName":"Arabic (Tunisia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_17","displayName":"Arabic (Yemen)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_18","displayName":"Azerbaijani (Cyrillic, Azerbaijan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_19","displayName":"Azerbaijani (Latin, Azerbaijan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_20","displayName":"Bangla (Bangladesh)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_21","displayName":"Bangla (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_22","displayName":"Bosnian (Cyrillic)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_23","displayName":"Bosnian (Latin)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_24","displayName":"Chinese (PRC)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_25","displayName":"Chinese (Hong Kong S.A.R.)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_26","displayName":"Chinese (Macao S.A.R.)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_27","displayName":"Chinese (Singapore)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_28","displayName":"Chinese (Taiwan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_29","displayName":"Croatian (Latin)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_30","displayName":"Croatian (Croatia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_31","displayName":"Dutch (Belgium)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_32","displayName":"Dutch (Netherlands)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_33","displayName":"English (Australia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_34","displayName":"English (Belize)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_35","displayName":"English (Canada)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_36","displayName":"English (Caribbean)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_37","displayName":"English (Ireland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_38","displayName":"English (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_39","displayName":"English (Jamaica)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_40","displayName":"English (Malaysia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_41","displayName":"English (New Zealand)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_42","displayName":"English (Republic of the Philippines)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_43","displayName":"English (Singapore)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_44","displayName":"English (Trinidad and Tobago)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_45","displayName":"English (United Kingdom)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_46","displayName":"English (United States)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_47","displayName":"English (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_48","displayName":"English (Zimbabwe)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_49","displayName":"French (Belgium)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_50","displayName":"French (Canada)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_51","displayName":"French (Switzerland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_52","displayName":"French (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_53","displayName":"French (Luxembourg)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_54","displayName":"French (Monaco)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_55","displayName":"German (Austria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_56","displayName":"German (Switzerland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_57","displayName":"German (Germany)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_58","displayName":"German (Liechtenstein)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_59","displayName":"German (Luxembourg)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_60","displayName":"Inuktitut (Syllabics, Canada)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_61","displayName":"Inuktitut (Latin, Canada)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_62","displayName":"Italian (Switzerland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_63","displayName":"Italian (Italy)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_64","displayName":"Malay (Brunei Darussalam)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_65","displayName":"Malay (Malaysia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_66","displayName":"Mongolian (Traditional Mongolian, PRC)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_67","displayName":"Mongolian (Cyrillic, Mongolia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_68","displayName":"Norwegian (Bokmål)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_69","displayName":"Norwegian (Nynorsk)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_70","displayName":"Portuguese (Brazil)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_71","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_72","displayName":"Quechua (Bolivia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_73","displayName":"Quechua (Ecuador)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_74","displayName":"Quechua (Peru)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_75","displayName":"Sami, Lule (Norway)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_76","displayName":"Sami, Lule (Sweden)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_77","displayName":"Sami, Northern (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_78","displayName":"Sami, Northern (Norway)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_79","displayName":"Sami, Northern (Sweden)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_80","displayName":"Sami, Southern (Norway)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_81","displayName":"Sami, Southern (Sweden)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_82","displayName":"Sami, Inari (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_83","displayName":"Sami, Skolt (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_84","displayName":"Afrikaans (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_85","displayName":"Albanian (Albania)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_86","displayName":"Alsatian (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_87","displayName":"Amharic (Ethiopia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_88","displayName":"Armenian (Armenia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_89","displayName":"Assamese (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_90","displayName":"Bashkir (Russia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_91","displayName":"Basque (Basque)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_92","displayName":"Belarusian (Belarus)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_93","displayName":"Breton (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_94","displayName":"Bulgarian (Bulgaria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_95","displayName":"Catalan (Catalan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_96","displayName":"Corsican (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_97","displayName":"Czech (Czech Republic)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_98","displayName":"Danish (Denmark)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_99","displayName":"Dari (Afghanistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_100","displayName":"Divehi (Maldives)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_101","displayName":"Estonian (Estonia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_102","displayName":"Faroese (Faroe Islands)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_103","displayName":"Filipino (Philippines)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_104","displayName":"Finnish (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_105","displayName":"Frisian (Netherlands)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_106","displayName":"Galician (Galician)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_107","displayName":"Georgian (Georgia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_108","displayName":"Greek (Greece)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_109","displayName":"Greenlandic (Greenland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_110","displayName":"Gujarati (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_111","displayName":"Hausa (Latin, Nigeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_112","displayName":"Hebrew (Israel)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_113","displayName":"Hindi (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_114","displayName":"Hungarian (Hungary)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_115","displayName":"Icelandic (Iceland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_116","displayName":"Igbo (Nigeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_117","displayName":"Indonesian (Indonesia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_118","displayName":"Irish (Ireland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_119","displayName":"isiXhosa (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_120","displayName":"isiZulu (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_121","displayName":"Japanese (Japan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_122","displayName":"Kannada (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_123","displayName":"Kazakh (Kazakhstan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_124","displayName":"Khmer (Cambodia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_125","displayName":"K'iche (Guatemala)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_126","displayName":"Kinyarwanda (Rwanda)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_127","displayName":"Kiswahili (Kenya)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_128","displayName":"Konkani (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_129","displayName":"Korean (Korea)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_130","displayName":"Kyrgyz (Kyrgyzstan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_131","displayName":"Lao (Lao P.D.R.)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_132","displayName":"Latvian (Latvia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_133","displayName":"Lithuanian (Lithuania)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_134","displayName":"Lower Sorbian (Germany)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_135","displayName":"Luxembourgish (Luxembourg)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_136","displayName":"Macedonian (Macedonia, FYRO)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_137","displayName":"Malayalam (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_138","displayName":"Maltese (Malta)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_139","displayName":"Maori (New Zealand)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_140","displayName":"Mapudungun (Chile)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_141","displayName":"Marathi (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_142","displayName":"Mohawk (Mohawk)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_143","displayName":"Nepali (Nepal)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_144","displayName":"Occitan (France)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_145","displayName":"Odia (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_146","displayName":"Pashto (Afghanistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_147","displayName":"Persian","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_148","displayName":"Polish (Poland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_149","displayName":"Punjabi (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_150","displayName":"Romanian (Romania)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_151","displayName":"Romansh (Switzerland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_152","displayName":"Russian (Russia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_153","displayName":"Sanskrit (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_154","displayName":"Sesotho sa Leboa (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_156","displayName":"Setswana (South Africa)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_157","displayName":"Sinhala (Sri Lanka)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_158","displayName":"Slovak (Slovakia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_159","displayName":"Slovenian (Slovenia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_160","displayName":"Swedish (Sweden)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_161","displayName":"Syriac (Syria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_162","displayName":"Tajik (Cyrillic, Tajikistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_163","displayName":"Tamazight (Latin, Algeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_164","displayName":"Tamil (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_165","displayName":"Tatar (Russia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_166","displayName":"Telugu (India)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_167","displayName":"Thai (Thailand)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_168","displayName":"Tibetan","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_169","displayName":"Turkish (Turkey)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_170","displayName":"Turkmen (Turkmenistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_171","displayName":"Uighur (PRC)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_172","displayName":"Ukrainian (Ukraine)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_173","displayName":"Urdu (Islamic Republic of Pakistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_174","displayName":"Vietnamese (Vietnam)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_175","displayName":"Welsh (United Kingdom)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_176","displayName":"Wolof (Senegal)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_177","displayName":"Yakut (Russia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_178","displayName":"Yi (PRC)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_179","displayName":"Yoruba (Nigeria)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_180","displayName":"Serbian (Cyrillic)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_181","displayName":"Serbian (Cyrillic, Serbia and Montenegro)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_182","displayName":"Serbian (Latin)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_183","displayName":"Serbian (Latin, Serbia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_184","displayName":"Lower Sorbian (Germany)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_185","displayName":"Upper Sorbian (Germany)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_186","displayName":"Spanish (Spain, Traditional Sort)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_187","displayName":"Spanish (Argentina)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_188","displayName":"Spanish (Bolivia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_189","displayName":"Spanish (Chile)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_190","displayName":"Spanish (Colombia)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_191","displayName":"Spanish (Costa Rica)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_192","displayName":"Spanish (Dominican Republic)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_193","displayName":"Spanish (Ecuador)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_194","displayName":"Spanish (Guatemala)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_195","displayName":"Spanish (Honduras)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_196","displayName":"Spanish (Mexico)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_197","displayName":"Spanish (Nicaragua)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_198","displayName":"Spanish (Panama)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_199","displayName":"Spanish (Peru)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_200","displayName":"Spanish (Puerto Rico)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_201","displayName":"Spanish (Paraguay)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_202","displayName":"Spanish (El Salvador)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_203","displayName":"Spanish (United States)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_204","displayName":"Spanish (Uruguay)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_205","displayName":"Spanish (Venezuela)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_206","displayName":"Swedish (Finland)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_207","displayName":"Uzbek (Cyrillic, Uzbekistan)","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_language_208","displayName":"Uzbek (Latin, Uzbekistan)","description":null,"helpText":null}]},{"id":"enrollment_autopilot_dpp_skipeula","displayName":"Hide Microsoft Software License Terms","description":"Specify whether to show the end-user license agreement to users.","helpText":"","infoUrls":[],"options":[{"id":"enrollment_autopilot_dpp_skipeula_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_skipeula_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"enrollment_autopilot_dpp_skipexpress","displayName":"Hide privacy settings","description":"Specify whether to show privacy settings to users.","helpText":"","infoUrls":[],"options":[{"id":"enrollment_autopilot_dpp_skipexpress_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_skipexpress_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"enrollment_autopilot_dpp_skipkeyboard","displayName":"Automatically configure keyboard","description":"If true, skip the keyboard selection page if Language is set.","helpText":"","infoUrls":[],"options":[{"id":"enrollment_autopilot_dpp_skipkeyboard_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_autopilot_dpp_skipkeyboard_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"enrollment_autopilot_dpp_timeout","displayName":"Minutes allowed before showing installation error","description":"","helpText":"","infoUrls":[],"options":null},{"id":"enrollment_restriction_blockmdmenrollment","displayName":"Block MDM enrollment","description":"Choose to block enrollment based on filters. Add a filter in the Assignments tab. To create a new filter, go to Filters section under Tenant admin.","helpText":"","infoUrls":[],"options":[{"id":"enrollment_restriction_blockmdmenrollment_0","displayName":"No","description":null,"helpText":null},{"id":"enrollment_restriction_blockmdmenrollment_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"extensionsettings_extensionsettings","displayName":"com.apple.configuration.safari.extensions.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"extensionsettings_managedextensions","displayName":"Managed Extensions","description":"Extensions being managed","helpText":null,"infoUrls":[],"options":null},{"id":"extensionsettings_managedextensions_generickey","displayName":"ANY","description":"The composed identifier of the managed extension, or \"*\" for all extensions. In order for the extension to be managed, its host app must be present on the device.","helpText":null,"infoUrls":[],"options":null},{"id":"extensionsettings_managedextensions_generickey_alloweddomains","displayName":"Allowed Domains","description":"Controls the domains and sub-domains the extension is granted access to. Any non-prefixed domains take precedence over prefixed domains, and DeniedDomains takes precedence over AllowedDomains. Any domains not specified in AllowedDomains or DeniedDomains are configurable by the user.","helpText":null,"infoUrls":[],"options":null},{"id":"extensionsettings_managedextensions_generickey_denieddomains","displayName":"Denied Domains","description":"Controls the domains and sub-domains the extension is not allowed to access. Any non-prefixed domains take precedence over prefixed domains, and DeniedDomains takes precedence over AllowedDomains. Any domains not specified in AllowedDomains or DeniedDomains are configurable by the user.","helpText":null,"infoUrls":[],"options":null},{"id":"extensionsettings_managedextensions_generickey_keytobereplaced","displayName":"Managed Extensions","description":"Extensions being managed","helpText":null,"infoUrls":[],"options":null},{"id":"extensionsettings_managedextensions_generickey_privatebrowsing","displayName":"Private Browsing","description":"Controls whether an extension is allowed in Private Browsing.\n* Allowed - The user is allowed to turn the extension on or off in Private Browsing\n* AlwaysOn - The extension will always be on in Private Browsing if the extension is on outside of Private Browsing\n* AlwaysOff - The extension will never be on in Private Browsing","helpText":null,"infoUrls":[],"options":[{"id":"extensionsettings_managedextensions_generickey_privatebrowsing_0","displayName":"Allowed","description":null,"helpText":null},{"id":"extensionsettings_managedextensions_generickey_privatebrowsing_1","displayName":"AlwaysOn","description":null,"helpText":null},{"id":"extensionsettings_managedextensions_generickey_privatebrowsing_2","displayName":"AlwaysOff","description":null,"helpText":null}]},{"id":"extensionsettings_managedextensions_generickey_state","displayName":"State","description":"Controls whether an extension is allowed.\n* Allowed - The user is allowed to turn the extension on or off\n* AlwaysOn - The extension will always be on\n* AlwaysOff - The extension will always be off","helpText":null,"infoUrls":[],"options":[{"id":"extensionsettings_managedextensions_generickey_state_0","displayName":"Allowed","description":null,"helpText":null},{"id":"extensionsettings_managedextensions_generickey_state_1","displayName":"Always On","description":null,"helpText":null},{"id":"extensionsettings_managedextensions_generickey_state_2","displayName":"Always Off","description":null,"helpText":null}]},{"id":"externalintelligencesettings_allowedworkspaceids","displayName":"Allowed Workspace I Ds","description":"An array of strings, but currently restricted to a single element. If present, Apple Intelligence allows use of only the given external integration workspace ID, and requires a sign-in to make requests. The user is required to sign in to integrations that support signing in. Multiple values combine using an intersect operation.","helpText":null,"infoUrls":[],"options":null},{"id":"externalintelligencesettings_allowsignin","displayName":"Allow Sign In","description":"If `false`, disables sign-in for external intelligence integrations.","helpText":null,"infoUrls":[],"options":[{"id":"externalintelligencesettings_allowsignin_false","displayName":"Blocked","description":null,"helpText":null},{"id":"externalintelligencesettings_allowsignin_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"externalintelligencesettings_enabled","displayName":"Enabled","description":"If `false`, disables external intelligence integrations.","helpText":null,"infoUrls":[],"options":[{"id":"externalintelligencesettings_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"externalintelligencesettings_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"externalintelligencesettings_externalintelligencesettings","displayName":"com.apple.configuration.external-intelligence.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"intelligencesettings_allowappleintelligencereport","displayName":"Allow Apple Intelligence Report","description":"If `false`, disables Apple Intelligence Report.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_allowappleintelligencereport_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_allowappleintelligencereport_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_allowgenmoji","displayName":"Allow Genmoji","description":"If `false`, disables Genmoji.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_allowgenmoji_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_allowgenmoji_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_allowimageplayground","displayName":"Allow Image Playground","description":"If `false`, disables Image Playground.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_allowimageplayground_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_allowimageplayground_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_allowimagewand","displayName":"Allow Image Wand","description":"If `false`, disables Image Wand.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_allowimagewand_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_allowimagewand_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_allowpersonalizedhandwritingresults","displayName":"Allow Personalized Handwriting Results","description":"If `false`, disables Personalized Handwriting Results.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_allowpersonalizedhandwritingresults_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_allowpersonalizedhandwritingresults_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_allowvisualintelligencesummary","displayName":"Allow Visual Intelligence Summary","description":"If `false`, disables Visual Intelligence Summary.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_allowvisualintelligencesummary_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_allowvisualintelligencesummary_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_allowwritingtools","displayName":"Allow Writing Tools","description":"If `false`, disables Writing Tools.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_allowwritingtools_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_allowwritingtools_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_apps","displayName":"Apps","description":"If present, configures app-specific Intelligence features.","helpText":null,"infoUrls":[],"options":null},{"id":"intelligencesettings_apps_mail","displayName":"Mail","description":"If present, configures Mail Intelligence features.","helpText":null,"infoUrls":[],"options":null},{"id":"intelligencesettings_apps_mail_allowsmartreplies","displayName":"Allow Smart Replies","description":"If `false`, disables Mail Smart Replies.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_apps_mail_allowsmartreplies_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_apps_mail_allowsmartreplies_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_apps_mail_allowsummary","displayName":"Allow Summary","description":"If `false`, disables Mail Summary.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_apps_mail_allowsummary_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_apps_mail_allowsummary_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_apps_notes","displayName":"Notes","description":"If present, configures Notes Intelligence features.","helpText":null,"infoUrls":[],"options":null},{"id":"intelligencesettings_apps_notes_allowtranscription","displayName":"Allow Transcription","description":"If `false`, disables Notes Transcription.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_apps_notes_allowtranscription_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_apps_notes_allowtranscription_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_apps_notes_allowtranscriptionsummary","displayName":"Allow Transcription Summary","description":"If `false`, disables Notes Transcription Summary.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_apps_notes_allowtranscriptionsummary_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_apps_notes_allowtranscriptionsummary_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_apps_safari","displayName":"Safari","description":"If present, configures Safari intelligence features.","helpText":null,"infoUrls":[],"options":null},{"id":"intelligencesettings_apps_safari_allowsummary","displayName":"Allow Summary","description":"If `false`, disables Safari Summary.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_apps_safari_allowsummary_false","displayName":"Blocked","description":null,"helpText":null},{"id":"intelligencesettings_apps_safari_allowsummary_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"intelligencesettings_forceondeviceonlydictation","displayName":"Force On Device Only Dictation","description":"If `true`, forces On-Device Only Dictation.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_forceondeviceonlydictation_false","displayName":"Disabled","description":null,"helpText":null},{"id":"intelligencesettings_forceondeviceonlydictation_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"intelligencesettings_forceondeviceonlytranslation","displayName":"Force On Device Only Translation","description":"If `true`, forces On-Device Only Translation.","helpText":null,"infoUrls":[],"options":[{"id":"intelligencesettings_forceondeviceonlytranslation_false","displayName":"Disabled","description":null,"helpText":null},{"id":"intelligencesettings_forceondeviceonlytranslation_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"intelligencesettings_intelligencesettings","displayName":"com.apple.configuration.intelligence.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"keyboardsettings_allowautocorrection","displayName":"Allow Auto Correction","description":"If `false`, disables auto-correction.","helpText":null,"infoUrls":[],"options":[{"id":"keyboardsettings_allowautocorrection_false","displayName":"Blocked","description":null,"helpText":null},{"id":"keyboardsettings_allowautocorrection_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"keyboardsettings_allowdefinitionlookup","displayName":"Allow Definition Lookup","description":"If `false`, disables definition lookup.","helpText":null,"infoUrls":[],"options":[{"id":"keyboardsettings_allowdefinitionlookup_false","displayName":"Blocked","description":null,"helpText":null},{"id":"keyboardsettings_allowdefinitionlookup_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"keyboardsettings_allowdictation","displayName":"Allow Dictation","description":"If `false`, disables dictation.","helpText":null,"infoUrls":[],"options":[{"id":"keyboardsettings_allowdictation_false","displayName":"Blocked","description":null,"helpText":null},{"id":"keyboardsettings_allowdictation_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"keyboardsettings_allowmathkeyboardsuggestions","displayName":"Allow Math Keyboard Suggestions","description":"If `false`, disables keyboard suggestions that include math solutions. This key is also supported by the math.settings configuration.","helpText":null,"infoUrls":[],"options":[{"id":"keyboardsettings_allowmathkeyboardsuggestions_false","displayName":"Blocked","description":null,"helpText":null},{"id":"keyboardsettings_allowmathkeyboardsuggestions_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"keyboardsettings_allowpredictivetext","displayName":"Allow Predictive Text","description":"If `false`, disables predictive text.","helpText":null,"infoUrls":[],"options":[{"id":"keyboardsettings_allowpredictivetext_false","displayName":"Blocked","description":null,"helpText":null},{"id":"keyboardsettings_allowpredictivetext_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"keyboardsettings_allowslidetotype","displayName":"Allow Slide To Type","description":"If `false`, disables slide to type.","helpText":null,"infoUrls":[],"options":[{"id":"keyboardsettings_allowslidetotype_false","displayName":"Blocked","description":null,"helpText":null},{"id":"keyboardsettings_allowslidetotype_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"keyboardsettings_allowspellcheck","displayName":"Allow Spell Check","description":"If `false`, disables spell check.","helpText":null,"infoUrls":[],"options":[{"id":"keyboardsettings_allowspellcheck_false","displayName":"Blocked","description":null,"helpText":null},{"id":"keyboardsettings_allowspellcheck_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"keyboardsettings_allowtextreplacement","displayName":"Allow Text Replacement","description":"If `false`, disables text replacement.","helpText":null,"infoUrls":[],"options":[{"id":"keyboardsettings_allowtextreplacement_false","displayName":"Blocked","description":null,"helpText":null},{"id":"keyboardsettings_allowtextreplacement_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"keyboardsettings_keyboardsettings","displayName":"com.apple.configuration.keyboard.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"linux_customconfig_executioncontext","displayName":"Execution context","description":"Specifies in which context to execute the script.","helpText":null,"infoUrls":["https://go.microsoft.com/fwlink/?linkid=2218882"],"options":[{"id":"linux_customconfig_executioncontext_root","displayName":"Root","description":null,"helpText":null},{"id":"linux_customconfig_executioncontext_user","displayName":"User","description":null,"helpText":null}]},{"id":"linux_customconfig_executionfrequency","displayName":"Execution frequency","description":"Specifies how frequently to execute the script.","helpText":null,"infoUrls":["https://go.microsoft.com/fwlink/?linkid=2218882"],"options":[{"id":"linux_customconfig_executionfrequency_15minutes","displayName":"Every 15 minutes","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_30minutes","displayName":"Every 30 minutes","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_1hour","displayName":"Every 1 hour","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_2hours","displayName":"Every 2 hours","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_3hours","displayName":"Every 3 hours","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_6hours","displayName":"Every 6 hours","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_12hours","displayName":"Every 12 hours","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_1day","displayName":"Every 1 day","description":null,"helpText":null},{"id":"linux_customconfig_executionfrequency_1week","displayName":"Every 1 week","description":null,"helpText":null}]},{"id":"linux_customconfig_executionretries","displayName":"Execution retries","description":"Specifies how many times to retry script execution on failure.","helpText":null,"infoUrls":["https://go.microsoft.com/fwlink/?linkid=2218882"],"options":[{"id":"linux_customconfig_executionretries_0","displayName":"No retries","description":null,"helpText":null},{"id":"linux_customconfig_executionretries_1","displayName":"1 time","description":null,"helpText":null},{"id":"linux_customconfig_executionretries_2","displayName":"2 times","description":null,"helpText":null},{"id":"linux_customconfig_executionretries_3","displayName":"3 times","description":null,"helpText":null}]},{"id":"linux_customconfig_script","displayName":"Execution Script","description":"Select the file containing the script to execute.","helpText":null,"infoUrls":["https://go.microsoft.com/fwlink/?linkid=2218882"],"options":null},{"id":"linux_mdatp_managed_antivirusengine_allowedthreats","displayName":"Allowed threats","description":"List of threats (identified by their name) that are not blocked by the product and are instead allowed to run.","helpText":null,"infoUrls":["https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#allowed-threats"],"options":null},{"id":"linux_mdatp_managed_antivirusengine_behaviormonitoring","displayName":"Enable behavior monitoring","description":"Whether the antivirus engine runs behavior monitoring and blocking or not.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#enabledisable-behavior-monitoring"],"options":[{"id":"linux_mdatp_managed_antivirusengine_behaviormonitoring_0","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_behaviormonitoring_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_disallowedthreatactions","displayName":"Disallowed threat actions","description":"Restricts the actions that the local user of a device can take when threats are detected. The actions included in this list are not displayed in the user interface.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#disallowed-threat-actions"],"options":null},{"id":"linux_mdatp_managed_antivirusengine_enablefilehashcomputation","displayName":"Enable file hash computation","description":"Whether the antivirus engine computes hashes for the files it scans or not.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#configure-file-hash-computation-feature"],"options":[{"id":"linux_mdatp_managed_antivirusengine_enablefilehashcomputation_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enablefilehashcomputation_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_enablerealtimeprotection","displayName":"Enable real-time protection (deprecated)","description":"Locates and stops malware from installing or running on your device. You can turn off this setting for a short time before it turns back on automatically.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-real-time-protection"],"options":[{"id":"linux_mdatp_managed_antivirusengine_enablerealtimeprotection_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enablerealtimeprotection_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel","displayName":"Enforcement Level","description":"Specifies the enforcement preference of antivirus engine. Real-time: Real-time protection (scan files as they're modified) is enabled. On-demand: Files are scanned only on demand and real-time protection is turned off. Passive: Runs the antivirus engine in passive mode.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#enforcement-level-for-antivirus-engine"],"options":[{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel_0","displayName":"Realtime","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel_1","displayName":"OnDemand","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_enforcementlevel_2","displayName":"Passive","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_exclusions","displayName":"Scan exclusions","description":"Entities that have been excluded from the scan. Exclusions can be specified by full paths, extensions, or file names.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#scan-exclusions"],"options":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_$type","displayName":"Type","description":null,"helpText":null,"infoUrls":[],"options":[{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_$type_0","displayName":"Path","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_$type_1","displayName":"File extension","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_$type_2","displayName":"Process name","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_extension","displayName":"File extension","description":null,"helpText":null,"infoUrls":[],"options":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_isdirectory","displayName":"Is directory","description":"Directory if selected, or file if not selected","helpText":null,"infoUrls":[],"options":[{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_isdirectory_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_isdirectory_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_name","displayName":"File name","description":"Process name, either or full path or file name, wildcards supported","helpText":null,"infoUrls":[],"options":null},{"id":"linux_mdatp_managed_antivirusengine_exclusions_item_path","displayName":"Path","description":"Path to exclude, wildcards are supported","helpText":null,"infoUrls":[],"options":null},{"id":"linux_mdatp_managed_antivirusengine_exclusionsmergepolicy","displayName":"Exclusions merge","description":"Specify the merge policy for exclusions. This can be a combination of administrator-defined and user-defined exclusions (merge) or only administrator-defined exclusions (admin_only). This setting can be used to restrict local users from defining their own exclusions.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#exclusion-merge-policy"],"options":[{"id":"linux_mdatp_managed_antivirusengine_exclusionsmergepolicy_0","displayName":"merge","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_exclusionsmergepolicy_1","displayName":"admin_only","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_maximumondemandscanthreads","displayName":"maximum on demand scan threads","description":"Specify the maximum number of number of threads used to perform the on demand scan.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#maximum-number-of-items-in-the-antivirus-scan-history"],"options":null},{"id":"linux_mdatp_managed_antivirusengine_nonexecmountpolicy","displayName":"non execute mount mute","description":"Specifies the behavior of RTP on mount point marked as nonexec. ","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#muting-non-exec-mounts"],"options":[{"id":"linux_mdatp_managed_antivirusengine_nonexecmountpolicy_0","displayName":"unmute","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_nonexecmountpolicy_1","displayName":"mute","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_passivemode","displayName":"Enable passive mode (deprecated)","description":"Whether the antivirus engine runs in passive mode or not.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-passive-mode"],"options":[{"id":"linux_mdatp_managed_antivirusengine_passivemode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_passivemode_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_scanafterdefinitionupdate","displayName":"Enable scanning after definition update","description":"Specifies whether to start a process scan after new security intelligence updates are downloaded on the device.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#run-a-scan-after-definitions-are-updated"],"options":[{"id":"linux_mdatp_managed_antivirusengine_scanafterdefinitionupdate_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scanafterdefinitionupdate_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_scanarchives","displayName":"Enable scanning of archives","description":"Specifies whether to scan archives during on-demand antivirus scans.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#scan-archives-on-demand-antivirus-scans-only"],"options":[{"id":"linux_mdatp_managed_antivirusengine_scanarchives_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_scanarchives_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_scanhistorymaximumitems","displayName":"Scan history size","description":"Specify the maximum number of entries to keep in the scan history. Entries include all on-demand scans performed in the past and all antivirus detections.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#maximum-number-of-items-in-the-antivirus-scan-history"],"options":null},{"id":"linux_mdatp_managed_antivirusengine_scanresultsretentiondays","displayName":"Scan results retention","description":"Specify the number of days that results are retained in the scan history on the device. Old scan results are removed from the history. Old quarantined files that are also removed from the disk.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#antivirus-scan-history-retention-in-days"],"options":null},{"id":"linux_mdatp_managed_antivirusengine_threattypesettings","displayName":"Threat type settings","description":"The threatTypeSettings preference in the antivirus engine is used to control how certain threat types are handled by the product.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#threat-type-settings"],"options":null},{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_key","displayName":"Threat type","description":"Type of the threat for which the behavior is configured.","helpText":null,"infoUrls":[],"options":[{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_key_0","displayName":"potentially_unwanted_application","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_key_1","displayName":"archive_bomb","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_value","displayName":"Action to take","description":"Action to take when coming across a threat of the type specified in the preceding section.","helpText":null,"infoUrls":[],"options":[{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_value_0","displayName":"audit","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_value_1","displayName":"block","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_threattypesettings_item_value_2","displayName":"off","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_threattypesettingsmergepolicy","displayName":"Threat type settings merge","description":"Specify the merge policy for threat type settings. This can be a combination of administrator-defined and user-defined settings (merge) or only administrator-defined settings (admin_only). This setting can be used to restrict local users from defining their own settings for different threat types.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#threat-type-settings-merge-policy"],"options":[{"id":"linux_mdatp_managed_antivirusengine_threattypesettingsmergepolicy_0","displayName":"merge","description":null,"helpText":null},{"id":"linux_mdatp_managed_antivirusengine_threattypesettingsmergepolicy_1","displayName":"admin_only","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_antivirusengine_unmonitoredfilesystems","displayName":"Unmonitored Filesystems","description":"List of filesystems (identified by their name) to be unmonitored/excluded from Real Time Protection(RTP).","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#unmonitor-filesystems"],"options":null},{"id":"linux_mdatp_managed_cloudservice_automaticdefinitionupdateenabled","displayName":"Automatic security intelligence updates","description":"Determines whether security intelligence updates are installed automatically:","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-automatic-security-intelligence-updates"],"options":[{"id":"linux_mdatp_managed_cloudservice_automaticdefinitionupdateenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_automaticdefinitionupdateenabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_cloudservice_automaticsamplesubmissionconsent","displayName":"Enable automatic sample submissions","description":"Sends sample files to Microsoft to help protect device users and your organization from potential threats","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-automatic-sample-submissions"],"options":[{"id":"linux_mdatp_managed_cloudservice_automaticsamplesubmissionconsent_none","displayName":"None","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_automaticsamplesubmissionconsent_safe","displayName":"Safe","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_automaticsamplesubmissionconsent_all","displayName":"All","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel","displayName":"Configure cloud block level","description":"Determines how aggressive Defender for Endpoint is in blocking and scanning suspicious files.","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/linux-preferences?view=o365-worldwide#configure-cloud-block-level"],"options":[{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_normal","displayName":"Normal","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_moderate","displayName":"Moderate","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_high","displayName":"High","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_high_plus","displayName":"High_Plus","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_cloudblocklevel_zero_tolerance","displayName":"Zero_Tolerance","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_cloudservice_diagnosticlevel","displayName":"Diagnostic data collection level","description":"We encourage you to share your diagnostic and usage data with us to help improve Microsoft products and services.","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#diagnostic-collection-level"],"options":[{"id":"linux_mdatp_managed_cloudservice_diagnosticlevel_0","displayName":"optional","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_diagnosticlevel_1","displayName":"required","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_cloudservice_enabled","displayName":"Enable cloud delivered protection","description":"Provides increased, faster protection with access to the latest protection data in the cloud. Works best with automatic sample submission turned on","helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#enable--disable-cloud-delivered-protection"],"options":[{"id":"linux_mdatp_managed_cloudservice_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_cloudservice_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_edr_tags","displayName":"Device tags","description":null,"helpText":null,"infoUrls":["https://docs.microsoft.com/microsoft-365/security/defender-endpoint/linux-preferences#add-tag-or-group-id-to-the-configuration-profile"],"options":null},{"id":"linux_mdatp_managed_edr_tags_item_key","displayName":"Type of tag","description":"Specify a tag name and its value. The GROUP tag, tags the device with the specified value. The tag is reflected in the portal under the device page and can be used for filtering and grouping devices.","helpText":null,"infoUrls":[],"options":{"id":"linux_mdatp_managed_edr_tags_item_key_0","displayName":"GROUP","description":null,"helpText":null}},{"id":"linux_mdatp_managed_edr_tags_item_value","displayName":"Value of tag","description":"Only one value per tag type can be set. Type of tags are unique, and should not be repeated in the same configuration profile.","helpText":null,"infoUrls":[],"options":null},{"id":"linux_mdatp_managed_exclusionsettings_exclusions","displayName":"Global Exclusions","description":"Global exclusions apply to both Antivirus and Endpoint detection and response to exclude at a much lower level closer to sensors. Usage: Tackling performance issues. Risk: Significantly risks protection","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/defender-endpoint/linux-preferences#exclusion-setting-preferences"],"options":null},{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_$type","displayName":"Type","description":null,"helpText":null,"infoUrls":[],"options":[{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_$type_0","displayName":"Path","description":null,"helpText":null},{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_$type_1","displayName":"Process name","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_isdirectory","displayName":"Is directory","description":"Directory if selected, or file if not selected","helpText":null,"infoUrls":[],"options":[{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_isdirectory_false","displayName":"Disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_isdirectory_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_name","displayName":"Process name","description":"Process name, either or full path or file name, wildcards NOT supported","helpText":null,"infoUrls":[],"options":null},{"id":"linux_mdatp_managed_exclusionsettings_exclusions_item_path","displayName":"Path","description":"Path to exclude, wildcards are NOT supported","helpText":null,"infoUrls":[],"options":null},{"id":"linux_mdatp_managed_networkprotection_enforcementlevel","displayName":"Enforcement Level","description":"Specifies if network protection is disabled, in audit mode, or enforced","helpText":null,"infoUrls":["https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection-linux?view=o365-worldwide"],"options":[{"id":"linux_mdatp_managed_networkprotection_enforcementlevel_0","displayName":"disabled","description":null,"helpText":null},{"id":"linux_mdatp_managed_networkprotection_enforcementlevel_1","displayName":"audit","description":null,"helpText":null},{"id":"linux_mdatp_managed_networkprotection_enforcementlevel_2","displayName":"block","description":null,"helpText":null}]},{"id":"loginwindow_disableloginitemssuppression","displayName":"Disable Login Items Suppression","description":"If true, prevents the user from disabling login item launches by using the Shift key.","helpText":null,"infoUrls":[],"options":[{"id":"loginwindow_disableloginitemssuppression_false","displayName":"False","description":null,"helpText":null},{"id":"loginwindow_disableloginitemssuppression_true","displayName":"True","description":null,"helpText":null}]},{"id":"loginwindow_loginwindow","displayName":"Top Level Setting Group Collection","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_calculator","displayName":"Calculator","description":"If present, configures the built-in Calculator app.","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_calculator_basicmode","displayName":"Basic Mode","description":"If present, configures the basic mode of the calculator. Basic mode is always enabled.","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_calculator_basicmode_addsquareroot","displayName":"Add Square Root","description":"Add the square root button to the basic calculator by replacing the +/- button. Normally, the square root button is available in scientific mode, so this key can be used to make it available when the scientific mode is restricted.","helpText":null,"infoUrls":[],"options":[{"id":"mathsettings_calculator_basicmode_addsquareroot_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_basicmode_addsquareroot_true","displayName":"True","description":null,"helpText":null}]},{"id":"mathsettings_calculator_inputmodes","displayName":"Input Modes","description":"If present, controls global input options of the calculator. If not present, all input modes are enabled.","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_calculator_inputmodes_rpn","displayName":"RPN","description":"Configures whether RPN input is enabled.","helpText":null,"infoUrls":[],"options":[{"id":"mathsettings_calculator_inputmodes_rpn_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_inputmodes_rpn_true","displayName":"True","description":null,"helpText":null}]},{"id":"mathsettings_calculator_inputmodes_unitconversion","displayName":"Unit Conversion","description":"Configures whether unit conversions are enabled.","helpText":null,"infoUrls":[],"options":[{"id":"mathsettings_calculator_inputmodes_unitconversion_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_inputmodes_unitconversion_true","displayName":"True","description":null,"helpText":null}]},{"id":"mathsettings_calculator_mathnotesmode","displayName":"Math Notes Mode","description":"If present, configures the Math Notes mode of the calculator. If not present, math notes mode is enabled.","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_calculator_mathnotesmode_enabled","displayName":"Enabled","description":"Controls whether the mode is enabled.","helpText":null,"infoUrls":[],"options":[{"id":"mathsettings_calculator_mathnotesmode_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_mathnotesmode_enabled_true","displayName":"True","description":null,"helpText":null}]},{"id":"mathsettings_calculator_programmermode","displayName":"Programmer Mode","description":"If present, configures the programmer mode of the calculator. If not present, programmer mode is enabled.","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_calculator_programmermode_enabled","displayName":"Enabled","description":"Controls whether the mode is enabled.","helpText":null,"infoUrls":[],"options":[{"id":"mathsettings_calculator_programmermode_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_programmermode_enabled_true","displayName":"True","description":null,"helpText":null}]},{"id":"mathsettings_calculator_scientificmode","displayName":"Scientific Mode","description":"If present, configures the scientific mode of the calculator. If not present, scientific mode is enabled.","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_calculator_scientificmode_enabled","displayName":"Enabled","description":"Controls whether the mode is enabled.","helpText":null,"infoUrls":[],"options":[{"id":"mathsettings_calculator_scientificmode_enabled_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_calculator_scientificmode_enabled_true","displayName":"True","description":null,"helpText":null}]},{"id":"mathsettings_mathsettings","displayName":"com.apple.configuration.math.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_systembehavior","displayName":"System Behavior","description":"If present, configures math behavior in the system.","helpText":null,"infoUrls":[],"options":null},{"id":"mathsettings_systembehavior_keyboardsuggestions","displayName":"Keyboard Suggestions","description":"Controls whether keyboard suggestions include math solutions","helpText":null,"infoUrls":[],"options":[{"id":"mathsettings_systembehavior_keyboardsuggestions_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_systembehavior_keyboardsuggestions_true","displayName":"True","description":null,"helpText":null}]},{"id":"mathsettings_systembehavior_mathnotes","displayName":"Math Notes","description":"Controls whether Math Notes is allowed in other apps such as Notes.","helpText":null,"infoUrls":[],"options":[{"id":"mathsettings_systembehavior_mathnotes_false","displayName":"False","description":null,"helpText":null},{"id":"mathsettings_systembehavior_mathnotes_true","displayName":"True","description":null,"helpText":null}]},{"id":"osrecoverysettings_acceptlicense","displayName":"Automatically accept license terms","description":"","helpText":"","infoUrls":[],"options":[{"id":"osrecoverysettings_acceptlicense_0","displayName":"No","description":null,"helpText":null},{"id":"osrecoverysettings_acceptlicense_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"osrecoverysettings_baselanguage","displayName":"Base language","description":"Specify the base language that will be used","helpText":"","infoUrls":[],"options":[{"id":"osrecoverysettings_baselanguage_arabic","displayName":"Arabic","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_bulgarian","displayName":"Bulgarian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_chinese_simplified","displayName":"Chinese (Simplified)","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_chinese_traditional","displayName":"Chinese (Traditional)","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_croatian","displayName":"Croatian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_czech","displayName":"Czech","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_danish","displayName":"Danish","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_dutch","displayName":"Dutch","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_english","displayName":"English (United States)","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_english_uk","displayName":"English (United Kingdom)","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_estonian","displayName":"Estonian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_finnish","displayName":"Finnish","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_french","displayName":"French","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_french_canada","displayName":"French (Canada)","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_german","displayName":"German","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_greek","displayName":"Greek","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_hebrew","displayName":"Hebrew","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_hungarian","displayName":"Hungarian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_italian","displayName":"Italian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_japanese","displayName":"Japanese","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_korean","displayName":"Korean","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_latvian","displayName":"Latvian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_lithuanian","displayName":"Lithuanian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_norwegian","displayName":"Norwegian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_polish","displayName":"Polish","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_portuguese","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_portuguesebrazil","displayName":"Portuguese(Brazil)","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_romanian","displayName":"Romanian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_russian","displayName":"Russian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_serbian_latin ","displayName":"Serbian Latin","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_slovak","displayName":"Slovak","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_slovenian","displayName":"Slovenian","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_spanish","displayName":"Spanish","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_spanishmexico","displayName":"Spanish (Mexico)","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_swedish","displayName":"Swedish","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_thai","displayName":"Thai","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_turkish","displayName":"Turkish","description":null,"helpText":null},{"id":"osrecoverysettings_baselanguage_ukrainian","displayName":"Ukrainian","description":null,"helpText":null}]},{"id":"osrecoverysettings_createrecoverypartition","displayName":"Create recovery partition","description":"Recovery partition created by default 500MB","helpText":"","infoUrls":[],"options":[{"id":"osrecoverysettings_createrecoverypartition_0","displayName":"No","description":null,"helpText":null},{"id":"osrecoverysettings_createrecoverypartition_1","displayName":"Yes","description":null,"helpText":null}]},{"id":"osrecoverysettings_formatdisk","displayName":"Format disk","description":"By default, the primary disk is formatted. Or format all the partition","helpText":"","infoUrls":[],"options":[{"id":"osrecoverysettings_formatdisk_0","displayName":"Format windows partition","description":null,"helpText":null},{"id":"osrecoverysettings_formatdisk_1","displayName":"Format all partition","description":null,"helpText":null}]},{"id":"osrecoverysettings_keyboardsettings","displayName":"Keyboard settings","description":"","helpText":"","infoUrls":[],"options":[{"id":"osrecoverysettings_keyboardsettings_afrikaans","displayName":"Afrikaans","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_afrikaansn","displayName":"Afrikaans (Namibia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_albanian","displayName":"Albanian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_albaniank","displayName":"Albanian (Kosovo)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_alsatianf","displayName":"Alsatian (France)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_amharic","displayName":"Amharic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabic","displayName":"Arabic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabica","displayName":"Arabic (Algeria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicb","displayName":"Arabic (Bahrain)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabice","displayName":"Arabic (Egypt)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabici","displayName":"Arabic (Iraq)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicj)","displayName":"Arabic (Jordan)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabick","displayName":"Arabic (Kuwait)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicl","displayName":"Arabic (Lebanon)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicli","displayName":"Arabic (Libya)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicm","displayName":"Arabic (Morocco)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaico","displayName":"Arabic (Oman)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaicq","displayName":"Arabic (Qatar)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaics","displayName":"Arabic (Syria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaict","displayName":"Arabic (Tunisia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arbaicu","displayName":"Arabic (United Arab Emirates)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicw","displayName":"Arabic (World)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_arabicy","displayName":"Arabic (Yemen)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_armenian","displayName":"Armenian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_assamese","displayName":"Assamese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_azerbaijani","displayName":"Azerbaijani","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_azerbaijanic","displayName":"Azerbaijani (Cyrillic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bangla","displayName":"Bangla","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bashkir","displayName":"Bashkir","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_basque","displayName":"Basque","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_belarusian","displayName":"Belarusian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bengali","displayName":"Bengali (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bosnian","displayName":"Bosnian (Latin)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_breton","displayName":"Breton","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_bulgarian","displayName":"Bulgarian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_burmese","displayName":"Burmese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_catalan","displayName":"Catalan","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_catalana","displayName":"Catalan (Andorra)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_catalanfrance","displayName":"Catalan (France)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_catalanitaly","displayName":"Catalan (Italy)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_centralatlastamazight","displayName":"Central Atlas Tamazight","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_centralatlastamazightarabic","displayName":"Central Atlas Tamazight (Arabic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_centralatlastamazighttifinagh","displayName":"Central Atlas Tamazight (Tifinagh)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_centralkurdish","displayName":"Central Kurdish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chechen","displayName":"Chechen","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_cherokee","displayName":"Cherokee","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinese","displayName":"Chinese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinesesimplifiedhongkongsar","displayName":"Chinese (Simplified, Hong Kong SAR)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinesesimplifiedmacaosar","displayName":"Chinese (Simplified, Macao SAR)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinesetraditional","displayName":"Chinese (Traditional)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_chinesetraditionaltaiwan","displayName":"Chinese (Traditional, Taiwan)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_churchslavic","displayName":"Church Slavic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_colognian","displayName":"Colognian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_cornish","displayName":"Cornish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_corsican","displayName":"Corsican","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_croatian","displayName":"Croatian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_croatianbosniaherzegovina","displayName":"Croatian (Bosnia & Herzegovina)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_czech","displayName":"Czech","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_danish","displayName":"Danish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_danishgreenland","displayName":"Danish (Greenland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_divehi","displayName":"Divehi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutch","displayName":"Dutch","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutcharuba","displayName":"Dutch (Aruba)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchbelgium","displayName":"Dutch (Belgium)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchbonaires","displayName":"Dutch (Bonaire, Sint Eustatius and Saba)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchcuracao","displayName":"Dutch (Curaçao)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchsintmaarten","displayName":"Dutch (Sint Maarten)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dutchsuriname","displayName":"Dutch (Suriname)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_dzongkha","displayName":"Dzongkha","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_english","displayName":"English","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishaustralia","displayName":"English (Australia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishaustria","displayName":"English (Austria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishbelgium","displayName":"English (Belgium)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishbelize","displayName":"English (Belize)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishbritishvirginislands","displayName":"English (British Virgin Islands)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishburundi","displayName":"English (Burundi)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishcanada","displayName":"English (Canada)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishcaribbean","displayName":"English (Caribbean)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishdenmark","displayName":"English (Denmark)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishfalklandislands","displayName":"English (Falkland Islands)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishfinland","displayName":"English (Finland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishgermany","displayName":"English (Germany)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishgibraltar","displayName":"English (Gibraltar)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishguernsey","displayName":"English (Guernsey)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishhongkongsar","displayName":"English (Hong Kong SAR)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishindia","displayName":"English (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishireland","displayName":"English (Ireland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishisleofman","displayName":"English (Isle of Man)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishisrael","displayName":"English (Israel)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishjamaica","displayName":"English (Jamaica)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishjersey","displayName":"English (Jersey)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishmalaysia","displayName":"English (Malaysia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishmalta","displayName":"English (Malta)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishnetherlands","displayName":"English (Netherlands)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishnewzealand","displayName":"English (New Zealand)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishphilippines","displayName":"English (Philippines)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishsingapore","displayName":"English (Singapore)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishslovenia","displayName":"English (Slovenia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishsouthafrica","displayName":"English (South Africa)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishsweden","displayName":"English (Sweden)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishswitzerland","displayName":"English (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishtrinidadtobago","displayName":"English (Trinidad & Tobago)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishuk","displayName":"English (United Kingdom)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_englishzimbabwe","displayName":"English (Zimbabwe)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_estonian","displayName":"Estonian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_faroese","displayName":"Faroese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_filipino","displayName":"Filipino","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_finnish","displayName":"Finnish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_french","displayName":"French","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchbelgium","displayName":"French (Belgium)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchcameroon","displayName":"French (Cameroon)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchcanada","displayName":"French (Canada)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchcotedivoire","displayName":"French (Côte d’Ivoire)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchhaiti","displayName":"French (Haiti)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchluxembourg","displayName":"French (Luxembourg)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchmali","displayName":"French (Mali)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchmonaco","displayName":"French (Monaco)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchmorocco","displayName":"French (Morocco)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchreunion","displayName":"French (Réunion)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchsenegal","displayName":"French (Senegal)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchswitzerland","displayName":"French (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_frenchcongodrc","displayName":"French Congo (DRC)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_friulian","displayName":"Friulian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulah","displayName":"Fulah","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahadlam","displayName":"Fulah (Adlam)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahburkinafaso","displayName":"Fulah (Latin, Burkina Faso)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahcameroon","displayName":"Fulah (Latin, Cameroon)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahgambia","displayName":"Fulah (Latin, Gambia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahghana","displayName":"Fulah (Latin, Ghana)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahguinea","displayName":"Fulah (Latin, Guinea)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahguineabissau","displayName":"Fulah (Latin, Guinea-Bissau)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahliberia","displayName":"Fulah (Latin, Liberia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahmauritania","displayName":"Fulah (Latin, Mauritania)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahniger","displayName":"Fulah (Latin, Niger)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahnigeria","displayName":"Fulah (Latin, Nigeria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_fulahsierraleone","displayName":"Fulah (Latin, Sierra Leone)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_galician","displayName":"Galician","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_georgian","displayName":"Georgian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_german","displayName":"German","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanaustria","displayName":"German (Austria)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanbelgium","displayName":"German (Belgium)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanitaly","displayName":"German (Italy)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanliechtenstein","displayName":"German (Liechtenstein)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanluxembourg","displayName":"German (Luxembourg)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_germanswitzerland","displayName":"German (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_greek","displayName":"Greek","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_guarani","displayName":"Guarani","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_gujarati","displayName":"Gujarati","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hausa","displayName":"Hausa","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hawaiian","displayName":"Hawaiian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hebrew","displayName":"Hebrew","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hindi","displayName":"Hindi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_hungarian","displayName":"Hungarian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_icelandic","displayName":"Icelandic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_igbo","displayName":"Igbo","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_indonesian","displayName":"Indonesian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_interlingua","displayName":"Interlingua","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_inuktitut","displayName":"Inuktitut","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_inuktitutsyllabics","displayName":"Inuktitut (Syllabics)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_irish","displayName":"Irish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_irishunitedkingdom","displayName":"Irish (United Kingdom)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_italian","displayName":"Italian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_italianswitzerland","displayName":"Italian (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_italianvaticancity","displayName":"Italian (Vatican City)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_japanese","displayName":"Japanese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_javanese","displayName":"Javanese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_javanesejavanese","displayName":"Javanese (Javanese)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kalaallisut","displayName":"Kalaallisut","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kannada","displayName":"Kannada","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kashmiri","displayName":"Kashmiri","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kashmiridevanagari","displayName":"Kashmiri (Devanagari)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kazakh","displayName":"Kazakh","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_khmer","displayName":"Khmer","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kinyarwanda","displayName":"Kinyarwanda","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kiswahili","displayName":"Kiswahili","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kiswahilicongodrc","displayName":"Kiswahili (Congo DRC)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kiswahilitanzania","displayName":"Kiswahili (Tanzania)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kiswahiliuganda","displayName":"Kiswahili (Uganda)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_konkani","displayName":"Konkani","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_korean","displayName":"Korean","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_koreannorthkorea","displayName":"Korean (North Korea)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_kyrgyz","displayName":"Kyrgyz","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_lao","displayName":"Lao","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_latvian","displayName":"Latvian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_lithuanian","displayName":"Lithuanian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_lowersorbian","displayName":"Lower Sorbian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_luxembourgish","displayName":"Luxembourgish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_macedonian","displayName":"Macedonian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malagasy","displayName":"Malagasy","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malay","displayName":"Malay","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malaybrunei","displayName":"Malay (Brunei)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malayindonesia","displayName":"Malay (Indonesia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malaysingapore","displayName":"Malay (Singapore)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_malayalam","displayName":"Malayalam","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_maltese","displayName":"Maltese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_manipuri","displayName":"Manipuri","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_manx","displayName":"Manx","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_maori","displayName":"Maori","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mapuche","displayName":"Mapuche","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_marathi","displayName":"Marathi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mazanderani","displayName":"Mazanderani","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mohawk","displayName":"Mohawk","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mongolian","displayName":"Mongolian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mongolian_traditional_mongolian","displayName":"Mongolian (Traditional Mongolian)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_mongolian_traditional_mongolian_mongolia","displayName":"Mongolian (Traditional Mongolian, Mongolia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_nko","displayName":"N'ko","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_nepali","displayName":"Nepali","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_nepali_india","displayName":"Nepali (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_northern_luri","displayName":"Northern Luri","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_northern_sami","displayName":"Northern Sami","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_norwegian","displayName":"Norwegian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_norwegian_nynorsk","displayName":"Norwegian Nynorsk","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_occitan","displayName":"Occitan","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_odia","displayName":"Odia","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_oromo","displayName":"Oromo","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_oromo_kenya","displayName":"Oromo (Kenya)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_ossetic","displayName":"Ossetic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_papiamento","displayName":"Papiamento","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_pashto","displayName":"Pashto","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_pashto_pakistan","displayName":"Pashto (Pakistan)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_persian","displayName":"Persian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_persian_afghanistan","displayName":"Persian (Afghanistan)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_polish","displayName":"Polish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese","displayName":"Portuguese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_angola","displayName":"Portuguese (Angola)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_cabo_verde","displayName":"Portuguese (Cabo Verde)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_equatorial_guinea","displayName":"Portuguese (Equatorial Guinea)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_guinea_bissau","displayName":"Portuguese (Guinea-Bissau)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_luxembourg","displayName":"Portuguese (Luxembourg)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_macao_sar","displayName":"Portuguese (Macao SAR)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_mozambique","displayName":"Portuguese (Mozambique)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_portugal","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_switzerland","displayName":"Portuguese (Switzerland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_sao_tome_principe","displayName":"Portuguese (São Tomé & Príncipe)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_portuguese_timor_leste","displayName":"Portuguese (Timor-Leste)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_prussian","displayName":"Prussian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_punjabi","displayName":"Punjabi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_quechua","displayName":"Quechua","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_quechua_ecuador","displayName":"Quechua (Ecuador)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_quechua_peru","displayName":"Quechua (Peru)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_romanian","displayName":"Romanian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_romanian_moldova","displayName":"Romanian (Moldova)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_romansh","displayName":"Romansh","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_russian","displayName":"Russian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_russian_moldova","displayName":"Russian (Moldova)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sakha","displayName":"Sakha","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sami_lule_norway","displayName":"Sami, Lule (Norway)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sami_northern_finland","displayName":"Sami, Northern (Finland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sami_northern_sweden","displayName":"Sami, Northern (Sweden)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sami_southern_norway","displayName":"Sami, Southern (Norway)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sanskrit","displayName":"Sanskrit","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_scottish_gaelic","displayName":"Scottish Gaelic","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian","displayName":"Serbian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_cyrillic","displayName":"Serbian (Cyrillic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_cyrillic_bosnia_herzegovina","displayName":"Serbian (Cyrillic, Bosnia and Herzegovina)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_cyrillic_kosovo","displayName":"Serbian (Cyrillic, Kosovo)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_cyrillic_montenegro","displayName":"Serbian (Cyrillic, Montenegro)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_latin_bosnia_herzegovina","displayName":"Serbian (Latin, Bosnia & Herzegovina)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_latin_kosovo","displayName":"Serbian (Latin, Kosovo)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_serbian_latin_montenegro","displayName":"Serbian (Latin, Montenegro)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sesotho","displayName":"Sesotho","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sesotho_lesotho","displayName":"Sesotho (Lesotho)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sesotho_sa_leboa","displayName":"Sesotho sa Leboa","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_setswana","displayName":"Setswana","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_setswana_botswana","displayName":"Setswana (Botswana)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_shona","displayName":"Shona","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_sinhala","displayName":"Sinhala","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_slovak","displayName":"Slovak","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_slovenian","displayName":"Slovenian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_somali","displayName":"Somali","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_somali_djibouti","displayName":"Somali (Djibouti)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_somali_ethiopia","displayName":"Somali (Ethiopia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_somali_kenya","displayName":"Somali (Kenya)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish","displayName":"Spanish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_argentina","displayName":"Spanish (Argentina)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_belize","displayName":"Spanish (Belize)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_bolivia","displayName":"Spanish (Bolivia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_brazil","displayName":"Spanish (Brazil)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_chile","displayName":"Spanish (Chile)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_colombia","displayName":"Spanish (Colombia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_costa_rica","displayName":"Spanish (Costa Rica)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_cuba","displayName":"Spanish (Cuba)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_dominican_republic","displayName":"Spanish (Dominican Republic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_ecuador","displayName":"Spanish (Ecuador)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_el_salvador","displayName":"Spanish (El Salvador)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_equatorial_guinea","displayName":"Spanish (Equatorial Guinea)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_guatemala","displayName":"Spanish (Guatemala)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_honduras","displayName":"Spanish (Honduras)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_latin_america","displayName":"Spanish (Latin America)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_mexico","displayName":"Spanish (Mexico)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_nicaragua","displayName":"Spanish (Nicaragua)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_panama","displayName":"Spanish (Panama)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_paraguay","displayName":"Spanish (Paraguay)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_peru","displayName":"Spanish (Peru)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_philippines","displayName":"Spanish (Philippines)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_puerto_rico","displayName":"Spanish (Puerto Rico)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_united_states","displayName":"Spanish (United States)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_uruguay","displayName":"Spanish (Uruguay)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_spanish_venezuela","displayName":"Spanish (Venezuela)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_standard_moroccan_tamazight","displayName":"Standard Moroccan Tamazight","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_swedish","displayName":"Swedish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_swedish_finland","displayName":"Swedish (Finland)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_swiss_german","displayName":"Swiss German","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_syriac","displayName":"Syriac","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tachelhit","displayName":"Tachelhit","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tachelhit_latin","displayName":"Tachelhit (Latin)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tajik","displayName":"Tajik","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tamil","displayName":"Tamil","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tamil_malaysia","displayName":"Tamil (Malaysia)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tamil_singapore","displayName":"Tamil (Singapore)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tamil_sri_lanka","displayName":"Tamil (Sri Lanka)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tatar","displayName":"Tatar","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_telugu","displayName":"Telugu","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_thai","displayName":"Thai","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tibetan","displayName":"Tibetan","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tibetan_india","displayName":"Tibetan (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_tigrinya","displayName":"Tigrinya","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_turkish","displayName":"Turkish","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_turkmen","displayName":"Turkmen","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_ukrainian","displayName":"Ukrainian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_upper_sorbian","displayName":"Upper Sorbian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_urdu","displayName":"Urdu","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_urdu_india","displayName":"Urdu (India)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_uyghur","displayName":"Uyghur","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_uzbek","displayName":"Uzbek","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_uzbek_arabic","displayName":"Uzbek (Arabic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_uzbek_cyrillic","displayName":"Uzbek (Cyrillic)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_valencian_spain","displayName":"Valencian (Spain)","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_vietnamese","displayName":"Vietnamese","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_walser","displayName":"Walser","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_welsh","displayName":"Welsh","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_western_frisian","displayName":"Western Frisian","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_wolof","displayName":"Wolof","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_xitsonga","displayName":"Xitsonga","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_yi","displayName":"Yi","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_yoruba","displayName":"Yoruba","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_isixhosa","displayName":"IsiXhosa","description":null,"helpText":null},{"id":"osrecoverysettings_keyboardsettings_isizulu","displayName":"IsiZulu","description":null,"helpText":null}]},{"id":"osrecoverysettings_os","displayName":"OS","description":"Select the operating system to be installed in recovery scenarios for devices in your organization. Learn more about OS recovery scenarios.","helpText":"","infoUrls":[],"options":null},{"id":"osrecoverysettings_qualityupdate","displayName":"Quality update only","description":"By default, the qualaity update will be included","helpText":"","infoUrls":[],"options":[{"id":"osrecoverysettings_qualityupdate_current","displayName":"Current","description":null,"helpText":null},{"id":"osrecoverysettings_qualityupdate_lastmonth","displayName":"Last month","description":null,"helpText":null},{"id":"osrecoverysettings_qualityupdate_monthbeforelast","displayName":"Month before last","description":null,"helpText":null}]},{"id":"passcode_changeatnextauth","displayName":"Change At Next Auth","description":"If `true`, the system forces a password reset the next time the user tries to authenticate. If you set this key in a configuration in the system scope (device channel), the setting takes effect for all users, and admin authentication may fail until the admin user password is also reset.","helpText":null,"infoUrls":[],"options":[{"id":"passcode_changeatnextauth_false","displayName":"Disabled","description":null,"helpText":null},{"id":"passcode_changeatnextauth_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"passcode_customregex","displayName":"Custom Regex","description":"Specifies a regular expression, and its description, to enforce password compliance. Use the simpler passcode settings whenever possible, and rely on regular expression matching only when necessary. Mistakes in regular expressions can lead to frustrating user experiences, such as unsatisfiable passcode policies, or policy descriptions that don't match the enforced policy.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_customregex_description","displayName":"Description","description":"A dictionary with supported OS language IDs for the keys (such as `en-US`), and values that represent a localized description of the policy that the regular expression enforces. Use the special `default` key for languages that the dictionary doesn't contain.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_customregex_description_generickey","displayName":"ANY","description":"A localized description.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_customregex_description_generickey_keytobereplaced","displayName":"Description","description":"A dictionary with supported OS language IDs for the keys (such as `en-US`), and values that represent a localized description of the policy that the regular expression enforces. Use the special `default` key for languages that the dictionary doesn't contain.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_customregex_regex","displayName":"Regex","description":"A regular expression string to match against the password to determine whether it complies with a policy. The regular expression uses the ICU syntax. The string can't exceed 2048 characters in length.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_failedattemptsresetinminutes","displayName":"Failed Attempts Reset In Minutes","description":"The number of minutes before the login is reset after the maximum number of failed attempts. Also set the `MaximumFailedAttempts` key for this to take effect.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_maximumfailedattempts","displayName":"Maximum Number of Failed Attempts","description":"Specifies the number of failed passcode attempts that can be made before an iOS device is erased or a macOS device is locked. If you don’t change this setting, after six failed attempts, the device imposes a time delay before a passcode can be entered again. The time delay increases with each failed attempt. After the final failed attempt, all data and settings are securely erased from the iOS device. A macOS device locks after the final attempt. The passcode time delay begins after the sixth attempt, so if you set this value to six or lower, no time delay is imposed and the device is erased when the attempt limit is exceeded.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_maximumgraceperiodinminutes","displayName":"Maximum Grace Period","description":"Specifies the maximum period that a user can select, during which a device can be unlocked without entering the passcode. A value of 0 implies no grace period, and requires a passcode be entered immediately. In the absence of this key, the user can select any period.\nIn macOS, this will be translated to screensaver settings.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_maximuminactivityinminutes","displayName":"Automatic Device Lock","description":"Specifies the maximum period that a user can select, during which the device can be idle before it is automatically locked by the system. Once this limit is reached, the device is locked and the passcode must be entered. In the absence of this key, the user can select any period.\nIn macOS, this will be translated to screensaver settings.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_maximumpasscodeageindays","displayName":"Maximum Passcode Age In Days","description":"Specifies the maximum number of days that the passcode can remain unchanged. After this number of days, the system forces the user to change the passcode before it unlocks the device.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_minimumcomplexcharacters","displayName":"Minimum Complex Characters","description":"Specifies the minimum number of complex characters in the password. A complex character is a character other than a number or a letter, such as `&`, `%`, `$`, and `#`.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_minimumlength","displayName":"Minimum Passcode Length","description":"Specifies the minimum number of characters a passcode can contain.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_passcode","displayName":"Passcode","description":"Use this configuration to define passcode policy settings","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_passcodereuselimit","displayName":"Passcode Reuse Limit","description":"Specifies the number of historical passcode entries checked when determining whether a new passcode can be used. The device refuses a new passcode if it matches a previously used passcode within the specified passcode history range. In the absence of this key, no historical check is performed.","helpText":null,"infoUrls":[],"options":null},{"id":"passcode_requirealphanumericpasscode","displayName":"Require Alphanumeric Passcode","description":"If `true`, the passcode needs to consist of at least one alphabetic character and at least one number.","helpText":null,"infoUrls":[],"options":[{"id":"passcode_requirealphanumericpasscode_false","displayName":"Disabled","description":null,"helpText":null},{"id":"passcode_requirealphanumericpasscode_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"passcode_requirecomplexpasscode","displayName":"Require Complex Passcode","description":"If set to true, a complex passcode is required. A complex passcode is one that does not contain repeated characters, or increasing/decreasing characters (such as 123 or CBA), but must contain at least one non-number/non-letter character.","helpText":null,"infoUrls":[],"options":[{"id":"passcode_requirecomplexpasscode_false","displayName":"False","description":null,"helpText":null},{"id":"passcode_requirecomplexpasscode_true","displayName":"True","description":null,"helpText":null}]},{"id":"passcode_requirepasscode","displayName":"Require Passcode on Device","description":"Specifies whether the user is forced to set a passcode. Setting this value, without any other keys present, forces the user to enter a passcode, without imposing a length or quality. The presence of any of the other keys implicitly requires a passcode be present on the device, and this key is ignored.","helpText":null,"infoUrls":[],"options":[{"id":"passcode_requirepasscode_false","displayName":"False","description":null,"helpText":null},{"id":"passcode_requirepasscode_true","displayName":"True","description":null,"helpText":null}]},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch","displayName":"Update Channel","description":"This policy setting controls which update channel Office gets updates from.\r\n\r\nIf you enable this policy setting, Office gets updates from the update channel that you select.\r\n\r\nIf you disable or don't configure this policy setting, Office gets updates from its default channel, or by the update channel specified by the Office Deployment Tool. The default channel is determined by which Office product that is installed.\r\n\r\nNote: This policy setting only applies to subscription versions of Office, such as Microsoft 365 Apps for enterprise, and to subscription versions of Project and Visio.​","helpText":"","infoUrls":[],"options":[{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid","displayName":"Channel Name: (Device)","description":"","helpText":"","infoUrls":[],"options":[{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_current","displayName":"Current Channel","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_firstreleasecurrent","displayName":"Current Channel (Preview)","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_monthlyenterprise","displayName":"Monthly Enterprise Channel","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_deferred","displayName":"Semi-Annual Enterprise Channel","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_firstreleasedeferred","displayName":"Semi-Annual Enterprise Channel (Preview)","description":null,"helpText":null},{"id":"pdates~policy~l_microsoftofficemachine~l_updates_l_updatebranch_l_updatebranchid_insiderfast","displayName":"Beta Channel","description":null,"helpText":null}]},{"id":"safari_acceptcookies","displayName":"Accept Cookies","description":"The policy Safari uses for managing cookies:\n\n- `Never`: Safari always blocks cookies.\n- `CurrentWebsite`: Safari allows cookies only from the current website.\n- `VisitedWebsites`: Safari allows cookies only from visited websites.\n- `Always`: Safari always allows cookies.","helpText":null,"infoUrls":[],"options":[{"id":"safari_acceptcookies_0","displayName":"Never","description":null,"helpText":null},{"id":"safari_acceptcookies_1","displayName":"CurrentWebsite","description":null,"helpText":null},{"id":"safari_acceptcookies_2","displayName":"VisitedWebsites","description":null,"helpText":null},{"id":"safari_acceptcookies_3","displayName":"Always","description":null,"helpText":null}]},{"id":"safari_allowdisablingfraudwarning","displayName":"Allow Disabling Fraud Warning","description":"If `false`, the system forces fraud warnings on in Safari.","helpText":null,"infoUrls":[],"options":[{"id":"safari_allowdisablingfraudwarning_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowdisablingfraudwarning_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"safari_allowhistoryclearing","displayName":"Allow History Clearing","description":"If `false`, the system disables clearing history in Safari.","helpText":null,"infoUrls":[],"options":[{"id":"safari_allowhistoryclearing_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowhistoryclearing_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"safari_allowjavascript","displayName":"Allow Java Script","description":"If `false`, the system disables JavaScript in Safari.","helpText":null,"infoUrls":[],"options":[{"id":"safari_allowjavascript_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowjavascript_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"safari_allowpopups","displayName":"Allow Popups","description":"If `false`, the system disables popups in Safari.","helpText":null,"infoUrls":[],"options":[{"id":"safari_allowpopups_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowpopups_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"safari_allowprivatebrowsing","displayName":"Allow Private Browsing","description":"If `false`, the system disables private browsing in Safari.","helpText":null,"infoUrls":[],"options":[{"id":"safari_allowprivatebrowsing_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowprivatebrowsing_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"safari_allowsummary","displayName":"Allow Summary","description":"If `false`, the system disables summarization of content in Safari.","helpText":null,"infoUrls":[],"options":[{"id":"safari_allowsummary_false","displayName":"Blocked","description":null,"helpText":null},{"id":"safari_allowsummary_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"safari_newtabstartpage","displayName":"New Tab Start Page","description":"Sets the start page for new tabs in Safari.","helpText":null,"infoUrls":[],"options":null},{"id":"safari_newtabstartpage_extensionidentifier","displayName":"Extension Identifier","description":"The composed identifier of the extension that provides the start page. The required format is \"Identifier (TeamIdentifier)\", for example \"com.example.app (ABCD1234)\". Required when setting `PageType` to `Extension`.","helpText":null,"infoUrls":[],"options":null},{"id":"safari_newtabstartpage_homepageurl","displayName":"Homepage URL","description":"The URL of the homepage which needs to start with `https://` or `http://`. Required when setting `PageType` to `Home`.","helpText":null,"infoUrls":[],"options":null},{"id":"safari_newtabstartpage_pagetype","displayName":"Page Type","description":"Sets the start page type in Safari:\n\n- `Start` - Safari uses the default start page. Safari disables the Homepage.\n- `Home` - Safari uses the page specified by `HomepageURL`, and Safari also sets that as the Homepage.\n- `Extension` - Safari uses the page specified by the Safari extension whose identifier is `ExtensionIdentifier`. Safari disables the Homepage.","helpText":null,"infoUrls":[],"options":[{"id":"safari_newtabstartpage_pagetype_0","displayName":"Start","description":null,"helpText":null},{"id":"safari_newtabstartpage_pagetype_1","displayName":"Home","description":null,"helpText":null},{"id":"safari_newtabstartpage_pagetype_2","displayName":"Extension","description":null,"helpText":null}]},{"id":"safari_safari","displayName":"com.apple.configuration.safari.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"setrecoverylock_enablerecoverylockpassword","displayName":"Enable Recovery Lock Password","description":"Set a recovery lock password that will be required to access RecoveryOS on Mac devices. Available for Apple silicon devices running macOS 11.5 and later.","helpText":null,"infoUrls":[],"options":{"id":"setrecoverylock_enablerecoverylockpassword_true","displayName":"Enabled","description":null,"helpText":null}},{"id":"setrecoverylock_recoverylockpasswordrotationschedule","displayName":"Recovery Lock Password Rotation Schedule","description":"Configure how often (in months) the recovery lock password should be rotated.","helpText":null,"infoUrls":[],"options":[{"id":"setrecoverylock_recoverylockpasswordrotationschedule_0","displayName":"1 month","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_1","displayName":"2 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_2","displayName":"3 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_3","displayName":"4 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_4","displayName":"5 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_5","displayName":"6 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_6","displayName":"7 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_7","displayName":"8 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_8","displayName":"9 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_9","displayName":"10 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_10","displayName":"11 months","description":null,"helpText":null},{"id":"setrecoverylock_recoverylockpasswordrotationschedule_11","displayName":"12 months","description":null,"helpText":null}]},{"id":"setrecoverylock_setrecoverylock","displayName":"Set Recovery Lock","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_accessibilitysettings","displayName":"Accessibility Settings","description":"A dictionary that contains accessibility settings. Available in iOS 16 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_accessibilitysettings_boldtextenabled","displayName":"Bold Text Enabled","description":"If 'true', enables bold text.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_accessibilitysettings_boldtextenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_boldtextenabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_accessibilitysettings_increasecontrastenabled","displayName":"Increase Contrast Enabled","description":"If 'true', enables increase contrast.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_accessibilitysettings_increasecontrastenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_increasecontrastenabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_accessibilitysettings_reducemotionenabled","displayName":"Reduce Motion Enabled","description":"If 'true', enables reduced motion.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_accessibilitysettings_reducemotionenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_reducemotionenabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_accessibilitysettings_reducetransparencyenabled","displayName":"Reduce Transparency Enabled","description":"If 'true', enables reduced transparency.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_accessibilitysettings_reducetransparencyenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_reducetransparencyenabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_accessibilitysettings_textsize","displayName":"Text Size","description":"The accessibility text size apps that support dynamic text use. 0 is the smallest value, and 11 is the largest available.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_accessibilitysettings_textsize_0","displayName":"0","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_1","displayName":"1","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_2","displayName":"2","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_3","displayName":"3","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_4","displayName":"4","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_5","displayName":"5","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_6","displayName":"6","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_7","displayName":"7","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_8","displayName":"8","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_9","displayName":"9","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_10","displayName":"10","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_textsize_11","displayName":"11","description":null,"helpText":null}]},{"id":"settings_item_accessibilitysettings_touchaccommodationsenabled","displayName":"Touch Accommodations Enabled","description":"If true, enables touch accommodations.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_accessibilitysettings_touchaccommodationsenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_touchaccommodationsenabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_accessibilitysettings_voiceoverenabled","displayName":"Voice Over Enabled","description":"If true, enables voiceover.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_accessibilitysettings_voiceoverenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_voiceoverenabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_accessibilitysettings_zoomenabled","displayName":"Zoom Enabled","description":"If true, enables zoom.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_accessibilitysettings_zoomenabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_accessibilitysettings_zoomenabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_appanalytics","displayName":"App Analytics","description":"A dictionary that contains settings for sharing app analytics. This setting is available only for Shared iPad in iOS 9.3.2 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_appanalytics_enabled","displayName":"Enabled","description":"If `true`, enable sharing app analytics with app developers. If `false`, disable sharing app analytics.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_appanalytics_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_appanalytics_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_bluetooth","displayName":"Bluetooth","description":"A dictionary that contains Bluetooth settings. This setting requires the Network Information access right, doesn't support user enrollment, and is available only on supervised devices. Available in iOS 11.3 and later, and macOS 10.13.4 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_bluetooth_enabled","displayName":"Enabled","description":"If `true`, enable the Bluetooth setting. If `false`, disable the Bluetooth setting.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_bluetooth_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_bluetooth_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_dataroaming","displayName":"Data Roaming","description":"A dictionary that contains data roaming settings. This setting requires the Network Information access right, and doesn't support user enrollment. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_dataroaming_enabled","displayName":"Enabled","description":"If `true`, enable data roaming, which also enables voice roaming. If `false`, disable data roaming.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_dataroaming_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_dataroaming_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_defaultapplications","displayName":"Default Applications","description":"A dictionary that contains default application bundle identifiers. Currently it supports a default web browser app.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_defaultapplications_calling","displayName":"Calling","description":"The bundle identifier of the app that the system sets as the default calling app. This app must be an eligible calling app.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_defaultapplications_messaging","displayName":"Messaging","description":"The bundle identifier of the app that the system sets as the default messaging app. This app must be an eligible messaging app.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_defaultapplications_webbrowser","displayName":"Web Browser","description":"The bundle identifier of the app the system sets as the default web browser. This app must be an eligible web browser for the region of the device.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_diagnosticsubmission","displayName":"Diagnostic Submission","description":"A dictionary that contains diagnostic submission settings. This setting is available only for Shared iPad in iOS 9.3 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_diagnosticsubmission_enabled","displayName":"Enabled","description":"If `true`, enables diagnostic submission. If `false`, disables diagnostic submission.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_diagnosticsubmission_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_diagnosticsubmission_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_mdmoptions","displayName":"MDM Options","description":"A dictionary that contains settings related to the MDM protocol. This setting doesn't support user enrollment. Available in iOS 7 and later, macOS 10.15 and later, and visionOS 2 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_mdmoptions_mdmoptions","displayName":"MDM Options","description":"A dictionary of MDM options.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_mdmoptions_mdmoptions_activationlockallowedwhilesupervised","displayName":"Activation Lock Allowed While Supervised","description":"If `true`, a supervised device registers itself with Activation Lock when the user enables Find My. This setting is available for supervised devices in iOS 7 and later, and macOS 10.15 and later.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_mdmoptions_mdmoptions_activationlockallowedwhilesupervised_false","displayName":"Blocked","description":null,"helpText":null},{"id":"settings_item_mdmoptions_mdmoptions_activationlockallowedwhilesupervised_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"settings_item_mdmoptions_mdmoptions_idlerebootallowed","displayName":"Idle Reboot Allowed","description":"If `true`, the device automatically reboots while locked after several days of inactivity. This is set to `false` by default when a supervised device enrolls.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_mdmoptions_mdmoptions_idlerebootallowed_false","displayName":"False","description":null,"helpText":null},{"id":"settings_item_mdmoptions_mdmoptions_idlerebootallowed_true","displayName":"True","description":null,"helpText":null}]},{"id":"settings_item_mdmoptions_mdmoptions_promptusertoallowbootstraptokenforauthentication","displayName":"Prompt User To Allow Bootstrap Token For Authentication","description":"If `true`, warn the user that they need to reboot into RecoveryOS and allow the MDM server to use the Bootstrap Token for authentication for certain sensitive operations; for example, enabling kernel extensions or installing certain types of software updates. Set this value to `false` if your MDM server doesn't need to perform these operations. The value provided here overrides the value specified in MDM, and only applies when `BootstrapTokenAllowedForAuthentication` is `true` in the `SecurityInfo` response. This value is available for a Mac with Apple silicon in macOS 11 and later.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_mdmoptions_mdmoptions_promptusertoallowbootstraptokenforauthentication_false","displayName":"Blocked","description":null,"helpText":null},{"id":"settings_item_mdmoptions_mdmoptions_promptusertoallowbootstraptokenforauthentication_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"settings_item_personalhotspot","displayName":"Personal Hotspot","description":"A dictionary that contains Personal Hotspot settings. This setting requires the Network Information access right, and doesn't support user enrollment. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_personalhotspot_enabled","displayName":"Enabled","description":"If `true`, enable Personal Hotspot. If `false`, disable Personal Hotspot.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_personalhotspot_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_personalhotspot_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_softwareupdatesettings","displayName":"Software Update Settings (Deprecated)","description":"A dictionary that contains software update settings. This setting doesn't support user enrollment. Available in iOS 14.5 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_softwareupdatesettings_recommendationcadence","displayName":"Recommendation Cadence (Deprecated)","description":"This value defines how the system presents software updates to the user. When there's more than one available update for the user, the system behaves as follows:\n\n- `0`: Presents both options to the user.\n- `1`: Presents the lower numbered (oldest) software update version.\n- `2`: Presents only the highest numbered (most recent) release available for the device.\n\nThis value has no effect when there's only one available update; the system shows the single available update to the user regardless of the value of this setting.\n\nAvailable in iOS 14.5 and later.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_softwareupdatesettings_recommendationcadence_0","displayName":"Presents both options to the user.","description":null,"helpText":null},{"id":"settings_item_softwareupdatesettings_recommendationcadence_1","displayName":"Presents the lower numbered (oldest) software update version.","description":null,"helpText":null},{"id":"settings_item_softwareupdatesettings_recommendationcadence_2","displayName":"Presents only the highest numbered (most recent) release available for the device.","description":null,"helpText":null}]},{"id":"settings_item_timezone","displayName":"Time Zone","description":"A dictionary that contains time zone settings. This setting is available only on supervised devices and doesn't support user enrollment. Available in iOS 14 and later, tvOS 14 and later, and visionOS 2 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_timezone_timezone","displayName":"Time Zone","description":"The Internet Assigned Numbers Authority (IANA) time zone database name.\n\nIf the `forceAutomaticDateAndTime` restriction is set in `Restrictions`, this setting fails with an error. Otherwise, setting this value disables automatic time zone logic. The user is still be able to change the time zone; for example, by turning automatic date and time back on. The intention is to allow setting the time zone when automatic determination isn't be available, such as when Location Services are off.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_voiceroaming","displayName":"Voice Roaming","description":"A dictionary that contains voice roaming settings. This setting requires the Network Information access right, and doesn't support user enrollment. Available in iOS 5 and later.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_voiceroaming_enabled","displayName":"Enabled","description":"If `true`, enable voice roaming. If `false`, disable voice roaming, which also disables data roaming. The setting is only available for certain carriers.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_voiceroaming_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"settings_item_voiceroaming_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"settings_item_wallpaper","displayName":"Wallpaper","description":"A dictionary that contains wallpaper settings. This setting doesn't support user enrollment. Available in iOS 8 and later. Starting in iOS 16 and iPadOS 17, when setting the wallpaper for the first time, both locations update. After that, you can set either location separately.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_wallpaper_image","displayName":"Image","description":"A Base64-encoded image in either PNG or JPG format to use for wallpaper.","helpText":null,"infoUrls":[],"options":null},{"id":"settings_item_wallpaper_where","displayName":"Where","description":"A number that indicates where to use the wallpaper, which is one of the following values:\n\n- `1`: Lock Screen\n- `2`: Home Screen\n- `3`: Both Lock and Home Screens.\n\n In iOS 16 and later, and iPadOS 17 and later, when you set the wallpaper for the first time, the system sets both the Lock Screen and Home Screen. After that, you can separately set each location.","helpText":null,"infoUrls":[],"options":[{"id":"settings_item_wallpaper_where_0","displayName":"Lock screen","description":null,"helpText":null},{"id":"settings_item_wallpaper_where_1","displayName":"Home screen","description":null,"helpText":null},{"id":"settings_item_wallpaper_where_2","displayName":"Both","description":null,"helpText":null}]},{"id":"sirisettings_allowusergeneratedcontent","displayName":"Allow User Generated Content","description":"If `false`, disables Siri user-generated content.","helpText":null,"infoUrls":[],"options":[{"id":"sirisettings_allowusergeneratedcontent_false","displayName":"Blocked","description":null,"helpText":null},{"id":"sirisettings_allowusergeneratedcontent_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"sirisettings_allowwhilelocked","displayName":"Allow While Locked","description":"If `false`, disables Siri while locked.","helpText":null,"infoUrls":[],"options":[{"id":"sirisettings_allowwhilelocked_false","displayName":"Blocked","description":null,"helpText":null},{"id":"sirisettings_allowwhilelocked_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"sirisettings_enabled","displayName":"Enabled","description":"If `false`, disables Siri.","helpText":null,"infoUrls":[],"options":[{"id":"sirisettings_enabled_false","displayName":"Disabled","description":null,"helpText":null},{"id":"sirisettings_enabled_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"sirisettings_forceprofanityfilter","displayName":"Force Profanity Filter","description":"If `true`, forces Siri profanity filter.","helpText":null,"infoUrls":[],"options":[{"id":"sirisettings_forceprofanityfilter_false","displayName":"Disabled","description":null,"helpText":null},{"id":"sirisettings_forceprofanityfilter_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"sirisettings_sirisettings","displayName":"com.apple.configuration.siri.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_allowstandarduserosupdates","displayName":"Allow Standard User OS Updates","description":"If 'true', a standard user can perform Major and Minor Software Updates. If 'false', only administrators can perform Major and Minor Software Updates. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_allowstandarduserosupdates_false","displayName":"Blocked","description":null,"helpText":null},{"id":"softwareupdate_allowstandarduserosupdates_true","displayName":"Allowed","description":null,"helpText":null}]},{"id":"softwareupdate_automaticactions","displayName":"Automatic Actions","description":"Specifies various automatic Software Update functionality. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_automaticactions_download","displayName":"Download","description":"Specifies whether automatic downloads of available updates can be controlled by the user:\n* \"Allowed\" - the user can enable or disable automatic downloads.\n* \"AlwaysOn\" - automatic downloads are always enabled.\n* \"AlwaysOff\" - automatic downloads are always disabled.","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_automaticactions_download_0","displayName":"Allowed","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_download_1","displayName":"AlwaysOn","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_download_2","displayName":"AlwaysOff","description":null,"helpText":null}]},{"id":"softwareupdate_automaticactions_installosupdates","displayName":"Install OS Updates","description":"Specifies whether automatic install of available OS updates can be controlled by the user:\n* \"Allowed\" - the user can enable or disable automatic installs.\n* \"AlwaysOn\". - automatic installs are always enabled. This option requires automatic downloads to be turned on.\n* \"AlwaysOff\" - automatic installs are always disabled.","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_automaticactions_installosupdates_0","displayName":"Allowed","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_installosupdates_1","displayName":"Always On","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_installosupdates_2","displayName":"Always Off","description":null,"helpText":null}]},{"id":"softwareupdate_automaticactions_installsecurityupdate","displayName":"Install Security Update","description":"Specifies whether automatic install of available security updates can be controlled by the user:\n* \"Allowed\" - the user can enable or disable automatic installs.\n* \"AlwaysOn\" - automatic installs are always enabled.\n* \"AlwaysOff\" - automatic installs are always disabled.","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_automaticactions_installsecurityupdate_0","displayName":"Allowed","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_installsecurityupdate_1","displayName":"AlwaysOn","description":null,"helpText":null},{"id":"softwareupdate_automaticactions_installsecurityupdate_2","displayName":"AlwaysOff","description":null,"helpText":null}]},{"id":"softwareupdate_beta","displayName":"Beta (Unsupported)","description":"Configurations for controlling or specifying the beta programs associated with a device. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_beta_offerprograms","displayName":"Offer Programs (Unsupported)","description":"Configurations for controlling or specifying the beta programs associated with a device. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_beta_offerprograms_item_description","displayName":"Description","description":"A human readable description of the beta program.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_beta_offerprograms_item_token","displayName":"Token (Unsupported)","description":"The Apple Business Manager or Apple School Manager seeding service token for the organization the MDM server is part of. This token is used to enroll the device in the corresponding beta program.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_beta_programenrollment","displayName":"Program Enrollment (Unsupported)","description":"Specifies whether beta program enrollment can be controlled by the user in software update settings UI:\n* \"Allowed\" - the user can enroll in any applicable beta programs associated with their\n logged in Apple ID. If the `OfferPrograms` key is present, then the programs listed in\n that key are also presented to the user.\n* \"AlwaysOn\" - the beta programs specified by the organization are used, and the user\n is not be able to enroll in a beta program using their logged in Apple ID. The device\n is automatically enrolled into the beta program specified by the `RequireProgram` key if\n it is present. Otherwise, the programs listed in the `OfferPrograms` key are\n presented to the user to choose which to enroll with.\n* \"AlwaysOff\" - The device is not allowed to enroll in any beta programs. The device is\n removed from any beta programs, if already enrolled.","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_beta_programenrollment_0","displayName":"Allowed","description":null,"helpText":null},{"id":"softwareupdate_beta_programenrollment_1","displayName":"AlwaysOn","description":null,"helpText":null},{"id":"softwareupdate_beta_programenrollment_2","displayName":"AlwaysOff","description":null,"helpText":null}]},{"id":"softwareupdate_beta_requireprogram","displayName":"Require Program (Unsupported)","description":"The device automatically enrolls in this beta program. This key must only be present if the `ProgramEnrollment` key is set to `AlwaysOn`. The `OfferPrograms` key must not be present if this key is present.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_beta_requireprogram_description","displayName":"Description","description":"A human readable description of the beta program.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_beta_requireprogram_token","displayName":"Token","description":"The Apple Business Manager or Apple School Manager seeding service token for the organization the MDM server is part of. This token is used to enroll the device in the corresponding beta program.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_deferrals","displayName":"Deferrals","description":"Controls the deferral of software updates. Rapid Security Responses are not considered within 'Major', 'Minor', or 'System' deferral mechanism. Only applicable on Supervised devices with iOS 18+ and MacOS 15++","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_deferrals_combinedperiodindays","displayName":"Combined Period In Days","description":"Specifies the number of days to defer a major or minor OS software update on the device. When set, software updates only appear after the specified delay, following the release of the software update.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_deferrals_majorperiodindays","displayName":"Major Period In Days","description":"Specifies the number of days to defer a major OS software update on the device. When set, software updates only appear after the specified delay, following the release of the software update.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_deferrals_minorperiodindays","displayName":"Minor Period In Days","description":"Specifies the number of days to defer a minor OS software update on the device. It also defers major updates for iOS. When set, software updates only appear after the specified delay, following the release of the software update.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_deferrals_systemperiodindays","displayName":"System Period In Days","description":"Specifies the number of days to defer system or non-OS updates. When set, updates only appear after the specified delay, following the release of the update.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_notifications","displayName":"Notifications","description":"If 'true', the device shows all software update enforcement notifications. If 'false', the device only shows notifications triggered one hour before the enforcement deadline, and the restart countdown notification. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_notifications_false","displayName":"Disabled","description":null,"helpText":null},{"id":"softwareupdate_notifications_true","displayName":"Enabled","description":null,"helpText":null}]},{"id":"softwareupdate_rapidsecurityresponse","displayName":"Background Security Improvement Settings","description":"These configurations set user access to interacting with Background Security Improvements.","helpText":null,"infoUrls":[],"options":null},{"id":"softwareupdate_rapidsecurityresponse_enable","displayName":"Enable","description":"If set to 'false', Background Security Improvements aren't offered for user installation. The system can still install Background Security Improvements with Software Update and Enforce Latest configurations. If set to 'true', the system offers Background Security Improvements to the user.","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_rapidsecurityresponse_enable_false","displayName":"False","description":null,"helpText":null},{"id":"softwareupdate_rapidsecurityresponse_enable_true","displayName":"True","description":null,"helpText":null}]},{"id":"softwareupdate_rapidsecurityresponse_enablerollback","displayName":"Enable Rollback","description":" If set to 'false', the system doesn't offer Background Security Improvement rollbacks to the user. If set to 'true', the system offers Background Security Improvement rollbacks to the user.","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_rapidsecurityresponse_enablerollback_false","displayName":"False","description":null,"helpText":null},{"id":"softwareupdate_rapidsecurityresponse_enablerollback_true","displayName":"True","description":null,"helpText":null}]},{"id":"softwareupdate_recommendedcadence","displayName":"Recommendation Cadence","description":"Specifies how the device shows software updates to the user. When more than one update is available update, the device behaves as follows:\n* \"All\" - Shows all software update versions.\n* \"Oldest\" - Shows only the oldest (lower numbered) software update version.\n* \"Newest\" - Shows only the newest (highest numbered) software update version. Only applicable on Supervised devices with iOS 18+ and MacOS 15+","helpText":null,"infoUrls":[],"options":[{"id":"softwareupdate_recommendedcadence_0","displayName":"All","description":null,"helpText":null},{"id":"softwareupdate_recommendedcadence_1","displayName":"Oldest","description":null,"helpText":null},{"id":"softwareupdate_recommendedcadence_2","displayName":"Newest","description":null,"helpText":null}]},{"id":"softwareupdate_softwareupdate","displayName":"com.apple.configuration.softwareupdate.settings","description":"Synthetic Top Level Setting Group Collection","helpText":null,"infoUrls":[],"options":null},{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonctrlaltdel","displayName":"Enable Physical Device Access On Ctrl Alt Del (User) (Windows Insiders only)","description":"Configuring this node gives access to the physical devices used to boot to Cloud PCs from the Ctrl+Alt+Del page for specified users. This node supports these options: 0. Not enabled 1. Enabled.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/CloudDesktop-csp/"],"options":[{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonctrlaltdel_false","displayName":"Access to physical device on CtrlAltDel page disabled","description":"Access to physical device on CtrlAltDel page disabled","helpText":null},{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonctrlaltdel_true","displayName":"Access to physical device on CtrlAltDel page enabled","description":"Access to physical device on CtrlAltDel page enabled","helpText":null}]},{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonerrorscreens","displayName":"Enable Physical Device Access On Error Screens (User) (Windows Insiders only)","description":"Configuring this node gives access to the physical devices used to boot to Cloud PCs from the error screens for specified users. This node supports these options: 0. Not enabled 1. Enabled.\r\n This setting is only available to Windows Insiders","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/CloudDesktop-csp/"],"options":[{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonerrorscreens_false","displayName":"Access to physical device on error screens disabled","description":"Access to physical device on error screens disabled","helpText":null},{"id":"user_vendor_msft_clouddesktop_enablephysicaldeviceaccessonerrorscreens_true","displayName":"Access to physical device on error screens enabled","description":"Access to physical device on error screens enabled","helpText":null}]},{"id":"user_vendor_msft_passportforwork_{tenantid}","displayName":"User-scoped settings","description":"This policy specifies the Tenant ID in the format of a Globally Unique Identifier (GUID) without curly braces ( { , } ), which will be used as part of Windows Hello for Business provisioning and management.","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery","displayName":"Enable Pin Recovery (User)","description":"If the user forgets their PIN, it can be changed to a new PIN using the Windows Hello for Business PIN recovery service. This cloud service encrypts a recovery secret which is stored locally on the client, but which can only be decrypted by the cloud service.\n\nIf you enable this policy setting, the PIN recovery secret will be stored on the device and the user will be able to change to a new PIN in case their PIN is forgotten.\n\nIf you disable or do not configure this policy setting, the PIN recovery secret will not be created or stored. If the user's PIN is forgotten, the only way to get a new PIN is by deleting the existing PIN and creating a new one, which will require the user to re-register with any services the old PIN provided access to.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery_false","displayName":"false","description":"Disabled","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery_true","displayName":"true","description":"Enabled","helpText":null}]},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits","displayName":"Digits (User)","description":"Use this policy setting to configure the use of digits in the Windows Hello for Business PIN.\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one digit in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using digits in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business requires users to use digits in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_0","displayName":"Allows the use of digits in PIN.","description":"Allows the use of digits in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_1","displayName":"Requires the use of at least one digits in PIN.","description":"Requires the use of at least one digits in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_digits_2","displayName":"Does not allow the use of digits in PIN.","description":"Does not allow the use of digits in PIN.","helpText":null}]},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_expiration","displayName":"Expiration (User)","description":"This policy specifies when the PIN expires (in days). Valid values are 0 to 730 inclusive. If this policy is set to 0, then PINs do not expire.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_history","displayName":"PIN History (User)","description":"This policy specifies the number of past PINs that can be stored in the history that can’t be used. Valid values are 0 to 50 inclusive. If this policy is set to 0, then storage of previous PINs is not required. PIN history is not preserved through PIN reset.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters","displayName":"Lowercase Letters (User)","description":"Use this policy setting to configure the use of lowercase letters in the Windows Hello for Business PIN.\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one lowercase letter in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using lowercase letters in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business does not allow users to use lowercase letters in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_0","displayName":"Allowed","description":"Allows the use of lowercase letters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_1","displayName":"Required","description":"Requires the use of at least one lowercase letters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_lowercaseletters_2","displayName":"Blocked","description":"Does not allow the use of lowercase letters in PIN.","helpText":null}]},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_maximumpinlength","displayName":"Maximum PIN Length (User)","description":"Maximum PIN length configures the maximum number of characters allowed for the PIN. The largest number you can configure for this policy setting is 127. The lowest number you can configure must be larger than the number configured in the Minimum PIN length policy setting or the number 4, whichever is greater.\n\nIf you configure this policy setting, the PIN length must be less than or equal to this number.\n\nIf you do not configure this policy setting, the PIN length must be less than or equal to 127.\n\nNOTE: If the above specified conditions for the maximum PIN length are not met, default values will be used for both the maximum and minimum PIN lengths.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_minimumpinlength","displayName":"Minimum PIN Length (User)","description":"Minimum PIN length configures the minimum number of characters required for the PIN. The lowest number you can configure for this policy setting is 4. The largest number you can configure must be less than the number configured in the Maximum PIN length policy setting or the number 127, whichever is the lowest.\n\nIf you configure this policy setting, the PIN length must be greater than or equal to this number.\n\nIf you do not configure this policy setting, the PIN length must be greater than or equal to 4.\n\nNOTE: If the above specified conditions for the minimum PIN length are not met, default values will be used for both the maximum and minimum PIN lengths.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters","displayName":"Special Characters (User)","description":"Use this policy setting to configure the use of special characters in the Windows Hello for Business PIN gesture. Valid special characters for Windows Hello for Business PIN gestures include: ! \" # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \\ ] ^ _ ` { | } ~ .\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one special character in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using special characters in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business does not allow users to use special characters in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_0","displayName":"Allows the use of special characters in PIN.","description":"Allows the use of special characters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_1","displayName":"Requires the use of at least one special characters in PIN.","description":"Requires the use of at least one special characters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_specialcharacters_2","displayName":"Does not allow the use of special characters in PIN.","description":"Does not allow the use of special characters in PIN.","helpText":null}]},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_uppercaseletters","displayName":"Uppercase Letters (User)","description":"Use this policy setting to configure the use of uppercase letters in the Windows Hello for Business PIN.\n\nA value of 1 corresponds to “Required.” If you configure this policy setting to 1, Windows Hello for Business requires users to include at least one uppercase letter in their PIN.\n\nA value of 2 corresponds to “Disallow.” If you configure this policy setting to 2, Windows Hello for Business prevents users from using uppercase letters in their PIN.\n\nIf you do not configure this policy setting, Windows Hello for Business does not allow users to use uppercase letters in their PIN.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_uppercaseletters_0","displayName":"Allowed","description":"Allows the use of uppercase letters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_uppercaseletters_1","displayName":"Required","description":"Requires the use of at least one uppercase letters in PIN.","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_pincomplexity_uppercaseletters_2","displayName":"Blocked","description":"Does not allow the use of uppercase letters in PIN.","helpText":null}]},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice","displayName":"Require Security Device (User)","description":"A Trusted Platform Module (TPM) provides additional security benefits over software because data stored within it cannot be used on other devices.\n\nIf you enable this policy setting, only devices with a usable TPM provision Windows Hello for Business.\n\nIf you disable or do not configure this policy setting, the TPM is still preferred, but all devices provision Windows Hello for Business using software if the TPM is non-functional or unavailable.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice_false","displayName":"false","description":"Disabled","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_requiresecuritydevice_true","displayName":"true","description":"Enabled","helpText":null}]},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork","displayName":"Use Windows Hello For Business (User)","description":"Windows Hello for Business is an alternative method for signing into Windows using your Active Directory or Azure Active Directory account that can replace passwords, Smart Cards, and Virtual Smart Cards.\n\nIf you enable or do not configure this policy setting, the device provisions Windows Hello for Business for all users.\n\nIf you disable this policy setting, the device does not provision Windows Hello for Business for any user.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/PassportForWork-csp/"],"options":[{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork_false","displayName":"false","description":"Disabled","helpText":null},{"id":"user_vendor_msft_passportforwork_{tenantid}_policies_usepassportforwork_true","displayName":"true","description":"Enabled","helpText":null}]},{"id":"user_vendor_msft_pde_enablepersonaldataencryption","displayName":"Enable Personal Data Encryption (User)","description":"Allows the Admin to enable Personal Data Encryption. Set to '1' to set this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/personaldataencryption-csp/"],"options":[{"id":"user_vendor_msft_pde_enablepersonaldataencryption_0","displayName":"Disable Personal Data Encryption.","description":"Disable Personal Data Encryption.","helpText":null},{"id":"user_vendor_msft_pde_enablepersonaldataencryption_1","displayName":"Enable Personal Data Encryption.","description":"Enable Personal Data Encryption.","helpText":null}]},{"id":"user_vendor_msft_pde_protectfolders_protectdesktop","displayName":"Protect Desktop (User)","description":"Allows the Admin to enable Personal Data Encryption on Desktop folder. Set to '1' to set this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/personaldataencryption-csp/"],"options":[{"id":"user_vendor_msft_pde_protectfolders_protectdesktop_0","displayName":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","description":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","helpText":null},{"id":"user_vendor_msft_pde_protectfolders_protectdesktop_1","displayName":"Enable Personal Data Encryption on the folder.","description":"Enable Personal Data Encryption on the folder.","helpText":null}]},{"id":"user_vendor_msft_pde_protectfolders_protectdocuments","displayName":"Protect Documents (User)","description":"Allows the Admin to enable Personal Data Encryption on Documents folder. Set to '1' to set this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/personaldataencryption-csp/"],"options":[{"id":"user_vendor_msft_pde_protectfolders_protectdocuments_0","displayName":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","description":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","helpText":null},{"id":"user_vendor_msft_pde_protectfolders_protectdocuments_1","displayName":"Enable Personal Data Encryption on the folder.","description":"Enable Personal Data Encryption on the folder.","helpText":null}]},{"id":"user_vendor_msft_pde_protectfolders_protectpictures","displayName":"Protect Pictures (User)","description":"Allows the Admin to enable Personal Data Encryption on Pictures folder. Set to '1' to set this policy.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/personaldataencryption-csp/"],"options":[{"id":"user_vendor_msft_pde_protectfolders_protectpictures_0","displayName":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","description":"Disable Personal Data Encryption on the folder. If the folder is currently protected by Personal Data Encryption, this will result in unprotecting the folder.","helpText":null},{"id":"user_vendor_msft_pde_protectfolders_protectpictures_1","displayName":"Enable Personal Data Encryption on the folder.","description":"Enable Personal Data Encryption on the folder.","helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_defaultdatabasefolder","displayName":"Default database folder (User)","description":"Specifies the default working folder.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_defaultdatabasefolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_defaultdatabasefolder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_defaultdatabasefolder_l_defaultdatabasefolder6","displayName":"Default database folder (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_recentlyusedfilelist","displayName":"Number of files in the Recent list (User)","description":"This policy setting specifies the number of entries displayed in the Recent list that appears when users click Open on the File tab in Backstage view. \r\n\r\nIf you enable this policy setting, you can specify the number of entries to be between 0 and 50. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 25 items will be displayed in the Recent list.\r\n\r\nNote: If you want to prevent items from being added to the Recent list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_recentlyusedfilelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_recentlyusedfilelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_recentlyusedfilelist_l_numberofentries","displayName":"Number of entries: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_setnumberofplacesintherecentplaceslist","displayName":"Number of folders in the Recent Folders list (User)","description":"This policy setting specifies the number of unpinned entries displayed in the Recent Folders list that appears when users click Open or Save As on the File tab in Backstage view.\r\n\r\nIf you enable this policy setting, you can specify the number of unpinned entries to be between 0 and 20. If you set the number to 0, all pinned and unpinned entries are hidden.\r\n\r\nIf you disable or do not configure this policy setting, a maximum of 5 unpinned items are displayed in the Recent Folders list.\r\n\r\nNote: If you want to prevent items from being added to the Recent Folders list entirely, you can enable the \"Do not keep history of recently opened documents\" Windows policy setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_setnumberofplacesintherecentplaceslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_setnumberofplacesintherecentplaceslist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_general5_l_setnumberofplacesintherecentplaceslist_l_setnumberofplacesintherecentplaceslistspinid","displayName":"Number of folders: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement","displayName":"Cursor movement (User)","description":"Specifies the default cursor movement mode.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_l_cursormovement2","displayName":"Cursor movement (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_l_cursormovement2_0","displayName":"Logical","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_cursormovement_l_cursormovement2_1","displayName":"Visual","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection","displayName":"Default direction (User)","description":"Specifies the default left-right text direction.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_l_defaultdirection0","displayName":"Default direction (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_l_defaultdirection0_0","displayName":"Left-to-Right","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_defaultdirection_l_defaultdirection0_1","displayName":"Right-to-left","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment","displayName":"General Alignment (User)","description":"Specifies the default text alignment.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_l_generalalignment1","displayName":"General Alignment (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_l_generalalignment1_0","displayName":"Interface mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_international_l_generalalignment_l_generalalignment1_1","displayName":"Text mode","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode","displayName":"Configure CNG cipher chaining mode (User)","description":"This policy setting allows you to configure the cipher chaining mode used.\r\n\r\nIf you enable this policy setting, the cipher chaining mode specified will be applied.\r\n\r\nIf you disable or do not configure this policy setting, Cipher Block Chaining (CBC) will be the default CNG cipher chaining mode used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecbc","displayName":"Cipher Block Chaining (CBC)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_configurecngcipherchainingmode_l_configurecngcipherchainingmodedropid_chainingmodecfb","displayName":"Cipher Feedback (CFB)","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipheralgorithm","displayName":"Set CNG cipher algorithm (User)","description":"This policy setting allows you to configure the CNG cipher algorithm that is used.\r\n\r\nIf you enable this policy setting, then the cipher provided will be used if it is a supported algorithm.\r\n\r\nIf you disable or do not configure this policy setting, AES will be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipheralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipheralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipheralgorithm_l_setcngcipheralgorithmid","displayName":"CNG cipher algorithm: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipherkeylength","displayName":"Set CNG cipher key length (User)","description":"This policy setting allows you to configure the number of bits to use when creating the cipher key. This number will be rounded down to a multiple of 8.\r\n\r\nIf you enable this policy setting, the key bits specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default value will be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipherkeylength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipherkeylength_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngcipherkeylength_l_setcngcipherkeylengthspinid","displayName":"Cipher key length (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngpasswordspincount","displayName":"Set CNG password spin count (User)","description":"This policy setting allows you to specify the number of times to spin (rehash) the password verifier.\r\n\r\nIf you enable this policy setting, the number specified will be the number of times the password will be rehashed.\r\n\r\nIf you disable or do not configure this policy setting, the default (100000) will be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngpasswordspincount_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngpasswordspincount_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setcngpasswordspincount_l_setcngpasswordspincountspinid","displayName":"","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setparametersforcngcontext","displayName":"Set parameters for CNG context (User)","description":"This policy setting allows you to specify the encryption parameters that should be used for the CNG context. \r\n\r\nIf you enable this policy setting, the parameters specified will be passed to the CNG context.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG values will be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setparametersforcngcontext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setparametersforcngcontext_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_setparametersforcngcontext_l_setparametersforcngcontextid","displayName":"Parameters (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm","displayName":"Specify CNG hash algorithm (User)","description":"This policy setting allows you to specify the hash algorithm used.\r\n\r\nIf you enable this policy setting, the hashing algorithm selected will be used by CNG.\r\n\r\nIf you disable or do not configure this policy setting, the default CNG hash algorithm will be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha1","displayName":"SHA1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha256","displayName":"SHA256","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha384","displayName":"SHA384","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycnghashalgorithm_l_specifycnghashalgorithmdropid_sha512","displayName":"SHA512","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm","displayName":"Specify CNG random number generator algorithm (User)","description":"This policy setting allows you to configure the CNG random number generator to use.\r\n\r\nIf you enable this policy setting, the random number generator specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default random number generator will be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngrandomnumbergeneratoralgorithm_l_specifycngrandomnumbergeneratoralgorithmid","displayName":"Random number generator: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngsaltlength","displayName":"Specify CNG salt length (User)","description":"This policy setting allows you to specific the number of bytes of salt that should be used.\r\n\r\nIf you enable this policy setting, the bytes specified will be used.\r\n\r\nIf you disable or do not configure this policy setting, the default length or 16 will be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngsaltlength_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngsaltlength_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifycngsaltlength_l_specifycngsaltlengthspinid","displayName":"Number of bytes (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility","displayName":"Specify encryption compatibility (User)","description":"This policy setting allows you to specify the encrypted database compatibility.\r\n\r\nIf you enable this policy setting, the compatibility format specified will be applied during encryption for new files\r\n- Use legacy format\r\n- Use next generation format\r\n- All files save with next generation format\r\n\r\nIf you disable or do not configure this policy setting, the default setting, \"Use next generation format,\" will be applied.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_0","displayName":"Use legacy format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_1","displayName":"Use next generation format","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_cryptography_l_specifyencryptioncompatibility_l_specifyencryptioncompatibilitydropid_2","displayName":"All files save with next generation format","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_blockmacroexecutionfrominternet","displayName":"Block macros from running in Office files from the Internet (User)","description":"\r\n This policy setting allows you to block macros from running in Office files that come from the Internet.\r\n\r\n If you enable this policy setting, macros are blocked from running, even if “Enable all macros” is selected in the Macro Settings section of the Trust Center. Also, instead of having the choice to “Enable Content,” users will receive a notification that macros are blocked from running. If the Office file is saved to a trusted location or was previously trusted by the user, macros will be allowed to run.\r\n\r\n If you disable or don’t configure this policy setting, the settings configured in the Macro Settings section of the Trust Center determine whether macros run in Office files that come from the Internet.\r\n ","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_blockmacroexecutionfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disableallapplicationextensions","displayName":"Disable all application add-ins (User)","description":"This policy setting disables all add-ins for the specified Office 2016 applications.\r\n\r\nIf you enable this policy setting, all add-ins for the specified Office 2016 applications are disabled.\r\n\r\nIf you disable or do not configure this policy setting, all add-ins for the specified Office 2016 applications are allowed to run without notifying the users.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disableallapplicationextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disableallapplicationextensions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned","displayName":"Disable Trust Bar Notification for unsigned application add-ins and block them (User)","description":"This policy setting controls whether the specified Office application notifies users when unsigned application add-ins are loaded or silently disable such add-ins without notification. This policy setting only applies if you enable the \"Require that application add-ins are signed by Trusted Publisher\" policy setting, which prevents users from changing this policy setting.\r\n\r\nIf you enable this policy setting, applications automatically disable unsigned add-ins without informing users.\r\n \r\nIf you disable this policy setting, if this application is configured to require that all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar at the top of the active window. The Trust Bar contains a message that informs users about the unsigned add-in.\r\n\r\nIf you do not configure this policy setting, the disable behavior applies, and in addition, users can configure this requirement themselves in the \"Add-ins\" category of the Trust Center for the application.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_disabletrustbarnotificationforunsigned_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned","displayName":"Require that application add-ins are signed by Trusted Publisher (User)","description":"This policy setting controls whether add-ins for this applications must be digitally signed by a trusted publisher.\r\n \r\nIf you enable this policy setting, this application checks the digital signature for each add-in before loading it. If an add-in does not have a digital signature, or if the signature did not come from a trusted publisher, this application disables the add-in and notifies the user. Certificates must be added to the Trusted Publishers list if you require that all add-ins be signed by a trusted publisher. For detail on about obtaining and distributing certificates, see http://go.microsoft.com/fwlink/?LinkId=294922. Office 2016 stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Office 2016 still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store. Therefore, if you created a list of trusted publishers in a previous version of Office and you upgrade to Office 2016, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store. For more information about trusted publishers, see the Office Resource Kit.\r\n\r\nIf you disable or do not configure this policy setting, this application does not check the digital signature on application add-ins before opening them. If a dangerous add-in is loaded, it could harm users' computers or compromise data security.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_requirethatapplicationextensionsaresigned_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments","displayName":"Set maximum number of trusted documents (User)","description":"This policy setting allows you to specify the maximum number of trust records for trusted documents that can be stored in the registry before the purge task runs. The purge task reduces the number of trusted documents stored in the registry to the value set by the \"Set maximum number of trust records to preserve\" policy setting.\r\n\r\nIf you enable this policy setting, you can specify the maximum number of trusted documents to be stored in the registry before the purge task runs, with an upper limit of 20,000 documents. For performance reasons, we do not recommend setting this policy setting to the upper limit.\r\n\r\nIf you disable or do not configure this policy setting, the default value of 500 is used for the maximum number of trusted documents that can be stored in the registry before the purge task runs.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrusteddocuments_l_setmaximumnumberoftrusteddocumentsspinid","displayName":"Maximum number: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve","displayName":"Set maximum number of trust records to preserve (User)","description":"This policy setting allows you to specify the maximum number of trust records to preserve when the purge task detects that this application has trusted more than the number of trusted documents set by the \"Set maximum number of trusted documents\" policy setting.\r\n\r\nIf you enable this policy setting, you may specify the maximum number of trust records to preserve, with an upper limit of 20000. Due to performance reasons, it is not recommended to set it to the upper limit.\r\n\r\nIf you disable or you do not configure this policy setting, the default value for of 400 is used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_setmaximumnumberoftrustrecordstopreserve_l_setmaximumnumberoftrustrecordstopreservespinid","displayName":"Maximum to preserve: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocuments","displayName":"Turn off trusted documents (User)","description":"This policy setting allows you to turn off the trusted documents feature. The trusted documents feature allows users to always enable active content in documents such as macros, ActiveX controls, data connections, etc. so that they are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.\r\n\r\nIf you enable this policy setting, you will turn off the trusted documents feature. Users will receive a security prompt every time a document containing active content is opened.\r\n\r\nIf you disable or do not configure this policy setting, documents will be trusted when users enable content for a document, and users will not receive a security prompt.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork","displayName":"Turn off Trusted Documents on the network (User)","description":"This policy setting allows you to turn off the trusted documents feature for documents opened from the network.\r\n\r\nIf you enable this policy setting, users will always see security notifications for active content such as macros, ActiveX controls, data connections, etc. for documents opened from the network.\r\n\r\nIf you disable or do not configure this policy setting, the trusted documents feature allows users to always allow active content in documents such as macros, ActiveX controls, data connections, etc. so that users are not prompted the next time they open the documents. Trusted documents are exempt from security notifications.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_turnofftrusteddocumentsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy","displayName":"VBA Macro Notification Settings (User)","description":"This policy setting controls how the specified applications warn users when Visual Basic for Applications (VBA) macros are present.\r\n\r\nIf you enable this policy setting, you can choose from four options for determining how the specified applications will warn the user about macros:\r\n \r\n- Disable all with notification: The application displays the Trust Bar for all macros, whether signed or unsigned. This option enforces the default configuration in Office.\r\n \r\n- Disable all except digitally signed macros: The application displays the Trust Bar for digitally signed macros, allowing users to enable them or leave them disabled. Any unsigned macros are disabled, and users are not notified.\r\n \r\n- Disable all without notification: The application disables all macros, whether signed or unsigned, and does not notify users.\r\n \r\n- Enable all macros (not recommended): All macros are enabled, whether signed or unsigned. This option can significantly reduce security by allowing dangerous code to run undetected.\r\n \r\nIf you disable this policy setting, \"Disable all with notification\" will be the default setting.\r\n \r\nIf you do not configure this policy setting, when users open files in the specified applications that contain VBA macros, the applications open the files with the macros disabled and display the Trust Bar with a warning that macros are present and have been disabled. Users can inspect and edit the files if appropriate, but cannot use any disabled functionality until they enable it by clicking \"Enable Content\" on the Trust Bar. If the user clicks \"Enable Content\", then the document is added as a trusted document.\r\n \r\nImportant: If \"Disable all except digitally signed macros\" is selected, users will not be able to open unsigned Access databases.\r\n \r\nAlso, note that Microsoft Office stores certificates for trusted publishers in the Internet Explorer trusted publisher store. Earlier versions of Microsoft Office stored trusted publisher certificate information (specifically, the certificate thumbprint) in a special Office trusted publisher store. Microsoft Office still reads trusted publisher certificate information from the Office trusted publisher store, but it does not write information to this store.\r\n \r\nTherefore, if you created a list of trusted publishers in a previous version of Microsoft Office and you upgrade to Office, your trusted publisher list will still be recognized. However, any trusted publisher certificates that you add to the list will be stored in the Internet Explorer trusted publisher store.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_2","displayName":"Disable all with notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_3","displayName":"Disable all except digitally signed macros","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_4","displayName":"Disable all without notification","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter_l_vbawarningspolicy_l_empty_1","displayName":"Enable all macros (not recommended)","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork","displayName":"Allow Trusted Locations on the network (User)","description":"This policy setting controls whether trusted locations on the network can be used.\r\n \r\nIf you enable this policy setting, users can specify trusted locations on network shares or in other remote locations that are not under their direct control by selecting the \"Allow Trusted Locations on my network (not recommended)\" check box in the Trusted Locations section of the Trust Center. Content, code, and add-ins are allowed to load from trusted locations with minimal security and without prompting the user for permission.\r\n\r\nIf you disable or do not configure this policy setting, the selected application ignores any network locations listed in the Trusted Locations section of the Trust Center. Disabling this policy setting does not delete any network locations from the Trusted Locations list. Instead, it forces the selected application to treat the locations as non-trusted and prevents users from adding new network locations to the list.\r\n\r\nIf you also deploy Trusted Locations via Group Policy, you should verify whether any of them are remote locations. If any of them are remote locations and you do not allow remote locations via this policy setting, those policy keys that point to remote locations will be ignored on client computers.\r\n\r\nDisabling this policy setting will cause disruption for users who add network locations to the Trusted Locations list. However, it is not recommended to enable this policy setting (as the \"Allow Trusted Locations on my network (not recommended)\" check box itself states), so in practice it should be possible to disable this policy setting in most situations without causing significant usability issues for most users.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_allowtrustedlocationsonthenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc","displayName":"Disable all trusted locations (User)","description":"This policy setting allows administrators to disable all trusted locations in the specified applications. Trusted locations specified in the Trust Center are used to define file locations that are assumed to be safe. Content, code, and add-ins are allowed to load from trusted locations with a minimal amount of security, without prompting the users for permission. If a dangerous file is opened from a trusted location, it will not be subject to standard security measures and could harm users' computers or data.\r\n \r\nIf you enable this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are ignored, including any trusted locations established by Office 2016 during setup, deployed to users using Group Policy, or added by users themselves. Users will be prompted again when opening files from trusted locations.\r\n\r\nIf you disable or do not configure this policy setting, all trusted locations (those specified in the Trust Center) in the specified applications are assumed to be safe.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_disabletrustedloc_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01","displayName":"Trusted Location #1 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_allowsubfolders_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_datecolon","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_descriptioncolon","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc01_l_pathcolon","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02","displayName":"Trusted Location #2 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders10","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders10_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_allowsubfolders10_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_datecolon8","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_descriptioncolon9","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc02_l_pathcolon7","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03","displayName":"Trusted Location #3 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders14","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders14_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_allowsubfolders14_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_datecolon12","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_descriptioncolon13","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc03_l_pathcolon11","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04","displayName":"Trusted Location #4 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders18","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders18_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_allowsubfolders18_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_datecolon16","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_descriptioncolon17","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc04_l_pathcolon15","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05","displayName":"Trusted Location #5 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders22","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders22_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_allowsubfolders22_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_datecolon20","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_descriptioncolon21","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc05_l_pathcolon19","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06","displayName":"Trusted Location #6 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders26","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders26_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_allowsubfolders26_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_datecolon24","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_descriptioncolon25","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc06_l_pathcolon23","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07","displayName":"Trusted Location #7 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders30","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders30_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_allowsubfolders30_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_datecolon28","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_descriptioncolon29","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc07_l_pathcolon27","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08","displayName":"Trusted Location #8 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders34","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders34_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_allowsubfolders34_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_datecolon32","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_descriptioncolon33","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc08_l_pathcolon31","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09","displayName":"Trusted Location #9 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders38","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders38_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_allowsubfolders38_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_datecolon36","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_descriptioncolon37","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc09_l_pathcolon35","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10","displayName":"Trusted Location #10 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders42","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders42_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_allowsubfolders42_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_datecolon40","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_descriptioncolon41","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc10_l_pathcolon39","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11","displayName":"Trusted Location #11 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders46","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders46_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_allowsubfolders46_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_datecolon44","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_descriptioncolon45","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc11_l_pathcolon43","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12","displayName":"Trusted Location #12 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders50","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders50_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_allowsubfolders50_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_datecolon48","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_descriptioncolon49","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc12_l_pathcolon47","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13","displayName":"Trusted Location #13 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders54","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders54_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_allowsubfolders54_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_datecolon52","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_descriptioncolon53","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc13_l_pathcolon51","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14","displayName":"Trusted Location #14 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders58","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders58_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_allowsubfolders58_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_datecolon56","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_descriptioncolon57","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc14_l_pathcolon55","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15","displayName":"Trusted Location #15 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders62","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders62_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_allowsubfolders62_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_datecolon60","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_descriptioncolon61","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc15_l_pathcolon59","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16","displayName":"Trusted Location #16 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders66","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders66_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_allowsubfolders66_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_datecolon64","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_descriptioncolon65","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc16_l_pathcolon63","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17","displayName":"Trusted Location #17 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders70","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders70_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_allowsubfolders70_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_datecolon68","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_descriptioncolon69","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc17_l_pathcolon67","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18","displayName":"Trusted Location #18 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders74","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders74_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_allowsubfolders74_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_datecolon72","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_descriptioncolon73","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc18_l_pathcolon71","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19","displayName":"Trusted Location #19 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders78","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders78_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_allowsubfolders78_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_datecolon76","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_descriptioncolon77","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc19_l_pathcolon75","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20","displayName":"Trusted Location #20 (User)","description":"This policy setting allows you to specify a location that is used as a trusted source for opening files in this application. Files in trusted locations bypass file validation, active content checks and Protected View. Macros and code in these files will execute without displaying warnings to the user. If you change or add a location make sure that the new location is secured, with only appropriate user permissions to add document/files.\r\n\r\nIf you enable this policy setting, you may specify a folder location, path, and date from which files can the application can open files which run macros without warning. If you check the \"Allow sub folders\" check box, then all sub-folders in the folder you specify will also be trusted.\r\n\r\nIf you disable or do not configure this policy setting, the trusted location is not specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders82","displayName":"Allow sub folders: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders82_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_allowsubfolders82_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_datecolon80","displayName":"Date: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_descriptioncolon81","displayName":"Description: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_security~l_trustcenter~l_trustedlocations_l_trustedloc20_l_pathcolon79","displayName":"Path: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor","displayName":"Followed hyperlink color (User)","description":"Specifies the default text color of followed hyperlinks.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4","displayName":"Followed hyperlink color (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_0","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_1","displayName":"Maroon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_2","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_3","displayName":"Olive","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_4","displayName":"Dark Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_5","displayName":"Violet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_6","displayName":"Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_7","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_8","displayName":"Silver","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_9","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_10","displayName":"Bright Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_11","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_12","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_13","displayName":"Fuchsia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_14","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_followedhyperlinkcolor_l_followedhyperlinkcolor4_15","displayName":"White","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor","displayName":"Hyperlink color (User)","description":"Specifies the default hyperlink text color.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3","displayName":"Hyperlink color (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_0","displayName":"Black","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_1","displayName":"Maroon","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_2","displayName":"Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_3","displayName":"Olive","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_4","displayName":"Dark Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_5","displayName":"Violet","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_6","displayName":"Teal","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_7","displayName":"Gray","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_8","displayName":"Silver","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_9","displayName":"Red","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_10","displayName":"Bright Green","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_11","displayName":"Yellow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_12","displayName":"Blue","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_13","displayName":"Fuchsia","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_14","displayName":"Aqua","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_hyperlinkcolor_l_hyperlinkcolor3_15","displayName":"White","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_underlinehyperlinks","displayName":"Underline hyperlinks (User)","description":"This policy setting controls whether hyperlinks in Access tables, queries, forms, and reports are underlined. \r\n \r\nIf you enable this policy setting, Access underlines all hyperlinks in tables, queries, forms, and reports when they are created, overriding any configuration changes on the users' computers. \r\n \r\nIf you disable this policy setting, Access does not underline hyperlinks in tables, queries, forms and reports. \r\n \r\nIf you do not configure this policy setting, Access underlines hyperlinks that appear in tables, queries, forms, and reports. \r\n \r\nEnabling this policy setting enforces the default configuration in Access, and is therefore unlikely to cause a significant usability issue for most users. If this configuration is changed, users might click on dangerous hyperlinks without realizing it, which could pose a security risk.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_underlinehyperlinks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_applicationsettings~l_weboptions~l_general_l_underlinehyperlinks_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize","displayName":"List of error messages to customize (User)","description":"Defines a list of custom error messages to activate.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize84","displayName":"List of error messages to customize (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize84_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_customizableerrormessages_l_listoferrormessagestocustomize_l_listoferrormessagestocustomize84_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems85","displayName":"Disable commands (User)","description":"This policy setting allows you to disable any command bar button and menu item with a command bar ID, including command bar buttons and menu items that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter an ID number to disable a specific command bar button or menu item. The ID number needs to be in decimal (not hexadecimal). Multiple values should be separated by commas.\r\n\r\nIf you disable or do not configure this policy setting, all default command bar buttons or menu items are available to users.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems85_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems85_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disablecommandbarbuttonsandmenuitems85_l_enteracommandbaridtodisable","displayName":"Enter a command bar ID to disable (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys86","displayName":"Disable shortcut keys (User)","description":"This policy setting allows you to disable any shortcut key by using its virtual key code ID, including shortcut keys that are not in the predefined lists.\r\n\r\nIf you enable this policy setting, you can enter a virtual key code ID number to disable a specific shortcut key.\r\n\r\nIf you disable or do not configure this policy setting, all default shortcut keys are enabled for users.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys86_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys86_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_custom_l_disableshortcutkeys86_l_enterakeyandmodifiertodisable","displayName":"Enter a key and modifier to disable (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems","displayName":"Disable commands (User)","description":"This policy setting allows you to disable specific command bar buttons and menu items in the specified applications. \r\n \r\nIf you enable this policy setting you can disable specific command bar buttons and menu items in the user interface for the selected application. The predefined list of command bar buttons and menu items you can disable becomes available to you when you enable this policy setting. \r\n \r\nIf you disable or do not configure this policy setting, the predefined list of command bar buttons and menu items are enabled for the application.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient","displayName":"File tab | Access Options | Customize | All Commands | Email (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_filesendtomailrecipient_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddinsacc","displayName":"Database Tools | Database Tools | Add-Ins (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddinsacc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsaddinsacc_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacroconvertmacrostovisualbasic","displayName":"Database Tools | Macro | Convert Macros to Visual Basic (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacroconvertmacrostovisualbasic_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacroconvertmacrostovisualbasic_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrocreateshortcutmenufrommacro","displayName":"Database Tools | Macro | Create Shortcut Menu from Macro (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrocreateshortcutmenufrommacro_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrocreateshortcutmenufrommacro_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorunmacro","displayName":"Database Tools | Macro | Run Macro (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorunmacro_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrorunmacro_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditoracc","displayName":"Database tools | Macro | Visual Basic (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditoracc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolsmacrovisualbasiceditoracc_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityencryptdecryptdatabase","displayName":"File tab | Access Options | Customize | All Commands | Encode/Decode Database (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityencryptdecryptdatabase_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityencryptdecryptdatabase_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecuritysetdatabasepassword","displayName":"Database tools | Database tools | Encrypt with Password (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecuritysetdatabasepassword_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecuritysetdatabasepassword_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgroupaccounts","displayName":"File tab | Access Options | Customize | All Commands | User and Group accounts (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgroupaccounts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgroupaccounts_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgrouppermissions","displayName":"File tab | Access Options | Customize | All Commands | User and Group Permissions (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgrouppermissions_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserandgrouppermissions_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserlevelsecuritywizard","displayName":"File tab | Access Options | Customize | All Commands | User-Level Security Wizard... (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserlevelsecuritywizard_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disablecommandbarbuttonsandmenuitems_l_toolssecurityuserlevelsecuritywizard_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys","displayName":"Disable shortcut keys (User)","description":"This policy setting allows you to disable specific shortcut key combinations in the specified applications. \r\n \r\nIf you enable this policy setting you can disable specific shortcut keys for the selected application. The predefined list of shortcut keys you can disable becomes available to you when you enable this policy setting. \r\n \r\nIf you disable or do not configure this policy setting, the predefined list of shortcut keys are enabled for the application.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditoracc","displayName":"Alt+F11 (Database Tools | Macro | Visual Basic) (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditoracc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_altf11toolsmacrovisualbasiceditoracc_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindacc","displayName":"Ctrl+F (Home | Find | Find) (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindacc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlffindacc_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkacc","displayName":"Ctrl+K (File tab | Options | Customize | All Commands | Insert Hyperlinks) (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkacc_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_disableitemsinuserinterface~l_predefined_l_disableshortcutkeys_l_ctrlkinserthyperlinkacc_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_2007compatiblecachepolicy","displayName":"Use Access 2007 compatible cache (User)","description":"This policy setting allows you to force new and existing databases to use a cache compatible Access 2007.\r\n\r\nIf you enable this policy setting, new and existing databases will use caching compatible with Access 2007.\r\n\r\nIf you disable or do not configure this policy setting, new databases will default to use caching that is not compatible with Access 2007. Existing databases will use the caching mode that they were created with.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_2007compatiblecachepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_2007compatiblecachepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_blockallunmanagedaddins","displayName":"Block all unmanaged add-ins (User)","description":"This policy setting blocks all add-ins that are not managed by the \"List of managed add-ins\" policy setting.\r\n\r\nIf you enable this policy setting, and the \"List of managed add-ins\" policy setting is also enabled, all add-ins are blocked except those that are configured as 1 (always enabled) or 2 (configurable by the user) in the \"List of managed add-ins\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can enable or disable any add-ins that are not managed by the \"List of managed add-ins\" policy setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_blockallunmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_blockallunmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_clearcacheonclosepolicy","displayName":"Clear cache on close (User)","description":"This policy setting allows you to force the cache to be cleared for databases that are not compatible with Access 2016 when the database is closed.\r\n\r\nIf you enable this policy setting, then any cached Microsoft SharePoint or Business Data Catalog (BDC) links will be cleared on close for databases that do not use Access 2016 compatible caching. If the database uses Access 2016 compatible caching, then this policy setting will have no effect when enabled.\r\n\r\nIf you disable or do not configure this policy setting, then any cached Microsoft SharePoint or Business Data Catalog (BDC) links will be not cleared on close for databases that do not use Access 2016 compatible caching. If the database uses Access 2016 compatible caching, then this policy setting will have no effect when disabled or not configured.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_clearcacheonclosepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_clearcacheonclosepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultcustomtab","displayName":"Show custom templates tab by default in Access on the Office Start screen and in File | New (User)","description":"This policy setting controls whether custom templates (when they exist) show as the default tab in Access on the Office Start screen and in File | New. \r\n\r\nIf you enable this policy setting, users will the see custom templates tab as the default tab in Access on the Office Start screen and in File | New when templates exist (this can include Custom XML programmed templates, templates in the Workgroup templates path, templates in the Personal templates path, or SharePoint templates).\r\n\r\nIf you disable or do not configure this policy setting, users will see the Featured templates tab as the default tab in Access on the Office Start screen and in File | New, unless all Office-provided templates have been disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultcustomtab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultcustomtab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat","displayName":"Default file format (User)","description":"This policy setting controls whether new database files are created in the new Access format or in a format used by earlier versions of Access.\r\n \r\nIf you enable this policy setting, you can specify whether new database files are created in Access 2016 format by default or in Access 2002--2003 format. Users can still override the default and select a specific format when they save the files, but cannot set the default by themselves from the Access Options dialog. \r\n \r\nIf you disable or do not configure this policy setting, when users create new database files, Access saves them in the new Access 2016 format; however, users can change this functionality by selecting a file format from the Default file format drop down list under Access Options | Popular | Creating databases. Note: If you disable this policy setting, users can choose from three default file formats: Access 2000, Access 2002--2003, and Access 2016. You can use this policy setting to specify either the Access 2002--2003 or Access 2016 format as the default, but not the Access 2000 format.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_l_empty87","displayName":"","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_l_empty87_12","displayName":"Access 2007","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_l_empty87_10","displayName":"Access 2002-2003","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_defaultfileformat_l_empty87_9","displayName":"Access 2000","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_donotprompttoconvertolderdatabases","displayName":"Do not prompt to convert older databases (User)","description":"This policy setting controls whether Access prompts users to convert older databases when they are opened. \r\n \r\nIf you enable this policy setting, Access will leave Access 97-format databases unchanged. Access informs the user that the database is in the older format, but does not provide the user with an option to convert the database. Some features introduced in more recent versions of Access will not be available, and the user will not be able to make any design changes to the database. \r\n \r\nIf you disable or do not configure this policy setting, when users open databases that were created in the Access 97 file format, Access prompts them to convert the database to a newer file format. Users can choose to convert the database or leave it in the older format.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_donotprompttoconvertolderdatabases_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_donotprompttoconvertolderdatabases_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins","displayName":"List of managed add-ins (User)","description":"This policy setting allows you to specify which add-ins are always enabled, always disabled (blocked), or configurable by the user. To block add-ins that are not managed by this policy setting, you must also configure the \"Block all unmanaged add-ins\" policy setting.\r\n\r\nTo enable this policy setting, provide the following information for each add-in:\r\n\r\nIn \"Value name,\" specify the programmatic identifier (ProgID) for COM add-ins.\r\n\r\nTo obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Access\\Addins or HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Office\\Access\\Addins.\r\n\r\nYou can also obtain the ProgID of an add-in by using Office Telemetry Dashboard.\r\n\r\nIn \"Value,\" specify the value as follows:\r\n\r\nTo specify that an add-in is always disabled (blocked), type 0.\r\n\r\nTo specify that an add-in is always enabled, type 1.\r\n\r\nTo specify that an add-in is configurable by the user and not blocked by the \"Block all unmanaged add-ins\" policy setting when enabled, type 2.\r\n\r\nIf you disable or do not enable this policy setting, the list of managed add-ins is deleted. If the \"Block all unmanaged add-ins\" policy setting is enabled, then all add-ins are blocked.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2","displayName":"List of managed add-ins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_key","displayName":"Name","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_listofmanagedaddins_l_listofmanagedaddins2_value","displayName":"Value","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_nevercachepolicy","displayName":"Never cache data (User)","description":"This policy setting allows you to force databases that do not use Access 2016 compatible caching to not cache any data.\r\n\r\nIf you enable this policy setting, then data from Microsoft SharePoint or Business Data Catalog (BDC) will not be cached for databases that do not use Access 2016 compatible caching. If the database uses Access 2016 compatible caching, then this policy setting will have no effect when enabled.\r\n\r\nIf you disable or do not configure this policy setting, then data from Microsoft SharePoint or Business Data Catalog (BDC) will be cached for databases that do not use Access 2016 compatible caching. If the database uses Access 2016 compatible caching, then this policy setting will have no effect when disabled or not configured.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_nevercachepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_nevercachepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_personaltemplatespath","displayName":"Personal templates path for Access (User)","description":"This policy setting specifies the location of a user's personal templates. \r\n\r\nIf you enable this policy setting, users will see any templates they have saved in the specified location in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will change to be the specified location. \r\n\r\nIf you disable or do not configure this policy setting, users will not see templates they have saved in the custom templates tab on the Office Start screen and in File | New and when saving a template their default folder will be their document save location.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_personaltemplatespath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_personaltemplatespath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_miscellaneous_l_personaltemplatespath_l_personaltemplatespath","displayName":"Personal templates path (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity_l_modaltrustdecisiononly","displayName":"Modal Trust Decision Only (User)","description":"This policy setting controls how Access notifies users about untrusted components. \r\n \r\nIf you enable this policy setting, when users attempt to open an untrusted Access database that contains user-programmed executable components, users see a dialog box where they then must choose whether to enable or disable the components before they can work with the database. \r\n \r\nIf you disable or do not configure this policy setting, when users open an untrusted Access database that contains user-programmed executable components, Access opens the database with the components disabled and displays the Message Bar with a warning that database content has been disabled. Users can inspect the contents of the database, but cannot use any disabled functionality until they enable it by clicking Options on the Message Bar and selecting the appropriate action.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity_l_modaltrustdecisiononly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity_l_modaltrustdecisiononly_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity~l_workgroupadministrator_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles","displayName":"Path to shared Workgroup information file for secured MDB files (User)","description":"Specifies the default path and filename for the workgroup information file.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity~l_workgroupadministrator_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity~l_workgroupadministrator_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_access16v2~policy~l_microsoftofficeaccess~l_toolssecurity~l_workgroupadministrator_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles_l_pathtosharedworkgroupinformationfileforsecuredmdbfiles83","displayName":"Path to shared Workgroup information file for secured MDB files (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_defaultcategory","displayName":"Specify default category for Add New Programs (User)","description":"Specifies the category of programs that appears when users open the \"Add New Programs\" page.\r\n\r\nIf you enable this setting, only the programs in the category you specify are displayed when the \"Add New Programs\" page opens. Users can use the Category box on the \"Add New Programs\" page to display programs in other categories.\r\n\r\nTo use this setting, type the name of a category in the Category box for this setting. You must enter a category that is already defined in Add or Remove Programs. To define a category, use Software Installation.\r\n\r\nIf you disable this setting or do not configure it, all programs (Category: All) are displayed when the \"Add New Programs\" page opens.\r\n\r\nYou can use this setting to direct users to the programs they are most likely to need.\r\n\r\nNote: This setting is ignored if either the \"Remove Add or Remove Programs\" setting or the \"Hide Add New Programs page\" setting is enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-defaultcategory"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_defaultcategory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_defaultcategory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_defaultcategory_defaultcategorybox","displayName":"Category: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromcdorfloppy","displayName":"Hide the \"Add a program from CD-ROM or floppy disk\" option (User)","description":"Removes the \"Add a program from CD-ROM or floppy disk\" section from the Add New Programs page. This prevents users from using Add or Remove Programs to install programs from removable media.\r\n\r\nIf you disable this setting or do not configure it, the \"Add a program from CD-ROM or floppy disk\" option is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to add or remove program components.\r\n\r\nNote: If the \"Hide Add New Programs page\" setting is enabled, this setting is ignored. Also, if the \"Prevent removable media source for any install\" setting (located in User Configuration\\Administrative Templates\\Windows Components\\Windows Installer) is enabled, users cannot add programs from removable media, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddfromcdorfloppy"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromcdorfloppy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromcdorfloppy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfrominternet","displayName":"Hide the \"Add programs from Microsoft\" option (User)","description":"Removes the \"Add programs from Microsoft\" section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to connect to Windows Update.\r\n\r\nIf you disable this setting or do not configure it, \"Add programs from Microsoft\" is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to connect to Windows Update.\r\n\r\nNote: If the \"Hide Add New Programs page\" setting is enabled, this setting is ignored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddfrominternet"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfrominternet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfrominternet_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromnetwork","displayName":"Hide the \"Add programs from your network\" option (User)","description":"Prevents users from viewing or installing published programs.\r\n\r\nThis setting removes the \"Add programs from your network\" section from the Add New Programs page. The \"Add programs from your network\" section lists published programs and provides an easy way to install them.\r\n\r\nPublished programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users that the programs are available, to recommend their use, or to enable users to install them without having to search for installation files.\r\n\r\nIf you enable this setting, users cannot tell which programs have been published by the system administrator, and they cannot use Add or Remove Programs to install published programs. However, they can still install programs by using other methods, and they can view and install assigned (partially installed) programs that are offered on the desktop or on the Start menu.\r\n\r\nIf you disable this setting or do not configure it, \"Add programs from your network\" is available to all users.\r\n\r\nNote: If the \"Hide Add New Programs page\" setting is enabled, this setting is ignored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddfromnetwork"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromnetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddfromnetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddpage","displayName":"Hide Add New Programs page (User)","description":"Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.\r\n\r\nThe Add New Programs button lets users install programs published or assigned by a system administrator.\r\n\r\nIf you disable this setting or do not configure it, the Add New Programs button is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to install programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddpage"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddpage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddremoveprograms","displayName":"Remove Add or Remove Programs (User)","description":"Prevents users from using Add or Remove Programs.\r\n\r\nThis setting removes Add or Remove Programs from Control Panel and removes the Add or Remove Programs item from menus.\r\n\r\nAdd or Remove Programs lets users install, uninstall, repair, add, and remove features and components of Windows 2000 Professional and a wide variety of Windows programs. Programs published or assigned to the user appear in Add or Remove Programs.\r\n\r\nIf you disable this setting or do not configure it, Add or Remove Programs is available to all users.\r\n\r\nWhen enabled, this setting takes precedence over the other settings in this folder.\r\n\r\nThis setting does not prevent users from using other tools and methods to install or uninstall programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noaddremoveprograms"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddremoveprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noaddremoveprograms_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nochooseprogramspage","displayName":"Hide the Set Program Access and Defaults page (User)","description":"Removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.\r\n\r\nThe Set Program Access and Defaults button lets administrators specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.\r\n\r\nIf you disable this setting or do not configure it, the Set Program Access and Defaults button is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to change program access or defaults.\r\n\r\nThis setting does not prevent the Set Program Access and Defaults icon from appearing on the Start menu. See the \"Remove Set Program Access and Defaults from Start menu\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-nochooseprogramspage"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nochooseprogramspage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nochooseprogramspage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noremovepage","displayName":"Hide Change or Remove Programs page (User)","description":"Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.\r\n\r\nThe Change or Remove Programs button lets users uninstall, repair, add, or remove features of installed programs.\r\n\r\nIf you disable this setting or do not configure it, the Change or Remove Programs page is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to delete or uninstall programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noremovepage"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noremovepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noremovepage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noservices","displayName":"Go directly to Components Wizard (User)","description":"Prevents users from using Add or Remove Programs to configure installed services.\r\n\r\nThis setting removes the \"Set up services\" section of the Add/Remove Windows Components page. The \"Set up services\" section lists system services that have not been configured and offers users easy access to the configuration tools.\r\n\r\nIf you disable this setting or do not configure it, \"Set up services\" appears only when there are unconfigured system services. If you enable this setting, \"Set up services\" never appears.\r\n\r\nThis setting does not prevent users from using other methods to configure services.\r\n\r\nNote: When \"Set up services\" does not appear, clicking the Add/Remove Windows Components button starts the Windows Component Wizard immediately. Because the only remaining option on the Add/Remove Windows Components page starts the wizard, that option is selected automatically, and the page is bypassed.\r\n\r\nTo remove \"Set up services\" and prevent the Windows Component Wizard from starting, enable the \"Hide Add/Remove Windows Components page\" setting. If the \"Hide Add/Remove Windows Components page\" setting is enabled, this setting is ignored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-noservices"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_noservices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nosupportinfo","displayName":"Remove Support Information (User)","description":"Removes links to the Support Info dialog box from programs on the Change or Remove Programs page.\r\n\r\nPrograms listed on the Change or Remove Programs page can include a \"Click here for support information\" hyperlink. When clicked, the hyperlink opens a dialog box that displays troubleshooting information, including a link to the installation files and data that users need to obtain product support, such as the Product ID and version number of the program. The dialog box also includes a hyperlink to support information on the Internet, such as the Microsoft Product Support Services Web page.\r\n\r\nIf you disable this setting or do not configure it, the Support Info hyperlink appears.\r\n\r\nNote: Not all programs provide a support information hyperlink.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-nosupportinfo"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nosupportinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nosupportinfo_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nowindowssetuppage","displayName":"Hide Add/Remove Windows Components page (User)","description":"Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.\r\n\r\nThe Add/Remove Windows Components button lets users configure installed services and use the Windows Component Wizard to add, remove, and configure components of Windows from the installation files.\r\n\r\nIf you disable this setting or do not configure it, the Add/Remove Windows Components button is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to configure services or add or remove program components. However, this setting blocks user access to the Windows Component Wizard.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-addremoveprograms#admx-addremoveprograms-nowindowssetuppage"],"options":[{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nowindowssetuppage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_addremoveprograms_nowindowssetuppage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprogramcompatibilityassistant_1","displayName":"Turn off Program Compatibility Assistant (User)","description":"This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\\Administrative Templates\\Windows Components\\Application Compatibility.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appcompat#admx-appcompat-appcompatturnoffprogramcompatibilityassistant-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprogramcompatibilityassistant_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_appcompat_appcompatturnoffprogramcompatibilityassistant_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation","displayName":"Block launching desktop apps associated with a file. (User)","description":"This policy setting lets you control whether Windows Store apps can open files using the default desktop app for a file type. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a Windows Store app might compromise the system by opening a file in the default desktop app for a file type.\r\n\r\nIf you enable this policy setting, Windows Store apps cannot open files in the default desktop app for a file type; they can open files only in other Windows Store apps.\r\n\r\nIf you disable or do not configure this policy setting, Windows Store apps can open files in the default desktop app for a file type.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxruntime#admx-appxruntime-appxruntimeblockfileelevation"],"options":[{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockfileelevation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation","displayName":"Block launching desktop apps associated with a URI scheme (User)","description":"This policy setting lets you control whether Windows Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a URI scheme launched by a Windows Store app might compromise the system by launching a desktop app.\r\n\r\nIf you enable this policy setting, Windows Store apps cannot open URIs in the default desktop app for a URI scheme; they can open URIs only in other Windows Store apps.\r\n\r\nIf you disable or do not configure this policy setting, Windows Store apps can open URIs in the default desktop app for a URI scheme.\r\n\r\nNote: Enabling this policy setting does not block Windows Store apps from opening the default desktop app for the http, https, and mailto URI schemes. The handlers for these URI schemes are hardened against URI-based vulnerabilities from untrusted sources, reducing the associated risk.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-appxruntime#admx-appxruntime-appxruntimeblockprotocolelevation"],"options":[{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_appxruntime_appxruntimeblockprotocolelevation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk","displayName":"Trust logic for file attachments (User)","description":"This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments.\r\n\r\nPreferring the file handler instructs Windows to use the file handler data over the file type data. For example, trust notepad.exe, but don't trust .txt files.\r\n\r\nPreferring the file type instructs Windows to use the file type data over the file handler data. For example, trust .txt files, regardless of the file handler.\r\n\r\nUsing both the file handler and type data is the most restrictive option. Windows chooses the more restrictive recommendation which will cause users to see more trust prompts than choosing the other options.\r\n\r\nIf you enable this policy setting, you can choose the order in which Windows processes risk assessment data.\r\n\r\nIf you disable this policy setting, Windows uses its default trust logic, which prefers the file handler over the file type.\r\n\r\nIf you do not configure this policy setting, Windows uses its default trust logic, which prefers the file handler over the file type.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-estimatefilehandlerrisk"],"options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_am_trustlogicsetting","displayName":"Determine risk by (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_am_trustlogicsetting_2","displayName":"Preferring the file handler","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_am_trustlogicsetting_3","displayName":"Looking at the file handler and type","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_estimatefilehandlerrisk_am_trustlogicsetting_1","displayName":"Preferring the file type","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel","displayName":"Default risk level for file attachments (User)","description":"This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments, you may also need to configure the trust logic for file attachments.\r\n\r\nHigh Risk: If the attachment is in the list of high-risk file types and is from the restricted zone, Windows blocks the user from accessing the file. If the file is from the Internet zone, Windows prompts the user before accessing the file.\r\n\r\nModerate Risk: If the attachment is in the list of moderate-risk file types and is from the restricted or Internet zone, Windows prompts the user before accessing the file.\r\n\r\nLow Risk: If the attachment is in the list of low-risk file types, Windows will not prompt the user before accessing the file, regardless of the file's zone information.\r\n\r\nIf you enable this policy setting, you can specify the default risk level for file types.\r\n\r\nIf you disable this policy setting, Windows sets the default risk level to moderate.\r\n\r\nIf you do not configure this policy setting, Windows sets the default risk level to moderate.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-setfilerisklevel"],"options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel_am_risklevel","displayName":"Set the default risk level (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel_am_risklevel_6150","displayName":"High Risk","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel_am_risklevel_6151","displayName":"Moderate Risk","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setfilerisklevel_am_risklevel_6152","displayName":"Low Risk","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_sethighriskinclusion","displayName":"Inclusion list for high risk file types (User)","description":"This policy setting allows you to configure the list of high-risk file types. If the file attachment is in the list of high-risk file types and is from the restricted zone, Windows blocks the user from accessing the file. If the file is from the Internet zone, Windows prompts the user before accessing the file. This inclusion list takes precedence over the medium-risk and low-risk inclusion lists (where an extension is listed in more than one inclusion list).\r\n\r\nIf you enable this policy setting, you can create a custom list of high-risk file types.\r\n\r\nIf you disable this policy setting, Windows uses its built-in list of file types that pose a high risk.\r\n\r\nIf you do not configure this policy setting, Windows uses its built-in list of high-risk file types.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-sethighriskinclusion"],"options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_sethighriskinclusion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_sethighriskinclusion_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_sethighriskinclusion_am_instructhighriskinclusionlist","displayName":"Specify high risk extensions (include a leading period, e.g. .cmd;.exe;). (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setlowriskinclusion","displayName":"Inclusion list for low file types (User)","description":"This policy setting allows you to configure the list of low-risk file types. If the attachment is in the list of low-risk file types, Windows will not prompt the user before accessing the file, regardless of the file's zone information. This inclusion list overrides the list of high-risk file types built into Windows and has a lower precedence than the high-risk or medium-risk inclusion lists (where an extension is listed in more than one inclusion list).\r\n\r\nIf you enable this policy setting, you can specify file types that pose a low risk.\r\n\r\nIf you disable this policy setting, Windows uses its default trust logic.\r\n\r\nIf you do not configure this policy setting, Windows uses its default trust logic.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-setlowriskinclusion"],"options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setlowriskinclusion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setlowriskinclusion_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setlowriskinclusion_am_instructlowriskinclusionlist","displayName":"Specify low risk extensions (include a leading period, e.g. .bmp;.gif;). (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setmodriskinclusion","displayName":"Inclusion list for moderate risk file types (User)","description":"This policy setting allows you to configure the list of moderate-risk file types. If the attachment is in the list of moderate-risk file types and is from the restricted or Internet zone, Windows prompts the user before accessing the file. This inclusion list overrides the list of potentially high-risk file types built into Windows and it takes precedence over the low-risk inclusion list but has a lower precedence than the high-risk inclusion list (where an extension is listed in more than one inclusion list).\r\n\r\nIf you enable this policy setting, you can specify file types which pose a moderate risk.\r\n\r\nIf you disable this policy setting, Windows uses its default trust logic.\r\n\r\nIf you do not configure this policy setting, Windows uses its default trust logic.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-attachmentmanager#admx-attachmentmanager-am-setmodriskinclusion"],"options":[{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setmodriskinclusion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setmodriskinclusion_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_attachmentmanager_am_setmodriskinclusion_am_instructmodriskinclusionlist","displayName":"Specify moderate risk extensions (include a leading period, e.g. .doc;.pdf;). (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_com_appmgmt_com_searchforclsid_1","displayName":"Download missing COM components (User)","description":"This policy setting directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires.\r\n\r\nMany Windows programs, such as the MMC snap-ins, use the interfaces provided by the COM components. These programs cannot perform all their functions unless Windows has internally registered the required components.\r\n\r\nIf you enable this policy setting and a component registration is missing, the system searches for it in Active Directory and, if it is found, downloads it. The resulting searches might make some programs start or run slowly.\r\n\r\nIf you disable or do not configure this policy setting, the program continues without the registration. As a result, the program might not perform all its functions, or it might stop.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-com#admx-com-appmgmt-com-searchforclsid-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_com_appmgmt_com_searchforclsid_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_com_appmgmt_com_searchforclsid_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpanel_disallowcpls","displayName":"Hide specified Control Panel items (User)","description":"This setting allows you to display or hide specified Control Panel items, such as Mouse, System, or Personalization, from the Control Panel window and the Start screen. The setting affects the Start screen and Control Panel window, as well as other ways to access Control Panel items, such as shortcuts in Help and Support or command lines that use control.exe. This policy has no effect on items displayed in PC settings.\r\n\r\nIf you enable this setting, you can select specific items not to display on the Control Panel window and the Start screen.\r\n\r\nTo hide a Control Panel item, enable this policy setting and click Show to access the list of disallowed Control Panel items. In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name. For example, enter Microsoft.Mouse, Microsoft.System, or Microsoft.Personalization.\r\n\r\nNote: For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name should be entered, for example timedate.cpl or inetcpl.cpl. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered, for example @systemcpl.dll,-1 for System, or @themecpl.dll,-1 for Personalization. A complete list of canonical and module names can be found in MSDN by searching \"Control Panel items\". \r\n\r\nIf both the \"Hide specified Control Panel items\" setting and the \"Show only specified Control Panel items\" setting are enabled, the \"Show only specified Control Panel items\" setting is ignored.\r\n\r\nNote: The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the \"Disable Display Control Panel\" setting instead.\r\n\r\nNote: To hide pages in the System Settings app, use the \"Settings Page Visibility\" setting under Computer Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpanel#admx-controlpanel-disallowcpls"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpanel_disallowcpls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_disallowcpls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpanel_disallowcpls_disallowcplslist","displayName":"List of disallowed Control Panel items (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_forceclassiccontrolpanel","displayName":"Always open All Control Panel Items when opening Control Panel (User)","description":"This policy setting controls the default Control Panel view, whether by category or icons. \r\n\r\nIf this policy setting is enabled, the Control Panel opens to the icon view.\r\n\r\nIf this policy setting is disabled, the Control Panel opens to the category view.\r\n\r\nIf this policy setting is not configured, the Control Panel opens to the view used in the last Control Panel session.\r\nNote: Icon size is dependent upon what the user has set it to in the previous session.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpanel#admx-controlpanel-forceclassiccontrolpanel"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpanel_forceclassiccontrolpanel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_forceclassiccontrolpanel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpanel_nocontrolpanel","displayName":"Prohibit access to Control Panel and PC settings (User)","description":"Disables all Control Panel programs and the PC settings app.\r\n\r\nThis setting prevents Control.exe and SystemSettings.exe, the program files for Control Panel and PC settings, from starting. As a result, users cannot start Control Panel or PC settings, or run any of their items.\r\n\r\nThis setting removes Control Panel from:\r\nThe Start screen\r\nFile Explorer\r\n\r\nThis setting removes PC settings from:\r\nThe Start screen\r\nSettings charm\r\nAccount picture\r\nSearch results\r\n\r\nIf users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpanel#admx-controlpanel-nocontrolpanel"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpanel_nocontrolpanel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_nocontrolpanel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpanel_restrictcpls","displayName":"Show only specified Control Panel items (User)","description":"This policy setting controls which Control Panel items such as Mouse, System, or Personalization, are displayed on the Control Panel window and the Start screen. The only items displayed in Control Panel are those you specify in this setting. This setting affects the Start screen and Control Panel, as well as other ways to access Control Panel items such as shortcuts in Help and Support or command lines that use control.exe. This policy has no effect on items displayed in PC settings.\r\n\r\nTo display a Control Panel item, enable this policy setting and click Show to access the list of allowed Control Panel items. In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name. For example, enter Microsoft.Mouse, Microsoft.System, or Microsoft.Personalization.\r\n\r\nNote: For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name, for example timedate.cpl or inetcpl.cpl, should be entered. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered. For example, enter @systemcpl.dll,-1 for System or @themecpl.dll,-1 for Personalization. A complete list of canonical and module names of Control Panel items can be found in MSDN by searching \"Control Panel items\".\r\n\r\nIf both the \"Hide specified Control Panel items\" setting and the \"Show only specified Control Panel items\" setting are enabled, the \"Show only specified Control Panel items\" setting is ignored.\r\n\r\nNote: The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the \"Disable Display Control Panel\" setting instead.\r\n\r\nNote: To hide pages in the System Settings app, use the \"Settings Page Visibility\" setting under Computer Configuration.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpanel#admx-controlpanel-restrictcpls"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpanel_restrictcpls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpanel_restrictcpls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpanel_restrictcpls_restrictcplslist","displayName":"List of allowed Control Panel items (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_disable","displayName":"Disable the Display Control Panel (User)","description":"Disables the Display Control Panel.\r\n\r\nIf you enable this setting, the Display Control Panel does not run. When users try to start Display, a message appears explaining that a setting prevents the action.\r\n\r\nAlso, see the \"Prohibit access to the Control Panel\" (User Configuration\\Administrative Templates\\Control Panel) and \"Remove programs on Settings menu\" (User Configuration\\Administrative Templates\\Start Menu & Taskbar) settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-display-disable"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_disable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_disable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_hidesettings","displayName":"Hide Settings tab (User)","description":"Removes the Settings tab from Display in Control Panel.\r\n\r\nThis setting prevents users from using Control Panel to add, configure, or change the display settings on the computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-display-hidesettings"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_hidesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_display_hidesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablecolorschemechoice","displayName":"Prevent changing color scheme (User)","description":"This setting forces the theme color scheme to be the default color scheme.\r\n\r\nIf you enable this setting, a user cannot change the color scheme of the current desktop theme.\r\n\r\nIf you disable or do not configure this setting, a user may change the color scheme of the current desktop theme.\r\n\r\nFor Windows 7 and later, use the \"Prevent changing color and appearance\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-disablecolorschemechoice"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablecolorschemechoice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablecolorschemechoice_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablethemechange","displayName":"Prevent changing theme (User)","description":"This setting disables the theme gallery in the Personalization Control Panel.\r\n\r\nIf you enable this setting, users cannot change or save a theme. Elements of a theme such as the desktop background, color, sounds, and screen saver can still be changed (unless policies are set to turn them off).\r\n\r\nIf you disable or do not configure this setting, there is no effect.\r\n\r\nNote: If you enable this setting but do not specify a theme using the \"load a specific theme\" setting, the theme defaults to whatever the user previously set or the system default.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-disablethemechange"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablethemechange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablethemechange_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablevisualstyle","displayName":"Prevent changing visual style for windows and buttons (User)","description":"Prevents users or applications from changing the visual style of the windows and buttons displayed on their screens.\r\n\r\nWhen enabled on Windows XP, this setting disables the \"Windows and buttons\" drop-down list on the Appearance tab in Display Properties.\r\n\r\nWhen enabled on Windows XP and later systems, this setting prevents users and applications from changing the visual style through the command line. Also, a user may not apply a different visual style when changing themes.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-disablevisualstyle"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablevisualstyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_disablevisualstyle_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_enablescreensaver","displayName":"Enable screen saver (User)","description":"Enables desktop screen savers.\r\n\r\nIf you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver dialog in the Personalization or Display Control Panel. As a result, users cannot change the screen saver options.\r\n\r\nIf you do not configure it, this setting has no effect on the system.\r\n\r\nIf you enable it, a screen saver runs, provided the following two conditions hold: First, a valid screen saver on the client is specified through the \"Screen Saver executable name\" setting or through Control Panel on the client computer. Second, the screen saver timeout is set to a nonzero value through the setting or Control Panel.\r\n\r\nAlso, see the \"Prevent changing Screen Saver\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-enablescreensaver"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_enablescreensaver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_enablescreensaver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_lockfontsize","displayName":"Prohibit selection of visual style font size (User)","description":"Prevents users from changing the size of the font in the windows and buttons displayed on their screens.\r\n\r\nIf this setting is enabled, the \"Font size\" drop-down list on the Appearance tab in Display Properties is disabled. \r\n\r\nIf you disable or do not configure this setting, a user may change the font size using the \"Font size\" drop-down list on the Appearance tab.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-lockfontsize"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_lockfontsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_lockfontsize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nocolorappearanceui","displayName":"Prevent changing color and appearance (User)","description":"Disables the Color (or Window Color) page in the Personalization Control Panel, or the Color Scheme dialog in the Display Control Panel on systems where the Personalization feature is not available.\r\n\r\nThis setting prevents users from using Control Panel to change the window border and taskbar color (on Windows 8), glass color (on Windows Vista and Windows 7), system colors, or color scheme of the desktop and windows.\r\n\r\nIf this setting is disabled or not configured, the Color (or Window Color) page or Color Scheme dialog is available in the Personalization or Display Control Panel.\r\n\r\nFor systems prior to Windows Vista, this setting hides the Appearance and Themes tabs in the in Display in Control Panel.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nocolorappearanceui"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nocolorappearanceui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nocolorappearanceui_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopbackgroundui","displayName":"Prevent changing desktop background (User)","description":"Prevents users from adding or changing the background design of the desktop.\r\n\r\nBy default, users can use the Desktop Background page in the Personalization or Display Control Panel to add a background design (wallpaper) to their desktop.\r\n\r\nIf you enable this setting, none of the Desktop Background settings can be changed by the user.\r\n\r\nTo specify wallpaper for a group, use the \"Desktop Wallpaper\" setting.\r\n\r\nNote: You must also enable the \"Desktop Wallpaper\" setting to prevent users from changing the desktop wallpaper. Refer to KB article: Q327998 for more information.\r\n\r\nAlso, see the \"Allow only bitmapped wallpaper\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nodesktopbackgroundui"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopbackgroundui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopbackgroundui_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopiconsui","displayName":"Prevent changing desktop icons (User)","description":"Prevents users from changing the desktop icons.\r\n\r\nBy default, users can use the Desktop Icon Settings dialog in the Personalization or Display Control Panel to show, hide, or change the desktop icons.\r\n\r\nIf you enable this setting, none of the desktop icons can be changed by the user.\r\n\r\nFor systems prior to Windows Vista, this setting also hides the Desktop tab in the Display Control Panel.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nodesktopiconsui"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopiconsui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nodesktopiconsui_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nomousepointersui","displayName":"Prevent changing mouse pointers (User)","description":"Prevents users from changing the mouse pointers.\r\n\r\nBy default, users can use the Pointers tab in the Mouse Control Panel to add, remove, or change the mouse pointers.\r\n\r\nIf you enable this setting, none of the mouse pointer scheme settings can be changed by the user.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nomousepointersui"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nomousepointersui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nomousepointersui_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_noscreensaverui","displayName":"Prevent changing screen saver (User)","description":"Prevents the Screen Saver dialog from opening in the Personalization or Display Control Panel.\r\n \r\nThis setting prevents users from using Control Panel to add, configure, or change the screen saver on the computer. It does not prevent a screen saver from running.\r\n \n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-noscreensaverui"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_noscreensaverui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_noscreensaverui_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nosoundschemeui","displayName":"Prevent changing sounds (User)","description":"Prevents users from changing the sound scheme.\r\n\r\nBy default, users can use the Sounds tab in the Sound Control Panel to add, remove, or change the system Sound Scheme.\r\n\r\nIf you enable this setting, none of the Sound Scheme settings can be changed by the user.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-nosoundschemeui"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nosoundschemeui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_nosoundschemeui_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensaverissecure","displayName":"Password protect the screen saver (User)","description":"Determines whether screen savers used on the computer are password protected.\r\n\r\nIf you enable this setting, all screen savers are password protected. If you disable this setting, password protection cannot be set on any screen saver.\r\n\r\nThis setting also disables the \"Password protected\" checkbox on the Screen Saver dialog in the Personalization or Display Control Panel, preventing users from changing the password protection setting.\r\n\r\nIf you do not configure this setting, users can choose whether or not to set password protection on each screen saver.\r\n\r\nTo ensure that a computer will be password protected, enable the \"Enable Screen Saver\" setting and specify a timeout via the \"Screen Saver timeout\" setting.\r\n\r\nNote: To remove the Screen Saver dialog, use the \"Prevent changing Screen Saver\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-screensaverissecure"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensaverissecure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensaverissecure_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensavertimeout","displayName":"Screen saver timeout (User)","description":"Specifies how much user idle time must elapse before the screen saver is launched.\r\n\r\nWhen configured, this idle time can be set from a minimum of 1 second to a maximum of 86,400 seconds, or 24 hours. If set to zero, the screen saver will not be started.\r\n\r\nThis setting has no effect under any of the following circumstances:\r\n\r\n - The setting is disabled or not configured.\r\n\r\n - The wait time is set to zero.\r\n\r\n - The \"Enable Screen Saver\" setting is disabled.\r\n\r\n - Neither the \"Screen saver executable name\" setting nor the Screen Saver dialog of the client computer's Personalization or Display Control Panel specifies a valid existing screen saver program on the client.\r\n\r\nWhen not configured, whatever wait time is set on the client through the Screen Saver dialog in the Personalization or Display Control Panel is used. The default is 15 minutes.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-screensavertimeout"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensavertimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensavertimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_screensavertimeout_screensavertimeoutfreqspin","displayName":"Seconds: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setscreensaver","displayName":"Force specific screen saver (User)","description":"Specifies the screen saver for the user's desktop.\r\n\r\nIf you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this setting disables the drop-down list of screen savers in the Screen Saver dialog in the Personalization or Display Control Panel, which prevents users from changing the screen saver.\r\n\r\nIf you disable this setting or do not configure it, users can select any screen saver.\r\n\r\nIf you enable this setting, type the name of the file that contains the screen saver, including the .scr file name extension. If the screen saver file is not in the %Systemroot%\\System32 directory, type the fully qualified path to the file.\r\n\r\nIf the specified screen saver is not installed on a computer to which this setting applies, the setting is ignored.\r\n\r\nNote: This setting can be superseded by the \"Enable Screen Saver\" setting. If the \"Enable Screen Saver\" setting is disabled, this setting is ignored, and screen savers do not run.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-setscreensaver"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setscreensaver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setscreensaver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setscreensaver_screensaverfilename","displayName":"Screen saver executable name (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme","displayName":"Load a specific theme (User)","description":"Specifies which theme file is applied to the computer the first time a user logs on.\r\n\r\nIf you enable this setting, the theme that you specify will be applied when a new user logs on for the first time. This policy does not prevent the user from changing the theme or any of the theme elements such as the desktop background, color, sounds, or screen saver after the first logon.\r\n\r\nIf you disable or do not configure this setting, the default theme will be applied at the first logon.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-settheme"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_settheme_themefilename","displayName":"Path to theme file: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setvisualstyle","displayName":"Force a specific visual style file or force Windows Classic (User)","description":"This setting allows you to force a specific visual style file by entering the path (location) of the visual style file.\r\n\r\nThis can be a local computer visual style (aero.msstyles), or a file located on a remote server using a UNC path (\\\\Server\\Share\\aero.msstyles).\r\n\r\nIf you enable this setting, the visual style file that you specify will be used. Also, a user may not apply a different visual style when changing themes.\r\n\r\nIf you disable or do not configure this setting, the users can select the visual style that they want to use by changing themes (if the Personalization Control Panel is available).\r\n\r\nNote: If this setting is enabled and the file is not available at user logon, the default visual style is loaded.\r\n\r\nNote: When running Windows XP, you can select the Luna visual style by typing %windir%\\resources\\Themes\\Luna\\Luna.msstyles\r\n\r\nNote: To select the Windows Classic visual style, leave the box blank beside \"Path to Visual Style:\" and enable this setting. When running Windows 8 or Windows RT, you cannot apply the Windows Classic visual style.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-controlpaneldisplay#admx-controlpaneldisplay-cpl-personalization-setvisualstyle"],"options":[{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setvisualstyle_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setvisualstyle_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_controlpaneldisplay_cpl_personalization_setvisualstyle_themes_name","displayName":"Path to Visual Style: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablechangepassword","displayName":"Remove Change Password (User)","description":"This policy setting prevents users from changing their Windows password on demand.\r\n\r\nIf you enable this policy setting, the 'Change Password' button on the Windows Security dialog box will not appear when you press Ctrl+Alt+Del.\r\n\r\nHowever, users are still able to change their password when prompted by the system. The system prompts users for a new password when an administrator requires a new password or their password is expiring.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ctrlaltdel#admx-ctrlaltdel-disablechangepassword"],"options":[{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablechangepassword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablechangepassword_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablelockcomputer","displayName":"Remove Lock Computer (User)","description":"This policy setting prevents users from locking the system.\r\n\r\nWhile locked, the desktop is hidden and the system cannot be used. Only the user who locked the system or the system administrator can unlock it.\r\n\r\nIf you enable this policy setting, users cannot lock the computer from the keyboard using Ctrl+Alt+Del.\r\n\r\nIf you disable or do not configure this policy setting, users will be able to lock the computer from the keyboard using Ctrl+Alt+Del.\r\n\r\nTip:To lock a computer without configuring a setting, press Ctrl+Alt+Delete, and then click Lock this computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ctrlaltdel#admx-ctrlaltdel-disablelockcomputer"],"options":[{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablelockcomputer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disablelockcomputer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disabletaskmgr","displayName":"Remove Task Manager (User)","description":"This policy setting prevents users from starting Task Manager.\r\n\r\nTask Manager (taskmgr.exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run.\r\n\r\nIf you enable this policy setting, users will not be able to access Task Manager. If users try to start Task Manager, a message appears explaining that a policy prevents the action.\r\n\r\nIf you disable or do not configure this policy setting, users can access Task Manager to start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ctrlaltdel#admx-ctrlaltdel-disabletaskmgr"],"options":[{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disabletaskmgr_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_disabletaskmgr_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_nologoff","displayName":"Remove Logoff (User)","description":"This policy setting disables or removes all menu items and buttons that log the user off the system.\r\n\r\nIf you enable this policy setting, users will not see the Log off menu item when they press Ctrl+Alt+Del. This will prevent them from logging off unless they restart or shutdown the computer, or clicking Log off from the Start menu.\r\n\r\nAlso, see the 'Remove Logoff on the Start Menu' policy setting.\r\n\r\nIf you disable or do not configure this policy setting, users can see and select the Log off menu item when they press Ctrl+Alt+Del.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-ctrlaltdel#admx-ctrlaltdel-nologoff"],"options":[{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_nologoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_ctrlaltdel_nologoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_enablefilter","displayName":"Enable filter in Find dialog box (User)","description":"Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional filters to search results.\r\n\r\nIf you enable this setting, the filter bar appears when the Active Directory Find dialog box opens, but users can hide it.\r\n\r\nIf you disable this setting or do not configure it, the filter bar does not appear, but users can display it by selecting \"Filter\" on the \"View\" menu.\r\n\r\nTo see the filter bar, open Network Locations, click Entire Network, and then click Directory. Right-click the name of a Windows domain, and click Find. Type the name of an object in the directory, such as \"Administrator.\" If the filter bar does not appear above the resulting display, on the View menu, click Filter.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-ad-enablefilter"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_ad_enablefilter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_enablefilter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_hidedirectoryfolder","displayName":"Hide Active Directory folder (User)","description":"Hides the Active Directory folder in Network Locations.\r\n\r\nThe Active Directory folder displays Active Directory objects in a browse window.\r\n\r\nIf you enable this setting, the Active Directory folder does not appear in the Network Locations folder.\r\n\r\nIf you disable this setting or do not configure it, the Active Directory folder appears in the Network Locations folder.\r\n\r\nThis setting is designed to let users search Active Directory but not tempt them to casually browse Active Directory.\r\n\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-ad-hidedirectoryfolder"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_ad_hidedirectoryfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_hidedirectoryfolder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_querylimit","displayName":"Maximum size of Active Directory searches (User)","description":"Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This setting affects all browse displays associated with Active Directory, such as those in Local Users and Groups, Active Directory Users and Computers, and dialog boxes used to set permissions for user or group objects in Active Directory.\r\n\r\nIf you enable this setting, you can use the \"Number of objects returned\" box to limit returns from an Active Directory search.\r\n\r\nIf you disable this setting or do not configure it, the system displays up to 10,000 objects. This consumes approximately 2 MB of memory or disk space.\r\n\r\nThis setting is designed to protect the network and the domain controller from the effect of expansive searches.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-ad-querylimit"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_ad_querylimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_querylimit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_ad_querylimit_ad_querylimit_box","displayName":"Number of objects returned: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_desktop_forceactivedesktopon","displayName":"Enable Active Desktop (User)","description":"Enables Active Desktop and prevents users from disabling it.\r\n\r\nThis setting prevents users from trying to enable or disable Active Desktop while a policy controls it.\r\n\r\nIf you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it.\r\n\r\nNote: If both the \"Enable Active Desktop\" setting and the \"Disable Active Desktop\" setting are enabled, the \"Disable Active Desktop\" setting is ignored. If the \"Turn on Classic Shell\" setting ( in User Configuration\\Administrative Templates\\Windows Components\\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-forceactivedesktopon"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_forceactivedesktopon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_forceactivedesktopon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktop","displayName":"Disable Active Desktop (User)","description":"Disables Active Desktop and prevents users from enabling it.\r\n\r\nThis setting prevents users from trying to enable or disable Active Desktop while a policy controls it.\r\n\r\nIf you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it.\r\n\r\nNote: If both the \"Enable Active Desktop\" setting and the \"Disable Active Desktop\" setting are enabled, the \"Disable Active Desktop\" setting is ignored. If the \"Turn on Classic Shell\" setting (in User Configuration\\Administrative Templates\\Windows Components\\Windows Explorer) is enabled, Active Desktop is disabled, and both these policies are ignored.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-noactivedesktop"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktop_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktopchanges","displayName":"Prohibit changes (User)","description":"Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration.\r\n\r\nThis is a comprehensive setting that locks down the configuration you establish by using other policies in this folder. This setting removes the Web tab from Display in Control Panel. As a result, users cannot enable or disable Active Desktop. If Active Desktop is already enabled, users cannot add, remove, or edit Web content or disable, lock, or synchronize Active Desktop components.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-noactivedesktopchanges"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktopchanges_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_noactivedesktopchanges_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktop","displayName":"Hide and disable all items on the desktop (User)","description":"Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations.\r\n\r\nRemoving icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent.\r\n\r\nAlso, see \"Items displayed in Places Bar\" in User Configuration\\Administrative Templates\\Windows Components\\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nodesktop"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktop_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktopcleanupwizard","displayName":"Remove the Desktop Cleanup Wizard (User)","description":"Prevents users from using the Desktop Cleanup Wizard.\r\n\r\nIf you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.\r\n\r\nIf you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.\r\n\r\nNote: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nodesktopcleanupwizard"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktopcleanupwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nodesktopcleanupwizard_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nointerneticon","displayName":"Hide Internet Explorer icon on desktop (User)","description":"Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar.\r\n\r\nThis setting does not prevent the user from starting Internet Explorer by using other methods.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nointerneticon"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nointerneticon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nointerneticon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nomycomputericon","displayName":"Remove Computer icon on the desktop (User)","description":"This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all Explorer windows, and it hides Computer in the Explorer folder tree pane. If the user navigates into Computer via the \"Up\" button while this setting is enabled, they view an empty Computer folder. This setting allows administrators to restrict their users from seeing Computer in the shell namespace, allowing them to present their users with a simpler desktop environment.\r\n\r\nIf you enable this setting, Computer is hidden on the desktop, the new Start menu, the Explorer folder tree pane, and the Explorer Web views. If the user manages to navigate to Computer, the folder will be empty.\r\n\r\nIf you disable this setting, Computer is displayed as usual, appearing as normal on the desktop, Start menu, folder tree pane, and Web views, unless restricted by another setting.\r\n\r\nIf you do not configure this setting, the default is to display Computer as usual.\r\n\r\nNote: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Computer icon. Hiding Computer and its contents does not hide the contents of the child folders of Computer. For example, if the users navigate into one of their hard drives, they see all of their folders and files there, even if this setting is enabled.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nomycomputericon"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nomycomputericon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nomycomputericon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nomydocumentsicon","displayName":"Remove My Documents icon on the desktop (User)","description":"Removes most occurrences of the My Documents icon.\r\n\r\nThis setting removes the My Documents icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.\r\n\r\nThis setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder.\r\n\r\nThis setting does not remove the My Documents icon from the Start menu. To do so, use the \"Remove My Documents icon from Start Menu\" setting.\r\n\r\nNote: To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nomydocumentsicon"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nomydocumentsicon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nomydocumentsicon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nonethood","displayName":"Hide Network Locations icon on desktop (User)","description":"Removes the Network Locations icon from the desktop.\r\n\r\nThis setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network.\r\n\r\nNote: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nonethood"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nonethood_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nonethood_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmycomputer","displayName":"Remove Properties from the Computer icon context menu (User)","description":"This setting hides Properties on the context menu for Computer.\r\n\r\nIf you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu. Likewise, Alt-Enter does nothing when Computer is selected.\r\n\r\nIf you disable or do not configure this setting, the Properties option is displayed as usual.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nopropertiesmycomputer"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmycomputer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmycomputer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmydocuments","displayName":"Remove Properties from the Documents icon context menu (User)","description":"This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon.\r\n\r\nIf you enable this policy setting, the Properties menu command will not be displayed when the user does any of the following:\r\n\r\nRight-clicks the My Documents icon.\r\nClicks the My Documents icon, and then opens the File menu.\r\nClicks the My Documents icon, and then presses ALT+ENTER.\r\n\r\nIf you disable or do not configure this policy setting, the Properties menu command is displayed.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nopropertiesmydocuments"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmydocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nopropertiesmydocuments_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_norecentdocsnethood","displayName":"Do not add shares of recently opened documents to Network Locations (User)","description":"Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.\r\n\r\nIf you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to Network Locations.\r\n\r\nIf you enable this setting, shared folders are not added to Network Locations automatically when you open a document in the shared folder.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-norecentdocsnethood"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_norecentdocsnethood_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_norecentdocsnethood_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinicon","displayName":"Remove Recycle Bin icon from desktop (User)","description":"Removes most occurrences of the Recycle Bin icon.\r\n\r\nThis setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.\r\n\r\nThis setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.\r\n\r\nNote: To make changes to this setting effective, you must log off and then log back on.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-norecyclebinicon"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinicon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinicon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinproperties","displayName":"Remove Properties from the Recycle Bin context menu (User)","description":"Removes the Properties option from the Recycle Bin context menu.\r\n\r\nIf you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.\r\n\r\nIf you disable or do not configure this setting, the Properties option is displayed as usual.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-norecyclebinproperties"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_norecyclebinproperties_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nosavesettings","displayName":"Don't save settings at exit (User)","description":"Prevents users from saving certain changes to the desktop.\r\n\r\nIf you enable this setting, users can change the desktop, but some changes, such as the position of open windows or the size and position of the taskbar, are not saved when users log off. However, shortcuts placed on the desktop are always saved.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nosavesettings"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nosavesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nosavesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_nowindowminimizingshortcuts","displayName":"Turn off Aero Shake window minimizing mouse gesture (User)","description":"Prevents windows from being minimized or restored when the active window is shaken back and forth with the mouse.\r\n \r\nIf you enable this policy, application windows will not be minimized or restored when the active window is shaken back and forth with the mouse.\r\n\r\nIf you disable or do not configure this policy, this window minimizing and restoring gesture will apply.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-nowindowminimizingshortcuts"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_nowindowminimizingshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_nowindowminimizingshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title","displayName":"Add/Delete items (User)","description":"Adds and deletes specified Web content items.\r\n\r\nYou can use the \"Add\" box in this setting to add particular Web-based items or shortcuts to users' desktops. Users can close or delete the items (if settings allow), but the items are added again each time the setting is refreshed.\r\n\r\nYou can also use this setting to delete particular Web-based items from users' desktops. Users can add the item again (if settings allow), but the item is deleted each time the setting is refreshed.\r\n\r\nNote: Removing an item from the \"Add\" list for this setting is not the same as deleting it. Items that are removed from the \"Add\" list are not removed from the desktop. They are simply not added again.\r\n\r\nNote: For this setting to take affect, you must log off and log on to the system.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-admincomponents-title"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title_sz_atc_adminadditem","displayName":"Enter URL(s) of desktop item(s) to Add (space separated): (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_admincomponents_title_sz_atc_admindeleteitem","displayName":"Enter URL(s) of desktop item(s) to Delete (space separated): (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableadd","displayName":"Prohibit adding items (User)","description":"Prevents users from adding Web content to their Active Desktop.\r\n\r\nThis setting removes the \"New\" button from Web tab in Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop. This setting does not remove existing Web content from their Active Desktop, or prevent users from removing existing Web content.\r\n\r\nAlso, see the \"Disable all items\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-disableadd"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableadd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableadd_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableclose","displayName":"Prohibit closing items (User)","description":"Prevents users from removing Web content from their Active Desktop.\r\n\r\nIn Active Desktop, you can add items to the desktop but close them so they are not displayed.\r\n\r\nIf you enable this setting, items added to the desktop cannot be closed; they always appear on the desktop. This setting removes the check boxes from items on the Web tab in Display in Control Panel.\r\n\r\nNote: This setting does not prevent users from deleting items from their Active Desktop.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-disableclose"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableclose_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableclose_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disabledel","displayName":"Prohibit deleting items (User)","description":"Prevents users from deleting Web content from their Active Desktop.\r\n\r\nThis setting removes the Delete button from the Web tab in Display in Control Panel. As a result, users can temporarily remove, but not delete, Web content from their Active Desktop.\r\n\r\nThis setting does not prevent users from adding Web content to their Active Desktop.\r\n\r\nAlso, see the \"Prohibit closing items\" and \"Disable all items\" settings.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-disabledel"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disabledel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disabledel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableedit","displayName":"Prohibit editing items (User)","description":"Prevents users from changing the properties of Web content items on their Active Desktop.\r\n\r\nThis setting disables the Properties button on the Web tab in Display in Control Panel. Also, it removes the Properties item from the menu for each item on the Active Desktop. As a result, users cannot change the properties of an item, such as its synchronization schedule, password, or display characteristics.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-disableedit"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableedit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_disableedit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_nocomponents","displayName":"Disable all items (User)","description":"Removes Active Desktop content and prevents users from adding Active Desktop content. \r\n\r\nThis setting removes all Active Desktop items from the desktop. It also removes the Web tab from Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop.\r\n\r\nNote: This setting does not disable Active Desktop. Users can still use image formats, such as JPEG and GIF, for their desktop wallpaper.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-atc-nocomponents"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_nocomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_atc_nocomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_dragdropclose","displayName":"Prevent adding, dragging, dropping and closing the Taskbar's toolbars (User)","description":"Prevents users from manipulating desktop toolbars.\r\n\r\nIf you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.\r\n\r\nNote: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.\r\n\r\nTip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to \"Toolbars.\"\r\n\r\nAlso, see the \"Prohibit adjusting desktop toolbars\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-db-dragdropclose"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_dragdropclose_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_dragdropclose_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_moving","displayName":"Prohibit adjusting desktop toolbars (User)","description":"Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.\r\n\r\nThis setting does not prevent users from adding or removing toolbars on the desktop.\r\n\r\nNote: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration.\r\n\r\nAlso, see the \"Prevent adding, dragging, dropping and closing the Taskbar's toolbars\" setting.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-db-moving"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_moving_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_db_moving_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_dwp_nohtmlpaper","displayName":"Allow only bitmapped wallpaper (User)","description":"Permits only bitmap images for wallpaper. This setting limits the desktop background (\"wallpaper\") to bitmap (.bmp) files. If users select files with other image formats, such as JPEG, GIF, PNG, or HTML, through the Browse button on the Desktop tab, the wallpaper does not load. Files that are autoconverted to a .bmp format, such as JPEG, GIF, and PNG, can be set as Wallpaper by right-clicking the image and selecting \"Set as Wallpaper\".\r\n\r\nAlso, see the \"Desktop Wallpaper\" and the \"Prevent changing wallpaper\" (in User Configuration\\Administrative Templates\\Control Panel\\Display) settings.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-sz-dwp-nohtmlpaper"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_sz_dwp_nohtmlpaper_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_sz_dwp_nohtmlpaper_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper","displayName":"Desktop Wallpaper (User)","description":"Specifies the desktop background (\"wallpaper\") displayed on all users' desktops.\r\n\r\nThis setting lets you specify the wallpaper on users' desktops and prevents users from changing the image or its presentation. The wallpaper you specify can be stored in a bitmap (*.bmp) or JPEG (*.jpg) file.\r\n\r\nTo use this setting, type the fully qualified path and name of the file that stores the wallpaper image. You can type a local path, such as C:\\Windows\\web\\wallpaper\\home.jpg or a UNC path, such as \\\\Server\\Share\\Corp.jpg. If the specified file is not available when the user logs on, no wallpaper is displayed. Users cannot specify alternative wallpaper. You can also use this setting to specify that the wallpaper image be centered, tiled, or stretched. Users cannot change this specification.\r\n\r\nIf you disable this setting or do not configure it, no wallpaper is displayed. However, users can select the wallpaper of their choice.\r\n\r\nAlso, see the \"Allow only bitmapped wallpaper\" in the same location, and the \"Prevent changing wallpaper\" setting in User Configuration\\Administrative Templates\\Control Panel.\r\n\r\nNote: This setting does not apply to remote desktop server sessions.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-desktop#admx-desktop-wallpaper"],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpapername","displayName":"Wallpaper Name: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle","displayName":"Wallpaper Style: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_0","displayName":"Center","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_1","displayName":"Tile","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_2","displayName":"Stretch","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_3","displayName":"Fit","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_4","displayName":"Fill","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_desktop_wallpaper_wallpaperstyle_5","displayName":"Span","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_digitallocker_digitalx_diableapplication_titletext_1","displayName":"Do not allow Digital Locker to run (User)","description":"Specifies whether Digital Locker can run.\r\n\r\nDigital Locker is a dedicated download manager associated with Windows Marketplace and a feature of Windows that can be used to manage and download products acquired and stored in the user's Windows Marketplace Digital Locker.\r\n\r\nIf you enable this setting, Digital Locker will not run.\r\n\r\nIf you disable or do not configure this setting, Digital Locker can be run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-digitallocker#admx-digitallocker-digitalx-diableapplication-titletext-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_digitallocker_digitalx_diableapplication_titletext_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_digitallocker_digitalx_diableapplication_titletext_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1","displayName":"Specify a default color (User)","description":"This policy setting controls the default color for window frames when the user does not specify a color. \r\n\r\nIf you enable this policy setting and specify a default color, this color is used in glass window frames, if the user does not specify a color. \r\n\r\nIf you disable or do not configure this policy setting, the default internal color is used, if the user does not specify a color. \r\n\r\nNote: This policy setting can be used in conjunction with the \"Prevent color changes of window frames\" setting, to enforce a specific color for window frames that cannot be changed by users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdefaultcolorizationcolor-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_dwmdefaultcolorizationcoloralpha","displayName":"Alpha (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_dwmdefaultcolorizationcolorblue","displayName":"Blue (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_dwmdefaultcolorizationcolorgreen","displayName":"Green (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdefaultcolorizationcolor_1_dwmdefaultcolorizationcolorred","displayName":"Red (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_1","displayName":"Do not allow window animations (User)","description":"This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. \r\n\r\nIf you enable this policy setting, window animations are turned off. \r\n\r\nIf you disable or do not configure this policy setting, window animations are turned on. \r\n\r\nChanging this policy setting requires a logoff for it to be applied.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdisallowanimations-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowanimations_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_1","displayName":"Do not allow color changes (User)","description":"This policy setting controls the ability to change the color of window frames. \r\n\r\nIf you enable this policy setting, you prevent users from changing the default window frame color. \r\n\r\nIf you disable or do not configure this policy setting, you allow users to change the default window frame color. \r\n\r\nNote: This policy setting can be used in conjunction with the \"Specify a default color for window frames\" policy setting, to enforce a specific color for window frames that cannot be changed by users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-dwm#admx-dwm-dwmdisallowcolorizationcolorchanges-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_dwm_dwmdisallowcolorizationcolorchanges_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_donotincludenonpublishingstandardglyphinthecandidatelist","displayName":"Do not include Non-Publishing Standard Glyph in the candidate list (User)","description":"This policy setting allows you to include the Non-Publishing Standard Glyph in the candidate list when Publishing Standard Glyph for the word exists.\r\n\r\nIf you enable this policy setting, Non-Publishing Standard Glyph is not included in the candidate list when Publishing Standard Glyph for the word exists.\r\n\r\nIf you disable or do not configure this policy setting, both Publishing Standard Glyph and Non-Publishing Standard Glyph are included in the candidate list.\r\n\r\nThis policy setting applies to Japanese Microsoft IME only.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-donotincludenonpublishingstandardglyphinthecandidatelist"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_donotincludenonpublishingstandardglyphinthecandidatelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_donotincludenonpublishingstandardglyphinthecandidatelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_restrictcharactercoderangeofconversion","displayName":"Restrict character code range of conversion (User)","description":"This policy setting allows you to restrict character code range of conversion by setting character filter.\r\n\r\nIf you enable this policy setting, then only the character code ranges specified by this policy setting are used for conversion of IME. You can specify multiple ranges by setting a value combined with a bitwise OR of following values:\r\n\r\n0x0001 // JIS208 area\r\n0x0002 // NEC special char code\r\n0x0004 // NEC selected IBM extended code\r\n0x0008 // IBM extended code\r\n0x0010 // Half width katakana code\r\n0x0100 // EUDC(GAIJI)\r\n0x0200 // S-JIS unmapped area\r\n0x0400 // Unicode char\r\n0x0800 // surrogate char\r\n0x1000 // IVS char\r\n0xFFFF // no definition.\r\n\r\nIf you disable or do not configure this policy setting, no range of characters are filtered by default.\r\n\r\nThis policy setting applies to Japanese Microsoft IME only.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-restrictcharactercoderangeofconversion"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_restrictcharactercoderangeofconversion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_restrictcharactercoderangeofconversion_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_restrictcharactercoderangeofconversion_l_restrictcharactercoderangeofconversionid","displayName":"Character code range: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffcustomdictionary","displayName":"Turn off custom dictionary (User)","description":"This policy setting allows you to turn off the ability to use a custom dictionary.\r\n\r\nIf you enable this policy setting, you cannot add, edit, and delete words in the custom dictionary either with GUI tools or APIs. A word registered in the custom dictionary before enabling this policy setting can continue to be used for conversion.\r\n\r\nIf you disable or do not configure this policy setting, the custom dictionary can be used by default.\r\n\r\nFor Japanese Microsoft IME, [Clear auto-tuning information] works, even if this policy setting is enabled, and it clears self-tuned words from the custom dictionary.\r\n\r\nThis policy setting is applied to Japanese Microsoft IME.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffcustomdictionary"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffcustomdictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffcustomdictionary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffhistorybasedpredictiveinput","displayName":"Turn off history-based predictive input (User)","description":"This policy setting allows you to turn off history-based predictive input.\r\n\r\nIf you enable this policy setting, history-based predictive input is turned off.\r\n\r\nIf you disable or do not configure this policy setting, history-based predictive input is on by default.\r\n\r\nThis policy setting applies to Japanese Microsoft IME only.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffhistorybasedpredictiveinput"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffhistorybasedpredictiveinput_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffhistorybasedpredictiveinput_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffinternetsearchintegration","displayName":"Turn off Internet search integration (User)","description":"This policy setting allows you to turn off Internet search integration.\r\n\r\nSearch integration includes both using Search Provider (Japanese Microsoft IME) and performing bing search from predictive input for Japanese Microsoft IME.\r\n\r\nIf you enable this policy setting, you cannot use search integration.\r\n\r\nIf you disable or do not configure this policy setting, the search integration function can be used by default.\r\n\r\nThis policy setting applies to Japanese Microsoft IME.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffinternetsearchintegration"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffinternetsearchintegration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffinternetsearchintegration_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffopenextendeddictionary","displayName":"Turn off Open Extended Dictionary (User)","description":"This policy setting allows you to turn off Open Extended Dictionary.\r\n\r\nIf you enable this policy setting, Open Extended Dictionary is turned off. You cannot add a new Open Extended Dictionary.\r\n\r\nFor Japanese Microsoft IME, an Open Extended Dictionary that is added before enabling this policy setting is not used for conversion.\r\n\r\nIf you disable or do not configure this policy setting, Open Extended Dictionary can be added and used by default.\r\n\r\nThis policy setting is applied to Japanese Microsoft IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffopenextendeddictionary"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffopenextendeddictionary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffopenextendeddictionary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffsavingautotuningdatatofile","displayName":"Turn off saving auto-tuning data to file (User)","description":"This policy setting allows you to turn off saving the auto-tuning result to file.\r\n\r\nIf you enable this policy setting, the auto-tuning data is not saved to file.\r\n\r\nIf you disable or do not configure this policy setting, auto-tuning data is saved to file by default.\r\n\r\nThis policy setting applies to Japanese Microsoft IME only.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoffsavingautotuningdatatofile"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffsavingautotuningdatatofile_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoffsavingautotuningdatatofile_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidate","displayName":"Turn on cloud candidate (User)","description":"This policy setting controls the cloud candidates feature, which uses an online service to provide input suggestions that don't exist in a PC's local dictionary.\r\n\r\nIf you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the suggestions, and the user won't be able to turn it off.\r\n\r\nIf you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on.\r\n\r\nIf you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the cloud candidates feature.\r\n\r\nThis Policy setting applies to Microsoft CHS Pinyin IME and JPN IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoncloudcandidate"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidatechs","displayName":"Turn on cloud candidate for CHS (User)","description":"This policy setting controls the cloud candidates feature, which uses an online service to provide input suggestions that don't exist in a PC's local dictionary.\r\n\r\nIf you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the suggestions, and the user won't be able to turn it off.\r\n\r\nIf you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on.\r\n\r\nIf you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the cloud candidates feature.\r\n\r\nThis Policy setting applies only to Microsoft CHS Pinyin IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnoncloudcandidatechs"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidatechs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnoncloudcandidatechs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlexiconupdate","displayName":"Turn on lexicon update (User)","description":"This policy setting controls the lexicon update feature, which downloads hot and popular words lexicon to local PC.\r\n\r\nIf you enable this policy setting, the functionality associated with this feature is turned on, hot and popular words lexicon can be downloaded to local PC, the user is able to turn it on or off in settings.\r\n\r\nIf you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on.\r\n\r\nIf you don't configure this policy setting, it will be turned on by default, and the user can turn on and turn off the lexicon udpate feature.\r\n\r\nThis Policy setting applies only to Microsoft CHS Pinyin IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnonlexiconupdate"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlexiconupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlexiconupdate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlivestickers","displayName":"Turn on Live Sticker (User)","description":"This policy setting controls the live sticker feature, which uses an online service to provide stickers online.\r\n\r\nIf you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the live stickers, and the user won't be able to turn it off.\r\n\r\nIf you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on.\r\n\r\nIf you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the live sticker feature.\r\n\r\nThis Policy setting applies only to Microsoft CHS Pinyin IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnonlivestickers"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlivestickers_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonlivestickers_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonmisconversionloggingformisconversionreport","displayName":"Turn on misconversion logging for misconversion report (User)","description":"This policy setting allows you to turn on logging of misconversion for the misconversion report.\r\n\r\nIf you enable this policy setting, misconversion logging is turned on.\r\n\r\nIf you disable or do not configure this policy setting, misconversion logging is turned off.\r\n\r\nThis policy setting applies to Japanese Microsoft IME.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-eaime#admx-eaime-l-turnonmisconversionloggingformisconversionreport"],"options":[{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonmisconversionloggingformisconversionreport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_eaime_l_turnonmisconversionloggingformisconversionreport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1","displayName":"Configure Report Archive (User)","description":"This policy setting controls the behavior of the Windows Error Reporting archive.\r\n\r\nIf you enable this policy setting, you can configure Windows Error Reporting archiving behavior. If Archive behavior is set to Store all, all data collected for each error report is stored in the appropriate location. If Archive behavior is set to Store parameters only, only the minimum information required to check for an existing solution is stored. The Maximum number of reports to store setting determines how many reports are stored before older reports are automatically deleted.\r\n\r\nIf you disable or do not configure this policy setting, no Windows Error Reporting information is stored.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werarchive-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_werarchivebehavior","displayName":"Archive behavior: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_werarchivebehavior_2","displayName":"Store all","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_werarchivebehavior_1","displayName":"Store parameters only","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werarchive_1_wermaxarchivecount","displayName":"Maximum number of reports to store: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_1","displayName":"Automatically send memory dumps for OS-generated error reports (User)","description":"This policy setting controls whether memory dumps in support of OS-generated error reports can be sent to Microsoft automatically. This policy does not apply to error reports generated by 3rd-party products, or additional data other than memory dumps.\r\n\r\nIf you enable or do not configure this policy setting, any memory dumps generated for error reports by Microsoft Windows are automatically uploaded, without notification to the user.\r\n\r\nIf you disable this policy setting, then all memory dumps are uploaded according to the default consent and notification settings.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werautoapproveosdumps-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werautoapproveosdumps_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_1","displayName":"Do not throttle additional data (User)","description":"This policy setting determines whether Windows Error Reporting (WER) sends additional, second-level report data even if a CAB file containing data about the same event types has already been uploaded to the server.\r\n\r\nIf you enable this policy setting, WER does not throttle data; that is, WER uploads additional CAB files that can contain data about the same event types as an earlier uploaded report.\r\n\r\nIf you disable or do not configure this policy setting, WER throttles data by default; that is, WER does not upload more than one CAB file for a report that contains data about the same event types.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypassdatathrottling-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassdatathrottling_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_1","displayName":"Send data when on connected to a restricted/costed network (User)","description":"This policy setting determines whether Windows Error Reporting (WER) checks for a network cost policy that restricts the amount of data that is sent over the network.\r\n\r\nIf you enable this policy setting, WER does not check for network cost policy restrictions, and transmits data even if network cost is restricted.\r\n\r\nIf you disable or do not configure this policy setting, WER does not send data, but will check the network cost policy again if the network profile is changed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypassnetworkcostthrottling-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypassnetworkcostthrottling_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_1","displayName":"Send additional data when on battery power (User)","description":"This policy setting determines whether Windows Error Reporting (WER) checks if the computer is running on battery power. By default, when a computer is running on battery power, WER only checks for solutions, but does not upload additional report data until the computer is connected to a more permanent power source.\r\n\r\nIf you enable this policy setting, WER does not determine whether the computer is running on battery power, but checks for solutions and uploads report data normally.\r\n\r\nIf you disable or do not configure this policy setting, WER checks for solutions while a computer is running on battery power, but does not upload report data until the computer is connected to a more permanent power source.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werbypasspowerthrottling-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werbypasspowerthrottling_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1","displayName":"Customize consent settings (User)","description":"This policy setting determines the consent behavior of Windows Error Reporting for specific event types.\r\n\r\nIf you enable this policy setting, you can add specific event types to a list by clicking Show, and typing event types in the Value Name column of the Show Contents dialog box. Event types are those for generic, non-fatal errors: crash, no response, and kernel fault errors. For each specified event type, you can set a consent level of 0, 1, 2, 3, or 4.\r\n\r\n- 0 (Disable): Windows Error Reporting sends no data to Microsoft for this event type.\r\n\r\n- 1 (Always ask before sending data): Windows prompts the user for consent to send reports.\r\n\r\n- 2 (Send parameters): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, and Windows prompts the user for consent to send any additional data requested by Microsoft.\r\n\r\n- 3 (Send parameters and safe additional data): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, as well as data which Windows has determined (within a high probability) does not contain personally identifiable data, and prompts the user for consent to send any additional data requested by Microsoft.\r\n\r\n- 4 (Send all data): Any data requested by Microsoft is sent automatically.\r\n\r\nIf you disable or do not configure this policy setting, then the default consent settings that are applied are those specified by the user in Control Panel, or in the Configure Default Consent policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werconsentcustomize-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_werconsentcustomize","displayName":"Customize consent settings (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_werconsentcustomize_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentcustomize_1_werconsentcustomize_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_1","displayName":"Ignore custom consent settings (User)","description":"This policy setting determines the behavior of the Configure Default Consent setting in relation to custom consent settings.\r\n\r\nIf you enable this policy setting, the default consent levels of Windows Error Reporting always override any other consent policy setting.\r\n\r\nIf you disable or do not configure this policy setting, custom consent policy settings for error reporting determine the consent level for specified event types, and the default consent setting determines only the consent level of any other error reports.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werconsentoverride-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werconsentoverride_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1","displayName":"Configure Default consent (User)","description":"This policy setting determines the default consent behavior of Windows Error Reporting.\r\n\r\nIf you enable this policy setting, you can set the default consent handling for error reports. The following list describes the Consent level settings that are available in the pull-down menu in this policy setting:\r\n\r\n- Always ask before sending data: Windows prompts users for consent to send reports.\r\n\r\n- Send parameters: Only the minimum data that is required to check for an existing solution is sent automatically, and Windows prompts users for consent to send any additional data that is requested by Microsoft.\r\n\r\n- Send parameters and safe additional data: the minimum data that is required to check for an existing solution, along with data which Windows has determined (within a high probability) does not contain personally-identifiable information is sent automatically, and Windows prompts the user for consent to send any additional data that is requested by Microsoft.\r\n\r\n- Send all data: any error reporting data requested by Microsoft is sent automatically.\r\n\r\nIf this policy setting is disabled or not configured, then the consent level defaults to the highest-privacy setting: Always ask before sending data.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werdefaultconsent-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent","displayName":"Consent level (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent_1","displayName":"Always ask before sending data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent_2","displayName":"Send parameters","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent_3","displayName":"Send parameters and safe additional data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdefaultconsent_1_werconsent_4","displayName":"Send all data","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdisable_1","displayName":"Disable Windows Error Reporting (User)","description":"This policy setting turns off Windows Error Reporting, so that reports are not collected or sent to either Microsoft or internal servers within your organization when software unexpectedly stops working or fails.\r\n\r\nIf you enable this policy setting, Windows Error Reporting does not send any problem information to Microsoft. Additionally, solution information is not available in Security and Maintenance in Control Panel.\r\n\r\nIf you disable or do not configure this policy setting, the Turn off Windows Error Reporting policy setting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings takes precedence. If Turn off Windows Error Reporting is also either disabled or not configured, user settings in Control Panel for Windows Error Reporting are applied.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werdisable-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdisable_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werdisable_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werexlusion_1","displayName":"List of applications to be excluded (User)","description":"This policy setting limits Windows Error Reporting behavior for errors in general applications when Windows Error Reporting is turned on.\r\n\r\nIf you enable this policy setting, you can create a list of applications that are never included in error reports. To create a list of applications for which Windows Error Reporting never reports errors, click Show, and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad.exe). File names must always include the .exe file name extension. To remove an application from the list, click the name, and then press DELETE. If this policy setting is enabled, the Exclude errors for applications on this list setting takes precedence.\r\n\r\nIf you disable or do not configure this policy setting, errors are reported on all Microsoft and Windows applications by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werexlusion-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werexlusion_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werexlusion_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werexlusion_1_werexlusionlist","displayName":"List of applications to be excluded (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_wernologging_1","displayName":"Disable logging (User)","description":"This policy setting controls whether Windows Error Reporting saves its own events and error messages to the system event log.\r\n\r\nIf you enable this policy setting, Windows Error Reporting events are not recorded in the system event log.\r\n\r\nIf you disable or do not configure this policy setting, Windows Error Reporting events and errors are logged to the system event log, as with other Windows-based programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-wernologging-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_wernologging_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_wernologging_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_wernosecondleveldata_1","displayName":"Do not send additional data (User)","description":"This policy setting controls whether additional data in support of error reports can be sent to Microsoft automatically.\r\n\r\nIf you enable this policy setting, any additional data requests from Microsoft in response to a Windows Error Reporting report are automatically declined, without notification to the user.\r\n\r\nIf you disable or do not configure this policy setting, then consent policy settings in Computer Configuration/Administrative Templates/Windows Components/Windows Error Reporting/Consent take precedence.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-wernosecondleveldata-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_wernosecondleveldata_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_wernosecondleveldata_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1","displayName":"Configure Report Queue (User)","description":"This policy setting determines the behavior of the Windows Error Reporting report queue.\r\n\r\nIf you enable this policy setting, you can configure report queue behavior by using the controls in the policy setting. When the Queuing behavior pull-down list is set to Default, Windows determines, when a problem occurs, whether the report should be placed in the reporting queue, or the user should be prompted to send it immediately. When Queuing behavior is set to Always queue, all reports are added to the queue until the user is prompted to send the reports, or until the user sends problem reports by using the Solutions to Problems page in Control Panel.\r\n\r\nThe Maximum number of reports to queue setting determines how many reports can be queued before older reports are automatically deleted. The setting for Number of days between solution check reminders determines the interval time between the display of system notifications that remind the user to check for solutions to problems. A value of 0 disables the reminder.\r\n\r\nIf you disable or do not configure this policy setting, Windows Error Reporting reports are not queued, and users can only send reports at the time that a problem occurs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-errorreporting#admx-errorreporting-werqueue-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_wermaxqueuecount","displayName":"Maximum number of reports to queue: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_wermaxqueuesize","displayName":"Maximum size of the queue (MB): (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_werqueuebehavior","displayName":"Queuing behavior: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_werqueuebehavior_0","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_werqueuebehavior_1","displayName":"Always queue","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_errorreporting_werqueue_1_werupdatecheck","displayName":"Number of days between solution check reminders: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_explorer_alwaysshowclassicmenu","displayName":"Display the menu bar in File Explorer (User)","description":"This policy setting configures File Explorer to always display the menu bar.\r\n\r\nNote: By default, the menu bar is not displayed in File Explorer.\r\n\r\nIf you enable this policy setting, the menu bar will be displayed in File Explorer.\r\n\r\nIf you disable or do not configure this policy setting, the menu bar will not be displayed in File Explorer.\r\n\r\nNote: When the menu bar is not displayed, users can access the menu bar by pressing the 'ALT' key.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-explorer#admx-explorer-alwaysshowclassicmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_explorer_alwaysshowclassicmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_explorer_alwaysshowclassicmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_explorer_preventitemcreationinusersfilesfolder","displayName":"Prevent users from adding files to the root of their Users Files folder. (User)","description":"This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in File Explorer.\r\n\r\nIf you enable this policy setting, users will no longer be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.\r\n\r\nIf you disable or do not configure this policy setting, users will be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.\r\n\r\n\r\nNote: Enabling this policy setting does not prevent the user from being able to add new items such as files and folders to their actual file system profile folder at %userprofile%.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-explorer#admx-explorer-preventitemcreationinusersfilesfolder"],"options":[{"id":"user_vendor_msft_policy_config_admx_explorer_preventitemcreationinusersfilesfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_explorer_preventitemcreationinusersfilesfolder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_explorer_turnoffspianimations","displayName":"Turn off common control and window animations (User)","description":"This policy is similar to settings directly available to computer users. Disabling animations can improve usability for users with some visual disabilities as well as improving performance and battery life in some scenarios.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-explorer#admx-explorer-turnoffspianimations"],"options":[{"id":"user_vendor_msft_policy_config_admx_explorer_turnoffspianimations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_explorer_turnoffspianimations_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_filerevocation_delegatedpackagefamilynames","displayName":"Allow Windows Runtime apps to revoke enterprise data (User)","description":"Windows Runtime applications can protect content which has been associated with an enterprise identifier (EID), but can only revoke access to content it protected. To allow an application to revoke access to all content on the device that is protected by a particular enterprise, add an entry to the list on a new line that contains the enterprise identifier, separated by a comma, and the Package Family Name of the application. The EID must be an internet domain belonging to the enterprise in standard international domain name format. \r\n \r\nExample value: \r\nContoso.com,ContosoIT.HumanResourcesApp_m5g0r7arhahqy\r\n \r\nIf you enable this policy setting, the application identified by the Package Family Name will be permitted to revoke access to all content protected using the specified EID on the device.\r\n \r\nIf you disable or do not configure this policy setting, the only Windows Runtime applications that can revoke access to all enterprise-protected content on the device are Windows Mail and the user-selected mailto protocol handler app. Any other Windows Runtime application will only be able to revoke access to content it protected.\r\n \r\nNote: File revocation applies to all content protected under the same second level domain as the provided enterprise identifier. So, revoking an enterprise ID of mail.contoso.com will revoke the user’s access to all content protected under the contoso.com hierarchy.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-filerevocation#admx-filerevocation-delegatedpackagefamilynames"],"options":[{"id":"user_vendor_msft_policy_config_admx_filerevocation_delegatedpackagefamilynames_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_filerevocation_delegatedpackagefamilynames_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_filerevocation_delegatedpackagefamilynames_delegatedpackagefamilynames_eids","displayName":"\r\nApps permitted to revoke all protected data from the device for the specified enterprise identifier:\r\n","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpin","displayName":"Do not automatically make all redirected folders available offline (User)","description":"This policy setting allows you to control whether all redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\\Roaming, are available offline by default.\r\n\r\nIf you enable this policy setting, users must manually select the files they wish to make available offline. \r\n\r\nIf you disable or do not configure this policy setting, redirected shell folders are automatically made available offline. All subfolders within the redirected folders are also made available offline. \r\n\r\nNote: This policy setting does not prevent files from being automatically cached if the network share is configured for \"Automatic Caching\", nor does it affect the availability of the \"Always available offline\" menu option in the user interface. \r\n\r\nNote: Do not enable this policy setting if users will need access to their redirected files if the network or server holding the redirected files becomes unavailable.\r\n\r\nNote: If one or more valid folder GUIDs are specified in the policy setting \"Do not automatically make specific redirected folders available offline\", that setting will override the configured value of \"Do not automatically make all redirected folders available offline\".\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-disablefradminpin"],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder","displayName":"Do not automatically make specific redirected folders available offline (User)","description":"This policy setting allows you to control whether individual redirected shell folders are available offline by default.\r\n\r\nFor the folders affected by this setting, users must manually select the files they wish to make available offline.\r\n\r\nIf you disable or do not configure this policy setting, all redirected shell folders are automatically made available offline. All subfolders within the redirected folders are also made available offline.\r\n\r\nNote: This policy setting does not prevent files from being automatically cached if the network share is configured for \"Automatic Caching\", nor does it affect the availability of the \"Always available offline\" menu option in the user interface.\r\n\r\nNote: The configuration of this policy for any folder will override the configured value of \"Do not automatically make all redirected folders available offline\".\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-disablefradminpinbyfolder"],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinappdataroaming","displayName":"AppData(Roaming) (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinappdataroaming_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinappdataroaming_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepincontacts","displayName":"Contacts (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepincontacts_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepincontacts_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindesktop","displayName":"Desktop (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindesktop_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindesktop_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindocuments","displayName":"Documents (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindocuments_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindocuments_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindownloads","displayName":"Downloads (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindownloads_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepindownloads_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinfavorites","displayName":"Favorites (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinfavorites_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinfavorites_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinlinks","displayName":"Links (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinlinks_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinlinks_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinmusic","displayName":"Music (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinmusic_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinmusic_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinpictures","displayName":"Pictures (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinpictures_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinpictures_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsavedgames","displayName":"Saved Games (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsavedgames_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsavedgames_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsearches","displayName":"Searches (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsearches_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinsearches_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinstartmenu","displayName":"Start Menu (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinstartmenu_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinstartmenu_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinvideos","displayName":"Videos (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinvideos_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_disablefradminpinbyfolder_disablepinvideos_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_folderredirectionenablecacherename","displayName":"Enable optimized move of contents in Offline Files cache on Folder Redirection server path change (User)","description":"This policy setting controls whether the contents of redirected folders is copied from the old location to the new location or simply renamed in the Offline Files cache when a folder is redirected to a new location.\r\n\r\nIf you enable this policy setting, when the path to a redirected folder is changed from one network location to another and Folder Redirection is configured to move the content to the new location, instead of copying the content to the new location, the cached content is renamed in the local cache and not copied to the new location. To use this policy setting, you must move or restore the server content to the new network location using a method that preserves the state of the files, including their timestamps, before updating the Folder Redirection location.\r\n\r\nIf you disable or do not configure this policy setting, when the path to a redirected folder is changed and Folder Redirection is configured to move the content to the new location, Windows copies the contents of the local cache to the new network location, then deleted the content from the old network location.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-folderredirectionenablecacherename"],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_folderredirectionenablecacherename_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_folderredirectionenablecacherename_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_1","displayName":"Use localized subfolder names when redirecting Start Menu and My Documents (User)","description":"This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Pictures, and My Videos subfolders when redirecting the parent Start Menu and legacy My Documents folder respectively.\r\n\r\nIf you enable this policy setting, Windows Vista, Windows 7, Windows 8, and Windows Server 2012 will use localized folder names for these subfolders when redirecting the Start Menu or legacy My Documents folder.\r\n\r\nIf you disable or not configure this policy setting, Windows Vista, Windows 7, Windows 8, and Windows Server 2012 will use the standard English names for these subfolders when redirecting the Start Menu or legacy My Documents folder.\r\n\r\nNote: This policy is valid only on Windows Vista, Windows 7, Windows 8, and Windows Server 2012 when it processes a legacy redirection policy already deployed for these folders in your existing localized environment.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-localizexprelativepaths-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_localizexprelativepaths_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_1","displayName":"Redirect folders on primary computers only (User)","description":"This policy setting controls whether folders are redirected on a user's primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office.\r\n\r\nTo designate a user's primary computers, an administrator must use management software or a script to add primary computer attributes to the user's account in Active Directory Domain Services (AD DS). This policy setting also requires the Windows Server 2012 version of the Active Directory schema to function.\r\n\r\nIf you enable this policy setting and the user has redirected folders, such as the Documents and Pictures folders, the folders are redirected on the user's primary computer only.\r\n\r\nIf you disable or do not configure this policy setting and the user has redirected folders, the folders are redirected on every computer that the user logs on to.\r\n\r\nNote: If you enable this policy setting in Computer Configuration and User Configuration, the Computer Configuration policy setting takes precedence.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-folderredirection#admx-folderredirection-primarycomputer-fr-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_folderredirection_primarycomputer_fr_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane","displayName":"Turn on or off details pane (User)","description":"This policy setting shows or hides the Details Pane in File Explorer.\r\n\r\nIf you enable this policy setting and configure it to hide the pane, the Details Pane in File Explorer is hidden and cannot be turned on by the user.\r\n\r\nIf you enable this policy setting and configure it to show the pane, the Details Pane is always visible and cannot be hidden by the user. Note: This has a side effect of not being able to toggle to the Preview Pane since the two cannot be displayed at the same time.\r\n\r\nIf you disable, or do not configure this policy setting, the Details Pane is hidden by default and can be displayed by the user. This is the default policy setting.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-framepanes#admx-framepanes-nopreviewpane"],"options":[{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_previewpane_dropdownlist_box","displayName":"Configure details pane (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_previewpane_dropdownlist_box_1","displayName":"Always hide","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_framepanes_nopreviewpane_previewpane_dropdownlist_box_2","displayName":"Always show","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_framepanes_noreadingpane","displayName":"Turn off Preview Pane (User)","description":"Hides the Preview Pane in File Explorer.\r\n\r\nIf you enable this policy setting, the Preview Pane in File Explorer is hidden and cannot be turned on by the user.\r\n\r\nIf you disable, or do not configure this setting, the Preview Pane is hidden by default and can be displayed by the user.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-framepanes#admx-framepanes-noreadingpane"],"options":[{"id":"user_vendor_msft_policy_config_admx_framepanes_noreadingpane_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_framepanes_noreadingpane_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_1","displayName":"Disallow selection of Custom Locales (User)","description":"This policy setting prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that are installed with the operating system.\r\n\r\nThis does not affect the selection of replacement locales. To prevent the selection of replacement locales, adjust the permissions of the %windir%\\Globalization directory to prevent the installation of locales by unauthorized users.\r\n\r\nThe policy setting \"Restrict user locales\" can also be enabled to disallow selection of a custom locale, even if this policy setting is not configured.\r\n\r\nIf you enable this policy setting, the user cannot select a custom locale as their user locale, but they can still select a replacement locale if one is installed.\r\n\r\nIf you disable or do not configure this policy setting, the user can select a custom locale as their user locale.\r\n\r\nIf this policy setting is enabled at the machine level, it cannot be disabled by a per-user policy setting. If this policy setting is disabled at the machine level, the per-user policy setting will be ignored. If this policy setting is not configured at the machine level, restrictions will be based on per-user policy settings.\r\n\r\nTo set this policy setting on a per-user basis, make sure that you do not configure the per-machine policy setting.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-customlocalesnoselect-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_customlocalesnoselect_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_hideadminoptions","displayName":"Hide Regional and Language Options administrative options (User)","description":"This policy setting removes the Administrative options from the Region settings control panel. Administrative options include interfaces for setting system locale and copying settings to the default user. This policy setting does not, however, prevent an administrator or another application from changing these values programmatically.\r\n\r\nThis policy setting is used only to simplify the Regional Options control panel.\r\n\r\nIf you enable this policy setting, the user cannot see the Administrative options.\r\n\r\nIf you disable or do not configure this policy setting, the user can see the Administrative options.\r\n\r\nNote: Even if a user can see the Administrative options, other policies may prevent them from modifying the values.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-hideadminoptions"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_hideadminoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_hideadminoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_hidecurrentlocation","displayName":"Hide the geographic location option (User)","description":"This policy setting removes the option to change the user's geographical location (GeoID) from the Region settings control panel.\r\n\r\nThis policy setting is used only to simplify the Regional Options control panel.\r\n\r\nIf you enable this policy setting, the user does not see the option to change the GeoID. This does not prevent the user or an application from changing the GeoID programmatically.\r\n\r\nIf you disable or do not configure this policy setting, the user sees the option for changing the user location (GeoID).\r\n\r\nNote: Even if a user can see the GeoID option, the \"Disallow changing of geographical location\" option can prevent them from actually changing their current geographical location.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-hidecurrentlocation"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_hidecurrentlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_hidecurrentlocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_hidelanguageselection","displayName":"Hide the select language group options (User)","description":"This policy setting removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options control panel.\r\n\r\nThis policy setting is used only to simplify the Regional Options control panel.\r\n\r\nIf you enable this policy setting, the user does not see the option for changing the UI language. This does not prevent the user or an application from changing the UI language programmatically.\r\n\r\nIf you disable or do not configure this policy setting, the user sees the option for changing the UI language.\r\n\r\nNote: Even if a user can see the option to change the UI language, other policy settings can prevent them from changing their UI language.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-hidelanguageselection"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_hidelanguageselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_hidelanguageselection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_hidelocaleselectandcustomize","displayName":"Hide user locale selection and customization options (User)","description":"This policy setting removes the regional formats interface from the Region settings control panel.\r\n\r\nThis policy setting is used only to simplify the Regional and Language Options control panel.\r\n\r\nIf you enable this policy setting, the user does not see the regional formats options. This does not prevent the user or an application from changing their user locale or user overrides programmatically.\r\n\r\nIf you disable or do not configure this policy setting, the user sees the regional formats options for changing and customizing the user locale.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-hidelocaleselectandcustomize"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_hidelocaleselectandcustomize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_hidelocaleselectandcustomize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_1","displayName":"Turn off automatic learning (User)","description":"\r\n This policy setting turns off the automatic learning component of handwriting recognition personalization. \r\n\r\n\t\tAutomatic learning enables the collection and storage of text and ink written by the user in order to help adapt handwriting recognition to the vocabulary and handwriting style of the user. \r\n\r\n\t\tText that is collected includes all outgoing messages in Windows Mail, and MAPI enabled email clients, as well as URLs from the Internet Explorer browser history. The information that is stored includes word frequency and new words not already known to the handwriting recognition engines (for example, proper names and acronyms). Deleting email content or the browser history does not delete the stored personalization data. Ink entered through Input Panel is collected and stored. \r\n\r\n\t\tNote: Automatic learning of both text and ink might not be available for all languages, even when handwriting personalization is available. See Tablet PC Help for more information.\r\n\r\n\t\tIf you enable this policy setting, automatic learning stops and any stored data is deleted. Users cannot configure this setting in Control Panel.\r\n\r\n\t\tIf you disable this policy setting, automatic learning is turned on. Users cannot configure this policy setting in Control Panel. Collected data is only used for handwriting recognition, if handwriting personalization is turned on.\r\n\r\n\t\tIf you do not configure this policy, users can choose to enable or disable automatic learning either from the Handwriting tab in the Tablet Settings in Control Panel or from the opt-in dialog.\r\n\r\n\t\tThis policy setting is related to the \"Turn off handwriting personalization\" policy setting.\r\n\r\n\t\tNote: The amount of stored ink is limited to 50 MB and the amount of text information to approximately 5 MB. When these limits are reached and new data is collected, old data is deleted to make room for more recent data.\r\n\r\n\t\tNote: Handwriting personalization works only for Microsoft handwriting recognizers, and not with third-party recognizers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-implicitdatacollectionoff-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_implicitdatacollectionoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_localeuserrestrict_1","displayName":"Restrict user locales (User)","description":"This policy setting restricts users on a computer to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy setting does not change existing user locale settings; however, the next time a user attempts to change their user locale, their choices will be restricted to locales in this list.\r\n\r\nTo set this policy setting on a per-user basis, make sure that you do not configure the per-computer policy setting.\r\n\r\nThe locale list is specified using language tags, separated by a semicolon (;). For example, en-US is English (United States). Specifying \"en-CA;fr-CA\" would restrict the user locale to English (Canada) and French (Canada).\r\n\r\nIf you enable this policy setting, only locales in the specified locale list can be selected by users.\r\n\r\nIf you disable or do not configure this policy setting, users can select any locale installed on the computer, unless restricted by the \"Disallow selection of Custom Locales\" policy setting.\r\n\r\nIf this policy setting is enabled at the computer level, it cannot be disabled by a per-user policy. If this policy setting is disabled at the computer level, the per-user policy is ignored. If this policy setting is not configured at the computer level, restrictions are based on per-user policies.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-localeuserrestrict-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_localeuserrestrict_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_localeuserrestrict_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_localeuserrestrict_1_allowableuserlocaletaglist","displayName":"User Locales (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage","displayName":"Restricts the UI languages Windows should use for the selected user (User)","description":"This policy setting restricts the Windows UI language for specific users.\r\n\r\nThis policy setting applies to computers with more than one UI language installed.\r\n\r\nIf you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to a specified language for the selected user. If the specified language is not installed on the target computer or you disable this policy setting, the language selection defaults to the language selected by the user.\r\n\r\nIf you disable or do not configure this policy setting, there is no restriction on which language users should use.\r\n\r\nTo enable this policy setting in Windows Server 2003, Windows XP, or Windows 2000, to use the \"Restrict selection of Windows menus and dialogs language\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-lockuseruilanguage"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect","displayName":"Restrict users to the following language: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_en-us","displayName":"English","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ja-jp","displayName":"Japanese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ko-kr","displayName":"Korean","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_de-de","displayName":"German","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_zh-cn","displayName":"Simplified Chinese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_zh-tw","displayName":"Traditional Chinese (Taiwan)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_fr-fr","displayName":"French","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_es-es","displayName":"Spanish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_it-it","displayName":"Italian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_sv-se","displayName":"Swedish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_nl-nl","displayName":"Dutch","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_pt-br","displayName":"Portuguese (Brazil)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_fi-fi","displayName":"Finnish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_nb-no","displayName":"Norwegian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_da-dk","displayName":"Danish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_hu-hu","displayName":"Hungarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_pl-pl","displayName":"Polish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ru-ru","displayName":"Russian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_cs-cz","displayName":"Czech","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_el-gr","displayName":"Greek","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_pt-pt","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_tr-tr","displayName":"Turkish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ar-sa","displayName":"Arabic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_he-il","displayName":"Hebrew","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_sk-sk","displayName":"Slovak","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_sl-si","displayName":"Slovenian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_ro-ro","displayName":"Romanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_hr-hr","displayName":"Croatian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_bg-bg","displayName":"Bulgarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_et-ee","displayName":"Estonian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_lt-lt","displayName":"Lithuanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_lv-lv","displayName":"Latvian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_th-th","displayName":"Thai","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_zh-hk","displayName":"Traditional Chinese (Hong Kong)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_sr-latn-cs","displayName":"Serbian (Latin)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_lockuseruilanguage_uilangselect_uk-ua","displayName":"Ukrainian","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_preventgeoidchange_1","displayName":"Disallow changing of geographic location (User)","description":"This policy setting prevents users from changing their user geographical location (GeoID).\r\n\r\nIf you enable this policy setting, users cannot change their GeoID.\r\n\r\nIf you disable or do not configure this policy setting, users may select any GeoID.\r\n\r\nIf you enable this policy setting at the computer level, it cannot be disabled by a per-user policy setting. If you disable this policy setting at the computer level, the per-user policy is ignored. If you do not configure this policy setting at the computer level, restrictions are based on per-user policy settings.\r\n\r\nTo set this policy setting on a per-user basis, make sure that the per-computer policy setting is not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-preventgeoidchange-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_preventgeoidchange_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_preventgeoidchange_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_preventuseroverrides_1","displayName":"Disallow user override of locale settings (User)","description":"This policy setting prevents the user from customizing their locale by changing their user overrides.\r\n\r\nAny existing overrides in place when this policy is enabled will be frozen. To remove existing user overrides, first reset the user(s) values to the defaults and then apply this policy.\r\n\r\nWhen this policy setting is enabled, users can still choose alternate locales installed on the system unless prevented by other policies, however, they will be unable to customize those choices. The user cannot customize their user locale with user overrides.\r\n\r\nIf this policy setting is disabled or not configured, then the user can customize their user locale overrides.\r\n\r\nIf this policy is set to Enabled at the computer level, then it cannot be disabled by a per-User policy. If this policy is set to Disabled at the computer level, then the per-User policy will be ignored. If this policy is set to Not Configured at the computer level, then restrictions will be based on per-User policies.\r\n\r\nTo set this policy on a per-user basis, make sure that the per-computer policy is set to Not Configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-preventuseroverrides-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_preventuseroverrides_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_preventuseroverrides_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect","displayName":"Restrict selection of Windows menus and dialogs language (User)","description":"This policy setting restricts users to the specified language by disabling the menus and dialog box controls in the Region settings control panel. If the specified language is not installed on the target computer, the language selection defaults to English.\r\n\r\nIf you enable this policy setting, the dialog box controls in the Regional and Language Options control panel are not accessible to the logged on user. This prevents users from specifying a language different than the one used.\r\n\r\nTo enable this policy setting in Windows Vista, use the \"Restricts the UI languages Windows should use for the selected user\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the logged-on user can access the dialog box controls in the Regional and Language Options control panel to select any available UI language.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-restrictuilangselect"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect","displayName":"Restrict users to the following language: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000409","displayName":"English","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000411","displayName":"Japanese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000412","displayName":"Korean","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000407","displayName":"German","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000804","displayName":"Simplified Chinese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000404","displayName":"Traditional Chinese","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000040c","displayName":"French","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000c0a","displayName":"Spanish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000410","displayName":"Italian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000041d","displayName":"Swedish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000413","displayName":"Dutch","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000416","displayName":"Portuguese (Brazil)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000040b","displayName":"Finnish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000414","displayName":"Norwegian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000406","displayName":"Danish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000040e","displayName":"Hungarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000415","displayName":"Polish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000419","displayName":"Russian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000405","displayName":"Czech","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000408","displayName":"Greek","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000816","displayName":"Portuguese (Portugal)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000041f","displayName":"Turkish","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000401","displayName":"Arabic","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000040d","displayName":"Hebrew","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000041b","displayName":"Slovak","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000424","displayName":"Slovenian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000418","displayName":"Romanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000041a","displayName":"Croatian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000402","displayName":"Bulgarian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000425","displayName":"Estonian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000427","displayName":"Lithuanian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_00000426","displayName":"Latvian","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_restrictuilangselect_uilangselect_0000041e","displayName":"Thai","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffautocorrectmisspelledwords","displayName":"Turn off autocorrect misspelled words (User)","description":"\r\n This policy turns off the autocorrect misspelled words option. This does not, however, prevent the user or an application from changing the setting programmatically.\r\n\r\n The autocorrect misspelled words option controls whether or not errors in typed text will be automatically corrected.\r\n\r\n If the policy is Enabled, then the option will be locked to not autocorrect misspelled words.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference.\r\n\r\n Note that the availability and function of this setting is dependent on supported languages being enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-turnoffautocorrectmisspelledwords"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffautocorrectmisspelledwords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffautocorrectmisspelledwords_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffhighlightmisspelledwords","displayName":"Turn off highlight misspelled words (User)","description":"\r\n This policy turns off the highlight misspelled words option. This does not, however, prevent the user or an application from changing the setting programmatically.\r\n\r\n The highlight misspelled words option controls whether or next spelling errors in typed text will be highlighted.\r\n\r\n If the policy is Enabled, then the option will be locked to not highlight misspelled words.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference.\r\n\r\n Note that the availability and function of this setting is dependent on supported languages being enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-turnoffhighlightmisspelledwords"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffhighlightmisspelledwords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffhighlightmisspelledwords_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffinsertspace","displayName":"Turn off insert a space after selecting a text prediction (User)","description":"\r\n This policy turns off the insert a space after selecting a text prediction option. This does not, however, prevent the user or an application from changing the setting programmatically.\r\n\r\n The insert a space after selecting a text prediction option controls whether or not a space will be inserted after the user selects a text prediction candidate when using the on-screen keyboard.\r\n\r\n If the policy is Enabled, then the option will be locked to not insert a space after selecting a text prediction.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference.\r\n\r\n Note that the availability and function of this setting is dependent on supported languages being enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-turnoffinsertspace"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffinsertspace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffinsertspace_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffoffertextpredictions","displayName":"Turn off offer text predictions as I type (User)","description":"\r\n This policy turns off the offer text predictions as I type option. This does not, however, prevent the user or an application from changing the setting programmatically.\r\n\r\n The offer text predictions as I type option controls whether or not text prediction suggestions will be presented to the user on the on-screen keyboard.\r\n\r\n If the policy is Enabled, then the option will be locked to not offer text predictions.\r\n\r\n If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference.\r\n\r\n Note that the availability and function of this setting is dependent on supported languages being enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-turnoffoffertextpredictions"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffoffertextpredictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_turnoffoffertextpredictions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_y2k","displayName":"Century interpretation for Year 2000 (User)","description":"This policy setting determines how programs interpret two-digit years.\r\n\r\nThis policy setting affects only the programs that use this Windows feature to interpret two-digit years. If a program does not interpret two-digit years correctly, consult the documentation or manufacturer of the program.\r\n\r\nIf you enable this policy setting, the system specifies the largest two-digit year interpreted as being preceded by 20. All numbers less than or equal to the specified value are interpreted as being preceded by 20. All numbers greater than the specified value are interpreted as being preceded by 19.\r\n\r\nFor example, the default value, 2029, specifies that all two-digit years less than or equal to 29 (00 to 29) are interpreted as being preceded by 20, that is 2000 to 2029. Conversely, all two-digit years greater than 29 (30 to 99) are interpreted as being preceded by 19, that is, 1930 to 1999.\r\n\r\nIf you disable or do not configure this policy setting, Windows does not interpret two-digit year formats using this scheme for the program.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-globalization#admx-globalization-y2k"],"options":[{"id":"user_vendor_msft_policy_config_admx_globalization_y2k_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_globalization_y2k_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_globalization_y2k_y2kyear","displayName":"Year (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_1","displayName":"Determine if interactive users can generate Resultant Set of Policy data (User)","description":"This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.\r\n\r\nBy default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data.\r\n\r\nIf you enable this policy setting, interactive users cannot generate RSoP data.\r\n\r\nIf you disable or do not configure this policy setting, interactive users can generate RSoP.\r\n\r\nNote: This policy setting does not affect administrators. If you enable or disable this policy setting, by default administrators can view RSoP data.\r\n\r\nNote: To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc\r\n\r\nNote: This policy setting exists as both a User Configuration and Computer Configuration setting.\r\n\r\nAlso, see the \"Turn off Resultant set of Policy logging\" policy setting in Computer Configuration\\Administrative Templates\\System\\GroupPolicy.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-denyrsoptointeractiveuser-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_denyrsoptointeractiveuser_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_disableautoadmupdate","displayName":"Turn off automatic update of ADM files (User)","description":"Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object Editor. Administrators might want to use this if they are concerned about the amount of space used on the system volume of a DC.\r\n\r\nBy default, when you start the Group Policy Object Editor, a timestamp comparison is performed on the source files in the local %SYSTEMROOT%\\inf directory and the source files stored in the GPO. If the local files are newer, they are copied into the GPO.\r\n\r\nChanging the status of this setting to Enabled will keep any source files from copying to the GPO.\r\n\r\nChanging the status of this setting to Disabled will enforce the default behavior. Files will always be copied to the GPO if they have a later timestamp.\r\n\r\nNOTE: If the Computer Configuration policy setting, \"Always use local ADM files for the Group Policy Object Editor\" is enabled, the state of this setting is ignored and always treated as Enabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-disableautoadmupdate"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_disableautoadmupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_disableautoadmupdate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_enforcepoliciesonly","displayName":"Enforce Show Policies Only (User)","description":"This policy setting prevents administrators from viewing or using Group Policy preferences.\r\n\r\nA Group Policy administration (.adm) file can contain both true settings and preferences. True settings, which are fully supported by Group Policy, must use registry entries in the Software\\Policies or Software\\Microsoft\\Windows\\CurrentVersion\\Policies registry subkeys. Preferences, which are not fully supported, use registry entries in other subkeys.\r\n\r\nIf you enable this policy setting, the \"Show Policies Only\" command is turned on, and administrators cannot turn it off. As a result, Group Policy Object Editor displays only true settings; preferences do not appear.\r\n\r\nIf you disable or do not configure this policy setting, the \"Show Policies Only\" command is turned on by default, but administrators can view preferences by turning off the \"Show Policies Only\" command.\r\n\r\nNote: To find the \"Show Policies Only\" command, in Group Policy Object Editor, click the Administrative Templates folder (either one), right-click the same folder, and then point to \"View.\"\r\n\r\nIn Group Policy Object Editor, preferences have a red icon to distinguish them from true settings, which have a blue icon.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-enforcepoliciesonly"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_enforcepoliciesonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_enforcepoliciesonly_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions","displayName":"Configure Group Policy domain controller selection (User)","description":"This policy setting determines which domain controller the Group Policy Object Editor snap-in uses.\r\n\r\nIf you enable this setting, you can which domain controller is used according to these options:\r\n\r\n\"Use the Primary Domain Controller\" indicates that the Group Policy Object Editor snap-in reads and writes changes to the domain controller designated as the PDC Operations Master for the domain.\r\n\r\n\"Inherit from Active Directory Snap-ins\" indicates that the Group Policy Object Editor snap-in reads and writes changes to the domain controller that Active Directory Users and Computers or Active Directory Sites and Services snap-ins use.\r\n\r\n\"Use any available domain controller\" indicates that the Group Policy Object Editor snap-in can read and write changes to any available domain controller.\r\n\r\nIf you disable this setting or do not configure it, the Group Policy Object Editor snap-in uses the domain controller designated as the PDC Operations Master for the domain.\r\n\r\nNote: To change the PDC Operations Master for a domain, in Active Directory Users and Computers, right-click a domain, and then click \"Operations Masters.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-gpdcoptions"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_gpdcoptionsdesc","displayName":"When Group Policy Object Editor is selecting a domain controller to use, it should: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_gpdcoptionsdesc_1","displayName":"Use the Primary Domain Controller","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_gpdcoptionsdesc_2","displayName":"Inherit from Active Directory Snap-ins","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gpdcoptions_gpdcoptionsdesc_3","displayName":"Use any available domain controller","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_1","displayName":"Configure Group Policy slow link detection (User)","description":"This policy setting defines a slow connection for purposes of applying and updating Group Policy.\r\n\r\nIf the rate at which data is transferred from the domain controller providing a policy update to the computers in this group is slower than the rate specified by this setting, the system considers the connection to be slow.\r\n\r\nThe system's response to a slow policy connection varies among policies. The program implementing the policy can specify the response to a slow link. Also, the policy processing settings in this folder lets you override the programs' specified responses to slow links.\r\n\r\nIf you enable this setting, you can, in the \"Connection speed\" box, type a decimal number between 0 and 4,294,967,200, indicating a transfer rate in kilobits per second. Any connection slower than this rate is considered to be slow. If you type 0, all connections are considered to be fast.\r\n\r\nIf you disable this setting or do not configure it, the system uses the default value of 500 kilobits per second.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. The setting in Computer Configuration defines a slow link for policies in the Computer Configuration folder. The setting in User Configuration defines a slow link for settings in the User Configuration folder.\r\n\r\nAlso, see the \"Do not detect slow network connections\" and related policies in Computer Configuration\\Administrative Templates\\System\\User Profile. Note: If the profile server has IP connectivity, the connection speed setting is used. If the profile server does not have IP connectivity, the SMB timing is used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-gptransferrate-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_gptransferrate_1_transferrateop1","displayName":"Connection speed (Kbps): (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser","displayName":"Set Group Policy refresh interval for users (User)","description":"This policy setting specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a background update rate only for the Group Policies in the User Configuration folder.\r\n\r\nIn addition to background updates, Group Policy for users is always updated when users log on.\r\n\r\nBy default, user Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes.\r\n\r\nIf you enable this setting, you can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the computer tries to update user Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.\r\n\r\nIf you disable this setting, user Group Policy is updated every 90 minutes (the default). To specify that Group Policy for users should never be updated while the computer is in use, select the \"Turn off background refresh of Group Policy\" setting.\r\n\r\nThis setting also lets you specify how much the actual update interval varies. To prevent clients with the same update interval from requesting updates simultaneously, the system varies the update interval for each client by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that client requests overlap. However, updates might be delayed significantly.\r\n\r\nImportant: If the \"Turn off background refresh of Group Policy\" setting is enabled, this setting is ignored.\r\n\r\nNote: This setting establishes the update rate for user Group Policies. To set an update rate for computer Group Policies, use the \"Group Policy refresh interval for computers\" setting (located in Computer Configuration\\Administrative Templates\\System\\Group Policy).\r\n\r\nTip: Consider notifying users that their policy is updated periodically so that they recognize the signs of a policy update. When Group Policy is updated, the Windows desktop is refreshed; it flickers briefly and closes open menus. Also, restrictions imposed by Group Policies, such as those that limit the programs a user can run, might interfere with tasks in progress.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-grouppolicyrefreshrateuser"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser_gprefreshrate3","displayName":"Minutes: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_grouppolicyrefreshrateuser_gprefreshrateoffset3","displayName":"Minutes: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpodisplayname","displayName":"Set default name for new Group Policy objects (User)","description":"This policy setting allows you to set the default display name for new Group Policy objects.\r\n\r\nThis setting allows you to specify the default name for new Group Policy objects created from policy compliant Group Policy Management tools including the Group Policy tab in Active Directory tools and the GPO browser.\r\n\r\nThe display name can contain environment variables and can be a maximum of 255 characters long.\r\n\r\nIf this setting is Disabled or Not Configured, the default display name of New Group Policy object is used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-newgpodisplayname"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpodisplayname_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpodisplayname_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpodisplayname_newgpodisplaynameheading","displayName":"GPO Name: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpolinksdisabled","displayName":"Create new Group Policy Object links disabled by default (User)","description":"This policy setting allows you to create new Group Policy object links in the disabled state.\r\n\r\nIf you enable this setting, you can create all new Group Policy object links in the disabled state by default. After you configure and test the new object links by using a policy compliant Group Policy management tool such as Active Directory Users and Computers or Active Directory Sites and Services, you can enable the object links for use on the system.\r\n\r\nIf you disable this setting or do not configure it, new Group Policy object links are created in the enabled state. If you do not want them to be effective until they are configured and tested, you must disable the object link.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-newgpolinksdisabled"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpolinksdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_newgpolinksdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions","displayName":"Process Mitigation Options (User)","description":"\r\n This security feature provides a means to override individual process MitigationOptions settings. This can be used to enforce a number of security policies specific to applications. The application name is specified as the Value name, including extension. The Value is specified as a bit field with a series of flags in particular positions. Bits can be set to either 0 (setting is forced off), 1 (setting is forced on), or ? (setting retains its existing value prior to GPO evaluation). The recognized bit locations are:\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE (0x00000001)\r\n Enables data execution prevention (DEP) for the child process\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_DEP_ATL_THUNK_ENABLE (0x00000002)\r\n Enables DEP-ATL thunk emulation for the child process. DEP-ATL thunk emulation causes the system to intercept NX faults that originate from the Active Template Library (ATL) thunk layer.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_SEHOP_ENABLE (0x00000004)\r\n Enables structured exception handler overwrite protection (SEHOP) for the child process. SEHOP blocks exploits that use the structured exception handler (SEH) overwrite technique.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_FORCE_RELOCATE_IMAGES_ALWAYS_ON (0x00000100)\r\n The force Address Space Layout Randomization (ASLR) policy forcibly rebases images that are not dynamic base compatible by acting as though an image base collision happened at load time. If relocations are required, images that do not have a base relocation section will not be loaded.\r\n\r\n PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_ON (0x00010000)\r\n PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_OFF (0x00020000)\r\n The bottom-up randomization policy, which includes stack randomization options, causes a random location to be used as the lowest user address.\r\n\r\n For instance, to enable PROCESS_CREATION_MITIGATION_POLICY_DEP_ENABLE and PROCESS_CREATION_MITIGATION_POLICY_FORCE_RELOCATE_IMAGES_ALWAYS_ON, disable PROCESS_CREATION_MITIGATION_POLICY_BOTTOM_UP_ASLR_ALWAYS_OFF, and to leave all other options at their default values, specify a value of:\r\n ???????????????0???????1???????1\r\n\r\n Setting flags not specified here to any value other than ? results in undefined behavior.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-grouppolicy#admx-grouppolicy-processmitigationoptions"],"options":[{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist","displayName":"Process Mitigation Options (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_grouppolicy_processmitigationoptions_processmitigationoptionslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_help_restrictrunfromhelp","displayName":"Restrict these programs from being launched from Help (User)","description":"\r\n This policy setting allows you to restrict programs from being run from online Help.\r\n \r\n If you enable this policy setting, you can prevent specified programs from being run from Help. When you enable this policy setting, enter the file names names of the programs you want to restrict, separated by commas.\r\n \r\n If you disable or do not configure this policy setting, users can run all applications from online Help.\r\n \r\n Note: You can also restrict users from running applications by using the Software Restriction Policy settings available in Computer Configuration\\Security Settings.\r\n \r\n Note: This policy setting is available under Computer Configuration and User Configuration. If both are settings are used, any programs listed in either of these locations cannot launched from Help\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-help#admx-help-restrictrunfromhelp"],"options":[{"id":"user_vendor_msft_policy_config_admx_help_restrictrunfromhelp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_help_restrictrunfromhelp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_help_restrictrunfromhelp_restrictrunfromhelp_edit","displayName":"Enter executables separated by commas: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpexplicitfeedback","displayName":"Turn off Help Ratings (User)","description":"This policy setting specifies whether users can provide ratings for Help content.\r\n\r\nIf you enable this policy setting, ratings controls are not added to Help content.\r\n\r\nIf you disable or do not configure this policy setting, ratings controls are added to Help topics.\r\n\r\nUsers can use the control to provide feedback on the quality and usefulness of the Help and Support content.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-helpandsupport#admx-helpandsupport-hpexplicitfeedback"],"options":[{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpexplicitfeedback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpexplicitfeedback_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpimplicitfeedback","displayName":"Turn off Help Experience Improvement Program (User)","description":"This policy setting specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program collects information about how customers use Windows Help so that Microsoft can improve it.\r\n\r\nIf you enable this policy setting, users cannot participate in the Help Experience Improvement program.\r\n\r\nIf you disable or do not configure this policy setting, users can turn on the Help Experience Improvement program feature from the Help and Support settings page.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-helpandsupport#admx-helpandsupport-hpimplicitfeedback"],"options":[{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpimplicitfeedback_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hpimplicitfeedback_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hponlineassistance","displayName":"Turn off Windows Online (User)","description":"This policy setting specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the most up-to-date Help content for Windows.\r\n\r\nIf you enable this policy setting, users are prevented from accessing online assistance content from Windows Online.\r\n\r\nIf you disable or do not configure this policy setting, users can access online assistance if they have a connection to the Internet and have not disabled Windows Online from the Help and Support Options page.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-helpandsupport#admx-helpandsupport-hponlineassistance"],"options":[{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hponlineassistance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_helpandsupport_hponlineassistance_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_disablehttpprinting_1","displayName":"Turn off printing over HTTP (User)","description":"This policy setting specifies whether to allow printing over HTTP from this client.\r\n\r\nPrinting over HTTP allows a client to print to printers on the intranet as well as the Internet.\r\n\r\nNote: This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP.\r\n\r\nIf you enable this policy setting, it prevents this client from printing to Internet printers over HTTP.\r\n\r\nIf you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP.\r\n\r\nAlso, see the \"Web-based printing\" policy setting in Computer Configuration/Administrative Templates/Printers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-disablehttpprinting-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_disablehttpprinting_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_disablehttpprinting_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_disablewebpnpdownload_1","displayName":"Turn off downloading of print drivers over HTTP (User)","description":"This policy setting specifies whether to allow this client to download print driver packages over HTTP.\r\n\r\nTo set up HTTP printing, non-inbox drivers need to be downloaded over HTTP.\r\n\r\nNote: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. It only prohibits downloading drivers that are not already installed locally.\r\n\r\nIf you enable this policy setting, print drivers cannot be downloaded over HTTP.\r\n\r\nIf you disable or do not configure this policy setting, users can download print drivers over HTTP.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-disablewebpnpdownload-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_disablewebpnpdownload_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_disablewebpnpdownload_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_1","displayName":"Restrict Internet communication (User)","description":"This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.\r\n\r\nIf you enable this setting, all of the the policy settings listed in the \"Internet Communication settings\" section are set such that their respective features cannot access the Internet.\r\n\r\nIf you disable this policy setting, all of the the policy settings listed in the \"Internet Communication settings\" section are set such that their respective features can access the Internet.\r\n\r\nIf you do not configure this policy setting, all of the the policy settings in the \"Internet Communication settings\" section are set to not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-internetmanagement-restrictcommunication-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_internetmanagement_restrictcommunication_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_1","displayName":"Turn off Internet File Association service (User)","description":"This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.\r\n\r\nWhen a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application.\r\n\r\nIf you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed.\r\n\r\nIf you disable or do not configure this policy setting, the user is allowed to use the Web service.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellnouseinternetopenwith-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellnouseinternetopenwith_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_1","displayName":"Turn off access to the Store (User)","description":"This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association.\r\n\r\nWhen a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Store service to find an application.\r\n\r\nIf you enable this policy setting, the \"Look for an app in the Store\" item in the Open With dialog is removed.\r\n\r\nIf you disable or do not configure this policy setting, the user is allowed to use the Store service and the Store item is available in the Open With dialog.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellnousestoreopenwith-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellnousestoreopenwith_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_shellpreventwpwdownload_1","displayName":"Turn off Internet download for Web publishing and online ordering wizards (User)","description":"This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards.\r\n\r\nThese wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry.\r\n\r\nIf you enable this policy setting, Windows does not download providers, and only the service providers that are cached in the local registry are displayed.\r\n\r\nIf you disable or do not configure this policy setting, a list of providers are downloaded when the user uses the web publishing or online ordering wizards.\r\n\r\nSee the documentation for the web publishing and online ordering wizards for more information, including details on specifying service providers in the registry.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellpreventwpwdownload-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellpreventwpwdownload_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellpreventwpwdownload_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_shellremoveorderprints_1","displayName":"Turn off the \"Order Prints\" picture task (User)","description":"This policy setting specifies whether the \"Order Prints Online\" task is available from Picture Tasks in Windows folders.\r\n\r\nThe Order Prints Online Wizard is used to download a list of providers and allow users to order prints online.\r\n\r\nIf you enable this policy setting, the task \"Order Prints Online\" is removed from Picture Tasks in File Explorer folders.\r\n\r\nIf you disable or do not configure this policy setting, the task is displayed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellremoveorderprints-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellremoveorderprints_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellremoveorderprints_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_1","displayName":"Turn off the \"Publish to Web\" task for files and folders (User)","description":"This policy setting specifies whether the tasks \"Publish this file to the Web,\" \"Publish this folder to the Web,\" and \"Publish the selected items to the Web\" are available from File and Folder Tasks in Windows folders.\r\n\r\nThe Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web.\r\n\r\nIf you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders.\r\n\r\nIf you disable or do not configure this policy setting, the tasks are shown.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-shellremovepublishtoweb-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_shellremovepublishtoweb_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_1","displayName":"Turn off the Windows Messenger Customer Experience Improvement Program (User)","description":"This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.\r\n\r\nWith the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used. This information is used to improve the product in future releases.\r\n\r\nIf you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown.\r\n\r\nIf you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown.\r\n\r\nIf you do not configure this policy setting, users have the choice to opt in and allow information to be collected.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-icm#admx-icm-winmsg-noinstrumentation-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_icm_winmsg_noinstrumentation_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_1","displayName":"Do not process the legacy run list (User)","description":"This policy setting ignores the customized run list.\r\n\r\nYou can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts.\r\n\r\nIf you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional.\r\n\r\nIf you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.\r\n\r\nNote: To create a customized run list by using a policy setting, use the \"Run these applications at startup\" policy setting.\r\n\r\nAlso, see the \"Do not process the run once list\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-disableexplorerrunlegacy-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunlegacy_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_1","displayName":"Do not process the run once list (User)","description":"This policy setting ignores customized run-once lists.\r\n\r\nYou can create a customized list of additional programs and documents that are started automatically the next time the system starts (but not thereafter). These programs are added to the standard list of programs and services that the system starts.\r\n\r\nIf you enable this policy setting, the system ignores the run-once list.\r\n\r\nIf you disable or do not configure this policy setting, the system runs the programs in the run-once list.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.\r\n\r\nNote: Customized run-once lists are stored in the registry in HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce.\r\n\r\nAlso, see the \"Do not process the legacy run list\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-disableexplorerrunoncelegacy-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_logon_disableexplorerrunoncelegacy_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_logon_nowelcometips_1","displayName":"Do not display the Getting Started welcome screen at logon (User)","description":"This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on.\r\n\r\nIf you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.\r\n\r\nUsers can still display the welcome screen by selecting it on the Start menu or by typing \"Welcome\" in the Run dialog box.\r\n\r\nIf you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer.\r\n\r\nThis setting applies only to Windows 2000 Professional. It does not affect the \"Configure Your Server on a Windows 2000 Server\" screen on Windows 2000 Server.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click \"Getting Started.\" To suppress the welcome screen without specifying a setting, clear the \"Show this screen at startup\" check box on the welcome screen.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-nowelcometips-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_logon_nowelcometips_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_logon_nowelcometips_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_logon_run_1","displayName":"Run these programs at user logon (User)","description":"This policy setting specifies additional programs or documents that Windows starts automatically when a user logs on to the system.\r\n\r\nIf you enable this policy setting, you can specify which programs can run at the time the user logs on to this computer that has this policy applied.\r\n\r\nTo specify values for this policy setting, click Show. In the Show Contents dialog box in the Value column, type the name of the executable program (.exe) file or document file. To specify another name, press ENTER, and type the name. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file.\r\n\r\nIf you disable or do not configure this policy setting, the user will have to start the appropriate programs after logon.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting.\r\n\r\nAlso, see the \"Do not process the legacy run list\" and the \"Do not process the run once list\" settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-logon#admx-logon-run-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_logon_run_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_logon_run_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_logon_run_1_runlistbox1","displayName":"Items to run at logon (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_activexcontrol","displayName":"ActiveX Control (User)","description":"Permits or prohibits use of this snap-in.\r\n\r\nIf you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.\r\n\r\nIf this setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited.\r\n\r\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted.\r\n\r\n To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.\r\n\r\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited.\r\n\r\n To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.\r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-activexcontrol"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_activexcontrol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_activexcontrol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_extendview","displayName":"Extended View (Web View) (User)","description":"Permits or prohibits use of this snap-in.\r\n\r\nIf you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.\r\n\r\nIf this setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited.\r\n\r\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted.\r\n\r\n To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.\r\n\r\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited.\r\n\r\n To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.\r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-extendview"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_extendview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_extendview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_linktoweb","displayName":"Link to Web Address (User)","description":"Permits or prohibits use of this snap-in.\r\n\r\nIf you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.\r\n\r\nIf this setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited.\r\n\r\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted.\r\n\r\n To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.\r\n\r\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited.\r\n\r\n To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.\r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-linktoweb"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_linktoweb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_linktoweb_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_author","displayName":"Restrict the user from entering author mode (User)","description":"Prevents users from entering author mode.\r\n\r\nThis setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly opening console files in author mode, and opening any console files that open in author mode by default.\r\n\r\nAs a result, users cannot create console files or add or remove snap-ins. Also, because they cannot open author-mode console files, they cannot use the tools that the files contain.\r\n\r\nThis setting permits users to open MMC user-mode console files, such as those on the Administrative Tools menu in Windows 2000 Server family or Windows Server 2003 family. However, users cannot open a blank MMC console window on the Start menu. (To open the MMC, click Start, click Run, and type mmc.) Users also cannot open a blank MMC console window from a command prompt.\r\n\r\nIf you disable this setting or do not configure it, users can enter author mode and open author-mode console files.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-restrict-author"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_author_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_author_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_to_permitted_snapins","displayName":"Restrict users to the explicitly permitted list of snap-ins (User)","description":"Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins.\r\n\r\n-- If you enable this setting, all snap-ins are prohibited, except those that you explicitly permit. Use this setting if you plan to prohibit use of most snap-ins.\r\n\r\n To explicitly permit a snap-in, open the Restricted/Permitted snap-ins setting folder and enable the settings representing the snap-in you want to permit. If a snap-in setting in the folder is disabled or not configured, the snap-in is prohibited.\r\n\r\n-- If you disable this setting or do not configure it, all snap-ins are permitted, except those that you explicitly prohibit. Use this setting if you plan to permit use of most snap-ins.\r\n\r\n To explicitly prohibit a snap-in, open the Restricted/Permitted snap-ins setting folder and then disable the settings representing the snap-ins you want to prohibit. If a snap-in setting in the folder is enabled or not configured, the snap-in is permitted.\r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.\r\n\r\nNote: If you enable this setting, and you do not enable any settings in the Restricted/Permitted snap-ins folder, users cannot use any MMC snap-ins.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmc#admx-mmc-mmc-restrict-to-permitted-snapins"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_to_permitted_snapins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmc_mmc_restrict_to_permitted_snapins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirdomtrusts","displayName":"Active Directory Domains and Trusts (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-activedirdomtrusts"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirdomtrusts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirdomtrusts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirsitesservices","displayName":"Active Directory Sites and Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-activedirsitesservices"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirsitesservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activedirsitesservices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activediruserscomp","displayName":"Active Directory Users and Computers (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-activediruserscomp"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activediruserscomp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_activediruserscomp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_1","displayName":"Administrative Templates (Computers) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-admcomputers-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_2","displayName":"Administrative Templates (Computers) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-admcomputers-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admcomputers_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_1","displayName":"Administrative Templates (Users) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-admusers-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_2","displayName":"Administrative Templates (Users) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-admusers-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_admusers_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_adsi","displayName":"ADSI Edit (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-adsi"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_adsi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_adsi_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_appletalkrouting","displayName":"AppleTalk Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-appletalkrouting"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_appletalkrouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_appletalkrouting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_authman","displayName":"Authorization Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-authman"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_authman_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_authman_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauth","displayName":"Certification Authority (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-certauth"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauth_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauthpolset","displayName":"Certification Authority Policy Settings (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-certauthpolset"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauthpolset_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certauthpolset_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certs","displayName":"Certificates (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-certs"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certstemplate","displayName":"Certificate Templates (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-certstemplate"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certstemplate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_certstemplate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_componentservices","displayName":"Component Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-componentservices"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_componentservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_componentservices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_computermanagement","displayName":"Computer Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-computermanagement"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_computermanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_computermanagement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_connectionsharingnat","displayName":"Connection Sharing (NAT) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-connectionsharingnat"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_connectionsharingnat_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_connectionsharingnat_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dcomcfg","displayName":"DCOM Configuration Extension (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-dcomcfg"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dcomcfg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dcomcfg_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_1","displayName":"Device Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-devicemanager-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_2","displayName":"Device Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-devicemanager-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_devicemanager_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dfs","displayName":"Distributed File System (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-dfs"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dfs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dfs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dhcprelaymgmt","displayName":"DHCP Relay Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-dhcprelaymgmt"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dhcprelaymgmt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_dhcprelaymgmt_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskdefrag","displayName":"Disk Defragmenter (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-diskdefrag"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskdefrag_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskdefrag_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskmgmt","displayName":"Disk Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-diskmgmt"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskmgmt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_diskmgmt_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_enterprisepki","displayName":"Enterprise PKI (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-enterprisepki"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_enterprisepki_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_enterprisepki_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_1","displayName":"Event Viewer (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-eventviewer-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_2","displayName":"Event Viewer (Windows Vista) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-eventviewer-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_3","displayName":"Event Viewer (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-eventviewer-3"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_3_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_3_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_4","displayName":"Event Viewer (Windows Vista) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-eventviewer-4"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_4_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_eventviewer_4_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_failoverclusters","displayName":"Failover Clusters Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-failoverclusters"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_failoverclusters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_failoverclusters_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_faxservice","displayName":"FAX Service (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-faxservice"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_faxservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_faxservice_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_1","displayName":"Folder Redirection (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-folderredirection-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_2","displayName":"Folder Redirection (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-folderredirection-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_folderredirection_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_frontpageext","displayName":"FrontPage Server Extensions (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-frontpageext"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_frontpageext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_frontpageext_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicymanagementsnapin","displayName":"Group Policy Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-grouppolicymanagementsnapin"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicymanagementsnapin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicymanagementsnapin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicysnapin","displayName":"Group Policy Object Editor (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-grouppolicysnapin"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicysnapin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicysnapin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicytab","displayName":"Group Policy tab for Active Directory Tools (User)","description":"Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap-ins.\r\n\r\nIf you enable this setting, the Group Policy tab is displayed in the property sheet for a site, domain, or organizational unit displayed by the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you disable the setting, the Group Policy tab is not displayed in those snap-ins.\r\n\r\nIf this setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this tab is displayed.\r\n\r\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users will not have access to the Group Policy tab.\r\n\r\n To explicitly permit use of the Group Policy tab, enable this setting. If this setting is not configured (or disabled), the Group Policy tab is inaccessible.\r\n\r\n-- If \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users will have access to the Group Policy tab.\r\n\r\n To explicitly prohibit use of the Group Policy tab, disable this setting. If this setting is not configured (or enabled), the Group Policy tab is accessible.\r\n\r\nWhen the Group Policy tab is inaccessible, it does not appear in the site, domain, or organizational unit property sheets.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-grouppolicytab"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicytab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_grouppolicytab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_hra","displayName":"Health Registration Authority (HRA) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-hra"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_hra_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_hra_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ias","displayName":"Internet Authentication Service (IAS) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ias"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ias_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ias_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iaslogging","displayName":"IAS Logging (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iaslogging"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iaslogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iaslogging_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_1","displayName":"Internet Explorer Maintenance (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iemaintenance-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_2","displayName":"Internet Explorer Maintenance (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iemaintenance-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iemaintenance_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_igmprouting","displayName":"IGMP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-igmprouting"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_igmprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_igmprouting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iis","displayName":"Internet Information Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iis"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iis_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_indexingservice","displayName":"Indexing Service (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-indexingservice"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_indexingservice_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_indexingservice_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iprouting","displayName":"IP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-iprouting"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_iprouting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage","displayName":"IP Security Policy Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipsecmanage"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_gp","displayName":"IP Security Policy Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipsecmanage-gp"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_gp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmanage_gp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmonitor","displayName":"IP Security Monitor (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipsecmonitor"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmonitor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipsecmonitor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxriprouting","displayName":"IPX RIP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipxriprouting"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxriprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxriprouting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxrouting","displayName":"IPX Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipxrouting"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxrouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxrouting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxsaprouting","displayName":"IPX SAP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ipxsaprouting"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxsaprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ipxsaprouting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_localusersgroups","displayName":"Local Users and Groups (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-localusersgroups"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_localusersgroups_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_localusersgroups_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_logicalmappeddrives","displayName":"Logical and Mapped Drives (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-logicalmappeddrives"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_logicalmappeddrives_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_logicalmappeddrives_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap","displayName":"NAP Client Configuration (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-napsnap"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_gp","displayName":"NAP Client Configuration (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-napsnap-gp"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_gp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_napsnap_gp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_net_framework","displayName":".Net Framework Configuration (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-net-framework"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_net_framework_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_net_framework_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_npsui","displayName":"Network Policy Server (NPS) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-npsui"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_npsui_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_npsui_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ocsp","displayName":"Online Responder (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ocsp"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ocsp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ocsp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ospfrouting","displayName":"OSPF Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ospfrouting"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ospfrouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ospfrouting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_perflogsalerts","displayName":"Performance Logs and Alerts (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-perflogsalerts"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_perflogsalerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_perflogsalerts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_publickey","displayName":"Public Key Policies (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-publickey"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_publickey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_publickey_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_qosadmission","displayName":"QoS Admission Control (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-qosadmission"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_qosadmission_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_qosadmission_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ras_dialinuser","displayName":"RAS Dialin - User Node (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ras-dialinuser"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ras_dialinuser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ras_dialinuser_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remoteaccess","displayName":"Remote Access (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-remoteaccess"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remoteaccess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remoteaccess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remotedesktop","displayName":"Remote Desktops (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-remotedesktop"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remotedesktop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remotedesktop_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remstore","displayName":"Removable Storage (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-remstore"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remstore_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_remstore_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_resultantsetofpolicysnapin","displayName":"Resultant Set of Policy snap-in (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-resultantsetofpolicysnapin"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_resultantsetofpolicysnapin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_resultantsetofpolicysnapin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_riprouting","displayName":"RIP Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-riprouting"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_riprouting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_riprouting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ris","displayName":"Remote Installation Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-ris"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ris_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_ris_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_routing","displayName":"Routing (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-routing"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_routing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_routing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rra","displayName":"Routing and Remote Access (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-rra"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rra_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rra_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rsm","displayName":"Removable Storage Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-rsm"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rsm_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_rsm_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sca","displayName":"Security Configuration and Analysis (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sca"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sca_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sca_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_1","displayName":"Scripts (Startup/Shutdown) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-scriptsmachine-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_2","displayName":"Scripts (Startup/Shutdown) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-scriptsmachine-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsmachine_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_1","displayName":"Scripts (Logon/Logoff) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-scriptsuser-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_2","displayName":"Scripts (Logon/Logoff) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-scriptsuser-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_scriptsuser_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_1","displayName":"Security Settings (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-securitysettings-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_2","displayName":"Security Settings (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-securitysettings-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitysettings_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitytemplates","displayName":"Security Templates (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-securitytemplates"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitytemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_securitytemplates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sendconsolemessage","displayName":"Send Console Message (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sendconsolemessage"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sendconsolemessage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sendconsolemessage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servermanager","displayName":"Server Manager (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-servermanager"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servermanager_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servermanager_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servicedependencies","displayName":"Service Dependencies (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-servicedependencies"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servicedependencies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_servicedependencies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_services","displayName":"Services (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-services"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_services_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_services_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders","displayName":"Shared Folders (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sharedfolders"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders_ext","displayName":"Shared Folders Ext (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sharedfolders-ext"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders_ext_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sharedfolders_ext_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_smtpprotocol","displayName":"SMTP Protocol (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-smtpprotocol"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_smtpprotocol_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_smtpprotocol_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_snmp","displayName":"SNMP (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-snmp"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_snmp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_snmp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_1","displayName":"Software Installation (Computers) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-softwareinstalationcomputers-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_2","displayName":"Software Installation (Computers) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-softwareinstalationcomputers-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstalationcomputers_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_1","displayName":"Software Installation (Users) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-softwareinstallationusers-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_2","displayName":"Software Installation (Users) (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-softwareinstallationusers-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_softwareinstallationusers_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysinfo","displayName":"System Information (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sysinfo"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysinfo_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysprop","displayName":"System Properties (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-sysprop"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysprop_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_sysprop_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_telephony","displayName":"Telephony (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-telephony"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_telephony_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_telephony_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_terminalservices","displayName":"Remote Desktop Services Configuration (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-terminalservices"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_terminalservices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_terminalservices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_tpmmanagement","displayName":"TPM Management (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-tpmmanagement"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_tpmmanagement_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_tpmmanagement_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall","displayName":"Windows Firewall with Advanced Security (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-windowsfirewall"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_gp","displayName":"Windows Firewall with Advanced Security (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-windowsfirewall-gp"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_gp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_windowsfirewall_gp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirednetworkpolicy","displayName":"Wired Network (IEEE 802.3) Policies (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-wirednetworkpolicy"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirednetworkpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirednetworkpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessmon","displayName":"Wireless Monitor (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-wirelessmon"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessmon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessmon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessnetworkpolicy","displayName":"Wireless Network (IEEE 802.11) Policies (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-wirelessnetworkpolicy"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessnetworkpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wirelessnetworkpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wmi","displayName":"WMI Control (User)","description":"This policy setting permits or prohibits the use of this snap-in. \r\n\r\nIf you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. \r\n\r\nIf you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. \r\n\r\nIf this policy setting is not configured, the setting of the \"Restrict users to the explicitly permitted list of snap-ins\" setting determines whether this snap-in is permitted or prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. \r\n\r\n-- If the policy setting \"Restrict users to the explicitly permitted list of snap-ins\" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. \r\n\r\nWhen a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mmcsnapins#admx-mmcsnapins-mmc-wmi"],"options":[{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wmi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mmcsnapins_mmc_wmi_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_1","displayName":"Turn off Windows Mobility Center (User)","description":"This policy setting turns off Windows Mobility Center.\r\n\r\nIf you enable this policy setting, the user is unable to invoke Windows Mobility Center. The Windows Mobility Center UI is removed from all shell entry points and the .exe file does not launch it.\r\n\r\nIf you disable this policy setting, the user is able to invoke Windows Mobility Center and the .exe file launches it.\r\n\r\nIf you do not configure this policy setting, Windows Mobility Center is on by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter#admx-mobilepcmobilitycenter-mobilitycenterenable-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mobilepcmobilitycenter_mobilitycenterenable_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_1","displayName":"Turn off Windows presentation settings (User)","description":"This policy setting turns off Windows presentation settings.\r\n\r\nIf you enable this policy setting, Windows presentation settings cannot be invoked.\r\n\r\nIf you disable this policy setting, Windows presentation settings can be invoked. The presentation settings icon will be displayed in the notification area. This will give users a quick and easy way to configure their system settings before a presentation to block system notifications and screen blanking, adjust speaker volume, and apply a custom background image.\r\n\r\nNote: Users will be able to customize their system settings for presentations in Windows Mobility Center.\r\n\r\nIf you do not configure this policy setting, Windows presentation settings can be invoked.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings#admx-mobilepcpresentationsettings-presentationsettingsenable-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_mobilepcpresentationsettings_presentationsettingsenable_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_msi_disablemedia","displayName":"Prevent removable media source for any installation (User)","description":"This policy setting prevents users from installing any programs from removable media.\r\n\r\nIf you enable this policy setting, if a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and DVDs, a message appears stating that the feature cannot be found.\r\n\r\nThis policy setting applies even when the installation is running in the user's security context.\r\n\r\nIf you disable or do not configure this policy setting, users can install from removable media when the installation is running in their own security context, but only system administrators can use removable media when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs.\r\n\r\nAlso, see the \"Enable user to use media source while elevated\" and \"Hide the 'Add a program from CD-ROM or floppy disk' option\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disablemedia"],"options":[{"id":"user_vendor_msft_policy_config_admx_msi_disablemedia_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_msi_disablemedia_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_msi_disablerollback_1","displayName":"Prohibit rollback (User)","description":"This policy setting prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation.\r\n\r\nIf you enable this policy setting, Windows Installer is prevented from recording the original state of the system and sequence of changes it makes during installation. It also prevents Windows Installer from retaining files it intends to delete later. As a result, Windows Installer cannot restore the computer to its original state if the installation does not complete.\r\n\r\nThis policy setting is designed to reduce the amount of temporary disk space required to install programs. Also, it prevents malicious users from interrupting an installation to gather data about the internal state of the computer or to search secure system files. However, because an incomplete installation can render the system or a program inoperable, do not use this policy setting unless it is essential.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If the policy setting is enabled in either folder, it is considered be enabled, even if it is explicitly disabled in the other folder.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-disablerollback-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_msi_disablerollback_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_msi_disablerollback_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_msi_searchorder","displayName":"Specify the order in which Windows Installer searches for installation files (User)","description":"This policy setting specifies the order in which Windows Installer searches for installation files.\r\n\r\nIf you disable or do not configure this policy setting, by default, the Windows Installer searches the network first, then removable media (floppy drive, CD-ROM, or DVD), and finally, the Internet (URL).\r\n\r\nIf you enable this policy setting, you can change the search order by specifying the letters representing each file source in the order that you want Windows Installer to search:\r\n\r\n-- \"n\" represents the network;\r\n\r\n-- \"m\" represents media;\r\n\r\n-- \"u\" represents URL, or the Internet.\r\n\r\nTo exclude a file source, omit or delete the letter representing that source type.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-msi#admx-msi-searchorder"],"options":[{"id":"user_vendor_msft_policy_config_admx_msi_searchorder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_msi_searchorder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_msi_searchorder_searchorder","displayName":"Search order (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_addremovecomponents","displayName":"Prohibit adding and removing components for a LAN or remote access connection (User)","description":"Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadministrators.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Install and Uninstall buttons for components of connections are disabled, and administrators are not permitted to access network components in the Windows Components Wizard.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Install and Uninstall buttons for components of connections in the Network Connections folder are enabled. Also, administrators can gain access to network components in the Windows Components Wizard.\r\n\r\nThe Install button opens the dialog boxes used to add network components. Clicking the Uninstall button removes the selected component in the components list (above the button).\r\n\r\nThe Install and Uninstall buttons appear in the properties dialog box for connections. These buttons are on the General tab for LAN connections and on the Networking tab for remote access connections.\r\n\r\nNote: When the \"Prohibit access to properties of a LAN connection\", \"Ability to change properties of an all user remote access connection\", or \"Prohibit changing properties of a private remote access connection\" settings are set to deny access to the connection properties dialog box, the Install and Uninstall buttons for connections are blocked.\r\n\r\nNote: Nonadministrators are already prohibited from adding and removing connection components, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-addremovecomponents"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_addremovecomponents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_addremovecomponents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_advancedsettings","displayName":"Prohibit access to the Advanced Settings item on the Advanced menu (User)","description":"Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators.\r\n\r\nThe Advanced Settings item lets users view and change bindings and view and change the order in which the computer accesses connections, network providers, and print providers.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Advanced Settings item is disabled for administrators.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Advanced Settings item is enabled for administrators.\r\n\r\nNote: Nonadministrators are already prohibited from accessing the Advanced Settings dialog box, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-advancedsettings"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_advancedsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_advancedsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_allowadvancedtcpipconfig","displayName":"Prohibit TCP/IP advanced configuration (User)","description":"Determines whether users can configure advanced TCP/IP settings.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Advanced button on the Internet Protocol (TCP/IP) Properties dialog box is disabled for all users (including administrators). As a result, users cannot open the Advanced TCP/IP Settings Properties page and modify IP settings, such as DNS and WINS server information.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting, the Advanced button is enabled, and all users can open the Advanced TCP/IP Setting dialog box.\r\n\r\nNote: This setting is superseded by settings that prohibit access to properties of connections or connection components. When these policies are set to deny access to the connection properties dialog box or Properties button for connection components, users cannot gain access to the Advanced button for TCP/IP configuration.\r\n\r\nNote: Nonadministrators (excluding Network Configuration Operators) do not have permission to access TCP/IP advanced configuration for a LAN connection, regardless of this setting.\r\n\r\nTip: To open the Advanced TCP/IP Setting dialog box, in the Network Connections folder, right-click a connection icon, and click Properties. For remote access connections, click the Networking tab. In the \"Components checked are used by this connection\" box, click Internet Protocol (TCP/IP), click the Properties button, and then click the Advanced button.\r\n\r\nNote: Changing this setting from Enabled to Not Configured does not enable the Advanced button until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-allowadvancedtcpipconfig"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_allowadvancedtcpipconfig_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_allowadvancedtcpipconfig_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_changebindstate","displayName":"Prohibit Enabling/Disabling components of a LAN connection (User)","description":"Determines whether administrators can enable and disable the components used by LAN connections.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the check boxes for enabling and disabling components are disabled. As a result, administrators cannot enable or disable the components that a connection uses.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Properties dialog box for a connection includes a check box beside the name of each component that the connection uses. Selecting the check box enables the component, and clearing the check box disables the component.\r\n\r\nNote: When the \"Prohibit access to properties of a LAN connection\" setting is enabled, users are blocked from accessing the check boxes for enabling and disabling the components of a LAN connection.\r\n\r\nNote: Nonadministrators are already prohibited from enabling or disabling components for a LAN connection, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-changebindstate"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_changebindstate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_changebindstate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deletealluserconnection","displayName":"Ability to delete all user remote access connections (User)","description":"Determines whether users can delete all user remote access connections.\r\n\r\nTo create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the \"For all users\" option.\r\n\r\nIf you enable this setting, all users can delete shared remote access connections. In addition, if your file system is NTFS, users need to have Write access to Documents and Settings\\All Users\\Application Data\\Microsoft\\Network\\Connections\\Pbk to delete a shared remote access connection.\r\n\r\nIf you disable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), users (including administrators) cannot delete all-user remote access connections. (By default, users can still delete their private connections, but you can change the default by using the \"Prohibit deletion of remote access connections\" setting.)\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you do not configure this setting, only Administrators and Network Configuration Operators can delete all user remote access connections.\r\n\r\nImportant: When enabled, the \"Prohibit deletion of remote access connections\" setting takes precedence over this setting. Users (including administrators) cannot delete any remote access connections, and this setting is ignored.\r\n\r\nNote: LAN connections are created and deleted automatically by the system when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-deletealluserconnection"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deletealluserconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deletealluserconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deleteconnection","displayName":"Prohibit deletion of remote access connections (User)","description":"Determines whether users can delete remote access connections.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), users (including administrators) cannot delete any remote access connections. This setting also disables the Delete option on the context menu for a remote access connection and on the File menu in the Network Connections folder.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, all users can delete their private remote access connections. Private connections are those that are available only to one user. (By default, only Administrators and Network Configuration Operators can delete connections available to all users, but you can change the default by using the \"Ability to delete all user remote access connections\" setting.)\r\n\r\nImportant: When enabled, this setting takes precedence over the \"Ability to delete all user remote access connections\" setting. Users cannot delete any remote access connections, and the \"Ability to delete all user remote access connections\" setting is ignored.\r\n\r\nNote: LAN connections are created and deleted automatically when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-deleteconnection"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deleteconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_deleteconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_dialupprefs","displayName":"Prohibit access to the Remote Access Preferences item on the Advanced menu (User)","description":"Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled.\r\n\r\nThe Remote Access Preferences item lets users create and change connections before logon and configure automatic dialing and callback features.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Remote Access Preferences item is disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Remote Access Preferences item is enabled for all users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-dialupprefs"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_dialupprefs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_dialupprefs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_enableadminprohibits","displayName":"Enable Windows 2000 Network Connections settings for Administrators (User)","description":"Determines whether settings that existed in Windows 2000 Server family will apply to Administrators.\r\n\r\nThe set of Network Connections group settings that existed in Windows 2000 Professional also exists in Windows XP Professional. In Windows 2000 Professional, all of these settings had the ability to prohibit the use of certain features from Administrators.\r\n\r\nBy default, Network Connections group settings in Windows XP Professional do not have the ability to prohibit the use of features from Administrators.\r\n\r\nIf you enable this setting, the Windows XP settings that existed in Windows 2000 Professional will have the ability to prohibit Administrators from using certain features. These settings are \"Ability to rename LAN connections or remote access connections available to all users\", \"Prohibit access to properties of components of a LAN connection\", \"Prohibit access to properties of components of a remote access connection\", \"Ability to access TCP/IP advanced configuration\", \"Prohibit access to the Advanced Settings Item on the Advanced Menu\", \"Prohibit adding and removing components for a LAN or remote access connection\", \"Prohibit access to properties of a LAN connection\", \"Prohibit Enabling/Disabling components of a LAN connection\", \"Ability to change properties of an all user remote access connection\", \"Prohibit changing properties of a private remote access connection\", \"Prohibit deletion of remote access connections\", \"Ability to delete all user remote access connections\", \"Prohibit connecting and disconnecting a remote access connection\", \"Ability to Enable/Disable a LAN connection\", \"Prohibit access to the New Connection Wizard\", \"Prohibit renaming private remote access connections\", \"Prohibit access to the Remote Access Preferences item on the Advanced menu\", \"Prohibit viewing of status for an active connection\". When this setting is enabled, settings that exist in both Windows 2000 Professional and Windows XP Professional behave the same for administrators.\r\n\r\nIf you disable this setting or do not configure it, Windows XP settings that existed in Windows 2000 will not apply to administrators.\r\n\r\nNote: This setting is intended to be used in a situation in which the Group Policy object that these settings are being applied to contains both Windows 2000 Professional and Windows XP Professional computers, and identical Network Connections policy behavior is required between all Windows 2000 Professional and Windows XP Professional computers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-enableadminprohibits"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_enableadminprohibits_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_enableadminprohibits_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_ipstatechecking","displayName":"Turn off notifications when a connection has only limited or no connectivity (User)","description":"This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unable to retrieve an IP address from a DHCP server. This is often signified by the assignment of an automatic private IP address\"(i.e. an IP address in the range 169.254.*.*). This indicates that a DHCP server could not be reached or the DHCP server was reached but unable to respond to the request with a valid IP address. By default, a notification is displayed providing the user with information on how the problem can be resolved.\r\n\r\nIf you enable this policy setting, this condition will not be reported as an error to the user.\r\n\r\nIf you disable or do not configure this policy setting, a DHCP-configured connection that has not been assigned an IP address will be reported via a notification, providing the user with information as to how the problem can be resolved.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-ipstatechecking"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_ipstatechecking_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_ipstatechecking_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanchangeproperties","displayName":"Prohibit access to properties of components of a LAN connection (User)","description":"Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection.\r\n\r\nThis setting determines whether the Properties button for components of a LAN connection is enabled.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties button is disabled for Administrators. Network Configuration Operators are prohibited from accessing connection components, regardless of the \"Enable Network Connections settings for Administrators\" setting.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Properties button is enabled for administrators and Network Configuration Operators.\r\n\r\nThe Local Area Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.\r\n\r\nNote: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.\r\n\r\nNote: When the \"Prohibit access to properties of a LAN connection\" setting is enabled, users are blocked from accessing the Properties button for LAN connection components.\r\n\r\nNote: Network Configuration Operators only have permission to change TCP/IP properties. Properties for all other components are unavailable to these users.\r\n\r\nNote: Nonadministrators are already prohibited from accessing properties of components for a LAN connection, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-lanchangeproperties"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanchangeproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanchangeproperties_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanconnect","displayName":"Ability to Enable/Disable a LAN connection (User)","description":"Determines whether users can enable/disable LAN connections.\r\n\r\nIf you enable this setting, the Enable and Disable options for LAN connections are available to users (including nonadministrators). Users can enable/disable a LAN connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu.\r\n\r\nIf you disable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), double-clicking the icon has no effect, and the Enable and Disable menu items are disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you do not configure this setting, only Administrators and Network Configuration Operators can enable/disable LAN connections.\r\n\r\nNote: Administrators can still enable/disable LAN connections from Device Manager when this setting is disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-lanconnect"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanconnect_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanproperties","displayName":"Prohibit access to properties of a LAN connection (User)","description":"Determines whether users can change the properties of a LAN connection.\r\n\r\nThis setting determines whether the Properties menu item is enabled, and thus, whether the Local Area Connection Properties dialog box is available to users.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties menu items are disabled for all users, and users cannot open the Local Area Connection Properties dialog box.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, a Properties menu item appears when users right-click the icon representing a LAN connection. Also, when users select the connection, Properties is enabled on the File menu.\r\n\r\nNote: This setting takes precedence over settings that manipulate the availability of features inside the Local Area Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a LAN connection is available to users.\r\n\r\nNote: Nonadministrators have the right to view the properties dialog box for a connection but not to make changes, regardless of this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-lanproperties"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_lanproperties_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_newconnectionwizard","displayName":"Prohibit access to the New Connection Wizard (User)","description":"Determines whether users can use the New Connection Wizard, which creates new network connections.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Make New Connection icon does not appear in the Start Menu on in the Network Connections folder. As a result, users (including administrators) cannot start the New Connection Wizard.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Make New Connection icon appears in the Start menu and in the Network Connections folder for all users. Clicking the Make New Connection icon starts the New Connection Wizard.\r\n\r\nNote: Changing this setting from Enabled to Not Configured does not restore the Make New Connection icon until the user logs off or on. When other changes to this setting are applied, the icon does not appear or disappear in the Network Connections folder until the folder is refreshed.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-newconnectionwizard"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_newconnectionwizard_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_newconnectionwizard_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasalluserproperties","displayName":"Ability to change properties of an all user remote access connection (User)","description":"Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer.\r\n\r\nTo create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the \"For all users\" option.\r\n\r\nThis setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box is available to users.\r\n\r\nIf you enable this setting, a Properties menu item appears when any user right-clicks the icon for a remote access connection. Also, when any user selects the connection, Properties appears on the File menu.\r\n\r\nIf you disable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties menu items are disabled, and users (including administrators) cannot open the remote access connection properties dialog box.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you do not configure this setting, only Administrators and Network Configuration Operators can change properties of all-user remote access connections.\r\n\r\nNote: This setting takes precedence over settings that manipulate the availability of features inside the Remote Access Connection Properties dialog box. If this setting is disabled, nothing within the properties dialog box for a remote access connection will be available to users.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-rasalluserproperties"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasalluserproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasalluserproperties_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_raschangeproperties","displayName":"Prohibit access to properties of components of a remote access connection (User)","description":"Determines whether users can view and change the properties of components used by a private or all-user remote access connection.\r\n\r\nThis setting determines whether the Properties button for components used by a private or all-user remote access connection is enabled.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties button is disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Properties button is enabled for all users.\r\n\r\nThe Networking tab of the Remote Access Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.\r\n\r\nNote: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.\r\n\r\nNote: When the \"Ability to change properties of an all user remote access connection\" or \"Prohibit changing properties of a private remote access connection\" settings are set to deny access to the Remote Access Connection Properties dialog box, the Properties button for remote access connection components is blocked.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-raschangeproperties"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_raschangeproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_raschangeproperties_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasconnect","displayName":"Prohibit connecting and disconnecting a remote access connection (User)","description":"Determines whether users can connect and disconnect remote access connections.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), double-clicking the icon has no effect, and the Connect and Disconnect menu items are disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Connect and Disconnect options for remote access connections are available to all users. Users can connect or disconnect a remote access connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-rasconnect"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasconnect_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasmyproperties","displayName":"Prohibit changing properties of a private remote access connection (User)","description":"Determines whether users can view and change the properties of their private remote access connections.\r\n\r\nPrivate connections are those that are available only to one user. To create a private connection, on the Connection Availability page in the New Connection Wizard, click the \"Only for myself\" option.\r\n\r\nThis setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box for a private connection is available to users.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Properties menu items are disabled, and no users (including administrators) can open the Remote Access Connection Properties dialog box for a private connection.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, a Properties menu item appears when any user right-clicks the icon representing a private remote access connection. Also, when any user selects the connection, Properties appears on the File menu.\r\n\r\nNote: This setting takes precedence over settings that manipulate the availability of features in the Remote Access Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a remote access connection will be available to users.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-rasmyproperties"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasmyproperties_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_rasmyproperties_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamealluserrasconnection","displayName":"Ability to rename all user remote access connections (User)","description":"Determines whether nonadministrators can rename all-user remote access connections.\r\n\r\nTo create an all-user connection, on the Connection Availability page in the New Connection Wizard, click the \"For all users\" option.\r\n\r\nIf you enable this setting, the Rename option is enabled for all-user remote access connections. Any user can rename all-user connections by clicking an icon representing the connection or by using the File menu.\r\n\r\nIf you disable this setting, the Rename option is disabled for nonadministrators only.\r\n\r\nIf you do not configure the setting, only Administrators and Network Configuration Operators can rename all-user remote access connections.\r\n\r\nNote: This setting does not apply to Administrators\r\n\r\nNote: When the \"Ability to rename LAN connections or remote access connections available to all users\" setting is configured (set to either Enabled or Disabled), this setting does not apply.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-renamealluserrasconnection"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamealluserrasconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamealluserrasconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renameconnection","displayName":"Ability to rename LAN connections or remote access connections available to all users (User)","description":"Determines whether users can rename LAN or all user remote access connections.\r\n\r\nIf you enable this setting, the Rename option is enabled for all users. Users can rename connections by clicking the icon representing a connection or by using the File menu.\r\n\r\nIf you disable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Rename option for LAN and all user remote access connections is disabled for all users (including Administrators and Network Configuration Operators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf this setting is not configured, only Administrators and Network Configuration Operators have the right to rename LAN or all user remote access connections.\r\n\r\nNote: When configured, this setting always takes precedence over the \"Ability to rename LAN connections\" and \"Ability to rename all user remote access connections\" settings.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to rename remote access connections.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-renameconnection"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renameconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renameconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamelanconnection","displayName":"Ability to rename LAN connections (User)","description":"Determines whether nonadministrators can rename a LAN connection.\r\n\r\nIf you enable this setting, the Rename option is enabled for LAN connections. Nonadministrators can rename LAN connections by clicking an icon representing the connection or by using the File menu.\r\n\r\nIf you disable this setting, the Rename option is disabled for nonadministrators only.\r\n\r\nIf you do not configure this setting, only Administrators and Network Configuration Operators can rename LAN connections\r\n\r\nNote: This setting does not apply to Administrators.\r\n\r\nNote: When the \"Ability to rename LAN connections or remote access connections available to all users\" setting is configured (set to either enabled or disabled), this setting does not apply.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-renamelanconnection"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamelanconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamelanconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamemyrasconnection","displayName":"Prohibit renaming private remote access connections (User)","description":"Determines whether users can rename their private remote access connections.\r\n\r\nPrivate connections are those that are available only to one user. To create a private connection, on the Connection Availability page in the New Connection Wizard, click the \"Only for myself\" option.\r\n\r\nIf you enable this setting (and enable the \"Enable Network Connections settings for Administrators\" setting), the Rename option is disabled for all users (including administrators).\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the Rename option is enabled for all users' private remote access connections. Users can rename their private connection by clicking an icon representing the connection or by using the File menu.\r\n\r\nNote: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-renamemyrasconnection"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamemyrasconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_renamemyrasconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_statistics","displayName":"Prohibit viewing of status for an active connection (User)","description":"Determines whether users can view the status for an active connection.\r\n\r\nConnection status is available from the connection status taskbar icon or from the Status dialog box. The Status dialog box displays information about the connection and its activity. It also provides buttons to disconnect and to configure the properties of the connection.\r\n\r\nIf you enable this setting, the connection status taskbar icon and Status dialog box are not available to users (including administrators). The Status option is disabled in the context menu for the connection and on the File menu in the Network Connections folder. Users cannot choose to show the connection icon in the taskbar from the Connection Properties dialog box.\r\n\r\nImportant: If the \"Enable Network Connections settings for Administrators\" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.\r\n\r\nIf you disable this setting or do not configure it, the connection status taskbar icon and Status dialog box are available to all users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-networkconnections#admx-networkconnections-nc-statistics"],"options":[{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_statistics_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_networkconnections_nc_statistics_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1","displayName":"Specify administratively assigned Offline Files (User)","description":"This policy setting lists network files and folders that are always available for offline use. This ensures that the specified files and folders are available offline to users of the computer.\r\n\r\nIf you enable this policy setting, the files you enter are always available offline to users of the computer. To specify a file or folder, click Show. In the Show Contents dialog box in the Value Name column, type the fully qualified UNC path to the file or folder. Leave the Value column field blank.\r\n\r\nIf you disable this policy setting, the list of files or folders made always available offline (including those inherited from lower precedence GPOs) is deleted and no files or folders are made available for offline use by Group Policy (though users can still specify their own files and folders for offline use).\r\n\r\nIf you do not configure this policy setting, no files or folders are made available for offline use by Group Policy.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy settings will be combined and all specified files will be available for offline use.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-assignedofflinefiles-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1_lbl_assignedofflinefileslist","displayName":"Files and Folders: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1_lbl_assignedofflinefileslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_assignedofflinefiles_1_lbl_assignedofflinefileslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1","displayName":"Non-default server disconnect actions (User)","description":"Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specified response, and the response specified in the \"Action on server disconnect\" setting.\r\n\r\nTo use this setting, click Show. In the Show Contents dialog box in the Value Name column box, type the server's computer name. Then, in the Value column box, type \"0\" if users can work offline when they are disconnected from this server, or type \"1\" if they cannot.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured for a particular server, the setting in Computer Configuration takes precedence over the setting in User Configuration. Both Computer and User configuration take precedence over a user's setting. This setting does not prevent users from setting custom actions through the Offline Files tab. However, users are unable to change any custom actions established via this setting.\r\n\r\nTip: To configure this setting without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then click Advanced. This setting corresponds to the settings in the \"Exception list\" section.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-customgoofflineactions-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_lbl_customgoofflineactionslist","displayName":"Customize actions: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_lbl_customgoofflineactionslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_customgoofflineactions_1_lbl_customgoofflineactionslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_1","displayName":"Event logging level (User)","description":"Determines which events the Offline Files feature records in the event log.\r\n\r\nOffline Files records events in the Application log in Event Viewer when it detects errors. By default, Offline Files records an event only when the offline files storage cache is corrupted. However, you can use this setting to specify additional events you want Offline Files to record.\r\n\r\nTo use this setting, in the \"Enter\" box, select the number corresponding to the events you want the system to log. The levels are cumulative; that is, each level includes the events in all preceding levels.\r\n\r\n\"0\" records an error when the offline storage cache is corrupted.\r\n\r\n\"1\" also records an event when the server hosting the offline file is disconnected from the network.\r\n\r\n\"2\" also records events when the local computer is connected and disconnected from the network.\r\n\r\n\"3\" also records an event when the server hosting the offline file is reconnected to the network.\r\n\r\nNote: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-eventlogginglevel-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_eventlogginglevel_1_lbl_eventlogginglevelspin","displayName":"Enter [0-3]: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1","displayName":"Action on server disconnect (User)","description":"Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files.\r\n\r\nThis setting also disables the \"When a network connection is lost\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nIf you enable this setting, you can use the \"Action\" box to specify how computers in the group respond.\r\n\r\n-- \"Work offline\" indicates that the computer can use local copies of network files while the server is inaccessible.\r\n\r\n-- \"Never go offline\" indicates that network files are not available while the server is inaccessible.\r\n\r\nIf you disable this setting or select the \"Work offline\" option, users can work offline if disconnected.\r\n\r\nIf you do not configure this setting, users can work offline by default, but they can change this option.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To configure this setting without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, click Advanced, and then select an option in the \"When a network connection is lost\" section.\r\n\r\nAlso, see the \"Non-default server disconnect actions\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-goofflineaction-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_lbl_goofflineactioncombo","displayName":"Action: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_lbl_goofflineactioncombo_0","displayName":"Work offline","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_goofflineaction_1_lbl_goofflineactioncombo_1","displayName":"Never go offline","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_1","displayName":"Prevent use of Offline Files folder (User)","description":"Disables the Offline Files folder.\r\n\r\nThis setting disables the \"View Files\" button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view or open copies of network files stored on their computer. Also, they cannot use the folder to view characteristics of offline files, such as their server status, type, or location.\r\n\r\nThis setting does not prevent users from working offline or from saving local copies of files available offline. Also, it does not prevent them from using other programs, such as Windows Explorer, to view their offline files.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To view the Offline Files Folder, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then click \"View Files.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nocacheviewer-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nocacheviewer_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_1","displayName":"Prohibit user configuration of Offline Files (User)","description":"Prevents users from enabling, disabling, or changing the configuration of Offline Files.\r\n\r\nThis setting removes the Offline Files tab from the Folder Options dialog box. It also removes the Settings item from the Offline Files context menu and disables the Settings button on the Offline Files Status dialog box. As a result, users cannot view or change the options on the Offline Files tab or Offline Files dialog box.\r\n\r\nThis is a comprehensive setting that locks down the configuration you establish by using other settings in this folder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: This setting provides a quick method for locking down the default settings for Offline Files. To accept the defaults, just enable this setting. You do not have to disable any other settings in this folder.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-noconfigcache-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noconfigcache_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_1","displayName":"Remove \"Make Available Offline\" command (User)","description":"This policy setting prevents users from making network files and folders available offline.\r\n\r\nIf you enable this policy setting, users cannot designate files to be saved on their computer for offline use. However, Windows will still cache local copies of files that reside on network shares designated for automatic caching.\r\n\r\nIf you disable or do not configure this policy setting, users can manually specify files and folders that they want to make available offline.\r\n\r\nNotes:\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence.\r\n\r\nThe \"Make Available Offline\" command is called \"Always available offline\" on computers running Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows 8, Windows 7, or Windows Vista.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nomakeavailableoffline-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nomakeavailableoffline_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1","displayName":"Remove \"Make Available Offline\" for these files and folders (User)","description":"This policy setting allows you to manage a list of files and folders for which you want to block the \"Make Available Offline\" command.\r\n\r\nIf you enable this policy setting, the \"Make Available Offline\" command is not available for the files and folders that you list. To specify these files and folders, click Show. In the Show Contents dialog box, in the Value Name column box, type the fully qualified UNC path to the file or folder. Leave the Value column field blank.\r\n\r\nIf you disable this policy setting, the list of files and folders is deleted, including any lists inherited from lower precedence GPOs, and the \"Make Available Offline\" command is displayed for all files and folders.\r\n\r\nIf you do not configure this policy setting, the \"Make Available Offline\" command is available for all files and folders.\r\n\r\nNotes:\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy settings are combined, and the \"Make Available Offline\" command is unavailable for all specified files and folders.\r\n\r\nThe \"Make Available Offline\" command is called \"Always available offline\" on computers running Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows 8, Windows 7, or Windows Vista.\r\n\r\nThis policy setting does not prevent files from being automatically cached if the network share is configured for \"Automatic Caching.\" It only affects the display of the \"Make Available Offline\" command in File Explorer.\r\n\r\nIf the \"Remove 'Make Available Offline' command\" policy setting is enabled, this setting has no effect.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-nopinfiles-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_lbl_nopinfileslist","displayName":"Files and Folders: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_lbl_nopinfileslist_key","displayName":"Name","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_nopinfiles_1_lbl_nopinfileslist_value","displayName":"Value","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_1","displayName":"Turn off reminder balloons (User)","description":"Hides or displays reminder balloons, and prevents users from changing the setting.\r\n\r\nReminder balloons appear above the Offline Files icon in the notification area to notify users when they have lost the connection to a networked file and are working on a local copy of the file. Users can then decide how to proceed.\r\n\r\nIf you enable this setting, the system hides the reminder balloons, and prevents users from displaying them.\r\n\r\nIf you disable the setting, the system displays the reminder balloons and prevents users from hiding them.\r\n\r\nIf this setting is not configured, reminder balloons are displayed by default when you enable offline files, but users can change the setting.\r\n\r\nTo prevent users from changing the setting while a setting is in effect, the system disables the \"Enable reminders\" option on the Offline Files tab\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To display or hide reminder balloons without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the \"Enable reminders\" check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-noreminders-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_noreminders_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_1","displayName":"Reminder balloon frequency (User)","description":"Determines how often reminder balloon updates appear.\r\n\r\nIf you enable this setting, you can select how often reminder balloons updates appear and also prevent users from changing this setting.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the update interval.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To set reminder balloon frequency without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the \"Display reminder balloons every ... minutes\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-reminderfreq-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderfreq_1_lbl_reminderfreqspin","displayName":"Minutes: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_1","displayName":"Initial reminder balloon lifetime (User)","description":"Determines how long the first reminder balloon for a network status change is displayed.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the first reminder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-reminderinittimeout-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_reminderinittimeout_1_lbl_reminderinittimeoutspin","displayName":"Seconds: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_1","displayName":"Reminder balloon lifetime (User)","description":"Determines how long updated reminder balloons are displayed.\r\n\r\nReminder balloons appear when the user's connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the update reminder.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-remindertimeout-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_remindertimeout_1_lbl_remindertimeoutspin","displayName":"Seconds: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_1","displayName":"Synchronize all offline files before logging off (User)","description":"Determines whether offline files are fully synchronized when users log off.\r\n\r\nThis setting also disables the \"Synchronize all offline files before logging off\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nIf you enable this setting, offline files are fully synchronized. Full synchronization ensures that offline files are complete and current.\r\n\r\nIf you disable this setting, the system only performs a quick synchronization. Quick synchronization ensures that files are complete, but does not ensure that they are current.\r\n\r\nIf you do not configure this setting, the system performs a quick synchronization by default, but users can change this option.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To change the synchronization method without changing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the \"Synchronize all offline files before logging off\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-syncatlogoff-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_1","displayName":"Synchronize all offline files when logging on (User)","description":"Determines whether offline files are fully synchronized when users log on.\r\n\r\nThis setting also disables the \"Synchronize all offline files before logging on\" option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.\r\n\r\nIf you enable this setting, offline files are fully synchronized at logon. Full synchronization ensures that offline files are complete and current. Enabling this setting automatically enables logon synchronization in Synchronization Manager.\r\n\r\nIf this setting is disabled and Synchronization Manager is configured for logon synchronization, the system performs only a quick synchronization. Quick synchronization ensures that files are complete but does not ensure that they are current.\r\n\r\nIf you do not configure this setting and Synchronization Manager is configured for logon synchronization, the system performs a quick synchronization by default, but users can change this option.\r\n\r\nThis setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.\r\n\r\nTip: To change the synchronization method without setting a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the \"Synchronize all offline files before logging on\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-syncatlogon-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatlogon_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1","displayName":"Synchronize offline files before suspend (User)","description":"Determines whether offline files are synchonized before a computer is suspended.\r\n\r\nIf you enable this setting, offline files are synchronized whenever the computer is suspended. Setting the synchronization action to \"Quick\" ensures only that all files in the cache are complete. Setting the synchronization action to \"Full\" ensures that all cached files and folders are up-to-date with the most current version.\r\n\r\nIf you disable or do not configuring this setting, files are not synchronized when the computer is suspended.\r\n\r\nNote: If the computer is suspended by closing the display on a portable computer, files are not synchronized. If multiple users are logged on to the computer at the time the computer is suspended, a synchronization is not performed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-syncatsuspend-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1_lbl_syncatsuspendcombo","displayName":"Action: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1_lbl_syncatsuspendcombo_0","displayName":"Quick","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_syncatsuspend_1_lbl_syncatsuspendcombo_1","displayName":"Full","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_1","displayName":"Remove \"Work offline\" command (User)","description":"This policy setting removes the \"Work offline\" command from Explorer, preventing users from manually changing whether Offline Files is in online mode or offline mode.\r\n\r\nIf you enable this policy setting, the \"Work offline\" command is not displayed in File Explorer.\r\n\r\nIf you disable or do not configure this policy setting, the \"Work offline\" command is displayed in File Explorer.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-offlinefiles#admx-offlinefiles-pol-workofflinedisabled-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_offlinefiles_pol_workofflinedisabled_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_pentraining_pentrainingoff_1","displayName":"Turn off Tablet PC Pen Training (User)","description":"Turns off Tablet PC Pen Training.\r\n\r\nIf you enable this policy setting, users cannot open Tablet PC Pen Training.\r\n\r\nIf you disable or do not configure this policy setting, users can open Tablet PC Pen Training.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-pentraining#admx-pentraining-pentrainingoff-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_pentraining_pentrainingoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_pentraining_pentrainingoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_power_pw_promptpasswordonresume","displayName":"Prompt for password on resume from hibernate/suspend (User)","description":"This policy setting allows you to configure client computers to lock and prompt for a password when resuming from a hibernate or suspend state.\r\n\r\nIf you enable this policy setting, the client computer is locked and prompted for a password when it is resumed from a suspend or hibernate state.\r\n\r\nIf you disable or do not configure this policy setting, users control if their computer is automatically locked or not after performing a resume operation.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-power#admx-power-pw-promptpasswordonresume"],"options":[{"id":"user_vendor_msft_policy_config_admx_power_pw_promptpasswordonresume_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_power_pw_promptpasswordonresume_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging","displayName":"Turn on Module Logging (User)","description":"\r\n This policy setting allows you to turn on logging for Windows PowerShell modules.\r\n\r\n If you enable this policy setting, pipeline execution events for members of the specified modules are recorded in the Windows PowerShell log in Event Viewer. Enabling this policy setting for a module is equivalent to setting the LogPipelineExecutionDetails property of the module to True.\r\n\r\n If you disable this policy setting, logging of execution events is disabled for all Windows PowerShell modules. Disabling this policy setting for a module is equivalent to setting the LogPipelineExecutionDetails property of the module to False.\r\n\r\n If this policy setting is not configured, the LogPipelineExecutionDetails property of a module or snap-in determines whether the execution events of a module or snap-in are logged. By default, the LogPipelineExecutionDetails property of all modules and snap-ins is set to False.\r\n\r\n To add modules and snap-ins to the policy setting list, click Show, and then type the module names in the list. The modules and snap-ins in the list must be installed on the computer.\r\n\r\n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enablemodulelogging"],"options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablemodulelogging_listbox_modulenames","displayName":"Module Names (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts","displayName":"Turn on Script Execution (User)","description":"This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run.\r\n\r\nIf you enable this policy setting, the scripts selected in the drop-down list are allowed to run.\r\n\r\nThe \"Allow only signed scripts\" policy setting allows scripts to execute only if they are signed by a trusted publisher.\r\n\r\nThe \"Allow local scripts and remote signed scripts\" policy setting allows any local scrips to run; scripts that originate from the Internet must be signed by a trusted publisher.\r\n\r\nThe \"Allow all scripts\" policy setting allows all scripts to run.\r\n\r\nIf you disable this policy setting, no scripts are allowed to run.\r\n\r\nNote: This policy setting exists under both \"Computer Configuration\" and \"User Configuration\" in the Local Group Policy Editor. The \"Computer Configuration\" has precedence over \"User Configuration.\"\r\n\r\nIf you disable or do not configure this policy setting, it reverts to a per-machine preference setting; the default if that is not configured is \"No scripts allowed.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enablescripts"],"options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy","displayName":"Execution Policy (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_allsigned","displayName":"Allow only signed scripts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_remotesigned","displayName":"Allow local scripts and remote signed scripts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enablescripts_executionpolicy_unrestricted","displayName":"Allow all scripts","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting","displayName":"Turn on PowerShell Transcription (User)","description":"\r\n This policy setting lets you capture the input and output of Windows PowerShell commands into text-based transcripts.\r\n\r\n If you enable this policy setting, Windows PowerShell will enable transcripting for Windows PowerShell, the Windows PowerShell ISE, and any other\r\n applications that leverage the Windows PowerShell engine. By default, Windows PowerShell will record transcript output to each users' My Documents\r\n directory, with a file name that includes 'PowerShell_transcript', along with the computer name and time started. Enabling this policy is equivalent\r\n to calling the Start-Transcript cmdlet on each Windows PowerShell session.\r\n\r\n If you disable this policy setting, transcripting of PowerShell-based applications is disabled by default, although transcripting can still be enabled\r\n through the Start-Transcript cmdlet.\r\n \r\n If you use the OutputDirectory setting to enable transcript logging to a shared location, be sure to limit access to that directory to prevent users\r\n from viewing the transcripts of other users or computers.\r\n\r\n Note: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enabletranscripting"],"options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader","displayName":"Include invocation headers: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_enableinvocationheader_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enabletranscripting_outputdirectory","displayName":"Transcript output directory (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath","displayName":"Set the default source path for Update-Help (User)","description":"This policy setting allows you to set the default value of the SourcePath parameter on the Update-Help cmdlet.\r\n\r\nIf you enable this policy setting, the Update-Help cmdlet will use the specified value as the default value for the SourcePath parameter. This default value can be overridden by specifying a different value with the SourcePath parameter on the Update-Help cmdlet.\r\n\r\nIf this policy setting is disabled or not configured, this policy setting does not set a default value for the SourcePath parameter of the Update-Help cmdlet.\r\n\r\nNote: This policy setting exists under both Computer Configuration and User Configuration in the Group Policy Editor. The Computer Configuration policy setting takes precedence over the User Configuration policy setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-powershellexecutionpolicy#admx-powershellexecutionpolicy-enableupdatehelpdefaultsourcepath"],"options":[{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_powershellexecutionpolicy_enableupdatehelpdefaultsourcepath_sourcepathforupdatehelp","displayName":"Default Source Path (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_1","displayName":"Prevent restoring previous versions from backups (User)","description":"This policy setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file, in which the previous version is stored on a backup.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a backup.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a backup. If the Restore button is clicked, Windows attempts to restore the file from the backup media.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a local file and stored on the backup.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablebackuprestore-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablebackuprestore_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalpage_1","displayName":"Hide previous versions list for local files (User)","description":"This policy setting lets you hide the list of previous versions of files that are on local disks. The previous versions could come from the on-disk restore points or from backup media.\r\n\r\nIf you enable this policy setting, users cannot list or restore previous versions of files on local disks.\r\n\r\nIf you disable this policy setting, users cannot list and restore previous versions of files on local disks.\r\n\r\nIf you do not configure this policy setting, it defaults to disabled.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablelocalpage-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalpage_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalpage_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_1","displayName":"Prevent restoring local previous versions (User)","description":"This policy setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a local file.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a local file. If the user clicks the Restore button, Windows attempts to restore the file from the local disk.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a local file.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disablelocalrestore-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disablelocalrestore_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremotepage_1","displayName":"Hide previous versions list for remote files (User)","description":"This policy setting lets you hide the list of previous versions of files that are on file shares. The previous versions come from the on-disk restore points on the file share.\r\n\r\nIf you enable this policy setting, users cannot list or restore previous versions of files on file shares.\r\n\r\nIf you disable this policy setting, users can list and restore previous versions of files on file shares.\r\n\r\nIf you do not configure this policy setting, it is disabled by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disableremotepage-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremotepage_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremotepage_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremoterestore_1","displayName":"Prevent restoring remote previous versions (User)","description":"This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a file on a file share.\r\n\r\nIf you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a file on a file share.\r\n\r\nIf you disable this policy setting, the Restore button remains active for a previous version corresponding to a file on a file share. If the user clicks the Restore button, Windows attempts to restore the file from the file share.\r\n\r\nIf you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a file on a file share.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-disableremoterestore-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremoterestore_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_disableremoterestore_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_previousversions_hidebackupentries_1","displayName":"Hide previous versions of files on backup location (User)","description":"This policy setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup media. Previous versions can come from the on-disk restore points or the backup media.\r\n\r\nIf you enable this policy setting, users cannot see any previous versions corresponding to backup copies, and can see only previous versions corresponding to on-disk restore points.\r\n\r\nIf you disable this policy setting, users can see previous versions corresponding to backup copies as well as previous versions corresponding to on-disk restore points.\r\n\r\nIf you do not configure this policy setting, it is disabled by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-previousversions#admx-previousversions-hidebackupentries-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_previousversions_hidebackupentries_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_previousversions_hidebackupentries_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_printing_downlevelbrowse","displayName":"Browse the network to find printers (User)","description":"Allows users to use the Add Printer Wizard to search the network for shared printers.\r\n\r\nIf you enable this setting or do not configure it, when users choose to add a network printer by selecting the \"A network printer, or a printer attached to another computer\" radio button on Add Printer Wizard's page 2, and also check the \"Connect to this printer (or to browse for a printer, select this option and click Next)\" radio button on Add Printer Wizard's page 3, and do not specify a printer name in the adjacent \"Name\" edit box, then Add Printer Wizard displays the list of shared printers on the network and invites to choose a printer from the shown list.\r\n\r\nIf you disable this setting, the network printer browse page is removed from within the Add Printer Wizard, and users cannot search the network but must type a printer name.\r\n\r\nNote: This setting affects the Add Printer Wizard only. It does not prevent users from using other programs to search for shared printers or to connect to network printers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-downlevelbrowse"],"options":[{"id":"user_vendor_msft_policy_config_admx_printing_downlevelbrowse_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_downlevelbrowse_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_printing_intranetprintersurl","displayName":"Browse a common web site to find printers (User)","description":"Adds a link to an Internet or intranet Web page to the Add Printer Wizard.\r\n\r\n You can use this setting to direct users to a Web page from which they can install printers.\r\n\r\n If you enable this setting and type an Internet or intranet address in the text box, the system adds a Browse button to the \"Specify a Printer\" page in the Add Printer Wizard. The Browse button appears beside the \"Connect to a printer on the Internet or on a home or office network\" option. When users click Browse, the system opens an Internet browser and navigates to the specified URL address to display the available printers.\r\n\r\n This setting makes it easy for users to find the printers you want them to add.\r\n\r\n Also, see the \"Custom support URL in the Printers folder's left pane\" and \"Activate Internet printing\" settings in \"Computer Configuration\\Administrative Templates\\Printers.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-intranetprintersurl"],"options":[{"id":"user_vendor_msft_policy_config_admx_printing_intranetprintersurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_intranetprintersurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_printing_intranetprintersurl_intranetprintersurl_link","displayName":"Printers Page URL (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_printing_legacydefaultprintermode","displayName":"Turn off Windows default printer management (User)","description":"This preference allows you to change default printer management.\r\n\r\nIf you enable this setting, Windows will not manage the default printer.\r\n \r\nIf you disable this setting, Windows will manage the default printer.\r\n\r\nIf you do not configure this setting, default printer management will not change. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-legacydefaultprintermode"],"options":[{"id":"user_vendor_msft_policy_config_admx_printing_legacydefaultprintermode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_legacydefaultprintermode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_printing_nodeleteprinter","displayName":"Prevent deletion of printers (User)","description":"If this policy setting is enabled, it prevents users from deleting local and network printers.\r\n\r\n If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action.\r\n\r\n This setting does not prevent users from running other programs to delete a printer.\r\n\r\n If this policy is disabled, or not configured, users can delete printers using the methods described above.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-nodeleteprinter"],"options":[{"id":"user_vendor_msft_policy_config_admx_printing_nodeleteprinter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_nodeleteprinter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintonly","displayName":"Only use Package Point and print (User)","description":"This policy restricts clients computers to use package point and print only.\r\n\r\nIf this setting is enabled, users will only be able to point and print to printers that use package-aware drivers. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers.\r\n\r\nIf this setting is disabled, or not configured, users will not be restricted to package-aware point and print only.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-packagepointandprintonly"],"options":[{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintonly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintonly_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist","displayName":"Package Point and print - Approved servers (User)","description":"Restricts package point and print to approved servers.\r\n\r\nThis policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections, and is completely independent from the \"Point and Print Restrictions\" policy that governs the behavior of non-package point and print connections.\r\n\r\nWindows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails, including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server.\r\n\r\nIf this setting is enabled, users will only be able to package point and print to print servers approved by the network administrator. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers.\r\n\r\nIf this setting is disabled, or not configured, package point and print will not be restricted to specific print servers.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-packagepointandprintserverlist"],"options":[{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_printing_packagepointandprintserverlist_packagepointandprintserverlist_edit","displayName":"Enter fully qualified server names (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_printing_printerdirectorysearchscope","displayName":"Default Active Directory path when searching for printers (User)","description":"Specifies the Active Directory location where searches for printers begin.\r\n\r\n The Add Printer Wizard gives users the option of searching Active Directory for a shared printer.\r\n\r\n If you enable this policy setting, these searches begin at the location you specify in the \"Default Active Directory path\" box. Otherwise, searches begin at the root of Active Directory.\r\n\r\n This setting only provides a starting point for Active Directory searches for printers. It does not restrict user searches through Active Directory.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-printing#admx-printing-printerdirectorysearchscope"],"options":[{"id":"user_vendor_msft_policy_config_admx_printing_printerdirectorysearchscope_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_printing_printerdirectorysearchscope_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_printing_printerdirectorysearchscope_printerdirectorysearchscope_name","displayName":"Default Active Directory path (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_programs_nodefaultprograms","displayName":"Hide \"Set Program Access and Computer Defaults\" page (User)","description":"This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result, users cannot view or change the associated page.\r\n\r\nThe Set Program Access and Computer Defaults page allows administrators to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as specify the programs that are accessible from the Start menu, desktop, and other locations.\r\n\r\nIf this setting is disabled or not configured, the Set Program Access and Defaults button is available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to change program access or defaults.\r\n\r\nThis setting does not prevent the Default Programs icon from appearing on the Start menu.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-nodefaultprograms"],"options":[{"id":"user_vendor_msft_policy_config_admx_programs_nodefaultprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_nodefaultprograms_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_programs_nogetprograms","displayName":"Hide \"Get Programs\" page (User)","description":"Prevents users from viewing or installing published programs from the network. \r\n\r\nThis setting prevents users from accessing the \"Get Programs\" page from the Programs Control Panel in Category View, Programs and Features in Classic View and the \"Install a program from the netowrk\" task. The \"Get Programs\" page lists published programs and provides an easy way to install them.\r\n\r\nPublished programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users of their availability, to recommend their use, or to enable users to install them without having to search for installation files.\r\n\r\nIf this setting is enabled, users cannot view the programs that have been published by the system administrator, and they cannot use the \"Get Programs\" page to install published programs. Enabling this feature does not prevent users from installing programs by using other methods. Users will still be able to view and installed assigned (partially installed) programs that are offered on the desktop or on the Start menu.\r\n\r\nIf this setting is disabled or is not configured, the \"Install a program from the network\" task to the \"Get Programs\" page will be available to all users.\r\n\r\nNote: If the \"Hide Programs Control Panel\" setting is enabled, this setting is ignored.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-nogetprograms"],"options":[{"id":"user_vendor_msft_policy_config_admx_programs_nogetprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_nogetprograms_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_programs_noinstalledupdates","displayName":"Hide \"Installed Updates\" page (User)","description":"This setting prevents users from accessing \"Installed Updates\" page from the \"View installed updates\" task.\r\n\r\n\"Installed Updates\" allows users to view and uninstall updates currently installed on the computer. The updates are often downloaded directly from Windows Update or from various program publishers.\r\n\r\nIf this setting is disabled or not configured, the \"View installed updates\" task and the \"Installed Updates\" page will be available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to install or uninstall programs.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-noinstalledupdates"],"options":[{"id":"user_vendor_msft_policy_config_admx_programs_noinstalledupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_noinstalledupdates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_programs_noprogramsandfeatures","displayName":"Hide \"Programs and Features\" page (User)","description":"This setting prevents users from accessing \"Programs and Features\" to view, uninstall, change, or repair programs that are currently installed on the computer.\r\n\r\nIf this setting is disabled or not configured, \"Programs and Features\" will be available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to view or uninstall programs. It also does not prevent users from linking to related Programs Control Panel Features including Windows Features, Get Programs, or Windows Marketplace.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-noprogramsandfeatures"],"options":[{"id":"user_vendor_msft_policy_config_admx_programs_noprogramsandfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_noprogramsandfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_programs_noprogramscpl","displayName":"Hide the Programs Control Panel (User)","description":"This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View.\r\n \r\nThe Programs Control Panel allows users to uninstall, change, and repair programs, enable and disable Windows Features, set program defaults, view installed updates, and purchase software from Windows Marketplace. Programs published or assigned to the user by the system administrator also appear in the Programs Control Panel.\r\n\r\nIf this setting is disabled or not configured, the Programs Control Panel in Category View and Programs and Features in Classic View will be available to all users.\r\n\r\nWhen enabled, this setting takes precedence over the other settings in this folder.\r\n\r\nThis setting does not prevent users from using other tools and methods to install or uninstall programs.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-noprogramscpl"],"options":[{"id":"user_vendor_msft_policy_config_admx_programs_noprogramscpl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_noprogramscpl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsfeatures","displayName":"Hide \"Windows Features\" (User)","description":"This setting prevents users from accessing the \"Turn Windows features on or off\" task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs. As a result, users cannot view, enable, or disable various Windows features and services.\r\n\r\nIf this setting is disabled or is not configured, the \"Turn Windows features on or off\" task will be available to all users.\r\n\r\nThis setting does not prevent users from using other tools and methods to configure services or enable or disable program components.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-nowindowsfeatures"],"options":[{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsmarketplace","displayName":"Hide \"Windows Marketplace\" (User)","description":"This setting prevents users from access the \"Get new programs from Windows Marketplace\" task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs.\r\n\r\nWindows Marketplace allows users to purchase and/or download various programs to their computer for installation.\r\n\r\nEnabling this feature does not prevent users from navigating to Windows Marketplace using other methods. \r\n\r\nIf this feature is disabled or is not configured, the \"Get new programs from Windows Marketplace\" task link will be available to all users.\r\n\r\nNote: If the \"Hide Programs control Panel\" setting is enabled, this setting is ignored.\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-programs#admx-programs-nowindowsmarketplace"],"options":[{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsmarketplace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_programs_nowindowsmarketplace_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_1","displayName":"Set time (in seconds) to force reboot (User)","description":"This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices.\r\n\r\nIf you enable this policy setting, you can set the number of seconds you want the system to wait until a reboot.\r\n\r\nIf you disable or do not configure this setting, the operating system does not force a reboot.\r\n\r\nNote: If no reboot is forced, the access right does not take effect until the operating system is restarted.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-accessrights-reboottime-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_accessrights_reboottime_1_accessrights_reboottime_seconds","displayName":"Time (in seconds): (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyread_access_1","displayName":"CD and DVD: Deny read access (User)","description":"This policy setting denies read access to the CD and DVD removable storage class.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-cdanddvd-denyread-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_1","displayName":"CD and DVD: Deny write access (User)","description":"This policy setting denies write access to the CD and DVD removable storage class.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-cdanddvd-denywrite-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_cdanddvd_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_1","displayName":"Custom Classes: Deny read access (User)","description":"This policy setting denies read access to custom removable storage classes.\r\n\r\nIf you enable this policy setting, read access is denied to these removable storage classes.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to these removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-customclasses-denyread-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denyread_access_1_customclasses_list","displayName":"GUID for custom removable storage class: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_1","displayName":"Custom Classes: Deny write access (User)","description":"This policy setting denies write access to custom removable storage classes.\r\n\r\nIf you enable this policy setting, write access is denied to these removable storage classes.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to these removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-customclasses-denywrite-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_customclasses_denywrite_access_1_customclasses_list","displayName":"GUID for custom removable storage class: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_1","displayName":"Floppy Drives: Deny read access (User)","description":"This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-floppydrives-denyread-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_1","displayName":"Floppy Drives: Deny write access (User)","description":"This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-floppydrives-denywrite-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_floppydrives_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_1","displayName":"Removable Disks: Deny read access (User)","description":"This policy setting denies read access to removable disks.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removabledisks-denyread-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denywrite_access_1","displayName":"Removable Disks: Deny write access (User)","description":"This policy setting denies write access to removable disks.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n\r\nNote: To require that users write data to BitLocker-protected storage, enable the policy setting \"Deny write access to drives not protected by BitLocker,\" which is located in \"Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption\\Removable Data Drives.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removabledisks-denywrite-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removabledisks_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_1","displayName":"All Removable Storage classes: Deny all access (User)","description":"Configure access to all removable storage classes.\r\n\r\nThis policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class.\r\n\r\nIf you enable this policy setting, no access is allowed to any removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-removablestorageclasses-denyall-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_removablestorageclasses_denyall_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_1","displayName":"Tape Drives: Deny read access (User)","description":"This policy setting denies read access to the Tape Drive removable storage class.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-tapedrives-denyread-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_1","displayName":"Tape Drives: Deny write access (User)","description":"This policy setting denies write access to the Tape Drive removable storage class.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-tapedrives-denywrite-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_tapedrives_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_1","displayName":"WPD Devices: Deny read access (User)","description":"This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.\r\n\r\nIf you enable this policy setting, read access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, read access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-wpddevices-denyread-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denyread_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_1","displayName":"WPD Devices: Deny write access (User)","description":"This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.\r\n\r\nIf you enable this policy setting, write access is denied to this removable storage class.\r\n\r\nIf you disable or do not configure this policy setting, write access is allowed to this removable storage class.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-removablestorage#admx-removablestorage-wpddevices-denywrite-access-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_removablestorage_wpddevices_denywrite_access_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_scripts_run_legacy_logon_script_hidden","displayName":"Run legacy logon scripts hidden (User)","description":"This policy setting hides the instructions in logon scripts written for Windows NT 4.0 and earlier. \r\n\r\nLogon scripts are batch files of instructions that run when the user logs on. By default, Windows 2000 displays the instructions in logon scripts written for Windows NT 4.0 and earlier in a command window as they run, although it does not display logon scripts written for Windows 2000.\r\n\r\nIf you enable this setting, Windows 2000 does not display logon scripts written for Windows NT 4.0 and earlier.\r\n\r\nIf you disable or do not configure this policy setting, Windows 2000 displays login scripts written for Windows NT 4.0 and earlier.\r\n\r\nAlso, see the \"Run Logon Scripts Visible\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-legacy-logon-script-hidden"],"options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_legacy_logon_script_hidden_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_legacy_logon_script_hidden_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_scripts_run_logoff_script_visible","displayName":"Display instructions in logoff scripts as they run (User)","description":"This policy setting displays the instructions in logoff scripts as they run.\r\n\r\nLogoff scripts are batch files of instructions that run when the user logs off. By default, the system does not display the instructions in the logoff script.\r\n\r\nIf you enable this policy setting, the system displays each instruction in the logoff script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users.\r\n\r\nIf you disable or do not configure this policy setting, the instructions are suppressed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-logoff-script-visible"],"options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_logoff_script_visible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_logoff_script_visible_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_sync_1","displayName":"Run logon scripts synchronously (User)","description":"This policy setting directs the system to wait for logon scripts to finish running before it starts the File Explorer interface program and creates the desktop.\r\n\r\nIf you enable this policy setting, File Explorer does not start until the logon scripts have finished running. This policy setting ensures that logon script processing is complete before the user starts working, but it can delay the appearance of the desktop.\r\n\r\nIf you disable or do not configure this policy setting, the logon scripts and File Explorer are not synchronized and can run simultaneously.\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. The policy setting set in Computer Configuration takes precedence over the policy setting set in User Configuration.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-logon-script-sync-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_sync_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_sync_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_visible","displayName":"Display instructions in logon scripts as they run (User)","description":"This policy setting displays the instructions in logon scripts as they run.\r\n\r\nLogon scripts are batch files of instructions that run when the user logs on. By default, the system does not display the instructions in logon scripts.\r\n\r\nIf you enable this policy setting, the system displays each instruction in the logon script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users.\r\n\r\nIf you disable or do not configure this policy setting, the instructions are suppressed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-logon-script-visible"],"options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_visible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_logon_script_visible_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first","displayName":"Run Windows PowerShell scripts first at user logon, logoff (User)","description":"This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during user logon and logoff. By default, Windows PowerShell scripts run after non-Windows PowerShell scripts. \r\n \r\nIf you enable this policy setting, within each applicable Group Policy Object (GPO), PowerShell scripts are run before non-PowerShell scripts during user logon and logoff. \r\n\r\nFor example, assume the following scenario: \r\n\r\nThere are three GPOs (GPO A, GPO B, and GPO C). This policy setting is enabled in GPO A. \r\n\r\nGPO B and GPO C include the following user logon scripts:\r\n\r\nGPO B: B.cmd, B.ps1\r\nGPO C: C.cmd, C.ps1\r\n\r\nAssume also that there are two users, Qin Hong and Tamara Johnston. \r\nFor Qin, GPOs A, B, and C are applied. Therefore, the scripts for GPOs B and C run in the following order for Qin:\r\n\r\nWithin GPO B: B.ps1, B.cmd\r\nWithin GPO C: C.ps1, C.cmd\r\n \r\nFor Tamara, GPOs B and C are applied, but not GPO A. Therefore, the scripts for GPOs B and C run in the following order for Tamara:\r\n\r\nWithin GPO B: B.cmd, B.ps1\r\nWithin GPO C: C.cmd, C.ps1\r\n\r\nNote: This policy setting determines the order in which user logon and logoff scripts are run within all applicable GPOs. You can override this policy setting for specific script types within a specific GPO by configuring the following policy settings for the GPO:\r\n \r\nUser Configuration\\Policies\\Windows Settings\\Scripts (Logon/Logoff)\\Logon\r\nUser Configuration\\Policies\\Windows Settings\\Scripts (Logon/Logoff)\\Logoff\r\n\r\nThis policy setting appears in the Computer Configuration and User Configuration folders. The policy setting set in Computer Configuration takes precedence over the setting set in User Configuration.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-scripts#admx-scripts-run-user-ps-scripts-first"],"options":[{"id":"user_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_scripts_run_user_ps_scripts_first_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocation_1","displayName":"Turn off location (User)","description":"\r\n This policy setting turns off the location feature for this computer.\r\n\r\n If you enable this policy setting, the location feature is turned off, and all programs on this computer are prevented from using location information from the location feature.\r\n\r\n If you disable or do not configure this policy setting, all programs on this computer will not be prevented from using location information from the location feature.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sensors#admx-sensors-disablelocation-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocation_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocation_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocationscripting_1","displayName":"Turn off location scripting (User)","description":"\r\n This policy setting turns off scripting for the location feature.\r\n\r\n If you enable this policy setting, scripts for the location feature will not run.\r\n\r\n If you disable or do not configure this policy setting, all location scripts will run.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sensors#admx-sensors-disablelocationscripting-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocationscripting_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sensors_disablelocationscripting_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_sensors_disablesensors_1","displayName":"Turn off sensors (User)","description":"\r\n This policy setting turns off the sensor feature for this computer.\r\n\r\n If you enable this policy setting, the sensor feature is turned off, and all programs on this computer cannot use the sensor feature.\r\n\r\n If you disable or do not configure this policy setting, all programs on this computer can use the sensor feature.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sensors#admx-sensors-disablesensors-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_sensors_disablesensors_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sensors_disablesensors_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishdfsroots","displayName":"Allow DFS roots to be published (User)","description":"This policy setting determines whether the user can publish DFS roots in Active Directory Domain Services (AD DS).\r\n\r\nIf you enable or do not configure this policy setting, users can use the \"Publish in Active Directory\" option to publish DFS roots as shared folders in AD DS .\r\n\r\nIf you disable this policy setting, users cannot publish DFS roots in AD DS and the \"Publish in Active Directory\" option is disabled. Note: The default is to allow shared folders to be published when this setting is not configured.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sharedfolders#admx-sharedfolders-publishdfsroots"],"options":[{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishdfsroots_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishdfsroots_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishsharedfolders","displayName":"Allow shared folders to be published (User)","description":"This policy setting determines whether the user can publish shared folders in Active Directory Domain Services (AD DS).\r\n\r\nIf you enable or do not configure this policy setting, users can use the \"Publish in Active Directory\" option in the Shared Folders snap-in to publish shared folders in AD DS.\r\n\r\nIf you disable this policy setting, users cannot publish shared folders in AD DS, and the \"Publish in Active Directory\" option is disabled. Note: The default is to allow shared folders to be published when this setting is not configured.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sharedfolders#admx-sharedfolders-publishsharedfolders"],"options":[{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishsharedfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sharedfolders_publishsharedfolders_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_sharing_noinplacesharing","displayName":"Prevent users from sharing files within their profile. (User)","description":"This policy setting specifies whether users can share files within their profile. By default users are allowed to share files within their profile to other users on their network after an administrator opts in the computer. An administrator can opt in the computer by using the sharing wizard to share a file within their profile.\r\n\r\nIf you enable this policy setting, users cannot share files within their profile using the sharing wizard. Also, the sharing wizard cannot create a share at %root%\\users and can only be used to create SMB shares on folders.\r\n\r\nIf you disable or don't configure this policy setting, users can share files out of their user profile after an administrator has opted in the computer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-sharing#admx-sharing-noinplacesharing"],"options":[{"id":"user_vendor_msft_policy_config_admx_sharing_noinplacesharing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_sharing_noinplacesharing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd","displayName":"Prevent access to the command prompt (User)","description":"This policy setting prevents users from running the interactive command prompt, Cmd.exe. This policy setting also determines whether batch files (.cmd and .bat) can run on the computer.\r\n\r\nIf you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.\r\n\r\nIf you disable this policy setting or do not configure it, users can run Cmd.exe and batch files normally.\r\n\r\nNote: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools#admx-shellcommandpromptregedittools-disablecmd"],"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_disablecmdscripts","displayName":"Disable the command prompt script processing also? (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_disablecmdscripts_1","displayName":"Yes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disablecmd_disablecmdscripts_2","displayName":"No","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit","displayName":"Prevent access to registry editing tools (User)","description":"Disables the Windows registry editor Regedit.exe.\r\n\r\nIf you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action.\r\n\r\nIf you disable this policy setting or do not configure it, users can run Regedit.exe normally.\r\n\r\nTo prevent users from using other administrative tools, use the \"Run only specified Windows applications\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools#admx-shellcommandpromptregedittools-disableregedit"],"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_disableregeditmode","displayName":"Disable regedit from running silently? (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_disableregeditmode_2","displayName":"Yes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disableregedit_disableregeditmode_1","displayName":"No","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disallowapps","displayName":"Don't run specified Windows applications (User)","description":"Prevents Windows from running the programs you specify in this policy setting.\r\n\r\nIf you enable this policy setting, users cannot run programs that you add to the list of disallowed applications.\r\n\r\nIf you disable this policy setting or do not configure it, users can run any programs.\r\n\r\nThis policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.\r\n\r\nNote: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting.\r\nNote: To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools#admx-shellcommandpromptregedittools-disallowapps"],"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disallowapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disallowapps_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_disallowapps_disallowappslist","displayName":"List of disallowed applications (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_restrictapps","displayName":"Run only specified Windows applications (User)","description":"Limits the Windows programs that users have permission to run on the computer.\r\n\r\nIf you enable this policy setting, users can only run programs that you add to the list of allowed applications.\r\n\r\nIf you disable this policy setting or do not configure it, users can run all applications.\r\n\r\nThis policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.\r\n\r\nNote: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting.\r\nNote: To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools#admx-shellcommandpromptregedittools-restrictapps"],"options":[{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_restrictapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_restrictapps_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_shellcommandpromptregedittools_restrictapps_restrictapps_restrictappslist","displayName":"List of allowed applications (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_1","displayName":"Do not allow Sound Recorder to run (User)","description":"Specifies whether Sound Recorder can run.\r\n\r\nSound Recorder is a feature of Microsoft Windows Vista that can be used to record sound from an audio input device where the recorded sound is encoded and saved as an audio file.\r\n\r\nIf you enable this policy setting, Sound Recorder will not run.\r\n\r\nIf you disable or do not configure this policy setting, Sound Recorder can be run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-soundrec#admx-soundrec-soundrec-diableapplication-titletext-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_soundrec_soundrec_diableapplication_titletext_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_addsearchinternetlinkinstartmenu","displayName":"Add Search Internet link to Start Menu (User)","description":"\r\nIf you enable this policy, a \"Search the Internet\" link is shown when the user performs a search in the start menu search box. This button launches the default browser with the search terms.\r\n\r\nIf you disable this policy, there will not be a \"Search the Internet\" link when the user performs a search in the start menu search box.\r\n \r\nIf you do not configure this policy (default), there will not be a \"Search the Internet\" link on the start menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-addsearchinternetlinkinstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_addsearchinternetlinkinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_addsearchinternetlinkinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentdocsonexit","displayName":"Clear history of recently opened documents on exit (User)","description":"Clear history of recently opened documents on exit.\r\n\r\nIf you enable this setting, the system deletes shortcuts to recently used document files when the user logs off. As a result, the Recent Items menu on the Start menu is always empty when the user logs on. In addition, recently and frequently used items in the Jump Lists off of programs in the Start Menu and Taskbar will be cleared when the user logs off.\r\n\r\nIf you disable or do not configure this setting, the system retains document shortcuts, and when a user logs on, the Recent Items menu and the Jump Lists appear just as it did when the user logged off.\r\n\r\nNote: The system saves document shortcuts in the user profile in the System-drive\\Users\\User-name\\Recent folder.\r\n\r\nAlso, see the \"Remove Recent Items menu from Start Menu\" and \"Do not keep history of recently opened documents\" policies in this folder. The system only uses this setting when neither of these related settings are selected.\r\n\r\nThis setting does not clear the list of recent files that Windows programs display at the bottom of the File menu. See the \"Do not keep history of recently opened documents\" setting.\r\n\r\nThis policy setting also does not hide document shortcuts displayed in the Open dialog box. See the \"Hide the dropdown list of recent files\" setting.\r\n\r\nThis policy also does not clear items that the user may have pinned to the Jump Lists, or Tasks that the application has provided for their menu. See the \"Do not allow pinning items in Jump Lists\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-clearrecentdocsonexit"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentdocsonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentdocsonexit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentprogfornewuserinstartmenu","displayName":"Clear the recent programs list for new users (User)","description":"If you enable this policy setting, the recent programs list in the start menu will be blank for each new user.\r\n\r\nIf you disable or do not configure this policy, the start menu recent programs list will be pre-populated with programs for each new user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-clearrecentprogfornewuserinstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentprogfornewuserinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_clearrecentprogfornewuserinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_cleartilesonexit","displayName":"Clear tile notifications during log on (User)","description":"If you enable this setting, the system deletes tile notifications when the user logs on. As a result, the Tiles in the start view will always show their default content when the user logs on. In addition, any cached versions of these notifications will be cleared when the user logs on.\r\n\r\nIf you disable or do not configure this setting, the system retains notifications, and when a user logs on, the tiles appear just as they did when the user logged off, including the history of previous notifications for each tile.\r\n\r\nThis setting does not prevent new notifications from appearing. See the \"Turn off Application Notifications\" setting to prevent new notifications.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-cleartilesonexit"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_cleartilesonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_cleartilesonexit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_desktopappsfirstinappsview","displayName":"List desktop apps first in the Apps view (User)","description":"This policy setting allows desktop apps to be listed first in the Apps view in Start.\r\n\r\nIf you enable this policy setting, desktop apps would be listed first when the apps are sorted by category in the Apps view. The other sorting options would continue to be available and the user could choose to change their default sorting options.\r\n\r\nIf you disable or don't configure this policy setting, the desktop apps won't be listed first when the apps are sorted by category, and the user can configure this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-desktopappsfirstinappsview"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_desktopappsfirstinappsview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_desktopappsfirstinappsview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_disableglobalsearchonappsview","displayName":"Search just apps from the Apps view (User)","description":"This policy setting prevents the user from searching apps, files, settings (and the web if enabled) when the user searches from the Apps view.\r\n\r\nThis policy setting is only applied when the Apps view is set as the default view for Start.\r\n\r\nIf you enable this policy setting, searching from the Apps view will only search the list of installed apps.\r\n\r\nIf you disable or don’t configure this policy setting, the user can configure this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-disableglobalsearchonappsview"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_disableglobalsearchonappsview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_disableglobalsearchonappsview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_forcestartmenulogoff","displayName":"Add Logoff to the Start Menu (User)","description":"This policy only applies to the classic version of the start menu and does not affect the new style start menu.\r\n\r\nAdds the \"Log Off \" item to the Start menu and prevents users from removing it.\r\n\r\nIf you enable this setting, the Log Off item appears in the Start menu. This setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot remove the Log Off item from the Start Menu.\r\n\r\nIf you disable this setting or do not configure it, users can use the Display Logoff item to add and remove the Log Off item.\r\n\r\nThis setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del.\r\n\r\nNote: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab, and then, in the Start Menu Settings box, click Display Logoff.\r\n\r\nAlso, see \"Remove Logoff\" in User Configuration\\Administrative Templates\\System\\Logon/Logoff.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-forcestartmenulogoff"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_forcestartmenulogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_forcestartmenulogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_gotodesktoponsignin","displayName":"Go to the desktop instead of Start when signing in (User)","description":"This policy setting allows users to go to the desktop instead of the Start screen when they sign in.\r\n\r\nIf you enable this policy setting, users will always go to the desktop when they sign in.\r\n\r\nIf you disable this policy setting, users will always go to the Start screen when they sign in.\r\n\r\nIf you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-gotodesktoponsignin"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_gotodesktoponsignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_gotodesktoponsignin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_greymsiads","displayName":"Gray unavailable Windows Installer programs Start Menu shortcuts (User)","description":"Displays Start menu shortcuts to partially installed programs in gray text.\r\n\r\nThis setting makes it easier for users to distinguish between programs that are fully installed and those that are only partially installed.\r\n\r\nPartially installed programs include those that a system administrator assigns using Windows Installer and those that users have configured for full installation upon first use.\r\n\r\nIf you disable this setting or do not configure it, all Start menu shortcuts appear as black text.\r\n\r\nNote: Enabling this setting can make the Start menu slow to open.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-greymsiads"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_greymsiads_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_greymsiads_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_intellimenus","displayName":"Turn off personalized menus (User)","description":"Disables personalized menus.\r\n\r\nWindows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been used recently. Users can display the hidden items by clicking an arrow to extend the menu.\r\n\r\nIf you enable this setting, the system does not personalize menus. All menu items appear and remain in standard order. Also, this setting removes the \"Use Personalized Menus\" option so users do not try to change the setting while a setting is in effect.\r\n\r\nNote: Personalized menus require user tracking. If you enable the \"Turn off user tracking\" setting, the system disables user tracking and personalized menus and ignores this setting.\r\n\r\nTip: To Turn off personalized menus without specifying a setting, click Start, click Settings, click Taskbar and Start Menu, and then, on the General tab, clear the \"Use Personalized Menus\" option.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-intellimenus"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_intellimenus_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_intellimenus_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_locktaskbar","displayName":"Lock the Taskbar (User)","description":"This setting affects the taskbar, which is used to switch between running applications.\r\n\r\nThe taskbar includes the Start button, list of currently running tasks, and the notification area. By default, the taskbar is located at the bottom of the screen, but it can be dragged to any side of the screen. When it is locked, it cannot be moved or resized.\r\n\r\nIf you enable this setting, it prevents the user from moving or resizing the taskbar. While the taskbar is locked, auto-hide and other taskbar options are still available in Taskbar properties.\r\n\r\nIf you disable this setting or do not configure it, the user can configure the taskbar position.\r\n\r\nNote: Enabling this setting also locks the QuickLaunch bar and any other toolbars that the user has on their taskbar. The toolbar's position is locked, and the user cannot show and hide various toolbars using the taskbar context menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-locktaskbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_locktaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_locktaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_memcheckboxinrundlg","displayName":"Add \"Run in Separate Memory Space\" check box to Run dialog box (User)","description":"Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process.\r\n\r\nAll DOS and 16-bit programs run on Windows 2000 Professional and Windows XP Professional in the Windows Virtual DOS Machine program. VDM simulates a 16-bit environment, complete with the DLLs required by 16-bit programs. By default, all 16-bit programs run as threads in a single, shared VDM process. As such, they share the memory space allocated to the VDM process and cannot run simultaneously.\r\n\r\nEnabling this setting adds a check box to the Run dialog box, giving users the option of running a 16-bit program in its own dedicated NTVDM process. The additional check box is enabled only when a user enters a 16-bit program in the Run dialog box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-memcheckboxinrundlg"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_memcheckboxinrundlg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_memcheckboxinrundlg_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_noautotraynotify","displayName":"Turn off notification area cleanup (User)","description":"This setting affects the notification area, also called the \"system tray.\"\r\n\r\nThe notification area is located in the task bar, generally at the bottom of the screen, and it includes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup << icon can be referred to as the \"notification chevron.\"\r\n\r\nIf you enable this setting, the system notification area expands to show all of the notifications that use this area.\r\n\r\nIf you disable this setting, the system notification area will always collapse notifications.\r\n\r\nIf you do not configure it, the user can choose if they want notifications collapsed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noautotraynotify"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noautotraynotify_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noautotraynotify_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_noballoontip","displayName":"Remove Balloon Tips on Start Menu items (User)","description":"Hides pop-up text on the Start menu and in the notification area.\r\n\r\nWhen you hold the cursor over an item on the Start menu or in the notification area, the system displays pop-up text providing additional information about the object.\r\n\r\nIf you enable this setting, some of this pop-up text is not displayed. The pop-up text affected by this setting includes \"Click here to begin\" on the Start button, \"Where have all my programs gone\" on the Start menu, and \"Where have my icons gone\" in the notification area.\r\n\r\nIf you disable this setting or do not configure it, all pop-up text is displayed on the Start menu and in the notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noballoontip"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noballoontip_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noballoontip_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nochangestartmenu","displayName":"Prevent users from customizing their Start Screen (User)","description":"This policy setting allows you to prevent users from changing their Start screen layout.\r\n\r\nIf you enable this setting, you will prevent a user from selecting an app, resizing a tile, pinning/unpinning a tile or a secondary tile, entering the customize mode and rearranging tiles within Start and Apps.\r\n\r\nIf you disable or do not configure this setting, you will allow a user to select an app, resize a tile, pin/unpin a tile or a secondary tile, enter the customize mode and rearrange tiles within Start and Apps.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nochangestartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nochangestartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nochangestartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_noclose","displayName":"Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands (User)","description":"This policy setting prevents users from performing the following commands from the Start menu or Windows Security screen: Shut Down, Restart, Sleep, and Hibernate. This policy setting does not prevent users from running Windows-based programs that perform these functions.\r\n\r\nIf you enable this policy setting, the Power button and the Shut Down, Restart, Sleep, and Hibernate commands are removed from the Start menu. The Power button is also removed from the Windows Security screen, which appears when you press CTRL+ALT+DELETE.\r\n\r\nIf you disable or do not configure this policy setting, the Power button and the Shut Down, Restart, Sleep, and Hibernate commands are available on the Start menu. The Power button on the Windows Security screen is also available.\r\n\r\nNote: Third-party programs certified as compatible with Microsoft Windows Vista, Windows XP SP2, Windows XP SP1, Windows XP, or Windows 2000 Professional are required to support this policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noclose"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noclose_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noclose_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nocommongroups","displayName":"Remove common program groups from Start Menu (User)","description":"Removes items in the All Users profile from the Programs menu on the Start menu.\r\n\r\nBy default, the Programs menu contains items from the All Users profile and items from the user's profile. If you enable this setting, only items in the user's profile appear in the Programs menu.\r\n\r\nTip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\\Microsoft\\Windows\\Start Menu\\Programs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nocommongroups"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nocommongroups_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nocommongroups_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nofavoritesmenu","displayName":"Remove Favorites menu from Start Menu (User)","description":"Prevents users from adding the Favorites menu to the Start menu or classic Start menu.\r\n\r\nIf you enable this setting, the Display Favorites item does not appear in the Advanced Start menu options box.\r\n\r\nIf you disable or do not configure this setting, the Display Favorite item is available.\r\n\r\nNote:The Favorities menu does not appear on the Start menu by default. To display the Favorites menu, right-click Start, click Properties, and then click Customize. If you are using Start menu, click the Advanced tab, and then, under Start menu items, click the Favorites menu. If you are using the classic Start menu, click Display Favorites under Advanced Start menu options.\r\n\r\nNote:The items that appear in the Favorites menu when you install Windows are preconfigured by the system to appeal to most users. However, users can add and remove items from this menu, and system administrators can create a customized Favorites menu for a user group.\r\n\r\nNote:This setting only affects the Start menu. The Favorites item still appears in File Explorer and in Internet Explorer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nofavoritesmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nofavoritesmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nofavoritesmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nofind","displayName":"Remove Search link from Start Menu (User)","description":"This policy setting allows you to remove the Search link from the Start menu, and disables some File Explorer search elements. Note that this does not remove the search box from the new style Start menu.\r\n\r\nIf you enable this policy setting, the Search item is removed from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F.\r\n\r\nNote: Enabling this policy setting also prevents the user from using the F3 key.\r\n\r\nIn File Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses Ctrl+F. Also, Search does not appear in the context menu when you right-click an icon representing a drive or a folder.\r\n\r\nThis policy setting affects the specified user interface elements only. It does not affect Internet Explorer and does not prevent the user from using other methods to search.\r\n\r\nIf you disable or do not configure this policy setting, the Search link is available from the Start menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nofind"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nofind_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nofind_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nogamesfolderonstartmenu","displayName":"Remove Games link from Start Menu (User)","description":"If you enable this policy the start menu will not show a link to the Games folder.\r\n\r\nIf you disable or do not configure this policy, the start menu will show a link to the Games folder, unless the user chooses to remove it in the start menu control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nogamesfolderonstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nogamesfolderonstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nogamesfolderonstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nohelp","displayName":"Remove Help menu from Start Menu (User)","description":"This policy setting allows you to remove the Help command from the Start menu.\r\n\r\nIf you enable this policy setting, the Help command is removed from the Start menu.\r\n\r\nIf you disable or do not configure this policy setting, the Help command is available from the Start menu.\r\n\r\nThis policy setting only affects the Start menu. It does not remove the Help menu from File Explorer and does not prevent users from running Help.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nohelp"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nohelp_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nohelp_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_noinstrumentation","displayName":"Turn off user tracking (User)","description":"This policy setting allows you to turn off user tracking.\r\n\r\nIf you enable this policy setting, the system does not track the programs that the user runs, and does not display frequently used programs in the Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, the system tracks the programs that the user runs. The system uses this information to customize Windows features, such as showing frequently used programs in the Start Menu.\r\n\r\nAlso, see these related policy settings: \"Remove frequent programs liist from the Start Menu\" and \"Turn off personalized menus\".\r\n\r\nThis policy setting does not prevent users from pinning programs to the Start Menu or Taskbar. See the \"Remove pinned programs list from the Start Menu\" and \"Do not allow pinning programs to the Taskbar\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noinstrumentation"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noinstrumentation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noinstrumentation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist","displayName":"Remove All Programs list from the Start menu (User)","description":"If you enable this setting, the Start Menu will either collapse or remove the all apps list from the Start menu.\r\n\r\nSelecting \"Collapse\" will not display the app list next to the pinned tiles in Start. An \"All apps\" button will be displayed on Start to open the all apps list. This is equivalent to setting the \"Show app list in Start\" in Settings to Off.\r\n\r\nSelecting \"Collapse and disable setting\" will do the same as the collapse option and disable the \"Show app list in Start menu\" in Settings, so users cannot turn it to On.\r\n\r\nSelecting \"Remove and disable setting\" will remove the all apps list from Start and disable the \"Show app list in Start menu\" in Settings, so users cannot turn it to On. Select this option for compatibility with earlier versions of Windows.\r\n\r\nIf you disable or do not configure this setting, the all apps list will be visible by default, and the user can change \"Show app list in Start\" in Settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nomoreprogramslist"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown","displayName":"Choose one of the following actions (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_0","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_3","displayName":"Collapse","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_2","displayName":"Collapse and disable setting","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nomoreprogramslist_nomoreprogramslistdropdown_1","displayName":"Remove and disable setting","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nonetanddialupconnect","displayName":"Remove Network Connections from Start Menu (User)","description":"This policy setting allows you to remove Network Connections from the Start Menu.\r\n\r\nIf you enable this policy setting, users are prevented from running Network Connections.\r\n\r\nEnabling this policy setting prevents the Network Connections folder from opening. This policy setting also removes Network Connections from Settings on the Start menu.\r\n\r\nNetwork Connections still appears in Control Panel and in File Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.\r\n\r\nIf you disable or do not configure this policy setting, Network Connections is available from the Start Menu.\r\n\r\nAlso, see the \"Disable programs on Settings menu\" and \"Disable Control Panel\" policy settings and the policy settings in the Network Connections folder (Computer Configuration and User Configuration\\Administrative Templates\\Network\\Network Connections).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nonetanddialupconnect"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nonetanddialupconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nonetanddialupconnect_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nopinnedprograms","displayName":"Remove pinned programs list from the Start Menu (User)","description":"If you enable this setting, the \"Pinned Programs\" list is removed from the Start menu. Users cannot pin programs to the Start menu. \r\n\r\nIn Windows XP and Windows Vista, the Internet and email checkboxes are removed from the 'Customize Start Menu' dialog. \r\n\r\nIf you disable this setting or do not configure it, the \"Pinned Programs\" list remains on the Start menu. Users can pin and unpin programs in the Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nopinnedprograms"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nopinnedprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nopinnedprograms_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_norecentdocsmenu","displayName":"Remove Recent Items menu from Start Menu (User)","description":"Removes the Recent Items menu from the Start menu. Removes the Documents menu from the classic Start menu.\r\n\r\nThe Recent Items menu contains links to the non-program files that users have most recently opened. It appears so that users can easily reopen their documents.\r\n\r\nIf you enable this setting, the system saves document shortcuts but does not display the Recent Items menu in the Start Menu, and users cannot turn the menu on.\r\n\r\nIf you later disable the setting, so that the Recent Items menu appears in the Start Menu, the document shortcuts saved before the setting was enabled and while it was in effect appear in the Recent Items menu.\r\n\r\nWhen the setting is disabled, the Recent Items menu appears in the Start Menu, and users cannot remove it.\r\n\r\nIf the setting is not configured, users can turn the Recent Items menu on and off.\r\n\r\nNote: This setting does not prevent Windows programs from displaying shortcuts to recently opened documents. See the \"Do not keep history of recently opened documents\" setting.\r\n\r\nThis setting also does not hide document shortcuts displayed in the Open dialog box. See the \"Hide the dropdown list of recent files\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-norecentdocsmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_norecentdocsmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_norecentdocsmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvesearch","displayName":"Do not use the search-based method when resolving shell shortcuts (User)","description":"This policy setting prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut.\r\n\r\nIf you enable this policy setting, the system does not conduct the final drive search. It just displays a message explaining that the file is not found.\r\n\r\nIf you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target's file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.\r\n\r\nNote: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.\r\n\r\nAlso, see the \"Do not track Shell shortcuts during roaming\" and the \"Do not use the tracking-based method when resolving shell shortcuts\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noresolvesearch"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvesearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvetrack","displayName":"Do not use the tracking-based method when resolving shell shortcuts (User)","description":"This policy setting prevents the system from using NTFS tracking features to resolve a shortcut.\r\n\r\nIf you enable this policy setting, the system does not try to locate the file by using its file ID. It skips this step and begins a comprehensive search of the drive specified in the target path.\r\n\r\nIf you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target's file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.\r\n\r\nNote: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.\r\n\r\nAlso, see the \"Do not track Shell shortcuts during roaming\" and the \"Do not use the search-based method when resolving shell shortcuts\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-noresolvetrack"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvetrack_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_noresolvetrack_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_norun","displayName":"Remove Run menu from Start Menu (User)","description":"Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.\r\n\r\nIf you enable this setting, the following changes occur:\r\n\r\n(1) The Run command is removed from the Start menu.\r\n\r\n(2) The New Task (Run) command is removed from Task Manager.\r\n\r\n(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:\r\n\r\n--- A UNC path: \\\\\\ \r\n\r\n---Accessing local drives: e.g., C:\r\n\r\n--- Accessing local folders: e.g., \\temp>\r\n\r\nAlso, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.\r\n\r\nIf you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.\r\n\r\n\r\n\r\nNote:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.\r\n\r\nNote: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-norun"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_norun_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_norun_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomminstartmenu","displayName":"Do not search communications (User)","description":"If you enable this policy the start menu search box will not search for communications.\r\n\r\nIf you disable or do not configure this policy, the start menu will search for communications, unless the user chooses not to in the start menu control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchcomminstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomminstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomminstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomputerlinkinstartmenu","displayName":"Remove Search Computer link (User)","description":"If you enable this policy, the \"See all results\" link will not be shown when the user performs a search in the start menu search box.\r\n\r\nIf you disable or do not configure this policy, the \"See all results\" link will be shown when the user performs a search in the start menu search box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchcomputerlinkinstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomputerlinkinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchcomputerlinkinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearcheverywherelinkinstartmenu","displayName":"Remove See More Results / Search Everywhere link (User)","description":"\r\n If you enable this policy, a \"See more results\" / \"Search Everywhere\" link will not be shown when the user performs a search in the start menu search box.\r\n\r\nIf you disable or do not configure this policy, a \"See more results\" link will be shown when the user performs a search in the start menu search box. If a 3rd party protocol handler is installed, a \"Search Everywhere\" link will be shown instead of the \"See more results\" link.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearcheverywherelinkinstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearcheverywherelinkinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearcheverywherelinkinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchfilesinstartmenu","displayName":"Do not search for files (User)","description":"If you enable this policy setting the Start menu search box will not search for files.\r\n\r\nIf you disable or do not configure this policy setting, the Start menu will search for files, unless the user chooses not to do so directly in Control Panel. If you enable this policy, a \"See more results\" / \"Search Everywhere\" link will not be shown when the user performs a search in the start menu search box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchfilesinstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchfilesinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchfilesinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchinternetinstartmenu","displayName":"Do not search Internet (User)","description":"If you enable this policy the start menu search box will not search for internet history or favorites.\r\n\r\nIf you disable or do not configure this policy, the start menu will search for for internet history or favorites, unless the user chooses not to in the start menu control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchinternetinstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchinternetinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchinternetinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchprogramsinstartmenu","displayName":"Do not search programs and Control Panel items (User)","description":"If you enable this policy setting the Start menu search box will not search for programs or Control Panel items.\r\n\r\nIf you disable or do not configure this policy setting, the Start menu search box will search for programs and Control Panel items, unless the user chooses not to do so directly in Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosearchprogramsinstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchprogramsinstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosearchprogramsinstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosetfolders","displayName":"Remove programs on Settings menu (User)","description":"This policy setting allows you to remove programs on Settings menu.\r\n\r\nIf you enable this policy setting, the Control Panel, Printers, and Network and Connection folders are removed from Settings on the Start menu, and from Computer and File Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.\r\n\r\nHowever, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking Computer to start System.\r\n\r\nIf you disable or do not configure this policy setting, the Control Panel, Printers, and Network and Connection folders from Settings are available on the Start menu, and from Computer and File Explorer.\r\n\r\nAlso, see the \"Disable Control Panel,\" \"Disable Display in Control Panel,\" and \"Remove Network Connections from Start Menu\" policy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosetfolders"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosetfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosetfolders_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosettaskbar","displayName":"Prevent changes to Taskbar and Start Menu Settings (User)","description":"This policy setting allows you to prevent changes to Taskbar and Start Menu Settings.\r\n\r\nIf you enable this policy setting, The user will be prevented from opening the Taskbar Properties dialog box.\r\n\r\nIf the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action.\r\n\r\nIf you disable or do not configure this policy setting, the Taskbar and Start Menu items are available from Settings on the Start menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosettaskbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosettaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosettaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmconfigureprograms","displayName":"Remove Default Programs link from the Start menu. (User)","description":"This policy setting allows you to remove the Default Programs link from the Start menu.\r\n\r\nIf you enable this policy setting, the Default Programs link is removed from the Start menu.\r\n\r\nClicking the Default Programs link from the Start menu opens the Default Programs control panel and provides administrators the ability to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.\r\n\r\nIf you disable or do not configure this policy setting, the Default Programs link is available from the Start menu.\r\n\r\nNote: This policy setting does not prevent the Set Default Programs for This Computer option from appearing in the Default Programs control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmconfigureprograms"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmconfigureprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmconfigureprograms_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmydocuments","displayName":"Remove Documents icon from Start Menu (User)","description":"This policy setting allows you to remove the Documents icon from the Start menu and its submenus.\r\n\r\nIf you enable this policy setting, the Documents icon is removed from the Start menu and its submenus. Enabling this policy setting only removes the icon. It does not prevent the user from using other methods to gain access to the contents of the Documents folder.\r\n\r\nNote: To make changes to this policy setting effective, you must log off and then log on.\r\n\r\nIf you disable or do not configure this policy setting, he Documents icon is available from the Start menu.\r\n\r\nAlso, see the \"Remove Documents icon on the desktop\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmmydocuments"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmydocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmydocuments_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmymusic","displayName":"Remove Music icon from Start Menu (User)","description":"This policy setting allows you to remove the Music icon from Start Menu.\r\n\r\nIf you enable this policy setting, the Music icon is no longer available from Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, the Music icon is available from Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmmymusic"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmymusic_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmymusic_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmynetworkplaces","displayName":"Remove Network icon from Start Menu (User)","description":"This policy setting allows you to remove the Network icon from Start Menu.\r\n\r\nIf you enable this policy setting, the Network icon is no longer available from Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, the Network icon is available from Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmmynetworkplaces"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmynetworkplaces_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmynetworkplaces_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmypictures","displayName":"Remove Pictures icon from Start Menu (User)","description":"This policy setting allows you to remove the Pictures icon from Start Menu.\r\n\r\nIf you enable this policy setting, the Pictures icon is no longer available from Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, the Pictures icon is available from Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nosmmypictures"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmypictures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nosmmypictures_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenudownload","displayName":"Remove Downloads link from Start Menu (User)","description":"This policy setting allows you to remove the Downloads link from the Start Menu.\r\n\r\nIf you enable this policy setting, the Start Menu does not show a link to the Downloads folder.\r\n\r\nIf you disable or do not configure this policy setting, the Downloads link is available from the Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartmenudownload"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenudownload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenudownload_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuhomegroup","displayName":"Remove Homegroup link from Start Menu (User)","description":"If you enable this policy the Start menu will not show a link to Homegroup. It also removes the homegroup item from the Start Menu options. As a result, users cannot add the homegroup link to the Start Menu.\r\n\r\n If you disable or do not configure this policy, users can use the Start Menu options to add or remove the homegroup link from the Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartmenuhomegroup"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuhomegroup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuhomegroup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenurecordedtv","displayName":"Remove Recorded TV link from Start Menu (User)","description":"This policy setting allows you to remove the Recorded TV link from the Start Menu.\r\n\r\nIf you enable this policy setting, the Start Menu does not show a link to the Recorded TV library.\r\n\r\nIf you disable or do not configure this policy setting, the Recorded TV link is available from the Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartmenurecordedtv"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenurecordedtv_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenurecordedtv_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenusubfolders","displayName":"Remove user's folders from the Start Menu (User)","description":"Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.\r\n\r\nThis setting is designed for use with redirected folders. Redirected folders appear on the main (bottom) section of the Start menu. However, the original, user-specific version of the folder still appears on the top section of the Start menu. Because the appearance of two folders with the same name might confuse users, you can use this setting to hide user-specific folders.\r\n\r\nNote that this setting hides all user-specific folders, not just those associated with redirected folders.\r\n\r\nIf you enable this setting, no folders appear on the top section of the Start menu. If users add folders to the Start Menu directory in their user profiles, the folders appear in the directory but not on the Start menu.\r\n\r\nIf you disable this setting or do not configured it, Windows 2000 Professional and Windows XP Professional display folders on both sections of the Start menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartmenusubfolders"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenusubfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenusubfolders_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuvideos","displayName":"Remove Videos link from Start Menu (User)","description":"This policy setting allows you to remove the Videos link from the Start Menu.\r\n\r\nIf you enable this policy setting, the Start Menu does not show a link to the Videos library.\r\n\r\nIf you disable or do not configure this policy setting, the Videos link is available from the Start Menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartmenuvideos"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuvideos_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartmenuvideos_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartpage","displayName":"Force classic Start Menu (User)","description":"This setting affects the presentation of the Start menu.\r\n\r\nThe classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the new Start menu consolidates common items onto one menu. When the classic Start menu is used, the following icons are placed on the desktop: Documents, Pictures, Music, Computer, and Network. The new Start menu starts them directly.\r\n\r\nIf you enable this setting, the Start menu displays the classic Start menu in the Windows 2000 style and displays the standard desktop icons.\r\n\r\nIf you disable this setting, the Start menu only displays in the new style, meaning the desktop icons are now on the Start page.\r\n\r\nIf you do not configure this setting, the default is the new style, and the user can change the view.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nostartpage"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nostartpage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskbarclock","displayName":"Remove Clock from the system notification area (User)","description":"Prevents the clock in the system notification area from being displayed.\r\n\r\nIf you enable this setting, the clock will not be displayed in the system notification area.\r\n\r\nIf you disable or do not configure this setting, the default behavior of the clock appearing in the notification area will occur.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notaskbarclock"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskbarclock_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskbarclock_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskgrouping","displayName":"Prevent grouping of taskbar items (User)","description":"This setting affects the taskbar buttons used to switch between running programs.\r\n\r\nTaskbar grouping consolidates similar applications when there is no room on the taskbar. It kicks in when the user's taskbar is full.\r\n\r\nIf you enable this setting, it prevents the taskbar from grouping items that share the same program name. By default, this setting is always enabled.\r\n\r\nIf you disable or do not configure it, items on the taskbar that share the same program are grouped together. The users have the option to disable grouping if they choose.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notaskgrouping"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskgrouping_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notaskgrouping_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_notoolbarsontaskbar","displayName":"Do not display any custom toolbars in the taskbar (User)","description":"This setting affects the taskbar.\r\n\r\nThe taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system clock. Toolbars include Quick Launch, Address, Links, Desktop, and other custom toolbars created by the user or by an application.\r\n\r\nIf this setting is enabled, the taskbar does not display any custom toolbars, and the user cannot add any custom toolbars to the taskbar. Moreover, the \"Toolbars\" menu command and submenu are removed from the context menu. The taskbar displays only the Start button, taskbar buttons, the notification area, and the system clock.\r\n\r\nIf this setting is disabled or is not configured, the taskbar displays all toolbars. Users can add or remove custom toolbars, and the \"Toolbars\" command appears in the context menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notoolbarsontaskbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notoolbarsontaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notoolbarsontaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_notraycontextmenu","displayName":"Remove access to the context menus for the taskbar (User)","description":"This policy setting allows you to remove access to the context menus for the taskbar.\r\n\r\nIf you enable this policy setting, the menus that appear when you right-click the taskbar and items on the taskbar are hidden, such as the Start button, the clock, and the taskbar buttons.\r\n\r\nIf you disable or do not configure this policy setting, the context menus for the taskbar are available.\r\n\r\nThis policy setting does not prevent users from using other methods to issue the commands that appear on these menus.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notraycontextmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notraycontextmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notraycontextmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_notrayitemsdisplay","displayName":"Hide the notification area (User)","description":"This setting affects the notification area (previously called the \"system tray\") on the taskbar.\r\n\r\nDescription: The notification area is located at the far right end of the task bar and includes the icons for current notifications and the system clock.\r\n\r\nIf this setting is enabled, the user’s entire notification area, including the notification icons, is hidden. The taskbar displays only the Start button, taskbar buttons, custom toolbars (if any), and the system clock.\r\n\r\nIf this setting is disabled or is not configured, the notification area is shown in the user's taskbar.\r\n\r\nNote: Enabling this setting overrides the \"Turn off notification area cleanup\" setting, because if the notification area is hidden, there is no need to clean up the icons.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-notrayitemsdisplay"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_notrayitemsdisplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_notrayitemsdisplay_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nouninstallfromstart","displayName":"Prevent users from uninstalling applications from Start (User)","description":"If you enable this setting, users cannot uninstall apps from Start.\r\n\r\nIf you disable this setting or do not configure it, users can access the uninstall command from Start\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nouninstallfromstart"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nouninstallfromstart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nouninstallfromstart_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nouserfolderonstartmenu","displayName":"Remove user folder link from Start Menu (User)","description":"If you enable this policy the start menu will not show a link to the user's storage folder.\r\n\r\nIf you disable or do not configure this policy, the start menu will display a link, unless the user chooses to remove it in the start menu control panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nouserfolderonstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nouserfolderonstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nouserfolderonstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nousernameonstartmenu","displayName":"Remove user name from Start Menu (User)","description":"This policy setting allows you to remove the user name label from the Start Menu in Windows XP and Windows Server 2003.\r\n\r\nIf you enable this policy setting, the user name label is removed from the Start Menu in Windows XP and Windows Server 2003.\r\n\r\nTo remove the user name folder on Windows Vista, set the \"Remove user folder link from Start Menu\" policy setting.\r\n\r\nIf you disable or do not configure this policy setting, the user name label appears on the Start Menu in Windows XP and Windows Server 2003.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nousernameonstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nousernameonstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nousernameonstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_nowindowsupdate","displayName":"Remove links and access to Windows Update (User)","description":"This policy setting allows you to remove links and access to Windows Update.\r\n\r\nIf you enable this policy setting, users are prevented from connecting to the Windows Update Web site.\r\n\r\nEnabling this policy setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the policy setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.\r\n\r\nWindows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.\r\n\r\nIf you disable or do not configure this policy setting, the Windows Update hyperlink is available from the Start menu and from the Tools menu in Internet Explorer.\r\n\r\nAlso, see the \"Hide the \"Add programs from Microsoft\" option\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-nowindowsupdate"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_nowindowsupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_nowindowsupdate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction","displayName":"Change Start Menu power button (User)","description":"Set the default action of the power button on the Start menu.\r\n\r\nIf you enable this setting, the Start Menu will set the power button to the chosen action, and not let the user change this action.\r\n\r\nIf you set the button to either Sleep or Hibernate, and that state is not supported on a computer, then the button will fall back to Shut Down.\r\n\r\nIf you disable or do not configure this setting, the Start Menu power button will be set to Shut Down by default, and the user can change this setting to another action.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-powerbuttonaction"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown","displayName":"Choose one of the following actions (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_2","displayName":"Shut Down","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_16","displayName":"Sleep","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_1","displayName":"Log off","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_512","displayName":"Lock","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_4","displayName":"Restart","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_256","displayName":"Switch User","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_powerbuttonaction_powerbuttonactiondropdown_64","displayName":"Hibernate","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_quicklaunchenabled","displayName":"Show QuickLaunch on Taskbar (User)","description":"This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar.\r\n\r\nIf you enable this policy setting, the QuickLaunch bar will be visible and cannot be turned off.\r\n\r\nIf you disable this policy setting, the QuickLaunch bar will be hidden and cannot be turned on.\r\n\r\nIf you do not configure this policy setting, then users will be able to turn the QuickLaunch bar on and off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-quicklaunchenabled"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_quicklaunchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_quicklaunchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_removeundockpcbutton","displayName":"Remove the \"Undock PC\" button from the Start Menu (User)","description":"If you enable this setting, the \"Undock PC\" button is removed from the simple Start Menu, and your PC cannot be undocked.\r\n\r\nIf you disable this setting or do not configure it, the \"Undock PC\" button remains on the simple Start menu, and your PC can be undocked.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-removeundockpcbutton"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_removeundockpcbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_removeundockpcbutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_showappsviewonstart","displayName":"Show the Apps view automatically when the user goes to Start (User)","description":"This policy setting allows the Apps view to be opened by default when the user goes to Start.\r\n\r\nIf you enable this policy setting, the Apps view will appear whenever the user goes to Start. Users will still be able to switch between the Apps view and the Start screen.\r\n\r\nIf you disable or don’t configure this policy setting, the Start screen will appear by default whenever the user goes to Start, and the user will be able to switch between the Apps view and the Start screen. Also, the user will be able to configure this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-showappsviewonstart"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_showappsviewonstart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_showappsviewonstart_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_showrunasdifferentuserinstart","displayName":"Show \"Run as different user\" command on Start (User)","description":"This policy setting shows or hides the \"Run as different user\" command on the Start application bar.\r\n\r\nIf you enable this setting, users can access the \"Run as different user\" command from Start for applications which support this functionality.\r\n\r\nIf you disable this setting or do not configure it, users cannot access the \"Run as different user\" command from Start for any applications.\r\n\r\nNote: This setting does not prevent users from using other methods, such as the shift right-click menu on application's jumplists in the taskbar to issue the \"Run as different user\" command.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-showrunasdifferentuserinstart"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_showrunasdifferentuserinstart_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_showrunasdifferentuserinstart_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_showruninstartmenu","displayName":"Add the Run command to the Start Menu (User)","description":"If you enable this setting, the Run command is added to the Start menu. If you disable or do not configure this setting, the Run command is not visible on the Start menu by default, but it can be added from the Taskbar and Start menu properties. If the Remove Run link from Start Menu policy is set, the Add the Run command to the Start menu policy has no effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-showruninstartmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_showruninstartmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_showruninstartmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_showstartondisplaywithforegroundonwinkey","displayName":"Show Start on the display the user is using when they press the Windows logo key (User)","description":"This policy setting allows the Start screen to appear on the display the user is using when they press the Windows logo key. This setting only applies to users who are using multiple displays.\r\n\r\nIf you enable this policy setting, the Start screen will appear on the display the user is using when they press the Windows logo key.\r\n\r\nIf you disable or don't configure this policy setting, the Start screen will always appear on the main display when the user presses the Windows logo key. Users will still be able to open Start on other displays by pressing the Start button on that display. Also, the user will be able to configure this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-showstartondisplaywithforegroundonwinkey"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_showstartondisplaywithforegroundonwinkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_showstartondisplaywithforegroundonwinkey_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_startmenulogoff","displayName":"Remove Logoff on the Start Menu (User)","description":"This policy setting allows you to removes the \"Log Off \" item from the Start menu and prevents users from restoring it.\r\n\r\nIf you enable this policy setting, the Log Off item does not appear in the Start menu. This policy setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot restore the Log Off item to the Start Menu.\r\n\r\nIf you disable or do not configure this policy setting, users can use the Display Logoff item to add and remove the Log Off item.\r\n\r\nThis policy setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del, and it does not prevent users from using other methods to log off.\r\n\r\nTip: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab and, in the Start Menu Settings box, click Display Logoff.\r\n\r\nSee also: \"Remove Logoff\" policy setting in User Configuration\\Administrative Templates\\System\\Logon/Logoff.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-startmenulogoff"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_startmenulogoff_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_startmenulogoff_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled","displayName":"Pin Apps to Start when installed (User)","description":"This policy setting allows pinning apps to Start by default, when they are included by AppID on the list.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-startmenu#admx-startmenu-startpinappswheninstalled"],"options":[{"id":"user_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_startmenu_startpinappswheninstalled_startpinappswheninstalled_name","displayName":"Add AppIDs to the list: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_1","displayName":"Turn off AutoComplete integration with Input Panel (User)","description":"Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is available.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, application auto complete lists will never appear next to Input Panel. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, application auto complete lists will appear next to Input Panel in applications where the functionality is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, application auto complete lists will appear next to Input Panel in applications where the functionality is available. Users will be able to configure this setting on the Text completion tab in Input Panel Options.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-autocomplete-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_autocomplete_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_1","displayName":"Prevent Input Panel tab from appearing (User)","description":"Prevents Input Panel tab from appearing on the edge of the Tablet PC screen.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel tab will not appear on the edge of the Tablet PC screen. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel tab will appear on the edge of the Tablet PC screen. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel tab will appear on the edge of the Tablet PC screen. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n\r\nCaution: If you enable both the “Prevent Input Panel from appearing next to text entry areas” policy and the “Prevent Input Panel tab from appearing” policy, and disable the “Show Input Panel taskbar icon” policy, the user will then have no way to access Input Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-edgetarget-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_edgetarget_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_1","displayName":"For tablet pen input, don’t show the Input Panel icon (User)","description":"Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available. This policy applies only when using a tablet pen as an input device.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will never appear next to text entry areas when using a tablet pen as an input device. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will appear next to any text entry area in applications where this behavior is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n\r\nCaution: If you enable both the “Prevent Input Panel from appearing next to text entry areas” policy and the “Prevent Input Panel tab from appearing” policy, and disable the “Show Input Panel taskbar icon” policy, the user will then have no way to access Input Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-iptiptarget-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptarget_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_1","displayName":"For touch input, don’t show the Input Panel icon (User)","description":"Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available. This policy applies only when a user is using touch input.\r\n\r\nTablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will never appear next to any text entry area when a user is using touch input. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will appear next to text entry areas in applications where this behavior is available. Users will be able to configure this setting on the Opening tab in Input Panel Options.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-iptiptouchtarget-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_iptiptouchtarget_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1","displayName":"Turn off password security in Input Panel (User)","description":"Adjusts password security settings in Touch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista). These settings include using the on-screen keyboard by default, preventing users from switching to another Input Panel skin (the writing pad or character pad), and not showing what keys are tapped when entering a password.\r\n\r\nTouch Keyboard and Handwriting panel enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy and choose “Low” from the drop-down box, password security is set to “Low.” At this setting, all password security settings are turned off. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose “Medium-Low” from the drop-down box, password security is set to “Medium-Low.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel displays the cursor and which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose “Medium” from the drop-down box, password security is set to “Medium.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is not allowed, and Input Panel displays the cursor and which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you enable this policy and choose to “Medium-High” from the drop-down box, password security is set to “Medium-High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you enable this policy and choose “High” from the drop-down box, password security is set to “High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is not allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box. \r\n\r\nIf you disable this policy, password security is set to “Medium-High.” At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n \r\nIf you do not configure this policy, password security is set to “Medium-High” by default. At this setting, when users enter passwords from Input Panel they use the on-screen keyboard by default, skin switching is allowed, and Input Panel does not display the cursor or which keys are tapped. Users will be able to configure this setting on the Advanced tab in Input Panel Options in Windows 7 and Windows Vista.\r\n\r\nCaution: If you lower password security settings, people who can see the user’s screen might be able to see their passwords.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-passwordsecurity-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity","displayName":"Turn off password security in Input Panel (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_1","displayName":"Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_2","displayName":"Medium Low","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_3","displayName":"Medium","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_4","displayName":"Medium High","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_passwordsecurity_1_passwordsecurity_5","displayName":"High","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_1","displayName":"Disable text prediction (User)","description":"Prevents the Touch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista) from providing text prediction suggestions. This policy applies for both the on-screen keyboard and the handwriting tab when the feature is available for the current input area and input language.\r\n\r\nTouch Keyboard and Handwriting panel enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, Input Panel will not provide text prediction suggestions. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, Input Panel will provide text prediction suggestions. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, Input Panel will provide text prediction suggestions. Users will be able to configure this setting on the Text Completion tab in Input Panel Options in Windows 7 and Windows Vista.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-prediction-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_prediction_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_1","displayName":"Include rarely used Chinese, Kanji, or Hanja characters (User)","description":"Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only to the use of the Microsoft recognizers for Chinese (Simplified), Chinese (Traditional), Japanese, and Korean. This setting appears in Input Panel Options (in Windows 7 and Windows Vista only) only when these input languages or keyboards are installed. \r\n\r\nTouch Keyboard and Handwriting panel (a.k.a. Tablet PC Input Panel in Windows 7 and Windows Vista) enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\nIf you enable this policy, rarely used Chinese, Kanji, and Hanja characters will be included in recognition results when handwriting is converted to typed text. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you disable this policy, rarely used Chinese, Kanji, and Hanja characters will not be included in recognition results when handwriting is converted to typed text. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\nIf you do not configure this policy, rarely used Chinese, Kanji, and Hanja characters will not be included in recognition results when handwriting is converted to typed text. Users will be able to configure this setting on the Ink to text conversion tab in Input Panel Options (in Windows 7 and Windows Vista).\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-rarechar-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_rarechar_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1","displayName":"Turn off tolerant and Z-shaped scratch-out gestures (User)","description":"\r\n Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture that was available in Microsoft Windows XP Tablet PC Edition.\r\n\r\n The tolerant gestures let users scratch out ink in Input Panel by using strikethrough and other scratch-out gesture shapes.\r\n\r\n Tablet PC Input Panel is a Tablet PC accessory that enables you to use handwriting or an on-screen keyboard to enter text, symbols, numbers, or keyboard shortcuts.\r\n\r\n If you enable this policy and choose “All” from the drop-down menu, no scratch-out gestures will be available in Input Panel. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you enable this policy and choose “Tolerant,\" users will be able to use the Z-shaped scratch-out gesture that was available in Microsoft Windows XP Tablet PC Edition. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you enable this policy and choose “None,” users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you disable this policy, users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will not be able to configure this setting in the Input Panel Options dialog box.\r\n\r\n If you do not configure this policy, users will be able to use both the tolerant scratch-out gestures and the Z-shaped scratch-out gesture. Users will be able to configure this setting on the Gestures tab in Input Panel Options.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletpcinputpanel#admx-tabletpcinputpanel-scratchout-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_scratchout","displayName":"Turn off tolerant and Z-shaped scratch-out gestures (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_scratchout_1","displayName":"All","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_scratchout_2","displayName":"Tolerant","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletpcinputpanel_scratchout_1_scratchout_3","displayName":"None","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disableinkball_1","displayName":"Do not allow Inkball to run (User)","description":"Prevents start of InkBall game.\r\n\r\nIf you enable this policy, the InkBall game will not run.\r\n\r\nIf you disable this policy, the InkBall game will run.\r\n\r\nIf you do not configure this policy, the InkBall game will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disableinkball-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_disableinkball_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disableinkball_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablejournal_1","displayName":"Do not allow Windows Journal to be run (User)","description":"Prevents start of Windows Journal.\r\n\r\nIf you enable this policy, the Windows Journal accessory will not run.\r\n\r\nIf you disable this policy, the Windows Journal accessory will run.\r\n\r\nIf you do not configure this policy, the Windows Journal accessory will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disablejournal-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablejournal_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablejournal_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablenotewriterprinting_1","displayName":"Do not allow printing to Journal Note Writer (User)","description":"Prevents printing to Journal Note Writer.\r\n\r\nIf you enable this policy, the Journal Note Writer printer driver will not allow printing to it. It will remain displayed in the list of available printers, but attempts to print to it will fail.\r\n\r\nIf you disable this policy, you will be able to use this feature to print to a Journal Note.\r\n\r\nIf you do not configure this policy, users will be able to use this feature to print to a Journal Note.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disablenotewriterprinting-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablenotewriterprinting_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablenotewriterprinting_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_1","displayName":"Do not allow Snipping Tool to run (User)","description":"Prevents the snipping tool from running.\r\n\r\nIf you enable this policy setting, the Snipping Tool will not run.\r\n\r\nIf you disable this policy setting, the Snipping Tool will run.\r\n\r\nIf you do not configure this policy setting, the Snipping Tool will run.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-disablesnippingtool-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_disablesnippingtool_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_1","displayName":"Prevent Back-ESC mapping (User)","description":"Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavior.\r\n\r\nIf you enable this policy, a button assigned to Back will not map to ESC.\r\n\r\nIf you disable this policy, Back->ESC mapping will occur.\r\n\r\nIf you do not configure this policy, Back->ESC mapping will occur.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventbackescmapping-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventbackescmapping_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflicks_1","displayName":"Prevent flicks (User)","description":"Makes pen flicks and all related features unavailable.\r\n\r\nIf you enable this policy, pen flicks and all related features are unavailable. This includes: pen flicks themselves, pen flicks training, pen flicks training triggers in Internet Explorer, the pen flicks notification and the pen flicks tray icon.\r\n\r\nIf you disable or do not configure this policy, pen flicks and related features are available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventflicks-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflicks_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflicks_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_1","displayName":"Prevent Flicks Learning Mode (User)","description":"Makes pen flicks learning mode unavailable.\r\n\r\nIf you enable this policy, pen flicks are still available but learning mode is not. Pen flicks are off by default and can be turned on system-wide, but cannot be restricted to learning mode applications. This means that the pen flicks training triggers in Internet Explorer are disabled and that the pen flicks notification will never be displayed. However, pen flicks, the pen flicks tray icon and pen flicks training (that can be accessed through CPL) are still available. Conceptually this policy is a subset of the Disable pen flicks policy.\r\n\r\nIf you disable or do not configure this policy, all the features described above will be available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventflickslearningmode-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventflickslearningmode_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_1","displayName":"Prevent launch an application (User)","description":"Prevents the user from launching an application from a Tablet PC hardware button.\r\n\r\nIf you enable this policy, applications cannot be launched from a hardware button, and \"Launch an application\" is removed from the drop down menu for configuring button actions (in the Tablet PC Control Panel buttons tab).\r\n\r\nIf you disable this policy, applications can be launched from a hardware button.\r\n\r\nIf you do not configure this policy, applications can be launched from a hardware button.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventlaunchapp-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventlaunchapp_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_1","displayName":"Prevent press and hold (User)","description":"Prevents press and hold actions on hardware buttons, so that only one action is available per button.\r\n\r\nIf you enable this policy, press and hold actions are unavailable, and the button configuration dialog will display the following text: \"Some settings are controlled by Group Policy. If a setting is unavailable, contact your system administrator.\"\r\n\r\nIf you disable this policy, press and hold actions for buttons will be available.\r\n\r\nIf you do not configure this policy, press and hold actions will be available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-preventpressandhold-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_preventpressandhold_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_1","displayName":"Turn off hardware buttons (User)","description":"Turns off Tablet PC hardware buttons.\r\n\r\nIf you enable this policy, no actions will occur when the buttons are pressed, and the buttons tab in Tablet PC Control Panel will be removed.\r\n\r\nIf you disable this policy, user and OEM defined button actions will occur when the buttons are pressed.\r\n\r\nIf you do not configure this policy, user and OEM defined button actions will occur when the buttons are pressed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-turnoffbuttons-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnoffbuttons_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnofffeedback_1","displayName":"Turn off pen feedback (User)","description":"Disables visual pen action feedback, except for press and hold feedback.\r\n\r\nIf you enable this policy, all visual pen action feedback is disabled except for press and hold feedback. Additionally, the mouse cursors are shown instead of the pen cursors.\r\n\r\nIf you disable or do not configure this policy, visual feedback and pen cursors will be shown unless the user disables them in Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-tabletshell#admx-tabletshell-turnofffeedback-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnofffeedback_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_tabletshell_turnofffeedback_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter","displayName":"Remove Notifications and Action Center (User)","description":"This policy setting removes Notifications and Action Center from the notification area on the taskbar.\r\n\r\nThe notification area is located at the far right end of the taskbar and includes icons for current notifications and the system clock. \r\n\r\nIf this setting is enabled, Notifications and Action Center is not displayed in the notification area. The user will be able to read notifications when they appear, but they won’t be able to review any notifications they miss. \r\n\r\nIf you disable or do not configure this policy setting, Notification and Security and Maintenance will be displayed on the taskbar. \r\n\r\nA reboot is required for this policy setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-disablenotificationcenter"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_disablenotificationcenter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_enablelegacyballoonnotifications","displayName":"Disable showing balloon notifications as toasts. (User)","description":"This policy disables the functionality that converts balloons to toast notifications. \r\n\r\nIf you enable this policy setting, system and application notifications will render as balloons instead of toast notifications. \r\n\r\nEnable this policy setting if a specific app or system component that uses balloon notifications has compatibility issues with toast notifications. \r\n\r\nIf you disable or don’t configure this policy setting, all notifications will appear as toast notifications.\r\n\r\nA reboot is required for this policy setting to take effect.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-enablelegacyballoonnotifications"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_enablelegacyballoonnotifications_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_enablelegacyballoonnotifications_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescahealth","displayName":"Remove the Security and Maintenance icon (User)","description":"This policy setting allows you to remove Security and Maintenance from the system control area.\r\n\r\nIf you enable this policy setting, the Security and Maintenance icon is not displayed in the system notification area.\r\n\r\nIf you disable or do not configure this policy setting, the Security and Maintenance icon is displayed in the system notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-hidescahealth"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescahealth_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescahealth_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescanetwork","displayName":"Remove the networking icon (User)","description":"This policy setting allows you to remove the networking icon from the system control area.\r\n\r\nIf you enable this policy setting, the networking icon is not displayed in the system notification area.\r\n\r\nIf you disable or do not configure this policy setting, the networking icon is displayed in the system notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-hidescanetwork"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescanetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescanetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescapower","displayName":"Remove the battery meter (User)","description":"This policy setting allows you to remove the battery meter from the system control area.\r\n\r\nIf you enable this policy setting, the battery meter is not displayed in the system notification area.\r\n\r\nIf you disable or do not configure this policy setting, the battery meter is displayed in the system notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-hidescapower"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescapower_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescapower_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescavolume","displayName":"Remove the volume control icon (User)","description":"This policy setting allows you to remove the volume control icon from the system control area.\r\n\r\nIf you enable this policy setting, the volume control icon is not displayed in the system notification area.\r\n\r\nIf you disable or do not configure this policy setting, the volume control icon is displayed in the system notification area.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-hidescavolume"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescavolume_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_hidescavolume_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_noballoonfeatureadvertisements","displayName":"Turn off feature advertisement balloon notifications (User)","description":"This policy setting allows you to turn off feature advertisement balloon notifications.\r\n\r\nIf you enable this policy setting, certain notification balloons that are marked as feature advertisements are not shown.\r\n\r\nIf you disable do not configure this policy setting, feature advertisement balloons are shown.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-noballoonfeatureadvertisements"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_noballoonfeatureadvertisements_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_noballoonfeatureadvertisements_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningstoretotaskbar","displayName":"Do not allow pinning Store app to the Taskbar (User)","description":"\r\nThis policy setting allows you to control pinning the Store app to the Taskbar.\r\n\r\nIf you enable this policy setting, users cannot pin the Store app to the Taskbar. If the Store app is already pinned to the Taskbar, it will be removed from the Taskbar on next login.\r\n\r\nIf you disable or do not configure this policy setting, users can pin the Store app to the Taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-nopinningstoretotaskbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningstoretotaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningstoretotaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtodestinations","displayName":"Do not allow pinning items in Jump Lists (User)","description":"This policy setting allows you to control pinning items in Jump Lists.\r\n\r\nIf you enable this policy setting, users cannot pin files, folders, websites, or other items to their Jump Lists in the Start Menu and Taskbar. Users also cannot unpin existing items pinned to their Jump Lists. Existing items already pinned to their Jump Lists will continue to show.\r\n\r\nIf you disable or do not configure this policy setting, users can pin files, folders, websites, and other items to a program's Jump List so that the items is always present in this menu.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-nopinningtodestinations"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtodestinations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtodestinations_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtotaskbar","displayName":"Do not allow pinning programs to the Taskbar (User)","description":"This policy setting allows you to control pinning programs to the Taskbar.\r\n\r\nIf you enable this policy setting, users cannot change the programs currently pinned to the Taskbar. If any programs are already pinned to the Taskbar, these programs continue to show in the Taskbar. However, users cannot unpin these programs already pinned to the Taskbar, and they cannot pin new programs to the Taskbar.\r\n\r\nIf you disable or do not configure this policy setting, users can change the programs currently pinned to the Taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-nopinningtotaskbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtotaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_nopinningtotaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_noremotedestinations","displayName":"Do not display or track items in Jump Lists from remote locations (User)","description":"This policy setting allows you to control displaying or tracking items in Jump Lists from remote locations.\r\n\r\nThe Start Menu and Taskbar display Jump Lists off of programs. These menus include files, folders, websites and other relevant items for that program. This helps users more easily reopen their most important documents and other tasks.\r\n\r\nIf you enable this policy setting, the Start Menu and Taskbar only track the files that the user opens locally on this computer. Files that the user opens over the network from remote computers are not tracked or shown in the Jump Lists. Use this setting to reduce network traffic, particularly over slow network connections.\r\n\r\nIf you disable or do not configure this policy setting, all files that the user opens appear in the menus, including files located remotely on another computer.\r\n\r\nNote: This setting does not prevent Windows from displaying remote files that the user has explicitly pinned to the Jump Lists. See the \"Do not allow pinning items in Jump Lists\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-noremotedestinations"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_noremotedestinations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_noremotedestinations_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_nosystraysystempromotion","displayName":"Turn off automatic promotion of notification icons to the taskbar (User)","description":"This policy setting allows you to turn off automatic promotion of notification icons to the taskbar.\r\n\r\nIf you enable this policy setting, newly added notification icons are not temporarily promoted to the Taskbar. Users can still configure icons to be shown or hidden in the Notification Control Panel.\r\n\r\nIf you disable or do not configure this policy setting, newly added notification icons are temporarily promoted to the Taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-nosystraysystempromotion"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_nosystraysystempromotion_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_nosystraysystempromotion_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_showwindowsstoreappsontaskbar","displayName":"Show packaged Microsoft Store apps on the taskbar (User)","description":"\r\nThis policy setting allows users to see Windows Store apps on the taskbar.\r\n \r\nIf you enable this policy setting, users will see Windows Store apps on the taskbar.\r\n \r\nIf you disable this policy setting, users won’t see Windows Store apps on the taskbar.\r\n \r\nIf you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-showwindowsstoreappsontaskbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_showwindowsstoreappsontaskbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_showwindowsstoreappsontaskbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarlockall","displayName":"Lock all taskbar settings (User)","description":"This policy setting allows you to lock all taskbar settings.\r\n\r\nIf you enable this policy setting, the user cannot access the taskbar control panel. The user is also unable to resize, move or rearrange toolbars on their taskbar.\r\n\r\nIf you disable or do not configure this policy setting, the user will be able to set any taskbar setting that is not prevented by another policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarlockall"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarlockall_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarlockall_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoaddremovetoolbar","displayName":"Prevent users from adding or removing toolbars (User)","description":"This policy setting allows you to prevent users from adding or removing toolbars.\r\n\r\nIf you enable this policy setting, the user is not allowed to add or remove any toolbars to the taskbar. Applications are not able to add toolbars either.\r\n\r\nIf you disable or do not configure this policy setting, the users and applications are able to add toolbars to the taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnoaddremovetoolbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoaddremovetoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoaddremovetoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnodragtoolbar","displayName":"Prevent users from rearranging toolbars (User)","description":"This policy setting allows you to prevent users from rearranging toolbars.\r\n\r\nIf you enable this policy setting, users are not able to drag or drop toolbars to the taskbar.\r\n\r\nIf you disable or do not configure this policy setting, users are able to rearrange the toolbars on the taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnodragtoolbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnodragtoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnodragtoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnomultimon","displayName":"Do not allow taskbars on more than one display (User)","description":"This policy setting allows you to prevent taskbars from being displayed on more than one monitor.\r\n\r\nIf you enable this policy setting, users are not able to show taskbars on more than one display. The multiple display section is not enabled in the taskbar properties dialog.\r\n\r\nIf you disable or do not configure this policy setting, users can show taskbars on more than one display.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnomultimon"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnomultimon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnomultimon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnonotification","displayName":"Turn off all balloon notifications (User)","description":"This policy setting allows you to turn off all notification balloons.\r\n\r\nIf you enable this policy setting, no notification balloons are shown to the user.\r\n\r\nIf you disable or do not configure this policy setting, notification balloons are shown to the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnonotification"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnonotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnonotification_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnopinnedlist","displayName":"Remove pinned programs from the Taskbar (User)","description":"This policy setting allows you to remove pinned programs from the taskbar.\r\n\r\nIf you enable this policy setting, pinned programs are prevented from being shown on the Taskbar. Users cannot pin programs to the Taskbar.\r\n\r\nIf you disable or do not configure this policy setting, users can pin programs so that the program shortcuts stay on the Taskbar.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnopinnedlist"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnopinnedlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnopinnedlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoredock","displayName":"Prevent users from moving taskbar to another screen dock location (User)","description":"This policy setting allows you to prevent users from moving taskbar to another screen dock location.\r\n\r\nIf you enable this policy setting, users are not able to drag their taskbar to another area of the monitor(s).\r\n\r\nIf you disable or do not configure this policy setting, users are able to drag their taskbar to another area of the monitor unless prevented by another policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnoredock"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoredock_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoredock_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoresize","displayName":"Prevent users from resizing the taskbar (User)","description":"This policy setting allows you to prevent users from resizing the taskbar.\r\n\r\nIf you enable this policy setting, users are not be able to resize their taskbar.\r\n\r\nIf you disable or do not configure this policy setting, users are able to resize their taskbar unless prevented by another setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnoresize"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoresize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnoresize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnothumbnail","displayName":"Turn off taskbar thumbnails (User)","description":"This policy setting allows you to turn off taskbar thumbnails.\r\n\r\nIf you enable this policy setting, the taskbar thumbnails are not displayed and the system uses standard text for the tooltips.\r\n\r\nIf you disable or do not configure this policy setting, the taskbar thumbnails are displayed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-taskbar#admx-taskbar-taskbarnothumbnail"],"options":[{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnothumbnail_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_taskbar_taskbarnothumbnail_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_1","displayName":"Allow .rdp files from valid publishers and user's default .rdp settings (User)","description":"This policy setting allows you to specify whether users can run Remote Desktop Protocol (.rdp) files from a publisher that signed the file with a valid certificate. A valid certificate is one issued by an authority recognized by the client, such as the issuers in the client's Third-Party Root Certification Authorities certificate store. This policy setting also controls whether the user can start an RDP session by using default .rdp settings (for example, when a user directly opens the Remote Desktop Connection [RDC] client without specifying an .rdp file).\r\n\r\nIf you enable or do not configure this policy setting, users can run .rdp files that are signed with a valid certificate. Users can also start an RDP session with default .rdp settings by directly opening the RDC client. When a user starts an RDP session, the user is asked to confirm whether they want to connect.\r\n\r\nIf you disable this policy setting, users cannot run .rdp files that are signed with a valid certificate. Additionally, users cannot start an RDP session by directly opening the RDC client and specifying the remote computer name. When a user tries to start an RDP session, the user receives a message that the publisher has been blocked.\r\n\r\nNote: You can define this policy setting in the Computer Configuration node or in the User Configuration node. If you configure this policy setting for the computer, all users on the computer are affected.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-allow-signed-files-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_signed_files_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_1","displayName":"Allow .rdp files from unknown publishers (User)","description":"This policy setting allows you to specify whether users can run unsigned Remote Desktop Protocol (.rdp) files and .rdp files from unknown publishers on the client computer.\r\n\r\nIf you enable or do not configure this policy setting, users can run unsigned .rdp files and .rdp files from unknown publishers on the client computer. Before a user starts an RDP session, the user receives a warning message and is asked to confirm whether they want to connect.\r\n\r\nIf you disable this policy setting, users cannot run unsigned .rdp files and .rdp files from unknown publishers on the client computer. If the user tries to start an RDP session, the user receives a message that the publisher has been blocked.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-allow-unsigned-files-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_allow_unsigned_files_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_password_saving_1","displayName":"Do not allow passwords to be saved (User)","description":"Controls whether a user can save passwords using Remote Desktop Connection.\r\n\r\nIf you enable this setting the credential saving checkbox in Remote Desktop Connection will be disabled and users will no longer be able to save passwords. When a user opens an RDP file using Remote Desktop Connection and saves his settings, any password that previously existed in the RDP file will be deleted.\r\n\r\nIf you disable this setting or leave it not configured, the user will be able to save passwords using Remote Desktop Connection\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-disable-password-saving-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_password_saving_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_disable_password_saving_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_2","displayName":"Specify SHA1 thumbprints of certificates representing trusted .rdp publishers (User)","description":"This policy setting allows you to specify a list of Secure Hash Algorithm 1 (SHA1) certificate thumbprints that represent trusted Remote Desktop Protocol (.rdp) file publishers.\r\n\r\nIf you enable this policy setting, any certificate with an SHA1 thumbprint that matches a thumbprint on the list is trusted. If a user tries to start an .rdp file that is signed by a trusted certificate, the user does not receive any warning messages when they start the file. To obtain the thumbprint, view the certificate details, and then click the Thumbprint field.\r\n\r\nIf you disable or do not configure this policy setting, no publisher is treated as a trusted .rdp publisher.\r\n\r\nNote:\r\n\r\nYou can define this policy setting in the Computer Configuration node or in the User Configuration node. If you configure this policy setting for the computer, the list of certificate thumbprints trusted for a user is a combination of the list defined for the computer and the list defined for the user.\r\n\r\nThis policy setting overrides the behavior of the \"Allow .rdp files from valid publishers and user's default .rdp settings\" policy setting.\r\n\r\nIf the list contains a string that is not a certificate thumbprint, it is ignored.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-client-trusted-certificate-thumbprints-2"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_2_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_2_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_client_trusted_certificate_thumbprints_2_trusted_certificate_thumbprints","displayName":"Comma-separated list of SHA1 trusted certificate thumbprints: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_easy_print_user","displayName":"Use Remote Desktop Easy Print printer driver first (User)","description":"This policy setting allows you to specify whether the Remote Desktop Easy Print printer driver is used first to install all client printers. \r\n\r\nIf you enable or do not configure this policy setting, the RD Session Host server first tries to use the Remote Desktop Easy Print printer driver to install all client printers. If for any reason the Remote Desktop Easy Print printer driver cannot be used, a printer driver on the RD Session Host server that matches the client printer is used. If the RD Session Host server does not have a printer driver that matches the client printer, the client printer is not available for the Remote Desktop session.\r\n\r\nIf you disable this policy setting, the RD Session Host server tries to find a suitable printer driver to install the client printer. If the RD Session Host server does not have a printer driver that matches the client printer, the server tries to use the Remote Desktop Easy Print driver to install the client printer. If for any reason the Remote Desktop Easy Print printer driver cannot be used, the client printer is not available for the Remote Desktop Services session.\r\n\r\nNote: If the \"Do not allow client printer redirection\" policy setting is enabled, the \"Use Remote Desktop Easy Print printer driver first\" policy setting is ignored.\r\n This setting is only available to Windows Insiders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-easy-print-user"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_easy_print_user_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_easy_print_user_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method","displayName":"Set RD Gateway authentication method (User)","description":"Specifies the authentication method that clients must use when attempting to connect to an RD Session Host server through an RD Gateway server. You can enforce this policy setting or you can allow users to overwrite this policy setting. By default, when you enable this policy setting, it is enforced. When this policy setting is enforced, users cannot override this setting, even if they select the \"Use these RD Gateway server settings\" option on the client.\r\n\r\nTo allow users to overwrite this policy setting, select the \"Allow users to change this setting\" check box. When you do this, users can specify an alternate authentication method by configuring settings on the client, using an RDP file, or using an HTML script. If users do not specify an alternate authentication method, the authentication method that you specify in this policy setting is used by default.\r\n\r\nIf you disable or do not configure this policy setting, the authentication method that is specified by the user is used, if one is specified. If an authentication method is not specified, the Negotiate protocol that is enabled on the client or a smart card can be used for authentication.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-gateway-policy-auth-method"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode","displayName":"Set RD Gateway authentication method (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_5","displayName":"Ask for credentials, use Negotiate protocol","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_2","displayName":"Ask for credentials, use NTLM protocol","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_1","displayName":"Ask for credentials, use Basic protocol","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_4","displayName":"Use locally logged-on credentials","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_auth_mode_3","displayName":"Use smart-card","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_override","displayName":"Allow users to change this setting (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_override_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_auth_method_ts_gateway_override_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable","displayName":"Enable connection through RD Gateway (User)","description":"If you enable this policy setting, when Remote Desktop Connection cannot connect directly to a remote computer (an RD Session Host server or a computer with Remote Desktop enabled), the clients will attempt to connect to the remote computer through an RD Gateway server. In this case, the clients will attempt to connect to the RD Gateway server that is specified in the \"Set RD Gateway server address\" policy setting.\r\n\r\nYou can enforce this policy setting or you can allow users to overwrite this setting. By default, when you enable this policy setting, it is enforced. When this policy setting is enforced, users cannot override this setting, even if they select the \"Use these RD Gateway server settings\" option on the client.\r\n\r\nNote: To enforce this policy setting, you must also specify the address of the RD Gateway server by using the \"Set RD Gateway server address\" policy setting, or client connection attempts to any remote computer will fail, if the client cannot connect directly to the remote computer. To enhance security, it is also highly recommended that you specify the authentication method by using the \"Set RD Gateway authentication method\" policy setting. If you do not specify an authentication method by using this policy setting, either the NTLM protocol that is enabled on the client or a smart card can be used.\r\n\r\nTo allow users to overwrite this policy setting, select the \"Allow users to change this setting\" check box. When you do this, users on the client can choose not to connect through the RD Gateway server by selecting the \"Do not use an RD Gateway server\" option. Users can specify a connection method by configuring settings on the client, using an RDP file, or using an HTML script. If users do not specify a connection method, the connection method that you specify in this policy setting is used by default.\r\n\r\nIf you disable or do not configure this policy setting, clients will not use the RD Gateway server address that is specified in the \"Set RD Gateway server address\" policy setting. If an RD Gateway server is specified by the user, a client connection attempt will be made through that RD Gateway server.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-gateway-policy-enable"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_ts_gateway_override","displayName":"Allow users to change this setting (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_ts_gateway_override_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_enable_ts_gateway_override_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server","displayName":"Set RD Gateway server address (User)","description":"Specifies the address of the RD Gateway server that clients must use when attempting to connect to an RD Session Host server. You can enforce this policy setting or you can allow users to overwrite this policy setting. By default, when you enable this policy setting, it is enforced. When this policy setting is enforced, users cannot override this setting, even if they select the \"Use these RD Gateway server settings\" option on the client.\r\n\r\nNote: It is highly recommended that you also specify the authentication method by using the \"Set RD Gateway authentication method\" policy setting. If you do not specify an authentication method by using this setting, either the NTLM protocol that is enabled on the client or a smart card can be used.\r\n\r\nTo allow users to overwrite the \"Set RD Gateway server address\" policy setting and connect to another RD Gateway server, you must select the \"Allow users to change this setting\" check box and users will be allowed to specify an alternate RD Gateway server. Users can specify an alternative RD Gateway server by configuring settings on the client, using an RDP file, or using an HTML script. If users do not specify an alternate RD Gateway server, the server that you specify in this policy setting is used by default.\r\n\r\nNote: If you disable or do not configure this policy setting, but enable the \"Enable connections through RD Gateway\" policy setting, client connection attempts to any remote computer will fail, if the client cannot connect directly to the remote computer. If an RD Gateway server is specified by the user, a client connection attempt will be made through that RD Gateway server.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-gateway-policy-server"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_ts_gateway_override","displayName":"Allow users to change this setting (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_ts_gateway_override_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_ts_gateway_override_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_gateway_policy_server_ts_gateway_server","displayName":"Set RD Gateway server address (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_radc_defaultconnection","displayName":"Specify default connection URL (User)","description":"This policy setting specifies the default connection URL for RemoteApp and Desktop Connections. The default connection URL is a specific connection that can only be configured by using Group Policy. In addition to the capabilities that are common to all connections, the default connection URL allows document file types to be associated with RemoteApp programs.\r\n\r\nThe default connection URL must be configured in the form of http://contoso.com/rdweb/Feed/webfeed.aspx.\r\n \r\nIf you enable this policy setting, the specified URL is configured as the default connection URL for the user and replaces any existing connection URL. The user cannot change the default connection URL. The user's default logon credentials are used when setting up the default connection URL.\r\n\r\nIf you disable or do not configure this policy setting, the user has no default connection URL.\r\n\r\nNote: RemoteApp programs that are installed through RemoteApp and Desktop Connections from an untrusted server can compromise the security of a user's account.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-radc-defaultconnection"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_radc_defaultconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_radc_defaultconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_radc_defaultconnection_ts_radc_defaultconnectionurl","displayName":"Default connection URL: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1","displayName":"Set rules for remote control of Remote Desktop Services user sessions (User)","description":"If you enable this policy setting, administrators can interact with a user's Remote Desktop Services session based on the option selected. Select the desired level of control and permission from the options list:\r\n\r\n1. No remote control allowed: Disallows an administrator to use remote control or view a remote user session.\r\n2. Full Control with user's permission: Allows the administrator to interact with the session, with the user's consent.\r\n3. Full Control without user's permission: Allows the administrator to interact with the session, without the user's consent.\r\n4. View Session with user's permission: Allows the administrator to watch the session of a remote user with the user's consent. \r\n5. View Session without user's permission: Allows the administrator to watch the session of a remote user without the user's consent.\r\n\r\nIf you disable this policy setting, administrators can interact with a user's Remote Desktop Services session, with the user's consent.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-remotecontrol-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels","displayName":"Options: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_0","displayName":"No remote control allowed","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_1","displayName":"Full Control with user's permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_2","displayName":"Full Control without user's permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_3","displayName":"View Session with user's permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_remotecontrol_1_ts_remotecontrol_levels_4","displayName":"View Session without user's permission","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_session_end_on_limit_1","displayName":"End session when time limits are reached (User)","description":"This policy setting specifies whether to end a Remote Desktop Services session that has timed out instead of disconnecting it.\r\n\r\nYou can use this setting to direct Remote Desktop Services to end a session (that is, the user is logged off and the session is deleted from the server) after time limits for active or idle sessions are reached. By default, Remote Desktop Services disconnects sessions that reach their time limits.\r\n\r\nTime limits are set locally by the server administrator or by using Group Policy. See the policy settings Set time limit for active Remote Desktop Services sessions and Set time limit for active but idle Remote Desktop Services sessions policy settings.\r\n\r\nIf you enable this policy setting, Remote Desktop Services ends any session that reaches its time-out limit.\r\n\r\nIf you disable this policy setting, Remote Desktop Services always disconnects a timed-out session, even if specified otherwise by the server administrator.\r\n\r\nIf you do not configure this policy setting, Remote Desktop Services disconnects a timed-out session, unless specified otherwise in local settings.\r\n\r\nNote: This policy setting only applies to time-out limits that are explicitly set by the administrator. This policy setting does not apply to time-out events that occur due to connectivity or network conditions. This setting appears in both Computer Configuration and User Configuration. If both settings are configured, the Computer Configuration setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-session-end-on-limit-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_session_end_on_limit_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_session_end_on_limit_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1","displayName":"Set time limit for disconnected sessions (User)","description":"This policy setting allows you to configure a time limit for disconnected Remote Desktop Services sessions.\r\n\r\nYou can use this policy setting to specify the maximum amount of time that a disconnected session remains active on the server. By default, Remote Desktop Services allows users to disconnect from a Remote Desktop Services session without logging off and ending the session.\r\n\r\nWhen a session is in a disconnected state, running programs are kept active even though the user is no longer actively connected. By default, these disconnected sessions are maintained for an unlimited time on the server.\r\n\r\nIf you enable this policy setting, disconnected sessions are deleted from the server after the specified amount of time. To enforce the default behavior that disconnected sessions are maintained for an unlimited time, select Never. If you have a console session, disconnected session time limits do not apply.\r\n\r\n\r\nIf you disable or do not configure this policy setting, this policy setting is not specified at the Group Policy level. Be y default, Remote Desktop Services disconnected sessions are maintained for an unlimited amount of time. \r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the Computer Configuration policy setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sessions-disconnected-timeout-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected","displayName":"End a disconnected session (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_0","displayName":"Never","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_disconnected_timeout_1_ts_sessions_enddisconnected_432000000","displayName":"5 days","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1","displayName":"Set time limit for active but idle Remote Desktop Services sessions (User)","description":"This policy setting allows you to specify the maximum amount of time that an active Remote Desktop Services session can be idle (without user input) before it is automatically disconnected.\r\n\r\nIf you enable this policy setting, you must select the desired time limit in the Idle session limit list. Remote Desktop Services will automatically disconnect active but idle sessions after the specified amount of time. The user receives a warning two minutes before the session disconnects, which allows the user to press a key or move the mouse to keep the session active. If you have a console session, idle session time limits do not apply.\r\n\r\nIf you disable or do not configure this policy setting, the time limit is not specified at the Group Policy level. By default, Remote Desktop Services allows sessions to remain active but idle for an unlimited amount of time. \r\n\r\nIf you want Remote Desktop Services to end instead of disconnect a session when the time limit is reached, you can configure the policy setting Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Session Time Limits\\End session when time limits are reached.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the Computer Configuration policy setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sessions-idle-limit-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext","displayName":"Idle session limit: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_0","displayName":"Never","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_idle_limit_1_ts_sessions_idlelimittext_432000000","displayName":"5 days","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1","displayName":"Set time limit for active Remote Desktop Services sessions (User)","description":"This policy setting allows you to specify the maximum amount of time that a Remote Desktop Services session can be active before it is automatically disconnected.\r\n\r\nIf you enable this policy setting, you must select the desired time limit in the Active session limit list. Remote Desktop Services will automatically disconnect active sessions after the specified amount of time. The user receives a warning two minutes before the Remote Desktop Services session disconnects, which allows the user to save open files and close programs. If you have a console session, active session time limits do not apply.\r\n\r\nIf you disable or do not configure this policy setting, this policy setting is not specified at the Group Policy level. By default, Remote Desktop Services allows sessions to remain active for an unlimited amount of time. \r\n\r\nIf you want Remote Desktop Services to end instead of disconnect a session when the time limit is reached, you can configure the policy setting Computer Configuration\\Administrative Templates\\Windows Components\\Remote Desktop Services\\Remote Desktop Session Host\\Session Time Limits\\End session when time limits are reached.\r\n\r\nNote: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the Computer Configuration policy setting takes precedence.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-sessions-limits-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit","displayName":"Active session limit : (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_0","displayName":"Never","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_60000","displayName":"1 minute","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_300000","displayName":"5 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_600000","displayName":"10 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_900000","displayName":"15 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_1800000","displayName":"30 minutes","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_3600000","displayName":"1 hour","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_7200000","displayName":"2 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_10800000","displayName":"3 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_21600000","displayName":"6 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_28800000","displayName":"8 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_43200000","displayName":"12 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_57600000","displayName":"16 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_64800000","displayName":"18 hours","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_86400000","displayName":"1 day","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_172800000","displayName":"2 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_259200000","displayName":"3 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_345600000","displayName":"4 days","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_sessions_limits_1_ts_sessions_activelimit_432000000","displayName":"5 days","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1","displayName":"Start a program on connection (User)","description":"Configures Remote Desktop Services to run a specified program automatically upon connection.\r\n\r\nYou can use this setting to specify a program to run automatically when a user logs on to a remote computer.\r\n\r\nBy default, Remote Desktop Services sessions provide access to the full Windows desktop, unless otherwise specified with this setting, by the server administrator, or by the user in configuring the client connection. Enabling this setting overrides the \"Start Program\" settings set by the server administrator or user. The Start menu and Windows Desktop are not displayed, and when the user exits the program the session is automatically logged off.\r\n\r\nTo use this setting, in Program path and file name, type the fully qualified path and file name of the executable file to be run when the user logs on. If necessary, in Working Directory, type the fully qualified path to the starting directory for the program. If you leave Working Directory blank, the program runs with its default working directory. If the specified program path, file name, or working directory is not the name of a valid directory, the RD Session Host server connection fails with an error message.\r\n\r\nIf the status is set to Enabled, Remote Desktop Services sessions automatically run the specified program and use the specified Working Directory (or the program default directory, if Working Directory is not specified) as the working directory for the program.\r\n\r\nIf the status is set to Disabled or Not Configured, Remote Desktop Services sessions start with the full desktop, unless the server administrator or user specify otherwise. (See \"Computer Configuration\\Administrative Templates\\System\\Logon\\Run these programs at user logon\" setting.)\r\n\r\nNote: This setting appears in both Computer Configuration and User Configuration. If both settings are configured, the Computer Configuration setting overrides.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-terminalserver#admx-terminalserver-ts-start-program-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1_ts_program_name","displayName":"Program path and file name (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_terminalserver_ts_start_program_1_ts_workdir","displayName":"Working Directory (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnails","displayName":"Turn off the display of thumbnails and only display icons. (User)","description":"This policy setting allows you to configure how File Explorer displays thumbnail images or icons on the local computer.\r\n\r\nFile Explorer displays thumbnail images by default. \r\n\r\nIf you enable this policy setting, File Explorer displays only icons and never displays thumbnail images.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer displays only thumbnail images.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-thumbnails#admx-thumbnails-disablethumbnails"],"options":[{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnails_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnails_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnailsonnetworkfolders","displayName":"Turn off the display of thumbnails and only display icons on network folders (User)","description":"This policy setting allows you to configure how File Explorer displays thumbnail images or icons on network folders.\r\n\r\nFile Explorer displays thumbnail images on network folders by default.\r\n\r\nIf you enable this policy setting, File Explorer displays only icons and never displays thumbnail images on network folders.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer displays only thumbnail images on network folders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-thumbnails#admx-thumbnails-disablethumbnailsonnetworkfolders"],"options":[{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnailsonnetworkfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbnailsonnetworkfolders_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbsdbonnetworkfolders","displayName":"Turn off the caching of thumbnails in hidden thumbs.db files (User)","description":"Turns off the caching of thumbnails in hidden thumbs.db files.\r\n\r\nThis policy setting allows you to configure File Explorer to cache thumbnails of items residing in network folders in hidden thumbs.db files.\r\n\r\nIf you enable this policy setting, File Explorer does not create, read from, or write to thumbs.db files.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer creates, reads from, and writes to thumbs.db files.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-thumbnails#admx-thumbnails-disablethumbsdbonnetworkfolders"],"options":[{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbsdbonnetworkfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_thumbnails_disablethumbsdbonnetworkfolders_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_1","displayName":"Turn off Touch Panning (User)","description":"Turn off Panning \r\nTurns off touch panning, which allows users pan inside windows by touch. On a compatible PC with a touch digitizer, by default users are able to scroll or pan inside a scrolling area by dragging up or down directly on the scrolling content.\r\n\r\nIf you enable this setting, the user will not be able to pan windows by touch. \r\n\r\nIf you disable this setting, the user can pan windows by touch.\r\n\r\nIf you do not configure this setting, Touch Panning is on by default.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-touchinput#admx-touchinput-panningeverywhereoff-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_touchinput_panningeverywhereoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_touchinput_touchinputoff_1","displayName":"Turn off Tablet PC touch input (User)","description":"Turn off Tablet PC touch input\r\n\r\nTurns off touch input, which allows the user to interact with their computer using their finger.\r\n\r\nIf you enable this setting, the user will not be able to produce input with touch. They will not be able to use touch input or touch gestures such as tap and double tap, the touch pointer, and other touch-specific features.\r\n\r\nIf you disable this setting, the user can produce input with touch, by using gestures, the touch pointer, and other-touch specific features.\r\n\r\nIf you do not configure this setting, touch input is on by default.\r\n\r\nNote: Changes to this setting will not take effect until the user logs off.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-touchinput#admx-touchinput-touchinputoff-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_touchinput_touchinputoff_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_touchinput_touchinputoff_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator","displayName":"Calculator (User)","description":"This policy setting configures the synchronization of user settings of Calculator.\r\nBy default, the user settings of Calculator synchronize between computers. Use the policy setting to prevent the user settings of Calculator from synchronization between computers. \r\nIf you enable this policy setting, the Calculator user settings continue to synchronize. \r\nIf you disable this policy setting, Calculator user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-calculator"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_calculator_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod","displayName":"Configure Sync Method (User)","description":"This policy setting configures the sync provider used by User Experience Virtualization (UE-V) to sync settings between users’ computers. With Sync Method set to ”SyncProvider,” the UE-V Agent uses a built-in sync provider to keep user settings synchronized between the computer and the settings storage location. This is the default value. You can disable the sync provider on computers that never go offline and are always connected to the settings storage location.\r\nWhen SyncMethod is set to “None,” the UE-V Agent uses no sync provider. Settings are written directly to the settings storage location rather than being cached to sync later. \r\nSet SyncMethod to “External” when an external synchronization engine is being deployed for settings sync. This could use OneDrive, Work Folders, SharePoint or any other engine that uses a local folder to synchronize data between users’ computers. In this mode, UE-V writes settings data to the local folder specified in the settings storage path. These settings are then synchronized to other computers by an external synchronization engine. UE-V has no control over this synchronization. It only reads and writes the settings data when the normal UE-V triggers take place.\r\nWith notifications enabled, UE-V users receive a message when the settings sync is delayed. The notification delay policy setting defines the delay before a notification appears.\r\nIf you disable this policy setting, the sync provider is used to synchronize settings between computers and the settings storage location.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-configuresyncmethod"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_delay","displayName":"Notification delay (in seconds): (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable","displayName":"Enable notification (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_settingsimportnotification_enable_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list","displayName":"Sync Method: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_syncprovider","displayName":"SyncProvider","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_none","displayName":"None","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configuresyncmethod_syncmethodconfiguration_list_external","displayName":"External","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi","displayName":"VDI Configuration (User)","description":"This policy setting configures the synchronization of User Experience Virtualization (UE-V) rollback information for computers running in a non-persistent, pooled VDI environment. UE-V settings rollback data and checkpoints are normally stored only on the local computer. With this policy setting enabled, the rollback information is copied to the settings storage location when the user logs off or shuts down their VDI session. Enable this setting to register a VDI-specific settings location template and restore data on computers in pooled VDI environments that reset to a clean state on logout. With this policy enabled you can roll settings back to the state when UE-V was installed or to “last-known-good” configurations. Only enable this policy setting on computers running in a non-persistent VDI environment. The VDI Collection Name defines the name of the virtual desktop collection containing the virtual computers. \r\nIf you enable this policy setting, the UE-V rollback state is copied to the settings storage location on logout and restored on login.\r\nIf you disable this policy setting, no UE-V rollback state is copied to the settings storage location.\r\nIf you do not configure this policy, no UE-V rollback state is copied to the settings storage location.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-configurevdi"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_configurevdi_vdicollectionname","displayName":"VDI Collection Name: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync","displayName":"Do not synchronize Windows Apps (User)","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings for Windows apps.\r\nBy default, the UE-V Agent synchronizes settings for Windows apps between the computer and the settings storage location. \r\nIf you enable this policy setting, the UE-V Agent will not synchronize settings for Windows apps.\r\nIf you disable this policy setting, the UE-V Agent will synchronize settings for Windows apps. \r\nIf you do not configure this policy setting, any defined values are deleted.\r\nNote: If the user connects their Microsoft account for their computer then the UE-V Agent will not synchronize Windows apps. The Windows apps will default to whatever settings are configured in the Sync your settings configuration in Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-disablewin8sync"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewin8sync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings","displayName":"Synchronize Windows settings (User)","description":"\r\nThis policy setting configures the synchronization of Windows settings between computers.\r\nCertain Windows settings will synchronize between computers by default. These settings include Windows themes, Windows desktop settings, Ease of Access settings, and network printers. Use this policy setting to specify which Windows settings synchronize between computers. You can also use these settings to enable synchronization of users' sign-in information for certain apps, networks, and certificates.\r\nIf you enable this policy setting, only the selected Windows settings synchronize. Unselected Windows settings are excluded from settings synchronization.\r\nIf you disable this policy setting, all Windows Settings are excluded from the settings synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-disablewindowsossettings"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings","displayName":"Desktop settings (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_desktopsettings_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_easeofaccesssettings","displayName":"Ease of access (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_easeofaccesssettings_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_easeofaccesssettings_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters","displayName":"Network Printers (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_networkprinters_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings","displayName":"Roaming Credentials (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_roamingcredentialsettings_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings","displayName":"Themes (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_disablewindowsossettings_themesettings_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_finance","displayName":"Finance (User)","description":"This policy setting configures the synchronization of user settings for the Finance app.\r\nBy default, the user settings of Finance sync between computers. Use the policy setting to prevent the user settings of Finance from synchronizing between computers.\r\nIf you enable this policy setting, Finance user settings continue to sync.\r\nIf you disable this policy setting, Finance user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-finance"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_finance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_finance_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_games","displayName":"Games (User)","description":"This policy setting configures the synchronization of user settings for the Games app.\r\nBy default, the user settings of Games sync between computers. Use the policy setting to prevent the user settings of Games from synchronizing between computers.\r\nIf you enable this policy setting, Games user settings continue to sync.\r\nIf you disable this policy setting, Games user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-games"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_games_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_games_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10","displayName":"Internet Explorer 10 (User)","description":"This policy setting configures the synchronization of user settings of Internet Explorer 10.\r\nBy default, the user settings of Internet Explorer 10 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 10 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 10 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 10 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer10"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer10_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11","displayName":"Internet Explorer 11 (User)","description":"This policy setting configures the synchronization of user settings of Internet Explorer 11.\r\nBy default, the user settings of Internet Explorer 11 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 11 from synchronization between computers.\r\nIf you enable this policy setting, the Internet Explorer 11 user settings continue to synchronize.\r\nIf you disable this policy setting, Internet Explorer 11 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer11"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer11_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8","displayName":"Internet Explorer 8 (User)","description":"This policy setting configures the synchronization of user settings for Internet Explorer 8.\r\nBy default, the user settings of Internet Explorer 8 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 8 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 8 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 8 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer8"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer8_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9","displayName":"Internet Explorer 9 (User)","description":"This policy setting configures the synchronization of user settings for Internet Explorer 9.\r\nBy default, the user settings of Internet Explorer 9 synchronize between computers. Use the policy setting to prevent the user settings for Internet Explorer 9 from synchronization between computers. \r\nIf you enable this policy setting, the Internet Explorer 9 user settings continue to synchronize. \r\nIf you disable this policy setting, Internet Explorer 9 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorer9"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorer9_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon","displayName":"Internet Explorer Common Settings (User)","description":"This policy setting configures the synchronization of user settings which are common between the versions of Internet Explorer.\r\nBy default, the user settings which are common between the versions of Internet Explorer synchronize between computers. Use the policy setting to prevent the user settings of Internet Explorer from synchronization between computers. \r\nIf you enable this policy setting, the user settings which are common between the versions of Internet Explorer continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the versions of Internet Explorer are excluded from settings synchronization. If any version of the Internet Explorer settings are enabled this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-internetexplorercommon"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_internetexplorercommon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maps","displayName":"Maps (User)","description":"This policy setting configures the synchronization of user settings for the Maps app.\r\nBy default, the user settings of Maps sync between computers. Use the policy setting to prevent the user settings of Maps from synchronizing between computers.\r\nIf you enable this policy setting, Maps user settings continue to sync.\r\nIf you disable this policy setting, Maps user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-maps"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maps_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes","displayName":"Settings package size warning threshold (User)","description":"This policy setting allows you to configure the UE-V Agent to write a warning event to the event log when a settings package file size reaches a defined threshold. By default the UE-V Agent does not report information about package file size. \r\nIf you enable this policy setting, specify the threshold file size in bytes. When the settings package file exceeds this threshold the UE-V Agent will write a warning event to the event log.\r\nIf you disable or do not configure this policy setting, no event is written to the event log to report settings package size.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-maxpackagesizeinbytes"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_maxpackagesizeinbytes_maxpackagesizeinbytes","displayName":"Package size threshold (in bytes): (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access","displayName":"Microsoft Access 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Access 2010.\r\nBy default, the user settings of Microsoft Access 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Access 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Access 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010access"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010access_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common","displayName":"Microsoft Office 2010 Common Settings (User)","description":"This policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2010 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2010 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2010 applications from synchronization between computers. \r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2010 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2010 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2010 applications are enabled, this policy setting should not be disabled \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010common"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010common_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel","displayName":"Microsoft Excel 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Excel 2010.\r\nBy default, the user settings of Microsoft Excel 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Excel 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010excel"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010excel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010infopath","displayName":"Microsoft InfoPath 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft InfoPath 2010.\r\nBy default, the user settings of Microsoft InfoPath 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft InfoPath 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft InfoPath 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010infopath"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010infopath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010infopath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync","displayName":"Microsoft Lync 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Lync 2010.\r\nBy default, the user settings of Microsoft Lync 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2010 from synchronization between computers. \r\nIf you enable this policy setting, Microsoft Lync 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2010 user settings are excluded from the synchronization settings. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010lync"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010lync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010onenote","displayName":"Microsoft OneNote 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft OneNote 2010.\r\nBy default, the user settings of Microsoft OneNote 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft OneNote 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft OneNote 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010onenote"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010onenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010onenote_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook","displayName":"Microsoft Outlook 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Outlook 2010.\r\nBy default, the user settings of Microsoft Outlook 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010outlook"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010outlook_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint","displayName":"Microsoft PowerPoint 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft PowerPoint 2010.\r\nBy default, the user settings of Microsoft PowerPoint 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010powerpoint"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project","displayName":"Microsoft Project 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Project 2010.\r\nBy default, the user settings of Microsoft Project 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010project"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010project_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher","displayName":"Microsoft Publisher 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Publisher 2010.\r\nBy default, the user settings of Microsoft Publisher 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Publisher 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Publisher 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010publisher"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010publisher_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner","displayName":"Microsoft SharePoint Designer 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2010.\r\nBy default, the user settings of Microsoft SharePoint Designer 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft SharePoint Designer 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft SharePoint Designer 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010sharepointdesigner"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointdesigner_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointworkspace","displayName":"Microsoft SharePoint Workspace 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft SharePoint Workspace 2010.\r\nBy default, the user settings of Microsoft SharePoint Workspace 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Workspace 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft SharePoint Workspace 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft SharePoint Workspace 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010sharepointworkspace"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointworkspace_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010sharepointworkspace_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio","displayName":"Microsoft Visio 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Visio 2010.\r\nBy default, the user settings of Microsoft Visio 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010visio"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010visio_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word","displayName":"Microsoft Word 2010 (User)","description":"This policy setting configures the synchronization of user settings for Microsoft Word 2010.\r\nBy default, the user settings of Microsoft Word 2010 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2010 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2010 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2010 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2010word"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2010word_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access","displayName":"Microsoft Access 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Access 2013.\r\nBy default, the user settings of Microsoft Access 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Access 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Access 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013access"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013access_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup","displayName":"Access 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Access 2013.\r\nMicrosoft Access 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Access 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Access 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013accessbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013accessbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common","displayName":"Microsoft Office 2013 Common Settings (User)","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2013 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers.\r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2013 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2013 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2013 applications are enabled, this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013common"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013common_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup","displayName":"Common 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2013 applications.\r\nMicrosoft Office Suite 2013 has user settings which are common between applications and are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific common Microsoft Office Suite 2013 applications.\r\nIf you enable this policy setting, certain user settings which are common between the Microsoft Office Suite 2013 applications will continue to be backed up.\r\nIf you disable this policy setting, certain user settings which are common between the Microsoft Office Suite 2013 applications will not be backed up. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013commonbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013commonbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel","displayName":"Microsoft Excel 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Excel 2013.\r\nBy default, the user settings of Microsoft Excel 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Excel 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013excel"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup","displayName":"Excel 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Excel 2013.\r\nMicrosoft Excel 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Excel 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Excel 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013excelbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013excelbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath","displayName":"Microsoft InfoPath 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft InfoPath 2013.\r\nBy default, the user settings of Microsoft InfoPath 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft InfoPath 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft InfoPath 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft InfoPath 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013infopath"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup","displayName":"InfoPath 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft InfoPath 2013.\r\nMicrosoft InfoPath 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft InfoPath 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft InfoPath 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft InfoPath 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013infopathbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013infopathbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync","displayName":"Microsoft Lync 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Lync 2013.\r\nBy default, the user settings of Microsoft Lync 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Lync 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013lync"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup","displayName":"Lync 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Lync 2013.\r\nMicrosoft Lync 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Lync 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Lync 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013lyncbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013lyncbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness","displayName":"Microsoft OneDrive for Business 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for OneDrive for Business 2013.\r\nBy default, the user settings of OneDrive for Business 2013 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2013 from synchronization between computers.\r\nIf you enable this policy setting, OneDrive for Business 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, OneDrive for Business 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013onedriveforbusiness"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onedriveforbusiness_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenote","displayName":"Microsoft OneNote 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft OneNote 2013.\r\nBy default, the user settings of Microsoft OneNote 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft OneNote 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft OneNote 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013onenote"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenote_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup","displayName":"OneNote 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft OneNote 2013.\r\nMicrosoft OneNote 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft OneNote 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft OneNote 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013onenotebackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013onenotebackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook","displayName":"Microsoft Outlook 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Outlook 2013.\r\nBy default, the user settings of Microsoft Outlook 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013outlook"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlook_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup","displayName":"Outlook 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Outlook 2013.\r\nMicrosoft Outlook 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Outlook 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Outlook 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013outlookbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013outlookbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint","displayName":"Microsoft PowerPoint 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft PowerPoint 2013.\r\nBy default, the user settings of Microsoft PowerPoint 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013powerpoint"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup","displayName":"PowerPoint 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft PowerPoint 2013.\r\nMicrosoft PowerPoint 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft PowerPoint 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft PowerPoint 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013powerpointbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013powerpointbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project","displayName":"Microsoft Project 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Project 2013.\r\nBy default, the user settings of Microsoft Project 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013project"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013project_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup","displayName":"Project 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Project 2013.\r\nMicrosoft Project 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Project 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Project 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013projectbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013projectbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher","displayName":"Microsoft Publisher 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Publisher 2013.\r\nBy default, the user settings of Microsoft Publisher 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Publisher 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Publisher 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013publisher"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisher_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup","displayName":"Publisher 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Publisher 2013.\r\nMicrosoft Publisher 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Publisher 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Publisher 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013publisherbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013publisherbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner","displayName":"Microsoft SharePoint Designer 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft SharePoint Designer 2013.\r\nBy default, the user settings of Microsoft SharePoint Designer 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft SharePoint Designer 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft SharePoint Designer 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft SharePoint Designer 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013sharepointdesigner"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesigner_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup","displayName":"SharePoint Designer 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft SharePoint Designer 2013.\r\nMicrosoft SharePoint Designer 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft SharePoint Designer 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft SharePoint Designer 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft SharePoint Designer 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013sharepointdesignerbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013sharepointdesignerbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013uploadcenter","displayName":"Microsoft Office 2013 Upload Center (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 2013 Upload Center.\r\nBy default, the user settings of Microsoft Office 2013 Upload Center synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Office 2013 Upload Center from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Office 2013 Upload Center user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Office 2013 Upload Center user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013uploadcenter"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013uploadcenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013uploadcenter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio","displayName":"Microsoft Visio 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Visio 2013.\r\nBy default, the user settings of Microsoft Visio 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013visio"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visio_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup","displayName":"Visio 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Visio 2013.\r\nMicrosoft Visio 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Visio 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Visio 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013visiobackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013visiobackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word","displayName":"Microsoft Word 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Word 2013.\r\nBy default, the user settings of Microsoft Word 2013 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2013 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2013 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2013 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013word"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013word_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup","displayName":"Word 2013 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Word 2013.\r\nMicrosoft Word 2013 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2013 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Word 2013 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Word 2013 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2013wordbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2013wordbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016access","displayName":"Microsoft Access 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Access 2016.\r\nBy default, the user settings of Microsoft Access 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Access 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Access 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Access 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016access"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016access_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016access_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016accessbackup","displayName":"Access 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Access 2016.\r\nMicrosoft Access 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Access 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Access 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Access 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016accessbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016accessbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016accessbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common","displayName":"Microsoft Office 2016 Common Settings (User)","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications.\r\nBy default, the user settings which are common between the Microsoft Office Suite 2016 applications synchronize between computers. Use the policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers.\r\nIf you enable this policy setting, the user settings which are common between the Microsoft Office Suite 2016 applications continue to synchronize.\r\nIf you disable this policy setting, the user settings which are common between the Microsoft Office Suite 2016 applications are excluded from the synchronization settings. If any of the Microsoft Office Suite 2016 applications are enabled, this policy setting should not be disabled.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016common"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016common_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup","displayName":"Common 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings which are common between the Microsoft Office Suite 2016 applications.\r\nMicrosoft Office Suite 2016 has user settings which are common between applications and are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific common Microsoft Office Suite 2016 applications.\r\nIf you enable this policy setting, certain user settings which are common between the Microsoft Office Suite 2016 applications will continue to be backed up.\r\nIf you disable this policy setting, certain user settings which are common between the Microsoft Office Suite 2016 applications will not be backed up. \r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016commonbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016commonbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel","displayName":"Microsoft Excel 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Excel 2016.\r\nBy default, the user settings of Microsoft Excel 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Excel 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Excel 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Excel 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016excel"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup","displayName":"Excel 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Excel 2016.\r\nMicrosoft Excel 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Excel 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Excel 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Excel 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016excelbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016excelbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync","displayName":"Microsoft Lync 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Lync 2016.\r\nBy default, the user settings of Microsoft Lync 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Lync 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Lync 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Lync 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016lync"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lync_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup","displayName":"Lync 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Lync 2016.\r\nMicrosoft Lync 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Lync 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Lync 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Lync 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016lyncbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016lyncbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness","displayName":"Microsoft OneDrive for Business 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for OneDrive for Business 2016.\r\nBy default, the user settings of OneDrive for Business 2016 synchronize between computers. Use the policy setting to prevent the user settings of OneDrive for Business 2016 from synchronization between computers.\r\nIf you enable this policy setting, OneDrive for Business 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, OneDrive for Business 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onedriveforbusiness"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onedriveforbusiness_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote","displayName":"Microsoft OneNote 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft OneNote 2016.\r\nBy default, the user settings of Microsoft OneNote 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft OneNote 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft OneNote 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft OneNote 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onenote"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenote_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup","displayName":"OneNote 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft OneNote 2016.\r\nMicrosoft OneNote 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft OneNote 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft OneNote 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft OneNote 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016onenotebackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016onenotebackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook","displayName":"Microsoft Outlook 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Outlook 2016.\r\nBy default, the user settings of Microsoft Outlook 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Outlook 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Outlook 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Outlook 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016outlook"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlook_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlookbackup","displayName":"Outlook 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Outlook 2016.\r\nMicrosoft Outlook 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Outlook 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Outlook 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Outlook 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016outlookbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlookbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016outlookbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint","displayName":"Microsoft PowerPoint 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft PowerPoint 2016.\r\nBy default, the user settings of Microsoft PowerPoint 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft PowerPoint 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft PowerPoint 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft PowerPoint 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016powerpoint"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpoint_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup","displayName":"PowerPoint 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft PowerPoint 2016.\r\nMicrosoft PowerPoint 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft PowerPoint 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft PowerPoint 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft PowerPoint 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016powerpointbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016powerpointbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project","displayName":"Microsoft Project 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Project 2016.\r\nBy default, the user settings of Microsoft Project 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Project 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Project 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Project 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016project"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016project_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup","displayName":"Project 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Project 2016.\r\nMicrosoft Project 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Project 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Project 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Project 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016projectbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016projectbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisher","displayName":"Microsoft Publisher 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Publisher 2016.\r\nBy default, the user settings of Microsoft Publisher 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Publisher 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Publisher 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Publisher 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016publisher"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisher_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisher_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup","displayName":"Publisher 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Publisher 2016.\r\nMicrosoft Publisher 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Publisher 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Publisher 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Publisher 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016publisherbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016publisherbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016uploadcenter","displayName":"Microsoft Office 2016 Upload Center (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 2016 Upload Center.\r\nBy default, the user settings of Microsoft Office 2016 Upload Center synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Office 2016 Upload Center from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Office 2016 Upload Center user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Office 2016 Upload Center user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016uploadcenter"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016uploadcenter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016uploadcenter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio","displayName":"Microsoft Visio 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Visio 2016.\r\nBy default, the user settings of Microsoft Visio 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Visio 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Visio 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Visio 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016visio"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visio_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup","displayName":"Visio 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Visio 2016.\r\nMicrosoft Visio 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Visio 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Visio 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Visio 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016visiobackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016visiobackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word","displayName":"Microsoft Word 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Word 2016.\r\nBy default, the user settings of Microsoft Word 2016 synchronize between computers. Use the policy setting to prevent the user settings of Microsoft Word 2016 from synchronization between computers.\r\nIf you enable this policy setting, Microsoft Word 2016 user settings continue to synchronize.\r\nIf you disable this policy setting, Microsoft Word 2016 user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016word"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016word_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup","displayName":"Word 2016 backup only (User)","description":"\r\nThis policy setting configures the backup of certain user settings for Microsoft Word 2016.\r\nMicrosoft Word 2016 has user settings that are backed up instead of synchronizing between computers. Use the policy setting to suppress the backup of specific Microsoft Word 2016 settings.\r\nIf you enable this policy setting, certain user settings of Microsoft Word 2016 will continue to be backed up.\r\nIf you disable this policy setting, certain user settings of Microsoft Word 2016 will not be backed up.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice2016wordbackup"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice2016wordbackup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013","displayName":"Microsoft Office 365 Access 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Access 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Access 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365access2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016","displayName":"Microsoft Office 365 Access 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Access 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Access 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Access 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Access 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Access 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365access2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365access2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013","displayName":"Microsoft Office 365 Common 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2013 applications.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2013 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2013 applications from synchronization between computers with UE-V.\r\nIf you enable this policy setting, user settings which are common between the Microsoft Office Suite 2013 applications continue to synchronize with UE-V.\r\nIf you disable this policy setting, user settings which are common between the Microsoft Office Suite 2013 applications are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365common2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016","displayName":"Microsoft Office 365 Common 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings which are common between the Microsoft Office Suite 2016 applications.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings which are common between the Microsoft Office Suite 2016 applications will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings which are common between the Microsoft Office Suite 2016 applications from synchronization between computers with UE-V.\r\nIf you enable this policy setting, user settings which are common between the Microsoft Office Suite 2016 applications continue to synchronize with UE-V.\r\nIf you disable this policy setting, user settings which are common between the Microsoft Office Suite 2016 applications are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365common2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365common2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2013","displayName":"Microsoft Office 365 Excel 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Excel 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Excel 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365excel2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016","displayName":"Microsoft Office 365 Excel 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Excel 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Excel 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Excel 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Excel 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Excel 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365excel2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365excel2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013","displayName":"Microsoft Office 365 InfoPath 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 InfoPath 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 InfoPath 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 InfoPath 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 InfoPath 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 InfoPath 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365infopath2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365infopath2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013","displayName":"Microsoft Office 365 Lync 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Lync 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Lync 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365lync2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016","displayName":"Microsoft Office 365 Lync 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Lync 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Lync 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Lync 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Lync 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Lync 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365lync2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365lync2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013","displayName":"Microsoft Office 365 OneNote 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 OneNote 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 OneNote 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365onenote2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2016","displayName":"Microsoft Office 365 OneNote 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 OneNote 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 OneNote 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 OneNote 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 OneNote 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 OneNote 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365onenote2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365onenote2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013","displayName":"Microsoft Office 365 Outlook 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Outlook 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Outlook 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365outlook2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2016","displayName":"Microsoft Office 365 Outlook 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Outlook 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Outlook 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Outlook 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Outlook 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Outlook 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365outlook2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365outlook2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013","displayName":"Microsoft Office 365 PowerPoint 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 PowerPoint 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 PowerPoint 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365powerpoint2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016","displayName":"Microsoft Office 365 PowerPoint 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 PowerPoint 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 PowerPoint 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 PowerPoint 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 PowerPoint 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 PowerPoint 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365powerpoint2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365powerpoint2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2013","displayName":"Microsoft Office 365 Project 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Project 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Project 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365project2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016","displayName":"Microsoft Office 365 Project 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Project 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Project 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Project 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Project 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Project 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365project2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365project2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013","displayName":"Microsoft Office 365 Publisher 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Publisher 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Publisher 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365publisher2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016","displayName":"Microsoft Office 365 Publisher 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Publisher 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Publisher 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Publisher 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Publisher 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Publisher 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365publisher2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365publisher2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013","displayName":"Microsoft Office 365 SharePoint Designer 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 SharePoint Designer 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 SharePoint Designer 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 SharePoint Designer 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 SharePoint Designer 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 SharePoint Designer 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365sharepointdesigner2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365sharepointdesigner2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013","displayName":"Microsoft Office 365 Visio 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Visio 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Visio 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365visio2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016","displayName":"Microsoft Office 365 Visio 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Visio 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Visio 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Visio 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Visio 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Visio 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365visio2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365visio2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2013","displayName":"Microsoft Office 365 Word 2013 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2013.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2013 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2013 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Word 2013 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Word 2013 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365word2013"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2013_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2013_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016","displayName":"Microsoft Office 365 Word 2016 (User)","description":"\r\nThis policy setting configures the synchronization of user settings for Microsoft Office 365 Word 2016.\r\nMicrosoft Office 365 synchronizes certain settings by default without UE-V. If the synchronization capabilities of Microsoft Office 365 are disabled, then the user settings of Microsoft Office 365 Word 2016 will synchronize between a user’s work computers with UE-V by default. Use this policy setting to prevent the user settings of Microsoft Office 365 Word 2016 from synchronization between computers with UE-V.\r\nIf you enable this policy setting, Microsoft Office 365 Word 2016 user settings continue to sync with UE-V.\r\nIf you disable this policy setting, Microsoft Office 365 Word 2016 user settings are excluded from synchronization with UE-V.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-microsoftoffice365word2016"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_microsoftoffice365word2016_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_music","displayName":"Music (User)","description":"This policy setting configures the synchronization of user settings for the Music app.\r\nBy default, the user settings of Music sync between computers. Use the policy setting to prevent the user settings of Music from synchronizing between computers.\r\nIf you enable this policy setting, Music user settings continue to sync.\r\nIf you disable this policy setting, Music user settings are excluded from the synchronizing settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-music"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_music_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_music_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_news","displayName":"News (User)","description":"This policy setting configures the synchronization of user settings for the News app.\r\nBy default, the user settings of News sync between computers. Use the policy setting to prevent the user settings of News from synchronizing between computers.\r\nIf you enable this policy setting, News user settings continue to sync.\r\nIf you disable this policy setting, News user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-news"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_news_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_news_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad","displayName":"Notepad (User)","description":"This policy setting configures the synchronization of user settings of Notepad.\r\nBy default, the user settings of Notepad synchronize between computers. Use the policy setting to prevent the user settings of Notepad from synchronization between computers. \r\nIf you enable this policy setting, the Notepad user settings continue to synchronize. \r\nIf you disable this policy setting, Notepad user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-notepad"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_notepad_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_reader","displayName":"Reader (User)","description":"This policy setting configures the synchronization of user settings for the Reader app.\r\nBy default, the user settings of Reader sync between computers. Use the policy setting to prevent the user settings of Reader from synchronizing between computers.\r\nIf you enable this policy setting, Reader user settings continue to sync.\r\nIf you disable this policy setting, Reader user settings are excluded from the synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-reader"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_reader_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_reader_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout","displayName":"Synchronization timeout (User)","description":"This policy setting configures the number of milliseconds that the computer waits when retrieving user settings from the settings storage location. \r\nYou can use this setting to override the default value of 2000 milliseconds. \r\nIf you enable this policy setting, set the number of milliseconds that the system waits to retrieve settings. \r\nIf you disable or do not configure this policy setting, the default value of 2000 milliseconds is used.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-repositorytimeout"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_repositorytimeout_repositorytimeout","displayName":"Synchronization timeout (in milliseconds): (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath","displayName":"Settings storage path (User)","description":"This policy setting configures where the settings package files that contain user settings are stored. \r\nIf you enable this policy setting, the user settings are stored in the specified location. \r\nIf you disable or do not configure this policy setting, the user settings are stored in the user’s home directory if configured for your environment. \r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-settingsstoragepath"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_settingsstoragepath_settingsstoragepath","displayName":"Settings storage path (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_sports","displayName":"Sports (User)","description":"This policy setting configures the synchronization of user settings for the Sports app.\r\nBy default, the user settings of Sports sync between computers. Use the policy setting to prevent the user settings of Sports from synchronizing between computers.\r\nIf you enable this policy setting, Sports user settings continue to sync.\r\nIf you disable this policy setting, Sports user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-sports"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_sports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_sports_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled","displayName":"Use User Experience Virtualization (UE-V) (User)","description":"This policy setting allows you to enable or disable User Experience Virtualization (UE-V). Only applies to Windows 10 or earlier.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncenabled"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork","displayName":"Sync settings over metered connections (User)","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections.\r\nBy default, the UE-V Agent does not synchronize settings over a metered connection.\r\nWith this setting enabled, the UE-V Agent synchronizes settings over a metered connection.\r\nWith this setting disabled, the UE-V Agent does not synchronize settings over a metered connection.\r\nIf you do not configure this policy setting, any defined values are deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncovermeterednetwork"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming","displayName":"Sync settings over metered connections even when roaming (User)","description":"This policy setting defines whether the User Experience Virtualization (UE-V) Agent synchronizes settings over metered connections outside of the home provider network, for example when connected via a roaming connection.\r\nBy default, the UE-V Agent does not synchronize settings over a metered connection that is roaming.\r\nWith this setting enabled, the UE-V Agent synchronizes settings over a metered connection that is roaming.\r\nWith this setting disabled, the UE-V Agent will not synchronize settings over a metered connection that is roaming.\r\nIf you do not configure this policy setting, any defined values are deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncovermeterednetworkwhenroaming"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncovermeterednetworkwhenroaming_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled","displayName":"Ping the settings storage location before sync (User)","description":"This policy setting allows you to configure the User Experience Virtualization (UE-V) sync provider to ping the settings storage path before attempting to sync settings. If the ping is successful then the sync provider attempts to synchronize the settings packages. If the ping is unsuccessful then the sync provider doesn’t attempt the synchronization. \r\nIf you enable this policy setting, the sync provider pings the settings storage location before synchronizing settings packages.\r\nIf you disable this policy setting, the sync provider doesn’t ping the settings storage location before synchronizing settings packages. \r\nIf you do not configure this policy, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-syncproviderpingenabled"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_syncproviderpingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_travel","displayName":"Travel (User)","description":"This policy setting configures the synchronization of user settings for the Travel app.\r\nBy default, the user settings of Travel sync between computers. Use the policy setting to prevent the user settings of Travel from synchronizing between computers.\r\nIf you enable this policy setting, Travel user settings continue to sync.\r\nIf you disable this policy setting, Travel user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-travel"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_travel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_travel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_video","displayName":"Video (User)","description":"This policy setting configures the synchronization of user settings for the Video app.\r\nBy default, the user settings of Video sync between computers. Use the policy setting to prevent the user settings of Video from synchronizing between computers.\r\nIf you enable this policy setting, Video user settings continue to sync.\r\nIf you disable this policy setting, Video user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-video"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_video_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_video_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_weather","displayName":"Weather (User)","description":"This policy setting configures the synchronization of user settings for the Weather app.\r\nBy default, the user settings of Weather sync between computers. Use the policy setting to prevent the user settings of Weather from synchronizing between computers.\r\nIf you enable this policy setting, Weather user settings continue to sync.\r\nIf you disable this policy setting, Weather user settings are excluded from synchronization.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-weather"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_weather_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_weather_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad","displayName":"WordPad (User)","description":"This policy setting configures the synchronization of user settings of WordPad.\r\nBy default, the user settings of WordPad synchronize between computers. Use the policy setting to prevent the user settings of WordPad from synchronization between computers. \r\nIf you enable this policy setting, the WordPad user settings continue to synchronize. \r\nIf you disable this policy setting, WordPad user settings are excluded from the synchronization settings.\r\nIf you do not configure this policy setting, any defined values will be deleted.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userexperiencevirtualization#admx-userexperiencevirtualization-wordpad"],"options":[{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userexperiencevirtualization_wordpad_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize","displayName":"Limit profile size (User)","description":"This policy setting sets the maximum size of each user profile and determines the system's response when a user profile reaches the maximum size. This policy setting affects both local and roaming profiles.\r\n\r\nIf you disable this policy setting or do not configure it, the system does not limit the size of user profiles.\r\n\r\nIf you enable this policy setting, you can:\r\n\r\n-- Set a maximum permitted user profile size.\r\n-- Determine whether the registry files are included in the calculation of the profile size.\r\n-- Determine whether users are notified when the profile exceeds the permitted maximum size.\r\n-- Specify a customized message notifying users of the oversized profile.\r\n-- Determine how often the customized message is displayed.\r\n\r\nNote: In operating systems earlier than Microsoft Windows Vista, Windows will not allow users to log off until the profile size has been reduced to within the allowable limit. In Microsoft Windows Vista, Windows will not block users from logging off. Instead, if the user has a roaming user profile, Windows will not synchronize the user's profile with the roaming profile server if the maximum profile size limit specified here is exceeded.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-userprofiles#admx-userprofiles-limitsize"],"options":[{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_includereginproquota","displayName":"Show registry files in the file list (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_includereginproquota_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_includereginproquota_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_profilesize","displayName":"Max Profile size (KB) (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_sizemessage","displayName":"Custom Message (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_warnuser","displayName":"Notify user when profile storage space is exceeded. (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_warnuser_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_warnuser_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_userprofiles_limitsize_warnusertimeout","displayName":"Remind user every X minutes: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_wincal_turnoffwincal_1","displayName":"Turn off Windows Calendar (User)","description":"Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other users calendars.\r\n\r\nIf you enable this setting, Windows Calendar will be turned off.\r\n\r\nIf you disable or do not configure this setting, Windows Calendar will be turned on.\r\n\r\nThe default is for Windows Calendar to be turned on.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wincal#admx-wincal-turnoffwincal-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_wincal_turnoffwincal_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wincal_turnoffwincal_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_1","displayName":"Prohibit installing or uninstalling color profiles (User)","description":"This policy setting affects the ability of users to install or uninstall color profiles.\r\n\r\nIf you enable this policy setting, users cannot install new color profiles or uninstall previously installed color profiles.\r\n\r\nIf you disable or do not configure this policy setting, all users can install new color profiles. Standard users can uninstall color profiles that they previously installed. Administrators will be able to uninstall all color profiles.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowscolorsystem#admx-windowscolorsystem-prohibitchanginginstalledprofilelist-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowscolorsystem_prohibitchanginginstalledprofilelist_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsconnectnow_wcn_disablewcnui_1","displayName":"Prohibit access of the Windows Connect Now wizards (User)","description":"This policy setting prohibits access to Windows Connect Now (WCN) wizards. \r\n\r\nIf you enable this policy setting, the wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks, including \"Set up a wireless router or access point\" and \"Add a wireless device\" are disabled. \r\n\r\nIf you disable or do not configure this policy setting, users can access the wizard tasks, including \"Set up a wireless router or access point\" and \"Add a wireless device.\" The default for this policy setting allows users to access all WCN wizards.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsconnectnow#admx-windowsconnectnow-wcn-disablewcnui-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsconnectnow_wcn_disablewcnui_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsconnectnow_wcn_disablewcnui_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_classicshell","displayName":"Turn on Classic Shell (User)","description":"This setting allows an administrator to revert specific Windows Shell behavior to classic Shell behavior.\r\n\r\nIf you enable this setting, users cannot configure their system to open items by single-clicking (such as in Mouse in Control Panel). As a result, the user interface looks and operates like the interface for Windows NT 4.0, and users cannot restore the new features.\r\nEnabling this policy will also turn off the preview pane and set the folder options for File Explorer to Use classic folders view and disable the users ability to change these options.\r\n\r\nIf you disable or not configure this policy, the default File Explorer behavior is applied to the user.\r\n\r\nNote: In operating systems earlier than Windows Vista, enabling this policy will also disable the Active Desktop and Web view. This setting will also take precedence over the \"Enable Active Desktop\" setting. If both policies are enabled, Active Desktop is disabled.\r\n\r\nAlso, see the \"Disable Active Desktop\" setting in User Configuration\\Administrative Templates\\Desktop\\Active Desktop and the \"Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon\" setting in User Configuration\\Administrative Templates\\Windows Components\\File Explorer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-classicshell"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_classicshell_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_classicshell_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_confirmfiledelete","displayName":"Display confirmation dialog when deleting files (User)","description":"Allows you to have File Explorer display a confirmation dialog whenever a file is deleted or moved to the Recycle Bin.\r\n\r\nIf you enable this setting, a confirmation dialog is displayed when a file is deleted or moved to the Recycle Bin by the user.\r\n\r\nIf you disable or do not configure this setting, the default behavior of not displaying a confirmation dialog occurs.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-confirmfiledelete"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_confirmfiledelete_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_confirmfiledelete_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation","displayName":"Location where all default Library definition files for users/machines reside. (User)","description":"\r\nThis policy setting allows you to specify a location where all default Library definition files for users/machines reside.\r\n\r\nIf you enable this policy setting, administrators can specify a path where all default Library definition files for users reside. The user will not be allowed to make changes to these Libraries from the UI. On every logon, the policy settings are verified and Libraries for the user are updated or changed according to the path defined.\r\n\r\nIf you disable or do not configure this policy setting, no changes are made to the location of the default Library definition files.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-defaultlibrarieslocation"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_defaultlibrarieslocation_defaultlibrarieslocation","displayName":"Default Libraries definition location (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage","displayName":"Disable binding directly to IPropertySetStorage without intermediate layers. (User)","description":"\r\nChanges the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStorage implementation, and to include the intermediate layers provided by the Property System. This behavior is consistent with Windows Vista's behavior in this scenario.\r\n\r\nThis disables access to user-defined properties, and properties stored in NTFS secondary streams.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disablebinddirectlytopropertysetstorage"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablebinddirectlytopropertysetstorage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableindexedlibraryexperience","displayName":"Turn off Windows Libraries features that rely on indexed file data (User)","description":"This policy setting allows you to turn off Windows Libraries features that need indexed file metadata to function properly. If you enable this policy, some Windows Libraries features will be turned off to better handle included folders that have been redirected to non-indexed network locations.\r\nSetting this policy will:\r\n * Disable all Arrangement views except for \"By Folder\"\r\n * Disable all Search filter suggestions other than \"Date Modified\" and \"Size\"\r\n * Disable view of file content snippets in Content mode when search results are returned\r\n * Disable ability to stack in the Context menu and Column headers\r\n * Exclude Libraries from the scope of Start search\r\nThis policy will not enable users to add unsupported locations to Libraries.\r\n\r\nIf you enable this policy, Windows Libraries features that rely on indexed file data will be disabled.\r\nIf you disable or do not configure this policy, all default Windows Libraries features will be enabled. \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disableindexedlibraryexperience"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableindexedlibraryexperience_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableindexedlibraryexperience_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableknownfolders","displayName":"Disable Known Folders (User)","description":"This policy setting allows you to specify a list of known folders that should be disabled. Disabling a known folder will prevent the underlying file or directory from being created via the known folder API. If the folder exists before the policy is applied, the folder must be manually deleted since the policy only blocks the creation of the folder.\r\n\r\nYou can specify a known folder using its known folder id or using its canonical name. For example, the Sample Videos known folder can be disabled by specifying {440fcffd-a92b-4739-ae1a-d4a54907c53f} or SampleVideos.\r\n\r\nNote: Disabling a known folder can introduce application compatibility issues in applications that depend on the existence of the known folder.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disableknownfolders"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableknownfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableknownfolders_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disableknownfolders_disableknownfolders_prompt","displayName":"Disable these Known Folders. (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablesearchboxsuggestions","displayName":"Turn off display of recent search entries in the File Explorer search box (User)","description":"\r\nDisables suggesting recent queries for the Search Box and prevents entries into the Search Box from being stored in the registry for future references.\r\n\r\nFile Explorer shows suggestion pop-ups as users type into the Search Box. These suggestions are based on their past entries into the Search Box.\r\n\r\nNote: If you enable this policy, File Explorer will not show suggestion pop-ups as users type into the Search Box, and it will not store Search Box entries into the registry for future references. If the user types a property, values that match this property will be shown but no data will be saved in the registry or re-shown on subsequent uses of the search box.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-disablesearchboxsuggestions"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablesearchboxsuggestions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_disablesearchboxsuggestions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_enforceshellextensionsecurity","displayName":"Allow only per user or approved shell extensions (User)","description":"This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Windows is directed to only run those shell extensions that have either been approved by an administrator or that will not impact other users of the machine.\r\n\r\nA shell extension only runs if there is an entry in at least one of the following locations in registry.\r\n\r\nFor shell extensions that have been approved by the administrator and are available to all users of the computer, there must be an entry at HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Approved.\r\n\r\nFor shell extensions to run on a per-user basis, there must be an entry at HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Approved.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-enforceshellextensionsecurity"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_enforceshellextensionsecurity_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_enforceshellextensionsecurity_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized","displayName":"Start File Explorer with ribbon minimized (User)","description":"This policy setting allows you to specify whether the ribbon appears minimized or in full when new File Explorer windows are opened. If you enable this policy setting, you can set how the ribbon appears the first time users open File Explorer and whenever they open new windows. If you disable or do not configure this policy setting, users can choose how the ribbon appears when they open new windows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-explorerribbonstartsminimized"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown","displayName":"Pick one of the following settings (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_1","displayName":"Always open new File Explorer windows with the ribbon minimized.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_2","displayName":"Never open new File Explorer windows with the ribbon minimized.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_3","displayName":"Minimize the ribbon when File Explorer is opened the first time.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_explorerribbonstartsminimized_explorerribbonstartsminimizeddropdown_4","displayName":"Display the full ribbon when File Explorer is opened the first time.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_hidecontentviewmodesnippets","displayName":"Turn off the display of snippets in Content view mode (User)","description":"This policy setting allows you to turn off the display of snippets in Content view mode.\r\n\r\nIf you enable this policy setting, File Explorer will not display snippets in Content view mode.\r\n\r\nIf you disable or do not configure this policy setting, File Explorer shows snippets in Content view mode by default.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-hidecontentviewmodesnippets"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_hidecontentviewmodesnippets_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_hidecontentviewmodesnippets_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-internet"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internet_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-internetlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_internetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranet","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-intranet"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranet_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-intranetlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_intranetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-localmachine"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachine_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-localmachinelockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_localmachinelockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users cannot preview items or get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-restricted"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restricted_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users cannot preview items or get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-restrictedlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_restrictedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-trusted"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trusted_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trustedlockdown","displayName":"Allow previewing and custom thumbnails of OpenSearch query results in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in the preview pane in File Explorer. While this policy setting usually applies to items returned by OpenSearch queries using Search Connectors (which allow rich searching of remote sources from within the File Explorer), it might affect other items as well that are marked from this zone. For example, some application-specific items such as MAPI (Messaging Application Programming Interface) items that are returned as search results in File Explorer will be affected. MAPI items reside in the Internet zone, so disabling this policy for the Internet zone will prevent the previewing of these items in File Explorer. For the case of custom thumbnails, it is the zone of the thumbnail that is checked, not the zone of item. Typically these are the same but a source is able to define a specific location of a thumbnail that is different than the location of the item.\r\n\r\nIf you enable this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you disable this policy setting, users will be prevented from previewing items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nIf you do not configure this policy setting, users can preview items and get custom thumbnails from OpenSearch query results in this zone using File Explorer.\r\n\r\nChanges to this setting may not be applied until the user logs off from Windows.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchpreview-trustedlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trustedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchpreview_trustedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-internet"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internet_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-internetlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_internetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-intranet"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranet_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-intranetlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_intranetlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-localmachine"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachine_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-localmachinelockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_localmachinelockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restricted","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users cannot perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-restricted"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restricted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restricted_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users cannot perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-restrictedlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_restrictedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trusted","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-trusted"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trusted_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trusted_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown","displayName":"Allow OpenSearch queries in File Explorer (User)","description":"\r\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors in File Explorer. Search Connectors allow rich searching of remote sources from within File Explorer. Search results will be returned in File Explorer and can be acted upon like local files.\r\n\r\nIf you enable this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you disable this policy setting, users are prevented from performing OpenSearch queries in this zone using Search Connectors.\r\n\r\nIf you do not configure this policy setting, users can perform OpenSearch queries in this zone using Search Connectors.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-iz-policy-opensearchquery-trustedlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_iz_policy_opensearchquery_trustedlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_linkresolveignorelinkinfo","displayName":"Do not track Shell shortcuts during roaming (User)","description":"This policy setting determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system.\r\n\r\nShortcut files typically include an absolute path to the original target file as well as the relative path to the current target file. When the system cannot find the file in the current target path, then, by default, it searches for the target in the original path. If the shortcut has been copied to a different computer, the original path might lead to a network computer, including external resources, such as an Internet server.\r\n\r\nIf you enable this policy setting, Windows only searches the current target path. It does not search for the original path even when it cannot find the target file in the current target path.\r\n\r\nIf you disable or do not configure this policy setting, Windows searches for the original path when it cannot find the target file in the current target path.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-linkresolveignorelinkinfo"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_linkresolveignorelinkinfo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_linkresolveignorelinkinfo_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_maxrecentdocs","displayName":"Maximum number of recent documents (User)","description":"\"This policy setting allows you to set the maximum number of shortcuts the system can display in the Recent Items menu on the Start menu.\r\n\r\nThe Recent Items menu contains shortcuts to the nonprogram files the user has most recently opened.\r\n\r\nIf you enable this policy setting, the system displays the number of shortcuts specified by the policy setting.\r\n\r\nIf you disable or do not configure this policy setting, by default, the system displays shortcuts to the 10 most recently opened documents.\"\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-maxrecentdocs"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_maxrecentdocs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_maxrecentdocs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_maxrecentdocs_maxrecentdocs","displayName":"Maximum number of recent documents (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nobackbutton","displayName":"Hide the common dialog back button (User)","description":"Hide the Back button in the Open dialog box.\r\n\r\nThis policy setting lets you remove new features added in Microsoft Windows 2000 Professional, so the Open dialog box appears as it did in Windows NT 4.0 and earlier. This policy setting affects only programs that use the standard Open dialog box provided to developers of Windows programs.\r\n\r\nIf you enable this policy setting, the Back button is removed from the standard Open dialog box.\r\n\r\nIf you disable or do not configure this policy setting, the Back button is displayed for any standard Open dialog box.\r\n\r\nTo see an example of the standard Open dialog box, start Notepad and, on the File menu, click Open.\r\n\r\nNote: In Windows Vista, this policy setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. Also, third-party applications with Windows 2000 or later certification to are required to adhere to this policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nobackbutton"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nobackbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nobackbutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocachethumbnailpictures","displayName":"Turn off caching of thumbnail pictures (User)","description":"This policy setting allows you to turn off caching of thumbnail pictures.\r\n\r\nIf you enable this policy setting, thumbnail views are not cached.\r\n\r\nIf you disable or do not configure this policy setting, thumbnail views are cached.\r\n\r\nNote: For shared corporate workstations or computers where security is a top concern, you should enable this policy setting to turn off the thumbnail view cache, because the thumbnail cache can be read by everyone.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nocachethumbnailpictures"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocachethumbnailpictures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocachethumbnailpictures_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocdburning","displayName":"Remove CD Burning features (User)","description":"This policy setting allows you to remove CD Burning features. File Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.\r\n\r\nIf you enable this policy setting, all features in the File Explorer that allow you to use your CD writer are removed.\r\n\r\nIf you disable or do not configure this policy setting, users are able to use the File Explorer CD burning features.\r\n\r\nNote: This policy setting does not prevent users from using third-party applications to create or modify CDs using a CD writer.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nocdburning"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocdburning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nocdburning_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangeanimation","displayName":"Remove UI to change menu animation setting (User)","description":"This policy setting allows you to prevent users from enabling or disabling minor animations in the operating system for the movement of windows, menus, and lists.\r\n\r\nIf you enable this policy setting, the \"Use transition effects for menus and tooltips\" option in Display in Control Panel is disabled, and cannot be toggled by users.\r\n\r\nEffects, such as animation, are designed to enhance the user's experience but might be confusing or distracting to some users.\r\n\r\nIf you disable or do not configure this policy setting, users are allowed to turn on or off these minor system animations using the \"Use transition effects for menus and tooltips\" option in Display in Control Panel.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nochangeanimation"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangeanimation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangeanimation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangekeyboardnavigationindicators","displayName":"Remove UI to change keyboard navigation indicator setting (User)","description":"Disables the \"Hide keyboard navigation indicators until I use the ALT key\" option in Display in Control Panel.\r\n\r\nWhen this Display Properties option is selected, the underlining that indicates a keyboard shortcut character (hot key) does not appear on menus until you press ALT.\r\n\r\nEffects, such as transitory underlines, are designed to enhance the user's experience but might be confusing or distracting to some users.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nochangekeyboardnavigationindicators"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangekeyboardnavigationindicators_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nochangekeyboardnavigationindicators_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodfstab","displayName":"Remove DFS tab (User)","description":"This policy setting allows you to remove the DFS tab from File Explorer.\r\n\r\nIf you enable this policy setting, the DFS (Distributed File System) tab is removed from File Explorer and from other programs that use the File Explorer browser, such as My Computer. As a result, users cannot use this tab to view or change the properties of the DFS shares available from their computer.\r\n\r\nThis policy setting does not prevent users from using other methods to configure DFS.\r\n\r\nIf you disable or do not configure this policy setting, the DFS tab is available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nodfstab"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodfstab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodfstab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives","displayName":"Hide these specified drives in My Computer (User)","description":"This policy setting allows you to hide these specified drives in My Computer.\r\n\r\nThis policy setting allows you to remove the icons representing selected hard drives from My Computer and File Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.\r\n\r\nIf you enable this policy setting, select a drive or combination of drives in the drop-down list.\r\n\r\nNote: This policy setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.\r\n\r\nAlso, this policy setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.\r\n\r\nIf you disable or do not configure this policy setting, all drives are displayed, or select the \"Do not restrict drives\" option in the drop-down list.\r\n\r\nAlso, see the \"Prevent access to drives from My Computer\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nodrives"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown","displayName":"Pick one of the following combinations (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_3","displayName":"Restrict A and B drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_4","displayName":"Restrict C drive only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_8","displayName":"Restrict D drive only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_7","displayName":"Restrict A, B and C drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_15","displayName":"Restrict A, B, C and D drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_67108863","displayName":"Restrict all drives","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nodrives_nodrivesdropdown_0","displayName":"Do not restrict drives","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noentirenetwork","displayName":"No Entire Network in Network Locations (User)","description":"Removes all computers outside of the user's workgroup or local domain from lists of network resources in File Explorer and Network Locations.\r\n\r\nIf you enable this setting, the system removes the Entire Network option and the icons representing networked computers from Network Locations and from the browser associated with the Map Network Drive option.\r\n\r\nThis setting does not prevent users from viewing or connecting to computers in their workgroup or domain. It also does not prevent users from connecting to remote computers by other commonly used methods, such as by typing the share name in the Run dialog box or the Map Network Drive dialog box.\r\n\r\nTo remove computers in the user's workgroup or domain from lists of network resources, use the \"No Computers Near Me in Network Locations\" setting.\r\n\r\nNote: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noentirenetwork"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noentirenetwork_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noentirenetwork_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemenu","displayName":"Remove File menu from File Explorer (User)","description":"Removes the File menu from My Computer and File Explorer.\r\n\r\nThis setting does not prevent users from using other methods to perform tasks available on the File menu.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nofilemenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemru","displayName":"Hide the dropdown list of recent files (User)","description":"Removes the list of most recently used files from the Open dialog box.\r\n\r\nIf you disable this setting or do not configure it, the \"File name\" field includes a drop-down list of recently used files. If you enable this setting, the \"File name\" field is a simple text box. Users must browse directories to find a file or type a file name in the text box.\r\n\r\nThis setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.\r\n\r\nTo see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.\r\n\r\nNote: In Windows Vista, this policy setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nofilemru"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemru_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofilemru_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofolderoptions","displayName":"Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon (User)","description":"This policy setting allows you to prevent users from accessing Folder Options through the View tab on the ribbon in File Explorer.\r\n\r\nFolder Options allows users to change the way files and folders open, what appears in the navigation pane, and other advanced view settings.\r\n\r\nIf you enable this policy setting, users will receive an error message if they tap or click the Options button or choose the Change folder and search options command, and they will not be able to open Folder Options.\r\n\r\nIf you disable or do not configure this policy setting, users can open Folder Options from the View tab on the ribbon.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nofolderoptions"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofolderoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nofolderoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nohardwaretab","displayName":"Remove Hardware tab (User)","description":"Removes the Hardware tab.\r\n\r\nThis setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. As a result, users cannot use the Hardware tab to view or change the device list or device properties, or use the Troubleshoot button to resolve problems with the device.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nohardwaretab"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nohardwaretab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nohardwaretab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomanagemycomputerverb","displayName":"Hides the Manage item on the File Explorer context menu (User)","description":"Removes the Manage item from the File Explorer context menu. This context menu appears when you right-click File Explorer or My Computer.\r\n\r\nThe Manage item opens Computer Management (Compmgmt.msc), a console tool that includes many of the primary Windows 2000 administrative tools, such as Event Viewer, Device Manager, and Disk Management. You must be an administrator to use many of the features of these tools.\r\n\r\nThis setting does not remove the Computer Management item from the Start menu (Start, Programs, Administrative Tools, Computer Management), nor does it prevent users from using other methods to start Computer Management.\r\n\r\nTip: To hide all context menus, use the \"Remove File Explorer's default context menu\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nomanagemycomputerverb"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomanagemycomputerverb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomanagemycomputerverb_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomycomputershareddocuments","displayName":"Remove Shared Documents from My Computer (User)","description":"This policy setting allows you to remove the Shared Documents folder from My Computer.\r\n\r\nWhen a Windows client is in a workgroup, a Shared Documents icon appears in the File Explorer Web view under \"Other Places\" and also under \"Files Stored on This Computer\" in My Computer. Using this policy setting, you can choose not to have these items displayed.\r\n\r\nIf you enable this policy setting, the Shared Documents folder is not displayed in the Web view or in My Computer.\r\n\r\nIf you disable or do not configure this policy setting, the Shared Documents folder is displayed in Web view and also in My Computer when the client is part of a workgroup.\r\n\r\nNote: The ability to remove the Shared Documents folder via Group Policy is only available on Windows XP Professional.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nomycomputershareddocuments"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomycomputershareddocuments_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nomycomputershareddocuments_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nonetconnectdisconnect","displayName":"Remove \"Map Network Drive\" and \"Disconnect Network Drive\" (User)","description":"Prevents users from using File Explorer or Network Locations to map or disconnect network drives.\r\n\r\nIf you enable this setting, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in File Explorer and Network Locations and from menus that appear when you right-click the File Explorer or Network Locations icons.\r\n\r\nThis setting does not prevent users from connecting to another computer by typing the name of a shared folder in the Run dialog box.\r\n\r\nNote:\r\n\r\nThis setting was documented incorrectly on the Explain tab in Group Policy for Windows 2000. The Explain tab states incorrectly that this setting prevents users from connecting and disconnecting drives.\r\n\r\nNote: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nonetconnectdisconnect"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nonetconnectdisconnect_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nonetconnectdisconnect_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noplacesbar","displayName":"Hide the common dialog places bar (User)","description":"Removes the shortcut bar from the Open dialog box.\r\n\r\nThis setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.\r\n\r\nTo see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.\r\n\r\nNote: In Windows Vista, this policy setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noplacesbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noplacesbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noplacesbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norecyclefiles","displayName":"Do not move deleted files to the Recycle Bin (User)","description":"When a file or folder is deleted in File Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior.\r\n\r\nIf you enable this setting, files and folders that are deleted using File Explorer will not be placed in the Recycle Bin and will therefore be permanently deleted.\r\n\r\nIf you disable or do not configure this setting, files and folders deleted using File Explorer will be placed in the Recyele Bin.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-norecyclefiles"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norecyclefiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norecyclefiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norunasinstallprompt","displayName":"Do not request alternate credentials (User)","description":"Prevents users from submitting alternate logon credentials to install a program.\r\n\r\nThis setting suppresses the \"Install Program As Other User\" dialog box for local and network installations. This dialog box, which prompts the current user for the user name and password of an administrator, appears when users who are not administrators try to install programs locally on their computers. This setting allows administrators who have logged on as regular users to install programs without logging off and logging on again using their administrator credentials.\r\n\r\nMany programs can be installed only by an administrator. If you enable this setting and a user does not have sufficient permissions to install a program, the installation continues with the current user's logon credentials. As a result, the installation might fail, or it might complete but not include all features. Or, it might appear to complete successfully, but the installed program might not operate correctly.\r\n\r\nIf you disable this setting or do not configure it, the \"Install Program As Other User\" dialog box appears whenever users install programs locally on the computer.\r\n\r\nBy default, users are not prompted for alternate logon credentials when installing programs from a network share. If enabled, this setting overrides the \"Request credentials for network installations\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-norunasinstallprompt"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norunasinstallprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_norunasinstallprompt_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosearchinternettryharderbutton","displayName":"Remove the Search the Internet \"Search again\" link (User)","description":"If you enable this policy, the \"Internet\" \"Search again\" link will not be shown when the user performs a search in the Explorer window.\r\n\r\nIf you disable this policy, there will be an \"Internet\" \"Search again\" link when the user performs a search in the Explorer window. This button launches a search in the default browser with the search terms.\r\n\r\nIf you do not configure this policy (default), there will be an \"Internet\" link when the user performs a search in the Explorer window.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nosearchinternettryharderbutton"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosearchinternettryharderbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosearchinternettryharderbutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosecuritytab","displayName":"Remove Security tab (User)","description":"Removes the Security tab from File Explorer.\r\n\r\nIf you enable this setting, users opening the Properties dialog box for all file system objects, including folders, files, shortcuts, and drives, will not be able to access the Security tab. As a result, users will be able to neither change the security settings nor view a list of all users that have access to the resource in question.\r\n\r\nIf you disable or do not configure this setting, users will be able to access the security tab.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nosecuritytab"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosecuritytab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nosecuritytab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noshellsearchbutton","displayName":"Remove Search button from File Explorer (User)","description":"This policy setting allows you to remove the Search button from the File Explorer toolbar.\r\n\r\nIf you enable this policy setting, the Search button is removed from the Standard Buttons toolbar that appears in File Explorer and other programs that use the File Explorer window, such as My Computer and Network Locations.\r\n\r\nEnabling this policy setting does not remove the Search button or affect any search features of Internet browser windows, such as the Internet Explorer window.\r\n\r\nIf you disable or do not configure this policy setting, the Search button is available from the File Explorer toolbar.\r\n\r\nThis policy setting does not affect the Search items on the File Explorer context menu or on the Start menu. To remove Search from the Start menu, use the \"Remove Search menu from Start menu\" policy setting (in User Configuration\\Administrative Templates\\Start Menu and Taskbar). To hide all context menus, use the \"Remove File Explorer's default context menu\" policy setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noshellsearchbutton"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noshellsearchbutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noshellsearchbutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical","displayName":"Turn off numerical sorting in File Explorer (User)","description":"\r\nThis policy setting allows you to have file names sorted literally (as in Windows 2000 and earlier) rather than in numerical order.\r\nIf you enable this policy setting, File Explorer will sort file names by each digit in a file name (for example, 111 < 22 < 3).\r\nIf you disable or do not configure this policy setting, File Explorer will sort file names by increasing number value (for example, 3 < 22 < 111).\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nostrcmplogical"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nostrcmplogical_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewcontextmenu","displayName":"Remove File Explorer's default context menu (User)","description":"Removes shortcut menus from the desktop and File Explorer. Shortcut menus appear when you right-click an item.\r\n\r\nIf you enable this setting, menus do not appear when you right-click the desktop or when you right-click the items in File Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noviewcontextmenu"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewcontextmenu_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewcontextmenu_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive","displayName":"Prevent access to drives from My Computer (User)","description":"Prevents users from using My Computer to gain access to the content of selected drives.\r\n\r\nIf you enable this setting, users can browse the directory structure of the selected drives in My Computer or File Explorer, but they cannot open folders and access the contents. Also, they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives.\r\n\r\nTo use this setting, select a drive or combination of drives from the drop-down list. To allow access to all drive directories, disable this setting or select the \"Do not restrict drives\" option from the drop-down list.\r\n\r\nNote: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.\r\n\r\n Also, this setting does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to view and change drive characteristics.\r\n\r\nAlso, see the \"Hide these specified drives in My Computer\" setting.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noviewondrive"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown","displayName":"Pick one of the following combinations (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_3","displayName":"Restrict A and B drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_4","displayName":"Restrict C drive only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_8","displayName":"Restrict D drive only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_7","displayName":"Restrict A, B and C drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_15","displayName":"Restrict A, B, C and D drives only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_67108863","displayName":"Restrict all drives","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noviewondrive_nodrivesdropdown_0","displayName":"Do not restrict drives","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nowindowshotkeys","displayName":"Turn off Windows Key hotkeys (User)","description":"Turn off Windows Key hotkeys.\r\n\r\nKeyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard sequence Windows+R opens the Run dialog box; pressing Windows+E starts File Explorer. By using this setting, you can disable these Windows Key hotkeys.\r\n\r\nIf you enable this setting, the Windows Key hotkeys are unavailable.\r\n\r\nIf you disable or do not configure this setting, the Windows Key hotkeys are available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-nowindowshotkeys"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nowindowshotkeys_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_nowindowshotkeys_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noworkgroupcontents","displayName":"No Computers Near Me in Network Locations (User)","description":"This policy setting allows you to remove computers in the user's workgroup and domain from lists of network resources in File Explorer and Network Locations.\r\n\r\nIf you enable this policy setting, the system removes the \"Computers Near Me\" option and the icons representing nearby computers from Network Locations. This policy setting also removes these icons from the Map Network Drive browser.\r\n\r\nIf you disable or do not configure this policy setting, computers in the user's workgroup and domain appear in lists of network resources in File Explorer and Network Locations.\r\n\r\nThis policy setting does not prevent users from connecting to computers in their workgroup or domain by other commonly used methods, such as typing the share name in the Run dialog box or the Map Network Drive dialog box.\r\n\r\nTo remove network computers from lists of network resources, use the \"No Entire Network in Network Locations\" policy setting.\r\n\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-noworkgroupcontents"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noworkgroupcontents_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_noworkgroupcontents_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar","displayName":"Items displayed in Places Bar (User)","description":"Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify from 1 to 5 items to be displayed in the Places Bar.\r\n\r\nThe valid items you may display in the Places Bar are:\r\n\r\n1) Shortcuts to a local folders -- (ex. C:\\Windows)\r\n\r\n2) Shortcuts to remote folders -- (\\\\server\\share)\r\n\r\n3) FTP folders\r\n\r\n4) web folders\r\n\r\n5) Common Shell folders.\r\n\r\nThe list of Common Shell Folders that may be specified:\r\n\r\nDesktop, Recent Places, Documents, Pictures, Music, Recently Changed, Attachments and Saved Searches.\r\n\r\nIf you disable or do not configure this setting the default list of items will be displayed in the Places Bar.\r\n\r\nNote: In Windows Vista, this policy setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-placesbar"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places0","displayName":"Item 1 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places1","displayName":"Item 2 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places2","displayName":"Item 3 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places3","displayName":"Item 4 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_placesbar_places4","displayName":"Item 5 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_promptrunasinstallnetpath","displayName":"Request credentials for network installations (User)","description":"Prompts users for alternate logon credentials during network-based installations.\r\n\r\nThis setting displays the \"Install Program As Other User\" dialog box even when a program is being installed from files on a network computer across a local area network connection.\r\n\r\nIf you disable this setting or do not configure it, this dialog box appears only when users are installing programs from local media.\r\n\r\nThe \"Install Program as Other User\" dialog box prompts the current user for the user name and password of an administrator. This setting allows administrators who have logged on as regular users to install programs without logging off and logging on again using their administrator credentials.\r\n\r\nIf the dialog box does not appear, the installation proceeds with the current user's permissions. If these permissions are not sufficient, the installation might fail, or it might complete but not include all features. Or, it might appear to complete successfully, but the installed program might not operate correctly.\r\n\r\nNote: If it is enabled, the \"Do not request alternate credentials\" setting takes precedence over this setting. When that setting is enabled, users are not prompted for alternate logon credentials on any installation.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-promptrunasinstallnetpath"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_promptrunasinstallnetpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_promptrunasinstallnetpath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_recyclebinsize","displayName":"Maximum allowed Recycle Bin size (User)","description":"Limits the percentage of a volume's disk space that can be used to store deleted files.\r\n\r\nIf you enable this setting, the user has a maximum amount of disk space that may be used for the Recycle Bin on their workstation.\r\n\r\nIf you disable or do not configure this setting, users can change the total amount of disk space used by the Recycle Bin.\r\n\r\nNote: This setting is applied to all volumes.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-recyclebinsize"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_recyclebinsize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_recyclebinsize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_recyclebinsize_recyclebinsizespin","displayName":"Maximum Recycle Bin size: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_1","displayName":"Turn off shell protocol protected mode (User)","description":"This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applications can open folders and launch files. The protected mode reduces the functionality of this protocol allowing applications to only open a limited set of folders. Applications are not able to open files with this protocol when it is in the protected mode. It is recommended to leave this protocol in the protected mode to increase the security of Windows.\r\n\r\nIf you enable this policy setting the protocol is fully enabled, allowing the opening of folders and files.\r\n\r\nIf you disable this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders.\r\n\r\nIf you do not configure this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-shellprotocolprotectedmodetitle-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_shellprotocolprotectedmodetitle_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary","displayName":"Pin Libraries or Search Connectors to the \"Search again\" links and the Start menu (User)","description":"This policy setting allows up to five Libraries or Search Connectors to be pinned to the \"Search again\" links and the Start menu links. The \"Search again\" links at the bottom of the Search Results view allow the user to reconduct a search but in a different location. To add a Library or Search Connector link, specify the path of the .Library-ms or .searchConnector-ms file in the \"Location\" text box (for example, \"C:\\sampleLibrary.Library-ms\" for the Documents library, or \"C:\\sampleSearchConnector.searchConnector-ms\" for a Search Connector). The pinned link will only work if this path is valid and the location contains the specified .Library-ms or .searchConnector-ms file.\r\n\r\nYou can add up to five additional links to the \"Search again\" links at the bottom of results returned in File Explorer after a search is executed. These links will be shared between Internet search sites and Search Connectors/Libraries. Search Connector/Library links take precedence over Internet search links.\r\n\r\nThe first several links will also be pinned to the Start menu. A total of four links can be included on the Start menu. The \"See more results\" link will be pinned first by default, unless it is disabled via Group Policy. The \"Search the Internet\" link is pinned second, if it is pinned via Group Policy (though this link is disabled by default). If a custom Internet search link is pinned using the \"Custom Internet search provider\" Group Policy, this link will be pinned third on the Start menu. The remaining link(s) will be shared between pinned Search Connectors/Libraries and pinned Internet/intranet search links. Search Connector/Library links take precedence over Internet/intranet search links.\r\n\r\nIf you enable this policy setting, the specified Libraries or Search Connectors will appear in the \"Search again\" links and the Start menu links.\r\n\r\nIf you disable or do not configure this policy setting, no Libraries or Search Connectors will appear in the \"Search again\" links or the Start menu links.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-tryharderpinnedlibrary"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library0","displayName":"Location 1 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library1","displayName":"Location 2 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library2","displayName":"Location 3 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library3","displayName":"Location 4 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedlibrary_library4","displayName":"Location 5 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch","displayName":"Pin Internet search sites to the \"Search again\" links and the Start menu (User)","description":"This policy setting allows you to add Internet or intranet sites to the \"Search again\" links located at the bottom of search results in File Explorer and the Start menu links. The \"Search again\" links at the bottom of the Search Results view allow the user to reconduct a search but in a different location. The Internet search site will be searched with the text in the search box. To add an Internet search site, specify the URL of the search site in OpenSearch format with {searchTerms} for the query string (for example, http://www.example.com/results.aspx?q={searchTerms}).\r\n\r\nYou can add up to five additional links to the \"Search again\" links at the bottom of results returned in File Explorer after a search is executed. These links will be shared between Internet search sites and Search Connectors/Libraries. Search Connector/Library links take precedence over Internet search links.\r\n\r\nThe first several links will also be pinned to the Start menu. A total of four links can be pinned on the Start menu. The \"See more results\" link will be pinned first by default, unless it is disabled via Group Policy. The \"Search the Internet\" link is pinned second, if it is pinned via Group Policy (though this link is disabled by default). If a custom Internet search link is pinned using the \"Custom Internet search provider\" Group Policy, this link will be pinned third on the Start menu. The remaining link(s) will be shared between pinned Internet/intranet links and pinned Search Connectors/Libraries. Search Connector/Library links take precedence over Internet/intranet search links.\r\n\r\nIf you enable this policy setting, the specified Internet sites will appear in the \"Search again\" links and the Start menu links.\r\n\r\nIf you disable or do not configure this policy setting, no custom Internet search sites will be added to the \"Search again\" links or the Start menu links.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsexplorer#admx-windowsexplorer-tryharderpinnedopensearch"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch0","displayName":"Site URL 1 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch1","displayName":"Site URL 2 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch2","displayName":"Site URL 3 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch3","displayName":"Site URL 4 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearch4","displayName":"Site URL 5 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel0","displayName":"Site Name 1 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel1","displayName":"Site Name 2 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel2","displayName":"Site Name 3 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel3","displayName":"Site Name 4 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsexplorer_tryharderpinnedopensearch_opensearchlabel4","displayName":"Site Name 5 (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings","displayName":"Configure HTTP Proxy (User)","description":"This policy setting allows you to specify the HTTP proxy settings for Windows Media Player.\r\n\r\nIf you enable this policy setting, select one of the following proxy types:\r\n\r\n- Autodetect: the proxy settings are automatically detected.\r\n- Custom: unique proxy settings are used.\r\n- Use browser proxy settings: browser's proxy settings are used.\r\n\r\nIf the Custom proxy type is selected, the rest of the options on the Setting tab must be specified because no default settings are used for the proxy. The options are ignored if Autodetect or Browser is selected.\r\n\r\nThe Configure button on the Network tab in the Player is not available for the HTTP protocol and the proxy cannot be configured. If the \"Hide network tab\" policy setting is also enabled, the entire Network tab is hidden.\r\n\r\nThis policy is ignored if the \"Streaming media protocols\" policy setting is enabled and HTTP is not selected.\r\n\r\nIf you disable this policy setting, the HTTP proxy server cannot be used and the user cannot configure the HTTP proxy.\r\n\r\nIf you do not configure this policy setting, users can configure the HTTP proxy settings.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-configurehttpproxysettings"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_bypassproxylocal","displayName":"Bypass proxy for local addresses (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_bypassproxylocal_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_bypassproxylocal_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_donotuseproxylocal","displayName":"Do not use proxy server for addresses beginning with (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxyaddress","displayName":"Proxy address (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxyport","displayName":"Proxy port (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxytype","displayName":"Proxy type (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxytype_3","displayName":"Autodetect","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxytype_2","displayName":"Custom","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurehttpproxysettings_proxytype_1","displayName":"Use browser proxy settings","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings","displayName":"Configure MMS Proxy (User)","description":"This policy setting allows you to specify the MMS proxy settings for Windows Media Player.\r\n\r\nIf you enable this policy setting, select one of the following proxy types:\r\n\r\n- Autodetect: the proxy settings are automatically detected.\r\n- Custom: unique proxy settings are used.\r\n\r\nIf the Custom proxy type is selected, the rest of the options on the Setting tab must be specified; otherwise, the default settings are used. The options are ignored if Autodetect is selected.\r\n\r\nThe Configure button on the Network tab in the Player is not available and the protocol cannot be configured. If the \"Hide network tab\" policy setting is also enabled, the entire Network tab is hidden.\r\n\r\nThis policy setting is ignored if the \"Streaming media protocols\" policy setting is enabled and Multicast is not selected.\r\n\r\nIf you disable this policy setting, the MMS proxy server cannot be used and users cannot configure the MMS proxy settings.\r\n\r\nIf you do not configure this policy setting, users can configure the MMS proxy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-configuremmsproxysettings"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_bypassproxylocal","displayName":"Bypass proxy for local addresses (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_bypassproxylocal_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_bypassproxylocal_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_donotuseproxylocal","displayName":"Do not use proxy server for addresses beginning with (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxyaddress","displayName":"Proxy address (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxyport","displayName":"Proxy port (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxytype","displayName":"Proxy type (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxytype_3","displayName":"Autodetect","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configuremmsproxysettings_proxytype_2","displayName":"Custom","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings","displayName":"Configure RTSP Proxy (User)","description":"This policy setting allows you to specify the RTSP proxy settings for Windows Media Player.\r\n\r\nIf you enable this policy setting, select one of the following proxy types:\r\n\r\n- Autodetect: the proxy settings are automatically detected.\r\n- Custom: unique proxy settings are used.\r\n\r\nIf the Custom proxy type is selected, the rest of the options on the Setting tab must be specified; otherwise, the default settings are used. The options are ignored if Autodetect is selected.\r\n\r\nThe Configure button on the Network tab in the Player is not available and the protocol cannot be configured. If the \"Hide network tab\" policy setting is also enabled, the entire Network tab is hidden.\r\n\r\nIf you disable this policy setting, the RTSP proxy server cannot be used and users cannot change the RTSP proxy settings.\r\n\r\nIf you do not configure this policy setting, users can configure the RTSP proxy settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-configurertspproxysettings"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_bypassproxylocal","displayName":"Bypass proxy for local addresses (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_bypassproxylocal_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_bypassproxylocal_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_donotuseproxylocal","displayName":"Do not use proxy server for addresses beginning with (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxyaddress","displayName":"Proxy address (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxyport","displayName":"Proxy port (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxytype","displayName":"Proxy type (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxytype_3","displayName":"Autodetect","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_configurertspproxysettings_proxytype_2","displayName":"Custom","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_disablenetworksettings","displayName":"Hide Network Tab (User)","description":"This policy setting allows you to hide the Network tab.\r\n\r\nIf you enable this policy setting, the Network tab in Windows Media Player is hidden. The default network settings are used unless the user has previously defined network settings for the Player.\r\n\r\nIf you disable or do not configure this policy setting, the Network tab appears and users can use it to configure network settings.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-disablenetworksettings"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_disablenetworksettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_disablenetworksettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_donotshowanchor","displayName":"Do Not Show Anchor (User)","description":"Prevents the anchor window from being displayed when Windows Media Player is in skin mode.\r\n\r\nThis policy hides the anchor window when the Player is in skin mode. In addition, the option on the Player tab in the Player that enables users to choose whether the anchor window displays is not available.\r\n\r\nWhen this policy is not configured or disabled, users can show or hide the anchor window when the Player is in skin mode by using the Player tab in the Player.\r\n\r\nWhen this policy is not configured and the Set and Lock Skin policy is enabled, some options in the anchor window are not available.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-donotshowanchor"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_donotshowanchor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_donotshowanchor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_enablescreensaver","displayName":"Allow Screen Saver (User)","description":"This policy setting allows a screen saver to interrupt playback.\r\n\r\nIf you enable this policy setting, a screen saver is displayed during playback of digital media according to the options selected on the Screen Saver tab in the Display Properties dialog box in Control Panel. The Allow screen saver during playback check box on the Player tab in the Player is selected and is not available.\r\n\r\nIf you disable this policy setting, a screen saver does not interrupt playback even if users have selected a screen saver. The Allow screen saver during playback check box is cleared and is not available.\r\n\r\nIf you do not configure this policy setting, users can change the setting for the Allow screen saver during playback check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-enablescreensaver"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_enablescreensaver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_enablescreensaver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hideprivacytab","displayName":"Hide Privacy Tab (User)","description":"This policy setting allows you to hide the Privacy tab in Windows Media Player.\r\n\r\nIf you enable this policy setting, the \"Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet\" check box on the Media Library tab is available, even though the Privacy tab is hidden, unless the \"Prevent music file media information retrieval\" policy setting is enabled.\r\n\r\nThe default privacy settings are used for the options on the Privacy tab unless the user changed the settings previously.\r\n\r\nIf you disable or do not configure this policy setting, the Privacy tab is not hidden, and users can configure any privacy settings not configured by other polices.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-hideprivacytab"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hideprivacytab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hideprivacytab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hidesecuritytab","displayName":"Hide Security Tab (User)","description":"This policy setting allows you to hide the Security tab in Windows Media Player.\r\n\r\nIf you enable this policy setting, the default security settings for the options on the Security tab are used unless the user changed the settings previously. Users can still change security and zone settings by using Internet Explorer unless these settings have been hidden or disabled by Internet Explorer policies.\r\n\r\nIf you disable or do not configure this policy setting, users can configure the security settings on the Security tab.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-hidesecuritytab"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hidesecuritytab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_hidesecuritytab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering","displayName":"Configure Network Buffering (User)","description":"This policy setting allows you to specify whether network buffering uses the default or a specified number of seconds.\r\n\r\nIf you enable this policy setting, select one of the following options to specify the number of seconds streaming media is buffered before it is played.\r\n\r\n- Custom: the number of seconds, up to 60, that streaming media is buffered.\r\n- Default: default network buffering is used and the number of seconds that is specified is ignored.\r\n\r\nThe \"Use default buffering\" and \"Buffer\" options on the Performance tab in the Player are not available.\r\n\r\nIf you disable or do not configure this policy setting, users can change the buffering options on the Performance tab.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-networkbuffering"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_bufferingtime","displayName":"Buffering Time (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_bufferingtime_1","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_bufferingtime_2","displayName":"Custom","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_networkbuffering_networkbuffering","displayName":"Configure Network Buffering (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_policycodecupdate","displayName":"Prevent Codec Download (User)","description":"This policy setting allows you to prevent Windows Media Player from downloading codecs.\r\n\r\nIf you enable this policy setting, the Player is prevented from automatically downloading codecs to your computer. In addition, the Download codecs automatically check box on the Player tab in the Player is not available.\r\n\r\nIf you disable this policy setting, codecs are automatically downloaded and the Download codecs automatically check box is not available.\r\n\r\nIf you do not configure this policy setting, users can change the setting for the Download codecs automatically check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-policycodecupdate"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_policycodecupdate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_policycodecupdate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventcddvdmetadataretrieval","displayName":"Prevent CD and DVD Media Information Retrieval (User)","description":"This policy setting allows you to prevent media information for CDs and DVDs from being retrieved from the Internet.\r\n\r\nIf you enable this policy setting, the Player is prevented from automatically obtaining media information from the Internet for CDs and DVDs played by users. In addition, the Retrieve media information for CDs and DVDs from the Internet check box on the Privacy Options tab in the first use dialog box and on the Privacy tab in the Player are not selected and are not available.\r\n\r\nIf you disable or do not configure this policy setting, users can change the setting of the Retrieve media information for CDs and DVDs from the Internet check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-preventcddvdmetadataretrieval"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventcddvdmetadataretrieval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventcddvdmetadataretrieval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventmusicfilemetadataretrieval","displayName":"Prevent Music File Media Information Retrieval (User)","description":"This policy setting allows you to prevent media information for music files from being retrieved from the Internet.\r\n\r\nIf you enable this policy setting, the Player is prevented from automatically obtaining media information for music files such as Windows Media Audio (WMA) and MP3 files from the Internet. In addition, the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box in the first use dialog box and on the Privacy and Media Library tabs in the Player are not selected and are not available.\r\n\r\nIf you disable or do not configure this policy setting, users can change the setting of the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-preventmusicfilemetadataretrieval"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventmusicfilemetadataretrieval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventmusicfilemetadataretrieval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventradiopresetsretrieval","displayName":"Prevent Radio Station Preset Retrieval (User)","description":"This policy setting allows you to prevent radio station presets from being retrieved from the Internet.\r\n\r\nIf you enable this policy setting, the Player is prevented from automatically retrieving radio station presets from the Internet and displaying them in Media Library. In addition, presets that exist before the policy is configured are not be updated, and presets a user adds are not be displayed.\r\n\r\nIf you disable or do not configure this policy setting, the Player automatically retrieves radio station presets from the Internet.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-preventradiopresetsretrieval"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventradiopresetsretrieval_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_preventradiopresetsretrieval_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_skinlockdown","displayName":"Set and Lock Skin (User)","description":"This policy setting allows you to set and lock Windows Media Player in skin mode, using a specified skin.\r\n\r\nIf you enable this policy setting, the Player displays only in skin mode using the skin specified in the Skin box on the Setting tab.\r\n\r\nYou must use the complete file name for the skin (for example, skin_name.wmz), and the skin must be installed in the %programfiles%\\Windows Media Player\\Skins Folder on a user's computer. If the skin is not installed on a user's computer, or if the Skin box is blank, the Player opens by using the Corporate skin. The only way to specify the Corporate skin is to leave the Skin box blank.\r\n\r\nA user has access only to the Player features that are available with the specified skin. Users cannot switch the Player to full mode and cannot choose a different skin.\r\n\r\nIf you disable or do not configure this policy setting, users can display the Player in full or skin mode and have access to all available features of the Player.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-skinlockdown"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_skinlockdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_skinlockdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_skinlockdown_lockskin","displayName":"Skin (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols","displayName":"Streaming Media Protocols (User)","description":"This policy setting allows you to specify that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server running Windows Media Services.\r\n\r\nIf you enable this policy setting, the protocols that are selected on the Network tab of the Player are used to receive a stream initiated through an MMS or RTSP URL from a Windows Media server. If the RSTP/UDP check box is selected, a user can specify UDP ports in the Use ports check box. If the user does not specify UDP ports, the Player uses default ports when using the UDP protocol. This policy setting also specifies that multicast streams can be received if the \"Allow the Player to receive multicast streams\" check box on the Network tab is selected.\r\n\r\nIf you enable this policy setting, the administrator must also specify the protocols that are available to users on the Network tab. If the administrator does not specify any protocols, the Player cannot access an MMS or RTSP URL from a Windows Media server. If the \"Hide network tab\" policy setting is enabled, the entire Network tab is hidden.\r\n\r\nIf you do not configure this policy setting, users can select the protocols to use on the Network tab.\r\n\r\nIf you disable this policy setting, the Protocols for MMS URLs and Multicast streams areas of the Network tab are not available and the Player cannot receive an MMS or RTSP stream from a Windows Media server.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsmediaplayer#admx-windowsmediaplayer-windowsstreamingmediaprotocols"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_httpcheckbox","displayName":"HTTP (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_httpcheckbox_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_httpcheckbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_multicastcheckbox","displayName":"Multicast (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_multicastcheckbox_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_multicastcheckbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_tcpcheckbox","displayName":"TCP (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_tcpcheckbox_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_tcpcheckbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_udpcheckbox","displayName":"UDP (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_udpcheckbox_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_udpcheckbox_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsmediaplayer_windowsstreamingmediaprotocols_udpports","displayName":"UDP Ports (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_1","displayName":"Turn off the offer to update to the latest version of Windows (User)","description":"Enables or disables the Store offer to update to the latest version of Windows.\r\n\r\nIf you enable this setting, the Store application will not offer updates to the latest version of Windows.\r\n\r\nIf you disable or do not configure this setting the Store application will offer updates to the latest version of Windows.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsstore#admx-windowsstore-disableosupgrade-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsstore_disableosupgrade_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_1","displayName":"Turn off the Store application (User)","description":"Denies or allows access to the Store application.\r\n\r\nIf you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.\r\n\r\nIf you disable or don't configure this setting, access to the Store application is allowed.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-windowsstore#admx-windowsstore-removewindowsstore-1"],"options":[{"id":"user_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_1_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_windowsstore_removewindowsstore_1_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_winlogon_customshell","displayName":"Custom User Interface (User)","description":"Specifies an alternate user interface.\r\n\r\nThe Explorer program (%windir%\\explorer.exe) creates the familiar Windows interface, but you can use this setting to specify an alternate interface. If you enable this setting, the system starts the interface you specify instead of Explorer.exe.\r\n\r\nTo use this setting, copy your interface program to a network share or to your system drive. Then, enable this setting, and type the name of the interface program, including the file name extension, in the Shell name text box. If the interface program file is not located in a folder specified in the Path environment variable for your system, enter the fully qualified path to the file.\r\n\r\nIf you disable this setting or do not configure it, the setting is ignored and the system displays the Explorer interface.\r\n\r\nTip: To find the folders indicated by the Path environment variable, click System Properties in Control Panel, click the Advanced tab, click the Environment Variables button, and then, in the System variables box, click Path.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-customshell"],"options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_customshell_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_customshell_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_winlogon_customshell_customshellinst","displayName":"Interface file name (for example, Explorer.exe) (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhoursnotificationpolicydescription","displayName":"Remove logon hours expiration warnings (User)","description":"This policy controls whether the logged on user should be notified when his logon hours are about to expire. By default, a user is notified before logon hours expire, if actions have been set to occur when the logon hours expire.\r\n\r\nIf you enable this setting, warnings are not displayed to the user before the logon hours expire.\r\n\r\nIf you disable or do not configure this setting, users receive warnings before the logon hours expire, if actions have been set to occur when the logon hours expire.\r\n\r\nNote: If you configure this setting, you might want to examine and appropriately configure the “Set action to take when logon hours expire” setting. If “Set action to take when logon hours expire” is disabled or not configured, the “Remove logon hours expiration warnings” setting will have no effect, and users receive no warnings about logon hour expiration\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-logonhoursnotificationpolicydescription"],"options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhoursnotificationpolicydescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhoursnotificationpolicydescription_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription","displayName":"Set action to take when logon hours expire (User)","description":"This policy controls which action will be taken when the logon hours expire for the logged on user. The actions include lock the workstation, disconnect the user, or log the user off completely.\r\n\r\nIf you choose to lock or disconnect a session, the user cannot unlock the session or reconnect except during permitted logon hours.\r\n\r\nIf you choose to log off a user, the user cannot log on again except during permitted logon hours. If you choose to log off a user, the user might lose unsaved data.\r\n\r\nIf you enable this setting, the system will perform the action you specify when the user’s logon hours expire.\r\n\r\nIf you disable or do not configure this setting, the system takes no action when the user’s logon hours expire. The user can continue the existing session, but cannot log on to a new session.\r\n\r\nNote: If you configure this setting, you might want to examine and appropriately configure the “Remove logon hours expiration warnings” setting\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-logonhourspolicydescription"],"options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_logonhourspolicydescription","displayName":"Set action to take when logon hours expire (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_logonhourspolicydescription_1","displayName":"Lock","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_logonhourspolicydescription_2","displayName":"Disconnect","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_logonhourspolicydescription_logonhourspolicydescription_3","displayName":"Logoff","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription","displayName":"Report when logon server was not available during user logon (User)","description":"This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he has been logged on using previously stored account information.\r\n\r\nIf enabled, a notification popup will be displayed to the user when the user logs on with cached credentials.\r\n\r\nIf disabled or not configured, no popup will be displayed to the user.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-winlogon#admx-winlogon-reportcachedlogonpolicydescription"],"options":[{"id":"user_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_winlogon_reportcachedlogonpolicydescription_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_wordwheel_customsearch","displayName":"Custom Instant Search Internet search provider (User)","description":"Set up the menu name and URL for the custom Internet search provider.\r\n\r\nIf you enable this setting, the specified menu name and URL will be used for Internet searches.\r\n\r\nIf you disable or not configure this setting, the default Internet search provider will be used.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wordwheel#admx-wordwheel-customsearch"],"options":[{"id":"user_vendor_msft_policy_config_admx_wordwheel_customsearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wordwheel_customsearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_wordwheel_customsearch_customsearch_nameprompt","displayName":"The string or DLL resource from which to load the string shown in the Instant Search menu. (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_wordwheel_customsearch_customsearch_urlprompt","displayName":"The URL to use when invoking the custom Internet search, with the search term indicated by \"%w\". (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenabletokenbroker","displayName":"Enables the use of Token Broker for AD FS authentication (User)","description":"This policy specifies whether Work Folders should use Token Broker for interactive AD FS authentication instead of its own OAuth2 token flow used in previous versions.\r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-workfoldersclient#admx-workfoldersclient-pol-userenabletokenbroker"],"options":[{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenabletokenbroker_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenabletokenbroker_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders","displayName":"Specify Work Folders settings (User)","description":"This policy setting specifies the Work Folders server for affected users, as well as whether or not users are allowed to change settings when setting up Work Folders on a domain-joined computer.\r\n\r\nIf you enable this policy setting, affected users receive Work Folders settings when they sign in to a domain-joined PC. If this policy setting is disabled or not configured, no Work Folders settings are specified for the affected users, though users can manually set up Work Folders by using the Work Folders Control Panel item.\r\n\r\nThe \"Work Folders URL\" can specify either the URL used by the organization for Work Folders discovery, or the specific URL of the file server that stores the affected users' data.\r\n\r\nThe \"Work Folders Local Path\" specifies the local folder used on the client machine to sync files. This path may contain environment variables. Note: In order for this configuration to take effect, a valid 'Work Folders URL' must also be specified.\r\n \r\nThe “On-demand file access preference” option controls whether to enable on-demand file access. When enabled, the user controls which files in Work Folders are available offline on a given PC. The rest of the files in Work Folders are always visible and don’t take up any space on the PC, but the user must be connected to the Internet to access them.\r\n\r\nIf you enable this policy setting, on-demand file access is enabled.\r\nIf you disable this policy setting, on-demand file access is disabled, and enough storage space to store all the user’s files is required on each of their PCs.\r\nIf you specify User choice or do not configure this policy setting, the user decides whether to enable on-demand file access. However, if the Force automatic setup policy setting is enabled, Work Folders is set up automatically with on-demand file access enabled.\r\n\r\nThe \"Force automatic setup\" option specifies that Work Folders should be set up automatically without prompting users. This prevents users from choosing not to use Work Folders on the computer; it also prevents them from manually specifying the local folder in which Work Folders stores files. By default, Work Folders is stored in the \"%USERPROFILE%\\Work Folders\" folder. If this option is not specified, users must use the Work Folders Control Panel item on their computers to set up Work Folders.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-workfoldersclient#admx-workfoldersclient-pol-userenableworkfolders"],"options":[{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_autoprovision_chk","displayName":"Force automatic setup (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_autoprovision_chk_0","displayName":"False","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_autoprovision_chk_1","displayName":"True","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_ghostingpreference_enum","displayName":"On-demand file access preference: (User)","description":null,"helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_ghostingpreference_enum_1","displayName":"Enable (recommended)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_ghostingpreference_enum_2","displayName":"Disable","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_ghostingpreference_enum_3","displayName":"User choice","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_localfolderpath_edit","displayName":"Work Folders Local Path: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_workfoldersclient_pol_userenableworkfolders_lbl_serverurl_edit","displayName":"Work Folders URL: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_wpn_nocallsduringquiethours","displayName":"Turn off calls during Quiet Hours (User)","description":"\r\n This policy setting blocks voice and video calls during Quiet Hours.\r\n\r\n If you enable this policy setting, voice and video calls will be blocked during the designated Quiet Hours time window each day, and users will not be able to customize any other Quiet Hours settings.\r\n\r\n If you disable this policy setting, voice and video calls will be allowed during Quiet Hours, and users will not be able to customize this or any other Quiet Hours settings.\r\n\r\n If you do not configure this policy setting, voice and video calls will be allowed during Quiet Hours by default. Adminstrators and users will be able to modify this setting.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-nocallsduringquiethours"],"options":[{"id":"user_vendor_msft_policy_config_admx_wpn_nocallsduringquiethours_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_nocallsduringquiethours_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_wpn_nolockscreentoastnotification","displayName":"Turn off toast notifications on the lock screen (User)","description":"\r\n This policy setting turns off toast notifications on the lock screen.\r\n\r\n If you enable this policy setting, applications will not be able to raise toast notifications on the lock screen.\r\n\r\n If you disable or do not configure this policy setting, toast notifications on the lock screen are enabled and can be turned off by the administrator or user.\r\n\r\n No reboots or service restarts are required for this policy setting to take effect.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-nolockscreentoastnotification"],"options":[{"id":"user_vendor_msft_policy_config_admx_wpn_nolockscreentoastnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_nolockscreentoastnotification_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_wpn_noquiethours","displayName":"Turn off Quiet Hours (User)","description":"\r\n This policy setting turns off Quiet Hours functionality.\r\n \r\n If you enable this policy setting, toast notifications will not be suppressed and some background tasks will not be deferred during the designated Quiet Hours time window each day.\r\n \r\n If you disable this policy setting, toast notifications will be suppressed and some background task deferred during the designated Quiet Hours time window. Users will not be able to change this or any other Quiet Hours settings.\r\n \r\n If you do not configure this policy setting, Quiet Hours are enabled by default but can be turned off or by the administrator or user.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-noquiethours"],"options":[{"id":"user_vendor_msft_policy_config_admx_wpn_noquiethours_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_noquiethours_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_wpn_notoastnotification","displayName":"Turn off toast notifications (User)","description":"\r\n This policy setting turns off toast notifications for applications.\r\n\r\n If you enable this policy setting, applications will not be able to raise toast notifications.\r\n\r\n Note that this policy does not affect taskbar notification balloons.\r\n\r\n Note that Windows system features are not affected by this policy. You must enable/disable system features individually to stop their ability to raise toast notifications.\r\n\r\n If you disable or do not configure this policy setting, toast notifications are enabled and can be turned off by the administrator or user.\r\n\r\n No reboots or service restarts are required for this policy setting to take effect.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-notoastnotification"],"options":[{"id":"user_vendor_msft_policy_config_admx_wpn_notoastnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_notoastnotification_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailybeginminute","displayName":"Set the time Quiet Hours begins each day (User)","description":"\r\n This policy setting specifies the number of minutes after midnight (local time) that Quiet Hours is to begin each day.\r\n\r\n If you enable this policy setting, the specified time will be used, and users will not be able to customize any Quiet Hours settings.\r\n\r\n If you disable this policy setting, a default value will be used, and users will not be able to change it or any other Quiet Hours setting.\r\n\r\n If you do not configure this policy setting, a default value will be used, which administrators and users will be able to modify.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-quiethoursdailybeginminute"],"options":[{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailybeginminute_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailybeginminute_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailybeginminute_quiethoursdailybeginminutecontrol","displayName":"Minutes after midnight: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailyendminute","displayName":"Set the time Quiet Hours ends each day (User)","description":"\r\n This policy setting specifies the number of minutes after midnight (local time) that Quiet Hours is to end each day.\r\n\r\n If you enable this policy setting, the specified time will be used, and users will not be able to customize any Quiet Hours settings.\r\n\r\n If you disable this policy setting, a default value will be used, and users will not be able to change it or any other Quiet Hours setting.\r\n\r\n If you do not configure this policy setting, a default value will be used, which administrators and users will be able to modify.\r\n \r\n ","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-admx-wpn#admx-wpn-quiethoursdailyendminute"],"options":[{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailyendminute_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailyendminute_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_admx_wpn_quiethoursdailyendminute_quiethoursdailyendminutecontrol","displayName":"Minutes after midnight: (User)","description":null,"helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges","displayName":"MSI Always Install With Elevated Privileges (User)","description":"This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system. If you enable this policy setting, privileges are extended to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add or Remove Programs in Control Panel. This profile setting lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers. If you disable or do not configure this policy setting, the system applies the current user's permissions when it installs programs that a system administrator does not distribute or offer. Note: This policy setting appears both in the Computer Configuration and User Configuration folders. To make this policy setting effective, you must enable it in both folders. Caution: Skilled users can take advantage of the permissions this policy setting grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy setting is not guaranteed to be secure.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#msialwaysinstallwithelevatedprivileges"],"options":[{"id":"user_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges_0","displayName":"Disabled","description":"Disabled","helpText":null},{"id":"user_vendor_msft_policy_config_applicationmanagement_msialwaysinstallwithelevatedprivileges_1","displayName":"Enabled","description":"Enabled","helpText":null}]},{"id":"user_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly","displayName":"Require Private Store Only (User)","description":"Allows disabling of the retail catalog and only enables the Private store. Most restricted value is 1.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-ApplicationManagement#requireprivatestoreonly"],"options":[{"id":"user_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly_0","displayName":"Allow both public and Private store.","description":"Allow both public and Private store.","helpText":null},{"id":"user_vendor_msft_policy_config_applicationmanagement_requireprivatestoreonly_1","displayName":"Only Private store is enabled.","description":"Only Private store is enabled.","helpText":null}]},{"id":"user_vendor_msft_policy_config_attachmentmanager_donotpreservezoneinformation","displayName":"Do not preserve zone information in file attachments (User)","description":"This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (such as restricted, Internet, intranet, local). This requires NTFS in order to function correctly, and will fail without notice on FAT32. By not preserving the zone information, Windows cannot make proper risk assessments.\r\n\r\nIf you enable this policy setting, Windows does not mark file attachments with their zone information.\r\n\r\nIf you disable this policy setting, Windows marks file attachments with their zone information.\r\n\r\nIf you do not configure this policy setting, Windows marks file attachments with their zone information.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-attachmentmanager#attachmentmanager-donotpreservezoneinformation"],"options":[{"id":"user_vendor_msft_policy_config_attachmentmanager_donotpreservezoneinformation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_attachmentmanager_donotpreservezoneinformation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_attachmentmanager_hidezoneinfomechanism","displayName":"Hide mechanisms to remove zone information (User)","description":"This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments by clicking the Unblock button in the file's property sheet or by using a check box in the security warning dialog. Removing the zone information allows users to open potentially dangerous file attachments that Windows has blocked users from opening.\r\n\r\nIf you enable this policy setting, Windows hides the check box and Unblock button.\r\n\r\nIf you disable this policy setting, Windows shows the check box and Unblock button.\r\n\r\nIf you do not configure this policy setting, Windows hides the check box and Unblock button.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-attachmentmanager#attachmentmanager-hidezoneinfomechanism"],"options":[{"id":"user_vendor_msft_policy_config_attachmentmanager_hidezoneinfomechanism_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_attachmentmanager_hidezoneinfomechanism_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_attachmentmanager_notifyantivirusprograms","displayName":"Notify antivirus programs when opening attachments (User)","description":"This policy setting allows you to manage the behavior for notifying registered antivirus programs. If multiple programs are registered, they will all be notified. If the registered antivirus program already performs on-access checks or scans files as they arrive on the computer's email server, additional calls would be redundant. \r\n\r\nIf you enable this policy setting, Windows tells the registered antivirus program to scan the file when a user opens a file attachment. If the antivirus program fails, the attachment is blocked from being opened.\r\n\r\nIf you disable this policy setting, Windows does not call the registered antivirus programs when file attachments are opened.\r\n\r\nIf you do not configure this policy setting, Windows does not call the registered antivirus programs when file attachments are opened.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-attachmentmanager#attachmentmanager-notifyantivirusprograms"],"options":[{"id":"user_vendor_msft_policy_config_attachmentmanager_notifyantivirusprograms_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_attachmentmanager_notifyantivirusprograms_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_authentication_alloweapcertsso","displayName":"Allow EAP Cert SSO (User)","description":"Allows an EAP cert-based authentication for a single sign on (SSO) to access internal resources.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Authentication#alloweapcertsso"],"options":[{"id":"user_vendor_msft_policy_config_authentication_alloweapcertsso_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_authentication_alloweapcertsso_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices","displayName":"Disallow Autoplay for non-volume devices (User)","description":"This policy setting disallows AutoPlay for MTP devices like cameras or phones.\r\n\r\n If you enable this policy setting, AutoPlay is not allowed for MTP devices like cameras or phones.\r\n\r\n If you disable or do not configure this policy setting, AutoPlay is enabled for non-volume devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-disallowautoplayfornonvolumedevices"],"options":[{"id":"user_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_disallowautoplayfornonvolumedevices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior","displayName":"Set the default behavior for AutoRun (User)","description":"This policy setting sets the default behavior for Autorun commands.\r\n\r\n Autorun commands are generally stored in autorun.inf files. They often launch the installation program or other routines.\r\n\r\n Prior to Windows Vista, when media containing an autorun command is inserted, the system will automatically execute the program without user intervention.\r\n\r\n This creates a major security concern as code may be executed without user's knowledge. The default behavior starting with Windows Vista is to prompt the user whether autorun command is to be run. The autorun command is represented as a handler in the Autoplay dialog.\r\n\r\n If you enable this policy setting, an Administrator can change the default Windows Vista or later behavior for autorun to:\r\n\r\n a) Completely disable autorun commands, or\r\n b) Revert back to pre-Windows Vista behavior of automatically executing the autorun command.\r\n\r\n If you disable or not configure this policy setting, Windows Vista or later will prompt the user whether autorun command is to be run.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-setdefaultautorunbehavior"],"options":[{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_noautorun_dropdown","displayName":"Default AutoRun Behavior (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_noautorun_dropdown_1","displayName":"Do not execute any autorun commands","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_setdefaultautorunbehavior_noautorun_dropdown_2","displayName":"Automatically execute autorun commands","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay","displayName":"Turn off Autoplay (User)","description":"This policy setting allows you to turn off the Autoplay feature.\r\n\r\n Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.\r\n\r\n Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.\r\n\r\n Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.\r\n\r\n If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.\r\n\r\n This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.\r\n\r\n If you disable or do not configure this policy setting, AutoPlay is enabled.\r\n\r\n Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-autoplay#autoplay-turnoffautoplay"],"options":[{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay_autorun_box","displayName":"Turn off Autoplay on: (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay_autorun_box_181","displayName":"CD-ROM and removable media drives","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_autoplay_turnoffautoplay_autorun_box_255","displayName":"All drives","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowaddressbardropdown","displayName":"Allow Address Bar Dropdown (User)","description":"This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowaddressbardropdown"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowaddressbardropdown_0","displayName":"Block","description":"Prevented/not allowed. Hide the Address bar drop-down functionality and disable the Show search and site suggestions as I type toggle in Settings.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowaddressbardropdown_1","displayName":"Allow","description":"Allowed. Show the Address bar drop-down list and make it available.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowautofill","displayName":"Allow Autofill (User)","description":"This setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowautofill"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowautofill_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowautofill_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowbrowser","displayName":"Allow Browser (User)","description":"This policy is deprecated","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowbrowser"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowbrowser_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowbrowser_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary","displayName":"Allow Configuration Update For Books Library (User)","description":"This policy setting lets you decide whether Microsoft Edge can automatically update the configuration data for the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowconfigurationupdateforbookslibrary"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowconfigurationupdateforbookslibrary_1","displayName":"Allow","description":"Allowed. Microsoft Edge updates the configuration data for the Books Library automatically.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowcookies","displayName":"Allow Cookies (User)","description":"This setting lets you configure how your company deals with cookies.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowcookies"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowcookies_0","displayName":"Block all cookies from all sites","description":"Block all cookies from all sites","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowcookies_1","displayName":"Block only cookies from third party websites","description":"Block only cookies from third party websites","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowcookies_2","displayName":"Allow all cookies from all sites","description":"Allow all cookies from all sites","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowdevelopertools","displayName":"Allow Developer Tools (User)","description":"This setting lets you decide whether employees can use F12 Developer Tools on Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowdevelopertools"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowdevelopertools_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowdevelopertools_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowdonottrack","displayName":"Allow Do Not Track (User)","description":"This setting lets you decide whether employees can send Do Not Track headers to websites that request tracking info.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowdonottrack"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowdonottrack_0","displayName":"Block","description":"Never send tracking information.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowdonottrack_1","displayName":"Allow","description":"Send tracking information.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowextensions","displayName":"Allow Extensions (User)","description":"This setting lets you decide whether employees can load extensions in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowextensions"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowextensions_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowextensions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowflash","displayName":"Allow Flash (User)","description":"This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowflash"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowflash_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowflash_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowflashclicktorun","displayName":"Allow Flash Click To Run (User)","description":"Configure the Adobe Flash Click-to-Run setting.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowflashclicktorun"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowflashclicktorun_0","displayName":"Block","description":"Load and run Adobe Flash content automatically.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowflashclicktorun_1","displayName":"Allow","description":"Does not load or run Adobe Flash content automatically. Requires action from the user.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowfullscreenmode","displayName":"Allow Full Screen Mode (User)","description":"With this policy, you can specify whether to allow full-screen mode, which shows only the web content and hides the Microsoft Edge UI. If enabled or not configured, full-screen mode is available for use in Microsoft Edge. Your users and extensions must have the proper permissions. If disabled, full-screen mode is unavailable for use in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowfullscreenmode"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowfullscreenmode_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowfullscreenmode_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowinprivate","displayName":"Allow InPrivate (User)","description":"This setting lets you decide whether employees can browse using InPrivate website browsing.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowinprivate"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowinprivate_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowinprivate_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist","displayName":"Allow Microsoft Compatibility List (User)","description":"This policy setting lets you decide whether the Microsoft Compatibility List is enabled or disabled in Microsoft Edge. This feature uses a Microsoft-provided list to ensure that any sites with known compatibility issues are displayed correctly when a user navigates to them. By default, the Microsoft Compatibility List is enabled and can be viewed by navigating to about:compat. If you enable or don’t configure this setting, Microsoft Edge will periodically download the latest version of the list from Microsoft and will apply the configurations specified there during browser navigation. If a user visits a site on the Microsoft Compatibility List, he or she will be prompted to open the site in Internet Explorer 11. Once in Internet Explorer, the site will automatically be rendered as if the user is viewing it in the previous version of Internet Explorer it requires to display correctly. If you disable this setting, the Microsoft Compatibility List will not be used during browser navigation.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowmicrosoftcompatibilitylist"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowmicrosoftcompatibilitylist_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowpasswordmanager","displayName":"Allow Password Manager (User)","description":"This setting lets you decide whether employees can save their passwords locally, using Password Manager.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowpasswordmanager"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowpasswordmanager_0","displayName":"Block","description":"Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowpasswordmanager_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowpopups","displayName":"Allow Popups (User)","description":"This setting lets you decide whether to turn on Pop-up Blocker and whether to allow pop-ups to appear in secondary windows.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowpopups"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowpopups_0","displayName":"Block","description":"Turn off Pop-up Blocker letting pop-up windows open.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowpopups_1","displayName":"Allow","description":"Turn on Pop-up Blocker stopping pop-up windows from opening.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowprelaunch","displayName":"Allow Prelaunch (User)","description":"Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowprelaunch"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowprelaunch_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowprelaunch_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowprinting","displayName":"Allow Printing (User)","description":"With this policy, you can restrict whether printing web content in Microsoft Edge is allowed. If enabled, printing is allowed. If disabled, printing is not allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowprinting"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowprinting_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowprinting_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowsavinghistory","displayName":"Allow Saving History (User)","description":"Microsoft Edge saves your user's browsing history, which is made up of info about the websites they visit, on their devices. If enabled or not configured, the browsing history is saved and visible in the History pane. If disabled, the browsing history stops saving and is not visible in the History pane. If browsing history exists before this policy was disabled, the previous browsing history remains visible in the History pane. This policy, when disabled, does not stop roaming of existing history or history coming from other roamed devices.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsavinghistory"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowsavinghistory_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsavinghistory_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowsearchenginecustomization","displayName":"Allow Search Engine Customization (User)","description":"Allow search engine customization for MDM enrolled devices. Users can change their default search engine. If this setting is turned on or not configured, users can add new search engines and change the default used in the address bar from within Microsoft Edge Settings. If this setting is disabled, users will be unable to add search engines or change the default used in the address bar. This policy will only apply on domain joined machines or when the device is MDM enrolled. For more information, see Microsoft browser extension policy (aka.ms/browserpolicy).","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsearchenginecustomization"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowsearchenginecustomization_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsearchenginecustomization_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar","displayName":"Allow Search Suggestionsin Address Bar (User)","description":"This setting lets you decide whether search suggestions should appear in the Address bar of Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsearchsuggestionsinaddressbar"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar_0","displayName":"Block","description":"Prevented/Not allowed. Hide the search suggestions.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsearchsuggestionsinaddressbar_1","displayName":"Allow","description":"Allowed. Show the search suggestions.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowsideloadingofextensions","displayName":"Allow Sideloading Of Extensions (User)","description":"This setting lets you decide whether employees can sideload extensions in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsideloadingofextensions"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowsideloadingofextensions_0","displayName":"Block","description":"Prevented/Not allowed. Disabling does not prevent sideloading of extensions using Add-AppxPackage via Powershell. To prevent this, set the ApplicationManagement/AllowDeveloperUnlock policy to 1 (enabled).","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsideloadingofextensions_1","displayName":"Allow","description":"Allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowsmartscreen","displayName":"Allow Smart Screen (User)","description":"This setting lets you decide whether to turn on Windows Defender SmartScreen.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowsmartscreen"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowsmartscreen_0","displayName":"Block","description":"Turned off. Do not protect users from potential threats and prevent users from turning it on.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowsmartscreen_1","displayName":"Allow","description":"Turned on. Protect users from potential threats and prevent users from turning it off.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowtabpreloading","displayName":"Allow Tab Preloading (User)","description":"Prevent Microsoft Edge from starting and loading the Start and New Tab page at Windows startup and each time Microsoft Edge is closed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowtabpreloading"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowtabpreloading_0","displayName":"Block","description":"Prevented/Not allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowtabpreloading_1","displayName":"Allow","description":"Allowed. Preload Start and New tab pages.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_allowwebcontentonnewtabpage","displayName":"Allow Web Content On New Tab Page (User)","description":"This policy setting lets you configure what appears when Microsoft Edge opens a new tab. By default, Microsoft Edge opens the New Tab page. If you enable this setting, Microsoft Edge opens a new tab with the New Tab page. If you disable this setting, Microsoft Edge opens a new tab with a blank page. If you use this setting, employees can't change it. If you don't configure this setting, employees can choose how new tabs appears.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#allowwebcontentonnewtabpage"],"options":[{"id":"user_vendor_msft_policy_config_browser_allowwebcontentonnewtabpage_0","displayName":"Block","description":"Load a blank page instead of the default New tab page and prevent users from changing it.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_allowwebcontentonnewtabpage_1","displayName":"Allow","description":"Load the default New tab page.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_alwaysenablebookslibrary","displayName":"Always Enable Books Library (User)","description":"Specifies whether the Books Library in Microsoft Edge will always be visible regardless of the country or region setting for the device.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#alwaysenablebookslibrary"],"options":[{"id":"user_vendor_msft_policy_config_browser_alwaysenablebookslibrary_0","displayName":"Disabled","description":"Show the Books Library only in countries or regions where supported.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_alwaysenablebookslibrary_1","displayName":"Enabled","description":"Show the Books Library, regardless of the device's country or region.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_clearbrowsingdataonexit","displayName":"Clear Browsing Data On Exit (User)","description":"Specifies whether to always clear browsing history on exiting Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#clearbrowsingdataonexit"],"options":[{"id":"user_vendor_msft_policy_config_browser_clearbrowsingdataonexit_0","displayName":"Disabled","description":"Prevented/not allowed. Users can configure the 'Clear browsing data' option in Settings.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_clearbrowsingdataonexit_1","displayName":"Enabled","description":"Allowed. Clear the browsing data upon exit automatically.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_configureadditionalsearchengines","displayName":"Configure Additional Search Engines (User)","description":"Allows you to add up to 5 additional search engines for MDM-enrolled devices. If this setting is turned on, you can add up to 5 additional search engines for your employee. For each additional search engine you wish to add, you must specify a link to the OpenSearch XML file that contains, at minimum, the short name and the URL to the search engine. This policy does not affect the default search engine. Employees will not be able to remove these search engines, but they can set any one of these as the default. If this setting is not configured, the search engines are the ones specified in the App settings. If this setting is disabled, the search engines you had added will be deleted from your employee's machine. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configureadditionalsearchengines"],"options":null},{"id":"user_vendor_msft_policy_config_browser_configurefavoritesbar","displayName":"Configure Favorites Bar (User)","description":"The favorites bar shows your user's links to sites they have added to it. With this policy, you can specify whether to set the favorites bar to always be visible or hidden on any page. If enabled, favorites bar is always visible on any page, and the favorites bar toggle in Settings sets to On, but disabled preventing your users from making changes. An error message also shows at the top of the Settings pane indicating that your organization manages some settings. The show bar/hide bar option is hidden from the context menu. If disabled, the favorites bar is hidden, and the favorites bar toggle resets to Off, but disabled preventing your users from making changes. An error message also shows at the top of the Settings pane indicating that your organization manages some settings. If not configured, the favorites bar is hidden but is visible on the Start and New Tab pages, and the favorites bar toggle in Settings sets to Off but is enabled allowing the user to make changes.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurefavoritesbar"],"options":[{"id":"user_vendor_msft_policy_config_browser_configurefavoritesbar_0","displayName":"Disabled","description":"Hide the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to Off and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurefavoritesbar_1","displayName":"Enabled","description":"Show the favorites bar on all pages. Also, the favorites bar toggle, in Settings, is set to On and disabled preventing users from making changes. Microsoft Edge also hides the “show bar/hide bar” option in the context menu.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_configurehomebutton","displayName":"Configure Home Button (User)","description":"The Home button loads either the default Start page, the New tab page, or a URL defined in the Set Home Button URL policy. By default, this policy is disabled or not configured and clicking the home button loads the default Start page. When enabled, the home button is locked down preventing your users from making changes in Microsoft Edge's UI settings. To let your users change the Microsoft Edge UI settings, enable the Unlock Home Button policy. If Enabled AND: - Show home button & set to Start page is selected, clicking the home button loads the Start page. - Show home button & set to New tab page is selected, clicking the home button loads a New tab page. - Show home button & set a specific page is selected, clicking the home button loads the URL specified in the Set Home Button URL policy. - Hide home button is selected, the home button is hidden in Microsoft Edge. Default setting: Disabled or not configured Related policies: - Set Home Button URL - Unlock Home Button","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurehomebutton"],"options":[{"id":"user_vendor_msft_policy_config_browser_configurehomebutton_0","displayName":"Show home button and load the Start page","description":"Show home button and load the Start page","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurehomebutton_1","displayName":"Show home button and load the New tab page","description":"Show home button and load the New tab page","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurehomebutton_2","displayName":"Show home button and load the custom URL defined in the Set Home Button URL policy","description":"Show home button and load the custom URL defined in the Set Home Button URL policy","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurehomebutton_3","displayName":"Hide home button","description":"Hide home button","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_configurekioskmode","displayName":"Configure Kiosk Mode (User)","description":"Configure how Microsoft Edge behaves when it’s running in kiosk mode with assigned access, either as a single app or as one of multiple apps running on the kiosk device. You can control whether Microsoft Edge runs InPrivate full screen, InPrivate multi-tab with limited functionality, or normal Microsoft Edge. You need to configure Microsoft Edge in assigned access for this policy to take effect; otherwise, these settings are ignored. To learn more about assigned access and kiosk configuration, see “Configure kiosk and shared devices running Windows desktop editions” (https://aka.ms/E489vw). If enabled and set to 0 (Default or not configured): - If it’s a single app, it runs InPrivate full screen for digital signage or interactive displays. - If it’s one of many apps, Microsoft Edge runs as normal. If enabled and set to 1: - If it’s a single app, it runs a limited multi-tab version of InPrivate and is the only app available for public browsing. Users can’t minimize, close, or open windows or customize Microsoft Edge, but can clear browsing data and downloads and restart by clicking “End session.” You can configure Microsoft Edge to restart after a period of inactivity by using the “Configure kiosk reset after idle timeout” policy. - If it’s one of many apps, it runs in a limited multi-tab version of InPrivate for public browsing with other apps. Users can minimize, close, and open multiple InPrivate windows, but they can’t customize Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurekioskmode"],"options":[{"id":"user_vendor_msft_policy_config_browser_configurekioskmode_1","displayName":"Enable","description":"Enable","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configurekioskmode_0","displayName":"Disable","description":"Disable","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_configurekioskresetafteridletimeout","displayName":"Configure Kiosk Reset After Idle Timeout (User)","description":"You can configure Microsoft Edge to reset to the configured start experience after a specified amount of idle time. The reset timer begins after the last user interaction. Resetting to the configured start experience deletes the current user’s browsing data. If enabled, you can set the idle time in minutes (0-1440). You must set the Configure kiosk mode policy to 1 and configure Microsoft Edge in assigned access as a single app for this policy to work. Once the idle time meets the time specified, a confirmation message prompts the user to continue, and if no user action, Microsoft Edge resets after 30 seconds. If you set this policy to 0, Microsoft Edge does not use an idle timer. If disabled or not configured, the default value is 5 minutes. If you do not configure Microsoft Edge in assigned access, then this policy does not take effect.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configurekioskresetafteridletimeout"],"options":null},{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith","displayName":"Configure Open Microsoft Edge With (User)","description":"You can configure Microsoft Edge to lock down the Start page, preventing users from changing or customizing it. If enabled, you can choose one of the following options: - Start page: the Start page loads ignoring the Configure Start Pages policy. - New tab page: the New tab page loads ignoring the Configure Start Pages policy. - Previous pages: all tabs the user had open when Microsoft Edge last closed loads ignoring the Configure Start Pages policy. - A specific page or pages: the URL(s) specified with Configure Start Pages policy load(s). If selected, you must specify at least one URL in Configure Start Pages; otherwise, this policy is ignored. When enabled, and you want to make changes, you must first set the Disable Lockdown of Start Pages to not configured, make the changes to the Configure Open Edge With policy, and then enable the Disable Lockdown of Start Pages policy. If disabled or not configured, and you enable the Disable Lockdown of Start Pages policy, your users can change or customize the Start page. Default setting: A specific page or pages (default) Related policies: -Disable Lockdown of Start Pages -Configure Start Pages","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configureopenmicrosoftedgewith"],"options":[{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_0","displayName":"Load the Start page","description":"Load the Start page","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_1","displayName":"Load the New tab page","description":"Load the New tab page","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_2","displayName":"Load the previous pages","description":"Load the previous pages","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configureopenmicrosoftedgewith_3","displayName":"Load a specific page or pages","description":"Load a specific page or pages","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics","displayName":"Configure Telemetry For Microsoft 365 Analytics (User)","description":"Configures what browsing data will be sent to Microsoft 365 Analytics for devices belonging to an organization.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#configuretelemetryformicrosoft365analytics"],"options":[{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_0","displayName":"No data collected or sent","description":"No data collected or sent","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_1","displayName":"Send intranet history only","description":"Send intranet history only","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_2","displayName":"Send Internet history only","description":"Send Internet history only","helpText":null},{"id":"user_vendor_msft_policy_config_browser_configuretelemetryformicrosoft365analytics_3","displayName":"Send both intranet and Internet history","description":"Send both intranet and Internet history","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_disablelockdownofstartpages","displayName":"Disable Lockdown Of Start Pages (User)","description":"You can configure Microsoft Edge to disable the lockdown of Start pages allowing users to change or customize their start pages. To do this, you must also enable the Configure Start Pages or Configure Open Microsoft With policy. When enabled, all configured start pages are editable. Any Start page configured using the Configure Start pages policy is not locked down allowing users to edit their Start pages. If disabled or not configured, the Start pages configured in the Configure Start Pages policy cannot be changed and remain locked down. Supported devices: Domain-joined or MDM-enrolled Related policy: - Configure Start Pages - Configure Open Microsoft Edge With","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#disablelockdownofstartpages"],"options":[{"id":"user_vendor_msft_policy_config_browser_disablelockdownofstartpages_0","displayName":"Disabled","description":"Lock down Start pages configured in either the ConfigureOpenEdgeWith policy and HomePages policy.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_disablelockdownofstartpages_1","displayName":"Enabled","description":"Unlocked. Users can make changes to all configured start pages.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_enableextendedbookstelemetry","displayName":"Enable Extended Books Telemetry (User)","description":"This setting allows organizations to send extended telemetry on book usage from the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enableextendedbookstelemetry"],"options":[{"id":"user_vendor_msft_policy_config_browser_enableextendedbookstelemetry_0","displayName":"Disabled","description":"Gather and send only basic diagnostic data, depending on the device configuration.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_enableextendedbookstelemetry_1","displayName":"Enabled","description":"Gather all diagnostic data.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_enterprisemodesitelist","displayName":"Enterprise Mode Site List (User)","description":"This setting lets you configure whether your company uses Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy websites.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enterprisemodesitelist"],"options":null},{"id":"user_vendor_msft_policy_config_browser_enterprisesitelistserviceurl","displayName":"Enterprise Site List Service Url (User)","description":"Important. Discontinued in Windows 10, version 1511. Use the Browser/EnterpriseModeSiteList policy instead.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#enterprisesitelistserviceurl"],"options":null},{"id":"user_vendor_msft_policy_config_browser_homepages","displayName":"Home Pages (User)","description":"When you enable the Configure Open Microsoft Edge With policy, you can configure one or more Start pages. When you enable this policy, users are not allowed to make changes to their Start pages. If enabled, you must include URLs to the pages, separating multiple pages using angle brackets in the following format: If disabled or not configured, the webpages specified in App settings loads as the default Start pages. Version 1703 or later: If you do not want to send traffic to Microsoft, enable this policy and use the value, which honors domain- and non-domain-joined devices, when it is the only configured URL. Version 1809: If enabled, and you select either Start page, New Tab page, or previous page in the Configure Open Microsoft Edge With policy, Microsoft Edge ignores the Configure Start Pages policy. If not configured or you set the Configure Open Microsoft Edge With policy to a specific page or pages, Microsoft Edge uses the Configure Start Pages policy. Supported devices: Domain-joined or MDM-enrolled Related policy: - Configure Open Microsoft Edge With - Disable Lockdown of Start Pages","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#homepages"],"options":null},{"id":"user_vendor_msft_policy_config_browser_lockdownfavorites","displayName":"Lockdown Favorites (User)","description":"This policy setting lets you decide whether employees can add, import, sort, or edit the Favorites list on Microsoft Edge. If you enable this setting, employees won't be able to add, import, or change anything in the Favorites list. Also as part of this, Save a Favorite, Import settings, and the context menu items (such as, Create a new folder) are all turned off. Important Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. If you disable or don't configure this setting (default), employees can add, import and make changes to the Favorites list.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#lockdownfavorites"],"options":[{"id":"user_vendor_msft_policy_config_browser_lockdownfavorites_0","displayName":"Disabled","description":"Allowed/not locked down. Users can add, import, and make changes to the favorites.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_lockdownfavorites_1","displayName":"Enabled","description":"Prevented/locked down.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge","displayName":"Prevent Access To About Flags In Microsoft Edge (User)","description":"Prevent access to the about:flags page in Microsoft Edge.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventaccesstoaboutflagsinmicrosoftedge"],"options":[{"id":"user_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge_0","displayName":"Disabled","description":"Allowed.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventaccesstoaboutflagsinmicrosoftedge_1","displayName":"Enabled","description":"Prevents users from accessing the about:flags page.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_preventcerterroroverrides","displayName":"Prevent Cert Error Overrides (User)","description":"Web security certificates are used to ensure a site your users go to is legitimate, and in some circumstances encrypts the data. With this policy, you can specify whether to prevent users from bypassing the security warning to sites that have SSL errors. If enabled, overriding certificate errors are not allowed. If disabled or not configured, overriding certificate errors are allowed.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventcerterroroverrides"],"options":[{"id":"user_vendor_msft_policy_config_browser_preventcerterroroverrides_0","displayName":"Disabled","description":"Allowed/turned on. Override the security warning to sites that have SSL errors.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventcerterroroverrides_1","displayName":"Enabled","description":"Prevented/turned on.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_preventlivetiledatacollection","displayName":"Prevent Live Tile Data Collection (User)","description":"This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventlivetiledatacollection"],"options":[{"id":"user_vendor_msft_policy_config_browser_preventlivetiledatacollection_0","displayName":"Disabled","description":"Collect and send Live Tile metadata.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventlivetiledatacollection_1","displayName":"Enabled","description":"No data collected.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride","displayName":"Prevent Smart Screen Prompt Override (User)","description":"Don't allow Windows Defender SmartScreen warning overrides","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventsmartscreenpromptoverride"],"options":[{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride_0","displayName":"Disabled","description":"Allowed/turned off. Users can ignore the warning and continue to the site.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverride_1","displayName":"Enabled","description":"Prevented/turned on.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverrideforfiles","displayName":"Prevent Smart Screen Prompt Override For Files (User)","description":"Don't allow Windows Defender SmartScreen warning overrides for unverified files.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventsmartscreenpromptoverrideforfiles"],"options":[{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverrideforfiles_0","displayName":"Disabled","description":"Allowed/turned off. Users can ignore the warning and continue to download the unverified file(s).","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventsmartscreenpromptoverrideforfiles_1","displayName":"Enabled","description":"Prevented/turned on.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_preventturningoffrequiredextensions","displayName":"Prevent Turning Off Required Extensions (User)","description":"You can define a list of extensions in Microsoft Edge that users cannot turn off. You must deploy extensions through any available enterprise deployment channel, such as Microsoft Intune. When you enable this policy, users cannot uninstall extensions from their computer, but they can configure options for extensions defined in this policy, such as allow for InPrivate browsing. Any additional permissions requested by future updates of the extension gets granted automatically. When you enable this policy, you must provide a semi-colon delimited list of extension package family names (PFNs). For example, adding Microsoft.OneNoteWebClipper_8wekyb3d8bbwe;Microsoft.OfficeOnline_8wekyb3d8bbwe prevents a user from turning off the OneNote Web Clipper and Office Online extension. When enabled, removing extensions from the list does not uninstall the extension from the user’s computer automatically. To uninstall the extension, use any available enterprise deployment channel. If you enable the Allow Developer Tools policy, then this policy does not prevent users from debugging and altering the logic on an extension. If disabled or not configured, extensions defined as part of this policy get ignored. Default setting: Disabled or not configured Related policies: Allow Developer Tools Related Documents: - Find a package family name (PFN) for per-app VPN (https://docs.microsoft.com/en-us/sccm/protect/deploy-use/find-a-pfn-for-per-app-vpn) - How to manage apps you purchased from the Microsoft Store for Business with Microsoft Intune (https://docs.microsoft.com/en-us/intune/windows-store-for-business) - How to assign apps to groups with Microsoft Intune (https://docs.microsoft.com/en-us/intune/apps-deploy) - Manage apps from the Microsoft Store for Business with System Center Configuration Manager (https://docs.microsoft.com/en-us/sccm/apps/deploy-use/manage-apps-from-the-windows-store-for-business) - How to add Windows line-of-business (LOB) apps to Microsoft Intune (https://docs.microsoft.com/en-us/intune/lob-apps-windows)","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventturningoffrequiredextensions"],"options":null},{"id":"user_vendor_msft_policy_config_browser_preventusinglocalhostipaddressforwebrtc","displayName":"Prevent Using Local Host IP Address For Web RTC (User)","description":"Prevent using localhost IP address for WebRTC","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#preventusinglocalhostipaddressforwebrtc"],"options":[{"id":"user_vendor_msft_policy_config_browser_preventusinglocalhostipaddressforwebrtc_0","displayName":"Disabled","description":"Allowed. Show localhost IP addresses.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_preventusinglocalhostipaddressforwebrtc_1","displayName":"Enabled","description":"Prevented/Not allowed.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_provisionfavorites","displayName":"Provision Favorites (User)","description":"This policy setting allows you to configure a default set of favorites, which will appear for employees. Employees cannot modify, sort, move, export or delete these provisioned favorites. If you enable this setting, you can set favorite URL's and favorite folders to appear on top of users' favorites list (either in the Hub or Favorites Bar). The user favorites will appear after these provisioned favorites. Important Don't enable both this setting and the Keep favorites in sync between Internet Explorer and Microsoft Edge setting. Enabling both settings stops employees from syncing their favorites between Internet Explorer and Microsoft Edge. If you disable or don't configure this setting, employees will see the favorites they set in the Hub and Favorites Bar.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#provisionfavorites"],"options":null},{"id":"user_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer","displayName":"Send Intranet Trafficto Internet Explorer (User)","description":"Sends all intranet traffic over to Internet Explorer.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#sendintranettraffictointernetexplorer"],"options":[{"id":"user_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer_0","displayName":"Disabled","description":"All sites, including intranet sites, open in Microsoft Edge automatically.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_sendintranettraffictointernetexplorer_1","displayName":"Enabled","description":"Only intranet sites open in Internet Explorer 11 automatically.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_setdefaultsearchengine","displayName":"Set Default Search Engine (User)","description":"Sets the default search engine for MDM-enrolled devices. Users can still change their default search engine. If this setting is turned on, you are setting the default search engine that you would like your employees to use. Employees can still change the default search engine, unless you apply the AllowSearchEngineCustomization policy which will disable the ability to change it. You must specify a link to the OpenSearch XML file that contains, at minimum, the short name and the URL to the search engine. If you would like for your employees to use the Edge factory settings for the default search engine for their market, set the string EDGEDEFAULT; if you would like for your employees to use Bing as the default search engine, set the string EDGEBING. If this setting is not configured, the default search engine is set to the one specified in App settings and can be changed by your employees. If this setting is disabled, the policy-set search engine will be removed, and, if it is the current default, the default will be set back to the factory Microsoft Edge search engine for the market. Due to Protected Settings (aka.ms/browserpolicy), this policy will only apply on domain-joined machines or when the device is MDM-enrolled.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#setdefaultsearchengine"],"options":null},{"id":"user_vendor_msft_policy_config_browser_sethomebuttonurl","displayName":"Set Home Button URL (User)","description":"The home button can be configured to load a custom URL when your user clicks the home button. If enabled, or configured, and the Configure Home Button policy is enabled, and the Show home button & set a specific page is selected, a custom URL loads when your user clicks the home button. Default setting: Blank or not configured Related policy: Configure Home Button","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#sethomebuttonurl"],"options":null},{"id":"user_vendor_msft_policy_config_browser_setnewtabpageurl","displayName":"Set New Tab Page URL (User)","description":"You can set the default New Tab page URL in Microsoft Edge. Enabling this policy prevents your users from changing the New tab page setting. When enabled and the Allow web content on New Tab page policy is disabled, Microsoft Edge ignores the URL specified in this policy and opens about:blank. If enabled, you can set the default New Tab page URL. If disabled or not configured, the default Microsoft Edge new tab page is used. Default setting: Disabled or not configured Related policy: Allow web content on New Tab page","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#setnewtabpageurl"],"options":null},{"id":"user_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer","displayName":"Show Message When Opening Sites In Internet Explorer (User)","description":"You can configure Microsoft Edge to open a site automatically in Internet Explorer 11 and choose to display a notification before the site opens. If you want to display a notification, you must enable Configure the Enterprise Mode Site List or Send all intranets sites to Internet Explorer 11 or both. If enabled, the notification appears on a new page. If you want users to continue in Microsoft Edge, select the Show Keep going in Microsoft Edge option from the drop-down list under Options. If disabled or not configured, the default app behavior occurs and no additional page displays. Default setting: Disabled or not configured Related policies: -Configure the Enterprise Mode Site List -Send all intranet sites to Internet Explorer 11","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#showmessagewhenopeningsitesininternetexplorer"],"options":[{"id":"user_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_0","displayName":"No additional message displays.","description":"No additional message displays.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_1","displayName":"Show an additional message stating that a site has opened in IE11.","description":"Show an additional message stating that a site has opened in IE11.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_showmessagewhenopeningsitesininternetexplorer_2","displayName":"Show an additional message with a \"Keep going in Microsoft Edge\" link.","description":"Show an additional message with a \"Keep going in Microsoft Edge\" link.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge","displayName":"Sync Favorites Between IE And Microsoft Edge (User)","description":"Specifies whether favorites are kept in sync between Internet Explorer and Microsoft Edge. Changes to favorites in one browser are reflected in the other, including: additions, deletions, modifications, and ordering.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#syncfavoritesbetweenieandmicrosoftedge"],"options":[{"id":"user_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge_0","displayName":"Disabled","description":"Turned off/not syncing.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_syncfavoritesbetweenieandmicrosoftedge_1","displayName":"Enabled","description":"Turned on/syncing.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_unlockhomebutton","displayName":"Unlock Home Button (User)","description":"By default, when enabling Configure Home Button or Set Home Button URL, the home button is locked down to prevent your users from changing what page loads when clicking the home button. Use this policy to let users change the home button even when Configure Home Button or Set Home Button URL are enabled. If enabled, the UI settings for the home button are enabled allowing your users to make changes, including hiding and showing the home button as well as configuring a custom URL. If disabled or not configured, the UI settings for the home button are disabled preventing your users from making changes. Default setting: Disabled or not configured Related policy: -Configure Home Button -Set Home Button URL","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#unlockhomebutton"],"options":[{"id":"user_vendor_msft_policy_config_browser_unlockhomebutton_0","displayName":"Disabled","description":"Lock down and prevent users from making changes to the settings.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_unlockhomebutton_1","displayName":"Enabled","description":"Let users make changes.","helpText":null}]},{"id":"user_vendor_msft_policy_config_browser_usesharedfolderforbooks","displayName":"Use Shared Folder For Books (User)","description":"This setting specifies whether organizations should use a folder shared across users to store books from the Books Library.","helpText":"","infoUrls":["https://docs.microsoft.com/windows/client-management/mdm/policy-csp-Browser#usesharedfolderforbooks"],"options":[{"id":"user_vendor_msft_policy_config_browser_usesharedfolderforbooks_0","displayName":"Disabled","description":"Prevented/not allowed, but Microsoft Edge downloads book files to a per-user folder for each user.","helpText":null},{"id":"user_vendor_msft_policy_config_browser_usesharedfolderforbooks_1","displayName":"Enabled","description":"Allowed. Microsoft Edge downloads book files to a shared folder. For this policy to work correctly, you must also enable the Allow a Windows app to share application data between users group policy. Also, the users must be signed in with a school or work account.","helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce","displayName":"Abusive Experience Intervention Enforce (User)","description":"If SafeBrowsingEnabled is not Disabled, then setting AbusiveExperienceInterventionEnforce to Enabled or leaving it unset prevents sites with abusive experiences from opening new windows or tabs.\r\n\r\nSetting SafeBrowsingEnabled to Disabled or AbusiveExperienceInterventionEnforce to Disabled lets sites with abusive experiences open new windows or tabs.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_abusiveexperienceinterventionenforce_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled","displayName":"Enable Get Image Descriptions from Google. (User)","description":"The Get Image Descriptions from Google\r\naccessibility feature enables visually-impaired screen reader users to\r\nget descriptions of unlabeled images on the web. Users who choose to enable it\r\nwill have the option of using an anonymous Google service to provide\r\nautomatic descriptions for unlabeled images they encounter on the web.\r\n\r\nIf this feature is enabled, the content of images will be sent to Google\r\nservers in order to generate a description. No cookies or other user\r\ndata is sent, and Google does not save or log any image content.\r\n\r\nIf this policy is set to Enabled, the\r\nGet Image Descriptions from Google\r\nfeature will be enabled, though it will only affect users who are using a\r\nscreen reader or other similar assistive technology.\r\n\r\nIf this policy is set to Disabled, users will not have the option of enabling\r\nthe feature.\r\n\r\nIf this policy is not set, user can choose to use this feature or not.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_accessibilityimagelabelsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled","displayName":"Allow DNS queries for additional DNS record types (User)","description":"This policy controls whether Google Chrome may query additional DNS record types when making insecure DNS requests. This policy has no effect on DNS queries made via Secure DNS, which may always query additional DNS types.\r\n\r\nIf this policy is unset or set to Enabled, additional types such as HTTPS (DNS type 65) may be queried in addition to A (DNS type 1) and AAAA (DNS type 28).\r\n\r\nIf this policy is set to Disabled, DNS will only be queried for A (DNS type 1) and/or AAAA (DNS type 28).\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome. After removal of the policy, Google Chrome will always be able to query additional DNS types.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_additionaldnsquerytypesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (User)","description":"Unless SafeBrowsingEnabled is set to False, then setting AdsSettingForIntrusiveAdsSites to 1 or leaving it unset allows ads on all sites.\r\n\r\nSetting the policy to 2 blocks ads on sites with intrusive ads.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites","displayName":"Ads setting for sites with intrusive ads (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites_1","displayName":"Allow ads on all sites","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_adssettingforintrusiveadssites_adssettingforintrusiveadssites_2","displayName":"Do not allow ads on sites with intrusive ads","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed","displayName":"Enable additional protections for users enrolled in the Advanced Protection program (User)","description":"This policy controls whether users enrolled in the Advanced Protection program receive extra protections. Some of these features may involve the sharing of data with Google (for example, Advanced Protection users will be able to send their downloads to Google for malware scanning). If set to True or not set, enrolled users will receive extra protections. If set to False, Advanced Protection users will receive only the standard consumer features.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_advancedprotectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory","displayName":"Enable deleting browser and download history (User)","description":"Setting the policy to Enabled or leaving it unset means browser history and download history can be deleted in Chrome, and users can't change this setting.\r\n\r\nSetting the policy to Disabled means browser history and download history can't be deleted. Even with this policy off, the browsing and download history are not guaranteed to be retained. Users may be able to edit or delete the history database files directly, and the browser itself may expire or archive any or all history items at any time.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdeletingbrowserhistory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg","displayName":"Allow Dinosaur Easter Egg Game (User)","description":"Setting the policy to True allows users to play the dinosaur game. Setting the policy to False means users can't play the dinosaur easter egg game when device is offline.\r\n\r\nLeaving the policy unset means users can't play the game on enrolled Google Chrome OS, but can under other circumstances.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowdinosaureasteregg_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace (User)","description":"Setting the policy turns on Chrome's restricted sign-in feature in Google Workspace and prevents users from changing this setting. Users can only access Google tools using accounts from the specified domains (to allow gmail or googlemail accounts, add consumer_accounts to the list of domains). This setting prevents users from signing in and adding a Secondary Account on a managed device that requires Google authentication, if that account doesn't belong to one of the explicitly allowed domains.\r\n\r\nLeaving this setting empty or unset means users can access Google Workspace with any account.\r\n\r\nUsers cannot change or override this setting.\r\n\r\nNote: This policy causes the X-GoogApps-Allowed-Domains header to be appended to all HTTP and HTTPS requests to all google.com domains, as described in https://support.google.com/a/answer/1668854.\r\n\r\nExample value: managedchrome.com,example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alloweddomainsforapps_alloweddomainsforapps","displayName":"Define domains allowed to access Google Workspace (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs","displayName":"Allow invocation of file selection dialogs (User)","description":"Setting the policy to Enabled or leaving it unset means Chrome can display, and users can open, file selection dialogs.\r\n\r\nSetting the policy to Disabled means that whenever users perform actions provoking a file selection dialog, such as importing bookmarks, uploading files, and saving links, a message appears instead. The user is assumed to have clicked Cancel on the file selection dialog.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowfileselectiondialogs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal","displayName":"Allows a page to perform synchronous XHR requests during page dismissal. (User)","description":"This policy allows an admin to specify that a page may send synchronous XHR requests during page dismissal.\r\n\r\nWhen the policy is set to enabled, pages are allowed to send synchronous XHR requests during page dismissal.\r\n\r\nWhen the policy is set to disabled or not set, pages are not allowed to send synchronous XHR requests during page dismissal.\r\n\r\nThis policy will be removed in Chrome 93.\r\n\r\nSee https://www.chromestatus.com/feature/4664843055398912 .","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_allowsyncxhrinpagedismissal_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled","displayName":"Enable alternate error pages (User)","description":"Setting the policy to True means Google Chrome uses alternate error pages built into (such as \"page not found\"). Setting the policy to False means Google Chrome never uses alternate error pages.\r\n\r\nIf you set the policy, users can't change it. If not set, the policy is on, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alternateerrorpagesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally","displayName":"Always Open PDF files externally (User)","description":"Setting the policy to Enabled turns the internal PDF viewer off in Google Chrome, treats PDF files as a download, and lets users open PDFs with the default application.\r\n\r\nSetting the policy to Disabled means that unless users turns off the PDF plugin, it will open PDF files.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can choose whether to open PDF externally or not.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_alwaysopenpdfexternally_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for profile types. (User)","description":"Configuring this policy will allow/disallow ambient authentication for Incognito and Guest profiles in Google Chrome.\r\n\r\nAmbient Authentication is http authentication with default credentials if explicit credentials are not provided via NTLM/Kerberos/Negotiate challenge/response schemes.\r\n\r\nSetting the RegularOnly (value 0), allows ambient authentication for Regular sessions only. Incognito and Guest sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the IncognitoAndRegular (value 1), allows ambient authentication for Incognito and Regular sessions. Guest sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the GuestAndRegular (value 2), allows ambient authentication for Guest and Regular sessions. Incognito sessions wouldn't be allowed to ambiently authenticate.\r\n\r\nSetting the All (value 3), allows ambient authentication for all sessions.\r\n\r\nNote that, ambient authentication is always allowed on regular profiles.\r\n\r\nIn Google Chrome version 81 and later, if the policy is left not set, ambient authentication will be enabled in regular sessions only.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled","displayName":"Enable Ambient Authentication for profile types. (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_0","displayName":"Enable ambient authentication in regular sessions only.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_1","displayName":"Enable ambient authentication in incognito and regular sessions.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_2","displayName":"Enable ambient authentication in guest and regular sessions.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ambientauthenticationinprivatemodesenabled_ambientauthenticationinprivatemodesenabled_3","displayName":"Enable ambient authentication in regular, incognito and guest sessions.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue","displayName":"Application locale (User)","description":"Setting the policy specifies the locale Google Chrome uses.\r\n\r\nTurning it off or leaving it unset means the locale will be the first valid locale from:\r\n1) The user specified locale (if configured).\r\n2) The system locale.\r\n3) The fallback locale (en-US).\r\n\r\nExample value: en","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_applicationlocalevalue_applicationlocalevalue","displayName":"Application locale (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed","displayName":"Allow or deny audio capture (User)","description":"Setting the policy to Enabled or leaving it unset means that, with the exception of URLs set in the AudioCaptureAllowedUrls list, users get prompted for audio capture access.\r\n\r\nSetting the policy to Disabled turns off prompts, and audio capture is only available to URLs set in the AudioCaptureAllowedUrls list.\r\n\r\nNote: The policy affects all audio input (not just the built-in microphone).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls","displayName":"URLs that will be granted access to audio capture devices without prompt (User)","description":"Setting the policy means you specify the URL list whose patterns get matched to the security origin of the requesting URL. A match grants access to audio capture devices without prompt\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com/\r\nhttps://[*.]example.edu/","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiocaptureallowedurls_audiocaptureallowedurlsdesc","displayName":"URLs that will be granted access to audio capture devices without prompt (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audioprocesshighpriorityenabled","displayName":"Allow the audio process to run with priority above normal on Windows (User)","description":"This policy controls the priority of the audio process on Windows.\r\nIf this policy is enabled, the audio process will run with above normal priority.\r\nIf this policy is disabled, the audio process will run with normal priority.\r\nIf this policy is not set, the default configuration for the audio process will be used.\r\nThis policy is intended as a temporary measure to give enterprises the ability to\r\nrun audio with higher priority to address certain performance issues with audio capture.\r\nThis policy will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audioprocesshighpriorityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audioprocesshighpriorityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled","displayName":"Allow the audio sandbox to run (User)","description":"This policy controls the audio process sandbox.\r\nIf this policy is enabled, the audio process will run sandboxed.\r\nIf this policy is disabled, the audio process will run unsandboxed and the WebRTC audio-processing module will run in the renderer process.\r\nThis leaves users open to security risks related to running the audio subsystem unsandboxed.\r\nIf this policy is not set, the default configuration for the audio sandbox will be used, which may differ per platform.\r\nThis policy is intended to give enterprises flexibility to disable the audio sandbox if they use security software setups that interfere with the sandbox.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_audiosandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled","displayName":"Enable AutoFill for addresses (User)","description":"Setting the policy to True or leaving it unset gives users control of Autofill for addresses in the UI.\r\n\r\nSetting the policy to False means Autofill never suggests or fills address information, nor does it save additional address information that users submit while browsing the web.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofilladdressenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled","displayName":"Enable AutoFill for credit cards (User)","description":"Setting the policy to True or leaving it unset means users can control autofill suggestions for credit cards in the UI.\r\n\r\nSetting the policy to False means autofill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autofillcreditcardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (User)","description":"Allows you to set a list of protocols, and for each protocol an associated list of allowed origin patterns, that can launch an external application without prompting the user. The trailing separator should not be included when listing the protocol, so list \"skype\" instead of \"skype:\" or \"skype://\".\r\n\r\nIf this policy is set, a protocol will only be permitted to launch an external application without prompting by policy if the protocol is listed, and the origin of the site trying to launch the protocol matches one of the origin patterns in that protocol's allowed_origins list. If either condition is false the external protocol launch prompt will not be omitted by policy.\r\n\r\nIf this policy is not set, no protocols can launch without a prompt by default. Users may opt out of prompts on a per-protocol/per-site basis unless the ExternalProtocolDialogShowAlwaysOpenCheckbox policy is set to Disabled. This policy has no impact on per-protocol/per-site prompt exemptions set by users.\r\n\r\nThe origin matching patterns use a similar format to those for the 'URLBlocklist' policy, which are documented at http://www.chromium.org/administrators/url-blocklist-filter-format.\r\n\r\nHowever, origin matching patterns for this policy cannot contain \"/path\" or \"@query\" elements. Any pattern that does contain a \"/path\" or \"@query\" element will be ignored.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"protocol\": \"spotify\",\r\n \"allowed_origins\": [\r\n \"example.com\",\r\n \"http://www.example.com:8080\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"teams\",\r\n \"allowed_origins\": [\r\n \"https://example.com\",\r\n \"https://.mail.example.com\"\r\n ]\r\n },\r\n {\r\n \"protocol\": \"outlook\",\r\n \"allowed_origins\": [\r\n \"*\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autolaunchprotocolsfromorigins_autolaunchprotocolsfromorigins","displayName":"Define a list of protocols that can launch an external application from listed origins without prompting the user (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls","displayName":"URLs where AutoOpenFileTypes can apply (User)","description":"List of URLs specifying which urls AutoOpenFileTypes will apply to. This policy has no impact on automatically open values set by users.\r\n\r\nIf this policy is set, files will only automatically open by policy if the url is part of this set and the file type is listed in AutoOpenFileTypes. If either condition is false the download won't automatically open by policy.\r\n\r\nIf this policy isn't set, all downloads where the file type is in AutoOpenFileTypes will automatically open.\r\n\r\nA URL pattern has to be formatted according to https://www.chromium.org/administrators/url-blocklist-filter-format.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenallowedforurls_autoopenallowedforurlsdesc","displayName":"URLs where AutoOpenFileTypes can apply (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes","displayName":"List of file types that should be automatically opened on download (User)","description":"List of file types that should be automatically opened on download. The leading separator should not be included when listing the file type, so list \"txt\" instead of \".txt\".\r\n\r\nFiles with types that should be automatically opened will still be subject to the enabled safe browsing checks and won't be opened if they fail those checks.\r\n\r\nIf this policy isn't set, only file types that a user has already specified to automatically be opened will do so when downloaded.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nexe\r\ntxt","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoopenfiletypes_autoopenfiletypesdesc","displayName":"List of file types that should be automatically opened on download (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed","displayName":"Allow media autoplay (User)","description":"Setting the policy to True lets Google Chrome autoplay media. Setting the policy to False stops Google Chrome from autoplaying media.\r\n\r\n By default, Google Chrome doesn't autoplay media. But, for certain URL patterns, you can use the AutoplayAllowlist policy to change this setting.\r\n\r\nIf this policy changes while Google Chrome is running, it only applies to newly opened tabs.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist","displayName":"Allow media autoplay on a allowlist of URL patterns (User)","description":"Setting the policy lets videos play automatically (without user consent) with audio content in Google Chrome. If AutoplayAllowed policy is set to True, then this policy has no effect. If AutoplayAllowed is set to False, then any URL patterns set in this policy can still play. If this policy changes while Google Chrome is running, it only applies to newly opened tabs.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_autoplayallowlist_autoplayallowlistdesc","displayName":"Allow media autoplay on a allowlist of URL patterns (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled","displayName":"Continue running background apps when Google Chrome is closed (User)","description":"Setting the policy to Enabled turns background mode on. In background mode, a Google Chrome process is started on OS sign-in and keeps running when the last browser window is closed, allowing background apps and the browsing session to remain active. The background process displays an icon in the system tray and can always be closed from there.\r\n\r\nSetting the policy to Disabled turns background mode off.\r\n\r\nIf you set the policy, users can't change it in the browser settings. If unset, background mode is off at first, but users can change it.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_backgroundmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_blockthirdpartycookies","displayName":"Block third party cookies (User)","description":"Setting the policy to Enabled prevents webpage elements that aren't from the domain that's in the browser's address bar from setting cookies. Setting the policy to Disabled lets those elements set cookies and prevents users from changing this setting.\r\n\r\nLeaving it unset turns third-party cookies on, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_blockthirdpartycookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_blockthirdpartycookies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled","displayName":"Enable Bookmark Bar (User)","description":"Setting the policy to True displays a bookmark bar in Google Chrome. Setting the policy to False means users never see the bookmark bar.\r\n\r\nIf you set the policy, users can't change it. If not set, users decide whether to use this function.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_bookmarkbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browseraddpersonenabled","displayName":"Enable add person in user manager (User)","description":"If this policy is set to true or not configured, Google Chrome will allow Add Person from the user manager.\r\n\r\nIf this policy is set to false, Google Chrome will not allow creation of new profiles from the user manager.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browseraddpersonenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browseraddpersonenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled","displayName":"Enable guest mode in browser (User)","description":"If this policy is set to true or not configured, Google Chrome will enable guest logins. Guest logins are Google Chrome profiles where all windows are in incognito mode.\r\n\r\nIf this policy is set to false, Google Chrome will not allow guest profiles to be started.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced","displayName":"Enforce browser guest mode (User)","description":"Setting the policy to Enabled means Google Chrome enforces guest sessions and prevents profile sign-ins. Guest sign-ins are Google Chrome profiles where windows are in Incognito mode.\r\n\r\nSetting the policy to Disabled, leaving it unset, or disabling browser Guest mode (through BrowserGuestModeEnabled) allows the use of new and existing profiles.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserguestmodeenforced_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled","displayName":"Browser experiments icon in toolbar (User)","description":"Setting the policy to Enabled or leaving the policy unset means that users can access browser experimental features through an icon in the toolbar\r\n\r\nSetting the policy to Disabled removes the browser experimental features icon from the toolbar.\r\n\r\nchrome://flags and any other means of turning off and on browser features will still behave as expected regardless of whether this policy is Enabled or Disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked","displayName":"Block Browser Legacy Extension Points (User)","description":"Setting the policy to Enabled or leaving it unset will enable ProcessExtensionPointDisablePolicy to block legacy extension points in the Browser process.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security and stability as unknown and potentially hostile code can load inside Google Chrome's browser process. Only turn off the policy if there are compatibility issues with third-party software that must run inside Google Chrome's browser process.\r\n\r\nNote: Read more about Process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserlegacyextensionpointsblocked_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled","displayName":"Allow queries to a Google time service (User)","description":"Setting the policy to Enabled or leaving it unset means Google Chrome send occasional queries to a Google server to retrieve an accurate timestamp.\r\n\r\nSetting the policy to Disabled stops Google Chrome from sending these queries.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsernetworktimequeriesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin","displayName":"Browser sign in settings (User)","description":"This policy controls the sign-in behavior of the browser. It allows you to specify if the user can sign in to Google Chrome with their account and use account related services like Google Chrome Sync.\r\n\r\nIf the policy is set to \"Disable browser sign-in\" then the user cannot sign in to the browser and use account-based services. In this case browser-level features like Google Chrome Sync cannot be used and will be unavailable. On iOS, if the user was signed in and the policy is set to \"Disabled\" they will be signed out immediately. On other platforms, they will be signed out the next time they run Google Chrome. On all platforms, their local profile data like bookmarks, passwords etc. will be preserved and still usable. The user will still be able to sign into and use Google web services like Gmail.\r\n\r\nIf the policy is set to \"Enable browser sign-in,\" then the user is allowed to sign in to the browser. On all platforms except iOS, the user is automatically signed in to the browser when signed in to Google web services like Gmail. Being signed in to the browser means the user's account information will be kept by the browser. However, it does not mean that Google Chrome Sync will be turned on by default; the user must separately opt-in to use this feature. Enabling this policy will prevent the user from turning off the setting that allows browser sign-in. To control the availability of Google Chrome Sync, use the SyncDisabled policy.\r\n\r\nIf the policy is set to \"Force browser sign-in\" the user is presented with an account selection dialog and has to choose and sign in to an account to use the browser. This ensures that for managed accounts the policies associated with the account are applied and enforced. The default value of BrowserGuestModeEnabled will be set to disabled. Note that existing unsigned profiles will be locked and inaccessible after enabling this policy. For more information, see help center article: https://support.google.com/chrome/a/answer/7572556 . This option is not supported on Linux, Android or iOS. It will fall back to \"Enable browser sign-in\" if used.\r\n\r\nIf this policy is not set then the user can decide if they want to enable browser sign-in in the Google Chrome settings and use it as they see fit.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin","displayName":"Browser sign in settings (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_0","displayName":"Disable browser sign-in","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_1","displayName":"Enable browser sign-in","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsersignin_browsersignin_2","displayName":"Force users to sign-in to use the browser","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor","displayName":"Configure the color of the browser's theme (User)","description":"This policy allows admins to configure the color of Google Chrome's theme. The input string should be a valid hex color string matching the format \"#RRGGBB\".\r\n\r\nSetting the policy to a valid hex color causes a theme based on that color to be automatically generated and applied to the browser. Users won't be able to change the theme set by the policy.\r\n\r\nLeaving the policy unset lets users change their browser's theme as preferred.\r\n\r\nExample value: #FFFFFF","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browserthemecolor_browserthemecolor","displayName":"Configure the color of the browser's theme (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (User)","description":"Configures browsing data lifetime settings for Google Chrome. This policy allows admins to configure (per data-type) when data is deleted by the browser. This is useful for customers that work with sensitive customer data. The policy will only take effect if SyncDisabled is set to true.\r\n\r\nThe available data types are 'browsing_history', 'download_history', 'cookies_and_other_site_data', 'cached_images_and_files', 'password_signin', 'autofill', 'site_settings' and 'hosted_app_data'.\r\n\r\nThe browser will automatically remove data of selected types that is older than 'time_to_live_in_hours'. The minimum value that can be set is 1 hour.\r\n\r\nThe deletion of expired data will happen 15 seconds after the browser starts then every hour while the browser is running.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=BrowsingDataLifetime for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"time_to_live_in_hours\": 24,\r\n \"data_types\": [\r\n \"browsing_history\"\r\n ]\r\n },\r\n {\r\n \"time_to_live_in_hours\": 12,\r\n \"data_types\": [\r\n \"password_signin\",\r\n \"autofill\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_browsingdatalifetime_browsingdatalifetime","displayName":"Browsing Data Lifetime Settings (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled","displayName":"Use built-in DNS client (User)","description":"This policy controls which software stack is used to communicate with the DNS server: the Operating System DNS client, or Google Chrome's built-in DNS client. This policy does not affect which DNS servers are used: if, for example, the operating system is configured to use an enterprise DNS server, that same server would be used by the built-in DNS client. It also does not control if DNS-over-HTTPS is used; Google Chrome will always use the built-in resolver for DNS-over-HTTPS requests. Please see the DnsOverHttpsMode policy for information on controlling DNS-over-HTTPS.\r\n\r\nIf this policy is set to Enabled, the built-in DNS client will be used, if available.\r\n\r\nIf this policy is set to Disabled, the built-in DNS client will only be used when DNS-over-HTTPS is in use.\r\n\r\nIf this policy is left unset, the built-in DNS client will be enabled by default on macOS, Android (when neither Private DNS nor VPN are enabled) and Google Chrome OS.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_builtindnsclientenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled","displayName":"CECPQ2 post-quantum key-agreement enabled for TLS (User)","description":"If this policy is not configured, or is set to enabled, then Google Chrome will follow the default rollout process for CECPQ2, a post-quantum key-agreement algorithm in TLS.\r\n\r\nCECPQ2 results in larger TLS messages which, in very rare cases, can trigger bugs in some networking hardware. This policy can be set to False to disable CECPQ2 while networking issues are resolved.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cecpq2enabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (User)","description":"Setting the policy turns off enforcement of Certificate Transparency disclosure requirements for a list of subjectPublicKeyInfo hashes. Enterprise hosts can keep using certificates that otherwise wouldn't be trusted (because they weren't properly publicly disclosed). To turn off enforcement, the hash must meet one of these conditions:\r\n\r\n* It's of the server certificate's subjectPublicKeyInfo.\r\n\r\n* It's of a subjectPublicKeyInfo that appears in a Certificate Authority (CA) certificate in the certificate chain. That CA certificate is constrained through the X.509v3 nameConstraints extension, one or more directoryName nameConstraints are present in the permittedSubtrees, and the directoryName has an organizationName attribute.\r\n\r\n* It's of a subjectPublicKeyInfo that appears in a CA certificate in the certificate chain, the CA certificate has one or more organizationName attributes in the certificate Subject, and the server's certificate has the same number of organizationName attributes, in the same order, and with byte-for-byte identical values.\r\n\r\nSpecify a subjectPublicKeyInfo hash by linking the hash algorithm name, a slash, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. Base64 encoding format matches that of an SPKI Fingerprint. The only recognized hash algorithm is sha256; others are ignored.\r\n\r\nLeaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforcas_certificatetransparencyenforcementdisabledforcasdesc","displayName":"Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforlegacycas","displayName":"Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities (User)","description":"Setting the policy turns off enforcement of Certificate Transparency disclosure requirements for a list of Legacy Certificate Authorities (CA) for certificate chains with a specified subjectPublicKeyInfo hash. Enterprise hosts can keep using certificates that otherwise wouldn't be trusted (because they weren't properly publicly disclosed). To turn off enforcement, the subjectPublicKeyInfo hash must appear in a CA certificate recognized as a Legacy CA. A Legacy CA is publicly trusted by one or more operating systems supported by Google Chrome, but not Android Open Source Project or Google Chrome OS.\r\n\r\nSpecify a subjectPublicKeyInfo hash by linking the hash algorithm name, a slash and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. Base64 encoding format matches that of an SPKI Fingerprint. The only recognized hash algorithm is sha256; others are ignored.\r\n\r\nLeaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates.\r\n\r\nExample value:\r\n\r\nsha256/AAAAAAAAAAAAAAAAAAAAAA==\r\nsha256//////////////////////w==","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforlegacycas_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforlegacycas_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforlegacycas_certificatetransparencyenforcementdisabledforlegacycasdesc","displayName":"Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls","displayName":"Disable Certificate Transparency enforcement for a list of URLs (User)","description":"Setting the policy turns off Certificate Transparency disclosure requirements for the hostnames in the specified URLs. While making it harder to detect misissued certificates, hosts can keep using certificates that otherwise wouldn't be trusted (because they weren't properly publicly disclosed).\r\n\r\nLeaving the policy unset means that if certificates requiring disclosure through Certificate Transparency aren't disclosed, then Google Chrome doesn't trust those certificates.\r\n\r\nA URL pattern follows this format ( https://www.chromium.org/administrators/url-blocklist-filter-format ). However, because the validity of certificates for a given hostname is independent of the scheme, port, or path, Google Chrome only considers the hostname portion of the URL. Wildcard hosts aren't supported.\r\n\r\nExample value:\r\n\r\nexample.com\r\n.example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_certificatetransparencyenforcementdisabledforurls_certificatetransparencyenforcementdisabledforurlsdesc","displayName":"Disable Certificate Transparency enforcement for a list of URLs (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupenabled","displayName":"Enable Chrome Cleanup on Windows (User)","description":"Setting the policy to Enabled or leaving it unset means Chrome Cleanup periodically scans the system for unwanted software and should any be found, will ask the user if they wish to remove it. Manually triggering Chrome Cleanup from chrome://settings is allowed.\r\n\r\nSetting the policy to Disabled means Chrome Cleanup won't periodically scan and manual triggering is disabled.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled","displayName":"Control how Chrome Cleanup reports data to Google (User)","description":"Setting the policy to Enabled means if Chrome Cleanup detects unwanted software, it may, in line with policy set by SafeBrowsingExtendedReportingEnabled, report about the scan to Google. Chrome Cleanup asks users if they want the cleanup. It sends results to Google.\r\n\r\nSetting the policy to Disabled means if Chrome Cleanup detects unwanted software, it won't report about the scan to Google, regardless of the value of SafeBrowsingExtendedReportingEnabled. Chrome Cleanup asks users if they want the cleanup. The results aren't reported to Google.\r\n\r\nLeaving the policy unset means Chrome Cleanup may, in line with policy set by SafeBrowsingExtendedReportingEnabled, report about scans for detecting unwanted software to Google. Chrome Cleanup asks users if they want the cleanup and to share the results with Google to help with future unwanted software detection. These results have file metadata, automatically installed extensions, and registry keys, as described by the Chrome Privacy Whitepaper.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromecleanupreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations","displayName":"Determine the availability of variations (User)","description":"Configuring this policy allows to specify which variations are allowed to be applied in Google Chrome.\r\n\r\nVariations provide a means for offering modifications to Google Chrome without shipping a new version of the browser by selectively enabling or disabling already existing features. See https://support.google.com/chrome/a?p=Manage_the_Chrome_variations_framework for more information.\r\n\r\nSetting the VariationsEnabled (value 0), or leaving the policy not set allows all variations to be applied to the browser.\r\n\r\nSetting the CriticalFixesOnly (value 1), allows only variations considered critical security or stability fixes to be applied to Google Chrome.\r\n\r\nSetting the VariationsDisabled (value 2), prevent all variations from being applied to the browser. Please note that this mode can potentially prevent the Google Chrome developers from providing critical security fixes in a timely manner and is thus not recommended.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_chromevariations","displayName":"Determine the availability of variations (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_chromevariations_0","displayName":"Enable all variations","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_chromevariations_1","displayName":"Enable variations concerning critical fixes only","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_chromevariations_chromevariations_2","displayName":"Disable all variations","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist","displayName":"Clear Browsing Data on Exit (User)","description":"Configures a list of browsing data types that should be deleted when the user closes all browser windows. The available data types are browsing history (browsing_history), download history (download_history), cookies (cookies_and_other_site_data), cache(cached_images_and_files), autofill (autofill), passwords (password_signin), site settings (site_settings) and hosted apps data (hosted_app_data). This policy does not take precedence over AllowDeletingBrowserHistory.\r\n\r\nThis policy requires the SyncDisabled policy to be set to true, otherwise it will be ignored. If this policy is set at platform level, Sync should be disabled at platform level. If this policy is set at user level, Sync should be disabled for that user in order for this policy to take effect.\r\n\r\nIf Google Chrome does not exit cleanly (for example, if the browser or the OS crashes), the browsing data will be cleared the next time the profile is loaded.\r\n\r\nExample value:\r\n\r\nbrowsing_history\r\ndownload_history\r\ncookies_and_other_site_data\r\ncached_images_and_files\r\npassword_signin\r\nautofill\r\nsite_settings\r\nhosted_app_data","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clearbrowsingdataonexitlist_clearbrowsingdataonexitlistdesc","displayName":"Clear Browsing Data on Exit (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled","displayName":"Enable the Click to Call Feature (User)","description":"Enable the Click to Call feature which allows users to send phone numbers from Chrome Desktops to an Android device when the user is Signed-in. For more information, see help center article: https://support.google.com/chrome/answer/9430554?hl=en.\r\n\r\nIf this policy is set to enabled, the capability of sending phone numbers to Android devices will be enabled for the Chrome user.\r\n\r\nIf this policy is set to disabled, the capability of sending phone numbers to Android devices will be disabled for the Chrome user.\r\n\r\nIf you set this policy, users cannot change or override it.\r\n\r\nIf this policy is left unset, the Click to Call feature is enabled by default.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clicktocallenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory","displayName":"Enable mandatory cloud management enrollment (User)","description":"Setting the policy to Enabled mandates Chrome Browser Cloud Management enrollment and blocks Google Chrome launch process if failed.\r\n\r\nSetting the policy to Disabled or leaving it unset renders Chrome Browser Cloud Management optional and doesn't block Google Chrome launch process if failed.\r\n\r\nMachine scope cloud policy enrollment on desktop uses this policy. See https://support.google.com/chrome/a/answer/9301891?ref_topic=9301744 for details.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmentmandatory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (User)","description":"Setting the policy means Google Chrome tries to register itself with Chrome Browser Cloud Management. The value of this policy is an enrollment token you can retrieve from the Google Admin console.\r\n\r\nSee https://support.google.com/chrome/a/answer/9301891?ref_topic=9301744 for details.\r\n\r\nExample value: 37185d02-e055-11e7-80c1-9a214cf093ae","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudmanagementenrollmenttoken_cloudmanagementenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy","displayName":"Google Chrome cloud policy overrides Platform policy. (User)","description":"Setting the policy to Enabled means cloud policy takes precedence if it conflicts with platform policy.\r\n\r\nSetting the policy to Disabled or leaving it unset means platform policy takes precedence if it conflicts with cloud policy.\r\n\r\nThis mandatory policy affects machine scope cloud policies.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_cloudpolicyoverridesplatformpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge","displayName":"Enables merging of user cloud policies into machine-level policies (User)","description":"Setting the policy to Enabled allows policies associated with a Google Workspace account to be merged into machine-level policies.\r\n\r\nOnly policies originating from secure users can be merged. A secure user is affiliated with the organization that manages their browser using Chrome Browser Cloud Management. All other user-level policies will always be ignored.\r\n\r\nPolicies that need to be merged also need to be set in either PolicyListMultipleSourceMergeList or PolicyDictionaryMultipleSourceMergeList. This policy will be ignored if neither of the two aforementioned policies is configured.\r\n\r\nLeaving the policy unset or setting it to Disabled prevents user-level cloud policies from being merged with policies from any other sources.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicymerge_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy","displayName":"Allow user cloud policies to override Chrome Browser Cloud Management policies. (User)","description":"Setting the policy to Enabled allows policies associated with a Google Workspace account to take precedence if they conflict with Chrome Browser Cloud Management policies.\r\n\r\nOnly policies originating from secure users can be merged. A secure user is affiliated with the organization that manages their browser using Chrome Browser Cloud Management. All other user-level policies will have default precedence.\r\n\r\nThe policy can be combined with CloudPolicyOverridesPlatformPolicy. If both policies are enabled, user cloud policies will also take precedence over conflicting platform policies.\r\n\r\nLeaving the policy unset or setting it to disabled causes user-level cloud policies to have default priority.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_clouduserpolicyoverridescloudmachinepolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_commandlineflagsecuritywarningsenabled","displayName":"Enable security warnings for command-line flags (User)","description":"Setting the policy to Enabled or leaving it unset means security warnings appear when potentially dangerous command-line flags are used to launch Chrome.\r\n\r\nSetting the policy to Disabled prevents security warnings from appearing when Chrome is launched with potentially dangerous command-line flags.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_commandlineflagsecuritywarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_commandlineflagsecuritywarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled","displayName":"Enable component updates in Google Chrome (User)","description":"Enables component updates for all components in Google Chrome when not set or set to enabled.\r\n\r\nIf set to disabled, updates to components are disabled. However, some components are exempt from this policy: updates to any component that does not contain executable code, or does not significantly alter the behavior of the browser, or is critical for its security will not be disabled.\r\nExamples of such components include the certificate revocation lists and Safe Browsing data.\r\nSee https://developers.google.com/safe-browsing for more info on Safe Browsing.\r\nPlease note that setting this policy to disabled can potentially prevent the Google Chrome developers from providing critical security fixes in a timely manner and is thus not recommended.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_componentupdatesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport","displayName":"CORS non-wildcard request headers support (User)","description":"Configures support of CORS non-wildcard request headers.\r\n\r\nGoogle Chrome version 97 introduces support for CORS non-wildcard request headers. When scripts make a cross-origin network request via fetch() and XMLHttpRequest with a script-added Authorization header, the header must be explicitly allowed by the Access-Control-Allow-Headers header in the CORS preflight response. \"Explicitly\" here means that the wild card symbol \"*\" doesn't cover the Authorization header. See https://www.chromest atus.com/feature/5768642492891136 for more detail.\r\n\r\nIf this policy is not set, or set to True, Google Chrome will support the CORS non-wildcard request headers and behave as described above.\r\n\r\nWhen this policy is set to False, chrome will allow the wildcard symbol (\"*\") in the Access-Control-Allow-Headers header in the CORS preflight response to cover the Authorization header.\r\n\r\nThis Enterprise policy is temporary; it's intended to be removed after Google Chrome version 103.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_corsnonwildcardrequestheaderssupport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled","displayName":"Specifies whether WebAssembly modules can be sent cross-origin (User)","description":"\r\nSpecifies whether WebAssembly modules can be sent to another window or worker cross-origin. Cross-origin WebAssembly module sharing will be deprecated as part of the efforts to deprecate document.domain, see https://github.com/mikewest/deprecating-document-domain. This policy allows to re-enable cross-origin WebAssembly module sharing to offer a longer transition period in the deprecation process.\r\n\r\nWhen set to True, sites can send WebAssembly modules also cross-origin without restrictions.\r\n\r\nWhen set to False or not set, sites can only send WebAssembly modules to windows and workers in the same origin.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_crossoriginwebassemblymodulesharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled","displayName":"Set Google Chrome as Default Browser (User)","description":"Setting the policy to True has Google Chrome always check whether it's the default browser on startup and, if possible, automatically register itself. Setting the policy to False stops Google Chrome from ever checking if it's the default and turns user controls off for this option.\r\n\r\nLeaving the policy unset means Google Chrome lets users control whether it's the default and, if not, whether user notifications should appear.\r\n\r\nNote: For Microsoft®Windows® administrators, turning this setting on only works for machines running Windows 7. For later versions, you must deploy a \"default application associations\" file that makes Google Chrome the handler for the https and http protocols (and, optionally, the ftp protocol and other file formats). See Chrome Help ( https://support.google.com/chrome?p=make_chrome_default_win ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultbrowsersettingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed","displayName":"Allow default search provider context menu search access (User)","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider will be available.\r\n\r\nThe policy value is only appled when the DefaultSearchProviderEnabled policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_defaultsearchprovidercontextmenuaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled","displayName":"Enable desktop sharing in the omnibox and 3-dot menu (User)","description":"Setting the policy to True or leaving it unset lets users share or save the current webpage using actions provided by the desktop sharing hub. The sharing hub is accessed through either an omnibox icon or the 3-dot menu.\r\n\r\nSetting the policy to False removes the sharing icon from the omnibox and the entry from the 3-dot menu.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_desktopsharinghubenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability","displayName":"Control where Developer Tools can be used (User)","description":"Setting the policy to 0 (the default) means you can access the developer tools and the JavaScript console, but not in the context of extensions installed by enterprise policy. Setting the policy to 1 means you can access the developer tools and the JavaScript console in all contexts, including that of extensions installed by enterprise policy. Setting the policy to 2 means you can't acess developer tools, and you can't inspect website elements.\r\n\r\nThis setting also turns off keyboard shortcuts and menu or context menu entries to open developer tools or the JavaScript console.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_developertoolsavailability","displayName":"Control where Developer Tools can be used (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_developertoolsavailability_0","displayName":"Disallow usage of the Developer Tools on extensions installed by enterprise policy, allow usage of the Developer Tools in other contexts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_developertoolsavailability_1","displayName":"Allow usage of the Developer Tools","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_developertoolsavailability_developertoolsavailability_2","displayName":"Disallow usage of the Developer Tools","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis","displayName":"Disable support for 3D graphics APIs (User)","description":"Setting the policy to True (or setting HardwareAccelerationModeEnabled to False) prevents webpages from accessing the WebGL API, and plugins can't use the Pepper 3D API.\r\n\r\nSetting the policy to False or leaving it unset lets webpages use the WebGL API and plugins use the Pepper 3D API, but the browser's default settings might still require command line arguments to use these APIs.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disable3dapis_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway","displayName":"Disable proceeding from the Safe Browsing warning page (User)","description":"Setting the policy to Enabled prevents users from proceeding past the warning page the Safe Browsing service shows to the malicious site. This policy only prevents users from proceeding on Safe Browsing warnings such as malware and phishing, not for SSL certificate-related issues such as invalid or expired certificates.\r\n\r\nSetting the policy to Disabled or leaving it unset means users can choose to proceed to the flagged site after the warning appears.\r\n\r\nSee more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablesafebrowsingproceedanyway_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots","displayName":"Disable taking screenshots (User)","description":"Setting the policy to True disallows screenshots taken with keyboard shortcuts or extension APIs. Setting the policy to False allows screenshots.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_disablescreenshots_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir","displayName":"Set disk cache directory (User)","description":"Setting the policy has Google Chrome use the directory you provide for storing cached files on the disk—whether or not users specify the --disk-cache-dir flag.\r\n\r\nIf not set, Google Chrome uses the default cache directory, but users can change that setting with the --disk-cache-dir command line flag.\r\n\r\nGoogle Chrome manages the contents of a volume's root directory. So to avoid data loss or other errors, do not set this policy to the root directory or any directory used for other purposes. See the variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: ${user_home}/Chrome_cache","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachedir_diskcachedir","displayName":"Set disk cache directory (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize","displayName":"Set disk cache size in bytes (User)","description":"Setting the policy to None has Google Chrome use the default cache size for storing cached files on the disk. Users can't change it.\r\n\r\nIf you set the policy, Google Chrome uses the cache size you provide—whether or not users specify the --disk-cache-size flag. (Values below a few megabytes are rounded up.)\r\n\r\nIf not set, Google Chrome uses the default size. Users can change that setting using the --disk-cache-size flag.\r\n\r\nNote: The value specified in this policy is used as a hint to various cache subsystems in the browser. Therefore the actual total disk consumption of all caches will be higher but within the same order of magnitude as the value specified.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_diskcachesize_diskcachesize","displayName":"Set disk cache size: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled","displayName":"Specifies whether the display-capture permissions-policy is checked or skipped. (User)","description":"\r\nThe display-capture permissions-policy gates access to getDisplayMedia(), as per this spec: https://www.w3.org/TR/screen-capture/#feature-policy-integration. However, if this policy is Disabled, this requirement is not enforced, and getDisplayMedia() is allowed from contexts that would otherwise be forbidden. This Enterprise policy is temporary; it's intended to be removed after Google Chrome version 100. It is intended to unblock Enterprise users whose application is non-spec compliant, but needs time to be fixed.\r\n\r\nWhen enabled or not set, sites can only call getDisplayMedia() from contexts which are allowlisted by the display-capture permissions-policy.\r\n\r\nWhen disabled, sites can call getDisplayMedia() even from contexts which are not allowlisted by the display-capture permissions policy. Note that other restrictions may still apply.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_displaycapturepermissionspolicyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled","displayName":"DNS interception checks enabled (User)","description":"This policy configures a local switch that can be used to disable DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nThis detection may not be necessary in an enterprise environment where the network configuration is known, since it causes some amount of DNS and HTTP traffic on start-up and each DNS configuration change.\r\n\r\nWhen this policy is not set, or is enabled, the DNS interception checks are performed. When explicitly disabled, they're not.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsinterceptionchecksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode","displayName":"Controls the mode of DNS-over-HTTPS (User)","description":"Controls the mode of the DNS-over-HTTPS resolver. Please note that this policy will only set the default mode for each query. The mode may be overridden for special types of queries such as requests to resolve a DNS-over-HTTPS server hostname.\r\n\r\nThe \"off\" mode will disable DNS-over-HTTPS.\r\n\r\nThe \"automatic\" mode will send DNS-over-HTTPS queries first if a DNS-over-HTTPS server is available and may fallback to sending insecure queries on error.\r\n\r\nThe \"secure\" mode will only send DNS-over-HTTPS queries and will fail to resolve on error.\r\n\r\nOn Android Pie and above, if DNS-over-TLS is active, Google Chrome will not send insecure DNS requests.\r\n\r\nIf this policy is unset the browser may send DNS-over-HTTPS requests to a resolver associated with the user's configured system resolver.\r\n\r\nExample value: off","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode","displayName":"Controls the mode of DNS-over-HTTPS (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_off","displayName":"Disable DNS-over-HTTPS","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_automatic","displayName":"Enable DNS-over-HTTPS with insecure fallback","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpsmode_dnsoverhttpsmode_secure","displayName":"Enable DNS-over-HTTPS without insecure fallback","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver (User)","description":"The URI template of the desired DNS-over-HTTPS resolver. To specify multiple DNS-over-HTTPS resolvers, separate the corresponding URI templates with spaces.\r\n\r\nIf the DnsOverHttpsMode is set to \"secure\" then this policy must be set and not empty.\r\n\r\nIf the DnsOverHttpsMode is set to \"automatic\" and this policy is set then the URI templates specified will be used; if this policy is unset then hardcoded mappings will be used to attempt to upgrade the user's current DNS resolver to a DoH resolver operated by the same provider.\r\n\r\nIf the URI template contains a dns variable, requests to the resolver will use GET; otherwise requests will use POST.\r\n\r\nIncorrectly formatted templates will be ignored.\r\n\r\nExample value: https://dns.example.net/dns-query{?dns}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_dnsoverhttpstemplates_dnsoverhttpstemplates","displayName":"Specify URI template of desired DNS-over-HTTPS resolver (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory","displayName":"Set download directory (User)","description":"Setting the policy sets up the directory Chrome uses for downloading files. It uses the provided directory, whether or not users specify one or turned on the flag to be prompted for download location every time.\r\n\r\nLeaving the policy unset means Chrome uses the default download directory, and users can change it.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloaddirectory_downloaddirectory","displayName":"Set download directory (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions","displayName":"Allow download restrictions (User)","description":"Setting the policy means users can't bypass download security decisions.\r\n\r\nThere are many types of download warnings within Chrome, which roughly break down into these categories (learn more about Safe Browsing verdicts https://support.google.com/chrome/?p=ib_download_blocked):\r\n\r\n* Malicious, as flagged by the Safe Browsing server\r\n* Uncommon or unwanted, as flagged by the Safe Browsing server\r\n* A dangerous file type (e.g. all SWF downloads and many EXE downloads)\r\n\r\nSetting the policy blocks different subsets of these, depending on it's value:\r\n\r\n0: No special restrictions. Default.\r\n\r\n1: Blocks malicious files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n2: Blocks malicious files flagged by the Safe Browsing server AND Blocks uncommon or unwanted files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n3: Blocks all downloads. Not recommended, except for special use cases.\r\n\r\n4: Blocks malicious files flagged by the Safe Browsing server, does not block dangerous file types. Recommended.\r\n\r\nNote: These restrictions apply to downloads triggered from webpage content, as well as the Download link... menu option. They don't apply to the download of the currently displayed page or to saving as PDF from the printing options. Read more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_downloadrestrictions","displayName":"Download restrictions (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_downloadrestrictions_0","displayName":"No special restrictions. Default.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_downloadrestrictions_2","displayName":"Block malicious downloads, uncommon or unwanted downloads and dangerous file types.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_downloadrestrictions_3","displayName":"Block all downloads.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_downloadrestrictions_downloadrestrictions_4","displayName":"Block malicious downloads. Recommended.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled","displayName":"Enable or disable bookmark editing (User)","description":"Setting the policy to True or leaving it unset lets users add, remove, or modify bookmarks.\r\n\r\nSetting the policy to False means users can't add, remove, or modify bookmarks. They can still use existing bookmarks.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_editbookmarksenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies","displayName":"Enables experimental policies (User)","description":"Allows Google Chrome to load experimental policies.\r\n\r\nWARNING: Experimental policies are unsupported and subject to change or be removed without notice in future version of the browser!\r\n\r\nAn experimental policy may not be finished or still have known or unknown defects. It may be changed or even removed without any notification. By enabling experimental policies, you could lose browser data or compromise your security or privacy.\r\n\r\nIf a policy is not in the list and it's not officially released, its value will be ignored on Beta and Stable channel.\r\n\r\nIf a policy is in the list and it's not officially released, its value will be applied.\r\n\r\nThis policy has no effect on already released policies.\r\n\r\nExample value:\r\n\r\nExtensionInstallAllowlist\r\nExtensionInstallBlocklist","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableexperimentalpolicies_enableexperimentalpoliciesdesc","displayName":"Enables experimental policies (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks","displayName":"Enable online OCSP/CRL checks (User)","description":"Setting the policy to True means online OCSP/CRL checks are performed.\r\n\r\nSetting the policy to False or leaving it unset means Google Chrome won't perform online revocation checks in Google Chrome 19 and later.\r\n\r\nNote: OCSP/CRL checks provide no effective security benefit.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enableonlinerevocationchecks_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enterprisehardwareplatformapienabled","displayName":"Enables managed extensions to use the Enterprise Hardware Platform API (User)","description":"Setting the policy to True lets extensions installed by enterprise policy use the Enterprise Hardware Platform API.\r\n\r\nSetting the policy to False or leaving it unset prevents extensions from using this API.\r\n\r\nNote: This policy also applies to component extensions, such as the Hangout Services extension.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enterprisehardwareplatformapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_enterprisehardwareplatformapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports","displayName":"Explicitly allowed network ports (User)","description":"There is a list of restricted ports built into Google Chrome. Connections to these ports will fail. This setting permits bypassing that list. The value is a comma-separated list of zero or more ports that outgoing connections will be permitted on.\r\n\r\nPorts are restricted to prevent Google Chrome being used as a vector to exploit various network vulnerabilities. Setting this policy may expose your network to attacks. This policy is intended as a temporary workaround for errors with code \"ERR_UNSAFE_PORT\" while migrating a service running on a blocked port to a standard port (ie. port 80 or 443).\r\n\r\nMalicious websites can easily detect that this policy is set, and for what ports, and use that information to target attacks.\r\n\r\nEach port here is labelled with a date that it can be unblocked until. After that date the port will be restricted regardless of this setting.\r\n\r\nLeaving the value empty or unset means that all restricted ports will be blocked. If there is a mixture of valid and invalid values, the valid ones will be applied.\r\n\r\nThis policy overrides the \"--explicitly-allowed-ports\" command-line option.\r\n\r\nExample value:\r\n\r\n10080","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_explicitlyallowednetworkports_explicitlyallowednetworkportsdesc","displayName":"Explicitly allowed network ports (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox","displayName":"Show an \"Always open\" checkbox in external protocol dialog. (User)","description":"This policy controls whether or not the \"Always open\" checkbox is shown on external protocol launch confirmation prompts.\r\n\r\n If this policy is set to True or not set, when an external protocol confirmation is shown, the user can select \"Always allow\" to skip all future confirmation prompts for the protocol on this site.\r\n\r\n If this policy is set to False, the \"Always allow\" checkbox is not displayed and the user will be prompted each time an external protocol is invoked.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_externalprotocoldialogshowalwaysopencheckbox_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on Shutdown (User)","description":"Controls the duration (in seconds) allowed for keepalive requests on browser shutdown.\r\n\r\nWhen specified, browser shutdown can be blocked up to the specified seconds,\r\nto process keepalive (https://fetch.spec.whatwg.org/#request-keepalive-flag) requests.\r\n\r\nThe default value (0) means this feature is disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fetchkeepalivedurationsecondsonshutdown_fetchkeepalivedurationsecondsonshutdown","displayName":"Fetch keepalive duration on Shutdown: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages","displayName":"Configure the content and order of preferred languages (User)","description":"This policy allows admins to configure the order of the preferred languages in Google Chrome's settings.\r\n\r\nThe order of the list will appear in the same order under the \"Order languages based on your preference\" section in chrome://settings/languages. Users won't be able to remove or reorder languages set by the policy, but will be able to add languages underneath those set by the policy. Users will also have full control over the browser's UI language and translation/spell check settings, unless enforced by other policies.\r\n\r\nLeaving the policy unset lets users manipulate the entire list of preferred languages.\r\n\r\nExample value:\r\n\r\nen-US","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcedlanguages_forcedlanguagesdesc","displayName":"Configure the content and order of preferred languages (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceephemeralprofiles","displayName":"Ephemeral profile (User)","description":"If set to enabled this policy forces the profile to be switched to ephemeral mode. If this policy is specified as an OS policy (e.g. GPO on Windows) it will apply to every profile on the system; if the policy is set as a Cloud policy it will apply only to a profile signed in with a managed account.\r\n\r\nIn this mode the profile data is persisted on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies and web databases are not preserved after the browser is closed. However this does not prevent the user from downloading any data to disk manually, save pages or print them.\r\n\r\nIf the user has enabled sync all this data is preserved in their sync profile just like with regular profiles. Incognito mode is also available if not explicitly disabled by policy.\r\n\r\nIf the policy is set to disabled or left not set signing in leads to regular profiles.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceephemeralprofiles_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceephemeralprofiles_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch","displayName":"Force Google SafeSearch (User)","description":"Setting the policy to Enabled means SafeSearch in Google Search is always active, and users can't change this setting.\r\n\r\nSetting the policy to Disabled or leaving it unset means SafeSearch in Google Search is not enforced.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forcegooglesafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (User)","description":"Setting the policy enforces a minimum Restricted mode on YouTube and prevents users from picking a less restricted mode. If you set it to:\r\n\r\n* Strict, Strict Restricted mode on YouTube is always active.\r\n\r\n* Moderate, the user may only pick Moderate Restricted mode and Strict Restricted mode on YouTube, but can't turn off Restricted mode.\r\n\r\n* Off or if no value is set, Restricted mode on YouTube isn't enforced by Chrome. External policies such as YouTube policies might still enforce Restricted mode.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict","displayName":"Force minimum YouTube Restricted Mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_0","displayName":"Do not enforce Restricted Mode on YouTube","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_1","displayName":"Enforce at least Moderate Restricted Mode on YouTube","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_forceyoutuberestrict_forceyoutuberestrict_2","displayName":"Enforce Strict Restricted Mode for YouTube","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed","displayName":"Allow fullscreen mode (User)","description":"Setting the policy to True or leaving it unset means that, with appropriate permissions, users, apps, and extensions can enter Fullscreen mode (in which only web content appears).\r\n\r\nSetting the policy to False means users, apps, and extensions can't enter Fullscreen mode.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_fullscreenallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled","displayName":"Enable globally scoped HTTP auth cache (User)","description":"This policy configures a single global per profile cache with HTTP server authentication credentials.\r\n\r\nIf this policy is unset or disabled, the browser will use the default behavior of cross-site auth, which as of version 80, will be to scope HTTP server authentication credentials by top-level site, so if two sites use resources from the same authenticating domain, credentials will need to be provided independently in the context of both sites. Cached proxy credentials will be reused across sites.\r\n\r\nIf the policy is enabled, HTTP auth credentials entered in the context of one site will automatically be used in the context of another.\r\n\r\nEnabling this policy leaves sites open to some types of cross-site attacks, and allows users to be tracked across sites even without cookies by adding entries to the HTTP auth cache using credentials embedded in URLs.\r\n\r\nThis policy is intended to give enterprises depending on the legacy behavior a chance to update their login procedures, and will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_globallyscopehttpauthcacheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled","displayName":"Use hardware acceleration when available (User)","description":"Setting the policy to Enabled or leaving it unset turns on hardware acceleration, if available.\r\n\r\nSetting the policy to Disabled turns off hardware acceleration.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hardwareaccelerationmodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode","displayName":"Control use of the Headless Mode (User)","description":"Setting this policy to Enabled or leaving the policy unset allows use of the headless mode. Setting this policy to Disabled denies use of the headless mode.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode","displayName":"Control use of the Headless Mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode_1","displayName":"Allow use of the Headless Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_headlessmode_headlessmode_2","displayName":"Do not allow use of the Headless Mode","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon","displayName":"Hide the web store from the New Tab Page and app launcher (User)","description":"Hide the Chrome Web Store app and footer link from the New Tab Page and Google Chrome OS app launcher.\r\n\r\nWhen this policy is set to true, the icons are hidden.\r\n\r\nWhen this policy is set to false or is not configured, the icons are visible.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hidewebstoreicon_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible","displayName":"Show history clusters on the Chrome history page (User)","description":"This policy controls the visibility of history clusters on the Chrome history page.\r\n\r\nIf the policy is set to Enabled, history clusters will be visible at chrome://history/journeys.\r\n\r\nIf the policy is set to Disabled, history clusters will not be visible at chrome://history/journeys.\r\n\r\nIf the policy is left unset, history clusters will be visible at chrome://history/journeys by default and users can change the visibility of history clusters.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_historyclustersvisible_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist","displayName":"List of names that will bypass the HSTS policy check (User)","description":"Setting the policy specifies a list of hostnames that bypass preloaded HSTS upgrades from http to https.\r\n\r\nOnly single-label hostnames are allowed in this policy, and this policy only applies to \"static\" HSTS-preloaded entries (for instance, \"app\", \"new\", \"search\", \"play\"). This policy does not prevent HSTS upgrades for servers that have \"dynamically\" requested HSTS upgrades using a Strict-Transport-Security response header.\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their A-label format, and all ASCII letters must be lowercase. This policy only applies to the specific single-label hostnames specified, not to subdomains of those names.\r\n\r\nExample value:\r\n\r\nmeet","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_hstspolicybypasslist_hstspolicybypasslistdesc","displayName":"List of names that will bypass the HSTS policy check (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (User)","description":"This policy controls whether users can enable HTTPS-Only Mode in Settings. HTTPS-Only Mode upgrades all navigations to HTTPS.\r\nIf this setting is not set or set to allowed, users will be allowed to enable HTTPS-Only Mode.\r\nIf this setting is set to disallowed, users will not be allowed to enable HTTPS-Only Mode.\r\nForce enabling HTTPS-Only Mode is not currently supported.\r\n\r\nExample value: disallowed","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode","displayName":"Allow HTTPS-Only Mode to be enabled (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_allowed","displayName":"Allow users to enable HTTPS-Only Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_disallowed","displayName":"Do not allow users to enable HTTPS-Only Mode","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_httpsonlymode_httpsonlymode_force_enabled","displayName":"Force enable HTTPS-Only Mode (not supported yet)","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata","displayName":"Import autofill form data from default browser on first run (User)","description":"Setting the policy to Enabled imports autofill form data from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no autofill form data is imported on first run.\r\n\r\nUsers can trigger an import dialog and the autofill form data checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importautofillformdata_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks","displayName":"Import bookmarks from default browser on first run (User)","description":"Setting the policy to Enabled imports bookmarks from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no bookmarks are imported on first run.\r\n\r\nUsers can trigger an import dialog and the bookmarks checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importbookmarks_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory","displayName":"Import browsing history from default browser on first run (User)","description":"Setting the policy to Enabled imports browsing history from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no browsing history is imported on first run.\r\n\r\nUsers can trigger an import dialog and the browsing history checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhistory_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhomepage","displayName":"Import of homepage from default browser on first run (User)","description":"Setting the policy to Enabled imports the homepage from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means the homepage isn't imported on first run.\r\n\r\nUsers can trigger an import dialog and the homepage checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhomepage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importhomepage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords","displayName":"Import saved passwords from default browser on first run (User)","description":"Setting the policy to Enabled imports saved passwords from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no saved passwords are imported on first run.\r\n\r\nUsers can trigger an import dialog and the saved passwords checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsavedpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsearchengine","displayName":"Import search engines from default browser on first run (User)","description":"Setting the policy to Enabled imports the default search engine from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means the default search engine isn't imported on first run.\r\n\r\nUsers can trigger an import dialog and the default search engine checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsearchengine_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_importsearchengine_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability","displayName":"Incognito mode availability (User)","description":"Specifies whether the user may open pages in Incognito mode in Google Chrome.\r\n\r\nIf 'Enabled' is selected or the policy is left unset, pages may be opened in Incognito mode.\r\n\r\nIf 'Disabled' is selected, pages may not be opened in Incognito mode.\r\n\r\nIf 'Forced' is selected, pages may be opened ONLY in Incognito mode. Note that 'Forced' does not work for Android-on-Chrome\r\n\r\nNote: On iOS, if the policy is changed during a session, it will only take effect on relaunch.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability","displayName":"Incognito mode availability (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_0","displayName":"Incognito mode available","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_1","displayName":"Incognito mode disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_incognitomodeavailability_incognitomodeavailability_2","displayName":"Incognito mode forced","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled","displayName":"Enable warnings for insecure forms (User)","description":"This policy controls the treatment for insecure forms (forms that submit over HTTP) embedded in secure (HTTPS) sites in the browser.\r\nIf the policy is enabled or unset, a full page warning will be shown when an insecure form is submitted. Additionally, a warning bubble will be shown next to the form fields when they are focused, and autofill will be disabled for those forms.\r\nIf the policy is disabled, warnings will not be shown for insecure forms, and autofill will work normally.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureformswarningsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed","displayName":"Specifies whether to allow insecure websites to make requests to more-private network endpoints (User)","description":"Controls whether insecure websites are allowed to make requests to more-private network endpoints.\r\n\r\nThis policy relates to the Private Network Access specification. See https://wicg.github.io/private-network-access/ for more details.\r\n\r\nA network endpoint is more private than another if:\r\n1) Its IP address is localhost and the other is not.\r\n2) Its IP address is private and the other is public.\r\nIn the future, depending on spec evolution, this policy might apply to all cross-origin requests directed at private IPs or localhost.\r\n\r\nA website is deemed secure if it meets the definition of a secure context in https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts. Otherwise, it will be treated as an insecure context.\r\n\r\nWhen this policy is either not set or set to false, the default behavior for requests from insecure contexts to more-private network endpoints will depend on the user's personal configuration for the BlockInsecurePrivateNetworkRequests feature, which may be set by a field trial or on the command line.\r\n\r\nWhen this policy is set to true, insecure websites are allowed to make requests to any network endpoint, subject to other cross-origin checks.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts. (User)","description":"List of URL patterns. Private network requests initiated from insecure websites served by matching origins are allowed.\r\n\r\nIf unset, this policy behaves as if set to the empty list.\r\n\r\nFor origins not covered by the patterns specified here, the global default value will be used either from the InsecurePrivateNetworkRequestsAllowed policy, if it is set, or the user's personal configuration otherwise.\r\n\r\nNote that this policy only affects insecure origins, so secure origins (e.g. https://example.com) included in this list will be ignored.\r\n\r\nFor detailed information on valid URL patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_insecureprivatenetworkrequestsallowedforurls_insecureprivatenetworkrequestsallowedforurlsdesc","displayName":"Allow the listed sites to make requests to more-private network endpoints from insecure contexts. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled","displayName":"Control the IntensiveWakeUpThrottling feature. (User)","description":"When enabled the IntensiveWakeUpThrottling feature causes Javascript timers in background tabs to be aggressively throttled and coalesced, running no more than once per minute after a page has been backgrounded for 5 minutes or more.\r\n\r\nThis is a web standards compliant feature, but it may break functionality\r\non some websites by causing certain actions to be delayed by up to a\r\nminute. However, it results in significant CPU and battery savings when\r\nenabled. See https://bit.ly/30b1XR4 for more details.\r\n\r\nIf this policy is set to enabled then the feature will be force enabled, and\r\nusers will not be able to override this.\r\n\r\nIf this policy is set to disabled then the feature will be force disabled, and\r\nusers will not be able to override this.\r\n\r\nIf this policy is left unset then the feature will be controlled by its\r\nown internal logic, which can be manually configured by users.\r\n\r\nNote that the policy is applied per renderer process, with the most recent\r\nvalue of the policy setting in force when a renderer process starts. A full\r\nrestart is required to ensure that all loaded tabs receive a consistent\r\npolicy setting. It is harmless for processes to be running with different\r\nvalues of this policy.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intensivewakeupthrottlingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (User)","description":"This policy configures behavior for intranet redirection via DNS interception checks. The checks attempt to discover whether the browser is behind a proxy that redirects unknown host names.\r\n\r\nIf this policy is not set, the browser will use the default behavior of DNS interception checks and intranet redirect suggestions. In M88, they are enabled by default but will be disabled by default in the future release.\r\n\r\nDNSInterceptionChecksEnabled is a related policy that may also disable DNS interception checks; this policy is a more flexible version which may separately control intranet redirection infobars and may be expanded in the future.\r\nIf either DNSInterceptionChecksEnabled or this policy requests to disable interception checks, the checks will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior","displayName":"Intranet Redirection Behavior (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_0","displayName":"Use default browser behavior.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_1","displayName":"Disable DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_2","displayName":"Disable DNS interception checks; allow did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_intranetredirectbehavior_intranetredirectbehavior_3","displayName":"Allow DNS interception checks and did-you-mean \"http://intranetsite/\" infobars.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins","displayName":"Enable Site Isolation for specified origins (User)","description":"Setting the policy means each of the named origins in a comma-separated list runs in a dedicated process. Each named origin's process will only be allowed to contain documents from that origin and its subdomains. For example, specifying https://a1.example.com/ allows https://a2.a1.example.com/ in the same process, but not https://example.com or https://b.example.com.\r\n\r\nSince Google Chrome 77, you can also specify a range of origins to isolate using a wildcard. For example, specifying https://[*.]corp.example.com will give every origin underneath https://corp.example.com its own dedicated process, including https://corp.example.com itself, https://a1.corp.example.com, and https://a2.a1.corp.example.com.\r\n\r\nNote that all sites (i.e., scheme plus eTLD+1, such as https://example.com) are already isolated by default on Desktop platforms, as noted in the SitePerProcess policy. This IsolateOrigins policy is useful to isolate specific origins at a finer granularity (e.g., https://a.example.com).\r\n\r\nAlso note that origins isolated by this policy will be unable to script other origins in the same site, which is otherwise possible if two same-site documents modify their document.domain values to match. Administrators should confirm this uncommon behavior is not used on an origin before isolating it.\r\n\r\nSetting the policy to off or leaving it unset lets users change this setting.\r\n\r\nNote: For Android, use the IsolateOriginsAndroid policy instead.\r\n\r\nExample value: https://a.example.com/,https://othersite.org/,https://[*.]corp.example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_isolateorigins_isolateorigins","displayName":"Enable Site Isolation for specified origins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lensregionsearchenabled","displayName":"Allow Google Lens region search menu item to be shown in context menu if supported. (User)","description":"Leaving the policy unset or setting it to Enabled allows users to view and use the Google Lens region search menu item in the context menu. Setting the policy to Disabled means users will not see the Google Lens region search menu item in the context menu when Google Lens region search is supported.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lensregionsearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lensregionsearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled","displayName":"Enable lock icon in the omnibox for secure connections (User)","description":"This policy controls the treatment for lock icon in the omnibox.\r\nFrom Chrome M93, there is a new omnibox icon for secure connections.\r\nIf the policy is Enabled, Chrome will use the existing lock icon for secure connections.\r\nIf the policy is Disabled or not set, Chrome will use the default icon for secure connections.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lockiconinaddressbarenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains","displayName":"Suppress lookalike domain warnings on domains (User)","description":"This policy prevents the display of lookalike URL warnings on the sites listed. These warnings are typically shown on sites that Google Chrome believes might be trying to spoof another site the user is familiar with.\r\n\r\nIf the policy is enabled and set to one or more domains, no lookalike warnings pages will be shown when the user visits pages on that domain.\r\n\r\nIf the policy is not set, or set to an empty list, warnings may appear on any site the user visits.\r\n\r\nA hostname can be allowed with a complete host match, or any domain match. For example, a URL like \"https://foo.example.com/bar\" may have warnings suppressed if this list includes either \"foo.example.com\" or \"example.com\".\r\n\r\nExample value:\r\n\r\nfoo.example.com\r\nexample.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_lookalikewarningallowlistdomains_lookalikewarningallowlistdomainsdesc","displayName":"Suppress lookalike domain warnings on domains (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction","displayName":"Add restrictions on managed accounts (User)","description":"\r\n This policy requires SigninInterceptionEnabled to be set to True to take effect.\r\n\r\n If this policy is set to 'primary_account' at the machine level, all managed accounts will be forced to be primary.\r\n If this policy is set to 'primary_account' on an account, that account will always be a primary account, but may have secondary accounts in its profile.\r\n\r\n If this policy is set to 'primary_account_strict' at the machine level, all managed accounts will be forced to be primary.\r\n If this policy is set to 'primary_account_strict' on an account, that account will always be a primary account and will not have any secondary accounts in its profile.\r\n\r\n If this policy is set to 'none' or not set, managed accounts have no restrictions. This may result in a managed account being a secondary account, which disables its ability to receive policies set on the account by the admin.\r\n\r\n\r\nExample value: primary_account","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction","displayName":"Add restrictions on managed accounts (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_primary_account","displayName":"A Managed account must be a primary account","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_primary_account_strict","displayName":"A Managed account must be a primary account and have no secondary accounts","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedaccountssigninrestriction_managedaccountssigninrestriction_none","displayName":"No restrictions on managed accounts","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks","displayName":"Managed Bookmarks (User)","description":"Setting the policy sets up a list of bookmarks where each one is a dictionary with the keys \"name\" and \"url\". These keys hold the bookmark's name and target. Admins can set up a subfolder by defining a bookmark without a \"url\" key, but with an additional \"children\" key. This key also has a list of bookmarks, some of which can also be folders. Chrome amends incomplete URLs as if they were submitted through the address bar. For example, \"google.com\" becomes \"https://google.com/\".\r\n\r\nUsers can't change the folders the bookmarks are placed in (though they can hide it from the bookmark bar). The default folder name for managed bookmarks is \"Managed bookmarks\" but it can be changed by adding a new sub-dictionary to the policy with a single key named \"toplevel_name\" with the desired folder name as its value. Managed bookmarks are not synced to the user account and extensions can't modify them.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"toplevel_name\": \"My managed bookmarks folder\"\r\n },\r\n {\r\n \"name\": \"Google\",\r\n \"url\": \"google.com\"\r\n },\r\n {\r\n \"name\": \"Youtube\",\r\n \"url\": \"youtube.com\"\r\n },\r\n {\r\n \"name\": \"Chrome links\",\r\n \"children\": [\r\n {\r\n \"name\": \"Chromium\",\r\n \"url\": \"chromium.org\"\r\n },\r\n {\r\n \"name\": \"Chromium Developers\",\r\n \"url\": \"dev.chromium.org\"\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedbookmarks_managedbookmarks","displayName":"Managed Bookmarks (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin","displayName":"Sets managed configuration values to websites to specific origins (User)","description":"Setting the policy defines the return value of Managed Configuration API for given origin.\r\n\r\n Managed configuration API is a key-value configuration that can be accessed via navigator.managed.getManagedConfiguration() javascript call. This API is only available to origins which correspond to force-installed web applications via WebAppInstallForceList.\r\n\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedConfigurationPerOrigin for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"origin\": \"https://www.google.com\",\r\n \"managed_configuration_url\": \"https://gstatic.google.com/configuration.json\",\r\n \"managed_configuration_hash\": \"asd891jedasd12ue9h\"\r\n },\r\n {\r\n \"origin\": \"https://www.example.com\",\r\n \"managed_configuration_url\": \"https://gstatic.google.com/configuration2.json\",\r\n \"managed_configuration_hash\": \"djio12easd89u12aws\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_managedconfigurationperorigin_managedconfigurationperorigin","displayName":"Sets managed configuration values to websites to specific origins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy","displayName":"Maximal number of concurrent connections to the proxy server (User)","description":"Setting the policy specifies the maximal number of simultaneous connections to the proxy server. Some proxy servers can't handle a high number of concurrent connections per client, which is solved by setting this policy to a lower value. The value should be lower than 100 and higher than 6. Some web apps are known to consume many connections with hanging GETs, so setting a value below 32 may lead to browser networking hangs if there are too many web apps with hanging connections open. Lower below the default at your own risk.\r\n\r\nLeaving the policy unset means a default of 32 is used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxconnectionsperproxy_maxconnectionsperproxy","displayName":"Maximal number of concurrent connections to the proxy server: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay","displayName":"Maximum fetch delay after a policy invalidation (User)","description":"Setting the policy specifies the maximum delay in milliseconds between receiving a policy invalidation and fetching the new policy from the device management service. Valid values range from 1,000 (1 second) to 300,000 (5 minutes). Values outside this range will be clamped to the respective boundary.\r\n\r\nLeaving the policy unset means Google Chrome uses the default value of 10 seconds.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_maxinvalidationfetchdelay_maxinvalidationfetchdelay","displayName":"Maximum fetch delay after a policy invalidation: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled","displayName":"Enable Media Recommendations (User)","description":"By default the browser will show media recommendations that are personalized to the user. Setting this policy to Disabled will result in these recommendations being hidden from the user. Setting this policy to Enabled or leaving it unset will result in the media recommendations being shown to the user.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediarecommendationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips","displayName":"Allow Google Cast to connect to Cast devices on all IP addresses. (User)","description":"Unless EnableMediaRouter is set to Disabled, setting MediaRouterCastAllowAllIPs to Enabled connects Google Cast to Cast devices on all IP addresses, not just RFC1918/RFC4193 private addresses.\r\n\r\nSetting the policy to Disabled connects Google Cast to Cast devices only on RFC1918/RFC4193.\r\n\r\nLeaving the policy unset connects Google Cast to Cast devices only on RFC1918/RFC4193, unless the CastAllowAllIPs feature is turned on.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_mediaroutercastallowallips_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled","displayName":"Enable reporting of usage and crash-related data (User)","description":"When this policy is enabled, anonymous reporting of usage and crash-related data about Chrome to Google is enabled by default. Users will still be able to change this setting in the Chrome settings.\r\n\r\nWhen this policy is disabled, anonymous reporting is disabled and no usage or crash data is sent to Google. Users won't be able to change this setting.\r\n\r\nWhen this policy isn't set, users can choose the anonymous reporting behavior at installation or first run, and can later change the setting in the Chrome settings.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain or Windows 10 Pro or Enterprise instances that are enrolled for device management, and macOS instances that are managed via MDM or joined to a domain via MCX.\r\n\r\n(For Chrome OS, see DeviceMetricsReportingEnabled.)","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_metricsreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions","displayName":"Enable network prediction (User)","description":"This policy controls network prediction in Google Chrome. It controls DNS prefetching, TCP, and SSL preconnection and prerendering of webpages.\r\n\r\nIf you set the policy, users can't change it. Leaving it unset turns on network prediction, but the user can change it.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_networkpredictionoptions","displayName":"Enable network prediction (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkpredictionoptions_networkpredictionoptions_2","displayName":"Do not predict network actions on any network connection","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled","displayName":"Enable the network service sandbox (User)","description":"This policy controls whether or not the network service process runs sandboxed.\r\nIf this policy is enabled, the network service process will run sandboxed.\r\nIf this policy is disabled, the network service process will run unsandboxed. This leaves users open to additional security risks related to running the network service unsandboxed.\r\nIf this policy is not set, the default configuration for the network sandbox will be used. This may vary depending on Google Chrome release, currently running field trials, and platform.\r\nThis policy is intended to give enterprises flexibility to disable the network sandbox if they use third party software that interferes with the network service sandbox.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_networkservicesandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible","displayName":"Show cards on the New Tab Page (User)","description":"This policy controls the visibility of cards on the New Tab Page. Cards surface entry points to launch common user journeys based on the user's browsing behavior.\r\n\r\nIf the policy is set to Enabled, the New Tab Page will show cards if content is available.\r\n\r\nIf the policy is set to Disabled, the New Tab Page won't show cards.\r\n\r\nIf the policy is not set, the user can control the card visibility. The default is visible.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcardsvisible_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled","displayName":"Allow users to customize the background on the New Tab page (User)","description":"If the policy is set to false, the New Tab page won't allow users to customize the background. Any existing custom background will be permanently removed even if the policy is set to true later.\r\n\r\nIf the policy is set to true or unset, users can customize the background on the New Tab page.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_ntpcustombackgroundenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (User)","description":"Setting the policy specifies a list of origins (URLs) or hostname patterns (such as *.example.com) for which security restrictions on insecure origins won't apply. Organizations can specify origins for legacy applications that can't deploy TLS or set up a staging server for internal web development, so developers can test out features requiring secure contexts without having to deploy TLS on the staging server. This policy also prevents the origin from being labeled \"Not Secure\" in the address bar.\r\n\r\nSetting a list of URLs in this policy amounts to setting the command-line flag --unsafely-treat-insecure-origin-as-secure to a comma-separated list of the same URLs. The policy overrides the command-line flag and UnsafelyTreatInsecureOriginAsSecure, if present.\r\n\r\nFor more information on secure contexts, see Secure Contexts ( https://www.w3.org/TR/secure-contexts ).\r\n\r\nExample value:\r\n\r\nhttp://testserver.example.com/\r\n*.example.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_overridesecurityrestrictionsoninsecureorigin_overridesecurityrestrictionsoninsecureorigindesc","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled","displayName":"Allow websites to query for available payment methods. (User)","description":"Allows you to set whether websites are allowed to check if the user has payment methods saved.\r\n\r\nIf this policy is set to disabled, websites that use PaymentRequest.canMakePayment or PaymentRequest.hasEnrolledInstrument API will be informed that no payment methods are available.\r\n\r\nIf the setting is enabled or not set then websites are allowed to check if the user has payment methods saved.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_paymentmethodqueryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled","displayName":"Enables the concept of policy atomic groups (User)","description":"Setting the policy to Enabled means policies coming from an atomic group that don't share the source with the highest priority from that group get ignored.\r\n\r\nSetting the policy to Disabled means no policy is ignored because of its source. Policies are ignored only if there's a conflict, and the policy doesn't have the highest priority.\r\n\r\nIf this policy is set from a cloud source, it can't target a specific user.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyatomicgroupsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist","displayName":"Allow merging dictionary policies from different sources (User)","description":"Setting the policy allows merging of selected policies when they come from different sources, with the same scopes and level. This merging is in the first level keys of the dictionary from each source. The key coming from the highest priority source takes precedence.\r\n\r\nIf a policy is in the list and there's conflict between sources with:\r\n\r\n* The same scopes and level: The values merge into a new policy dictionary.\r\n\r\n* Different scopes or level: The policy with the highest priority applies.\r\n\r\nIf a policy isn't in the list and there's conflict between sources, scopes, or level, the policy with the highest priority applies.\r\n\r\nExample value:\r\n\r\nExtensionSettings","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policydictionarymultiplesourcemergelist_policydictionarymultiplesourcemergelistdesc","displayName":"Allow merging dictionary policies from different sources (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist","displayName":"Allow merging list policies from different sources (User)","description":"Setting the policy allows merging of selected policies when they come from different sources, with the same scopes and level.\r\n\r\nIf a policy is in the list and there's conflict between sources with:\r\n\r\n* The same scopes and level: The values merge into a new policy list.\r\n\r\n* Different scopes or level: The policy with the highest priority applies.\r\n\r\nIf a policy isn't in the list and there's conflict between sources, scopes, or level, the policy with the highest priority applies.\r\n\r\nExample value:\r\n\r\nExtensionInstallAllowlist\r\nExtensionInstallBlocklist","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policylistmultiplesourcemergelist_policylistmultiplesourcemergelistdesc","displayName":"Allow merging list policies from different sources (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate","displayName":"Refresh rate for user policy (User)","description":"Setting the policy specifies the period in milliseconds at which the device management service is queried for user policy information. Valid values range from 1,800,000 (30 minutes) to 86,400,000 (1 day). Values outside this range will be clamped to the respective boundary.\r\n\r\nLeaving the policy unset uses the default value of 3 hours.\r\n\r\nNote: Policy notifications force a refresh when the policy changes, making frequent refreshes unnecessary. So, if the platform supports these notifications, the refresh delay is 24 hours (ignoring defaults and the value of this policy).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_policyrefreshrate_policyrefreshrate","displayName":"Refresh rate for user policy: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability","displayName":"Profile picker availability on startup (User)","description":"Specifies whether the profile picker is enabled, disabled or forced at the browser startup.\r\n\r\nBy default the profile picker is not shown if the browser starts in guest or incognito mode, a profile directory and/or urls are specified by command line, an app is explicitly requested to open, the browser was launched by a native notification, there is only one profile available or the policy ForceBrowserSignin is set to true.\r\n\r\nIf 'Enabled' (0) is selected or the policy is left unset, the profile picker will be shown at startup by default, but users will be able to enable/disable it.\r\n\r\nIf 'Disabled' (1) is selected, the profile picker will never be shown, and users will not be able to change the setting.\r\n\r\nIf 'Forced' (2) is selected, the profile picker cannot be suppressed by the user. The profile picker will be shown even if there is only one profile available.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability","displayName":"Profile picker availability on startup (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_0","displayName":"Profile picker available at startup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_1","displayName":"Profile picker disabled at startup","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_profilepickeronstartupavailability_profilepickeronstartupavailability_2","displayName":"Profile picker forced at startup","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promotionaltabsenabled","displayName":"Enable showing full-tab promotional content (User)","description":"Setting the policy to True or leaving it unset lets Google Chrome show users product information as full-tab content.\r\n\r\nSetting the policy to False prevents Google Chrome from showing product information as full-tab content.\r\n\r\nSetting the policy controls the presentation of the welcome pages that help users sign in to Google Chrome, set Google Chrome as users' default browser, or otherwise inform them of product features.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promotionaltabsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promotionaltabsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promptfordownloadlocation","displayName":"Ask where to save each file before downloading (User)","description":"Setting the policy to Enabled means users are asked where to save each file before downloading. Setting the policy to Disabled has downloads start immediately, and users aren't asked where to save the file.\r\n\r\nLeaving the policy unset lets users change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promptfordownloadlocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_promptfordownloadlocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings","displayName":"Proxy settings (User)","description":"Setting the policy configures the proxy settings for Chrome and ARC-apps, which ignore all proxy-related options specified from the command line.\r\n\r\n Leaving the policy unset lets users choose their proxy settings.\r\n\r\n Setting the ProxySettings policy accepts the following fields:\r\n * ProxyMode, which lets you specify the proxy server Chrome uses and prevents users from changing proxy settings\r\n * ProxyPacUrl, a URL to a proxy .pac file\r\n * ProxyPacMandatory, which prevents the network stack from falling back to direct connections with invalid or unavailable PAC script\r\n * ProxyServer, a URL of the proxy server\r\n * ProxyBypassList, a list of hosts for which the proxy will be bypassed\r\n\r\n The ProxyServerMode field is deprecated in favor of the ProxyMode field.\r\n\r\n For ProxyMode, if you choose the value:\r\n * direct, a proxy is never used and all other fields are ignored.\r\n * system, the systems's proxy is used and all other fields are ignored.\r\n * auto_detect, all other fields are ignored.\r\n * fixed_servers, the ProxyServer and ProxyBypassList fields are used.\r\n * pac_script, the ProxyPacUrl, ProxyPacMandatory and ProxyBypassList fields are used.\r\n\r\nNote: For more detailed examples, visit The Chromium Projects ( https://www.chromium.org/developers/design-documents/network-settings#TOC-Command-line-options-for-proxy-sett ).\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ProxySettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"ProxyMode\": \"fixed_servers\",\r\n \"ProxyServer\": \"123.123.123.123:8080\",\r\n \"ProxyBypassList\": \"https://www.example1.com,https://www.example2.com,https://internalsite/\"\r\n}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_proxysettings_proxysettings","displayName":"Proxy settings (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_quicallowed","displayName":"Allow QUIC protocol (User)","description":"Setting the policy to Enabled or leaving it unset allows the use of QUIC protocol in Google Chrome.\r\n\r\nSetting the policy to Disabled disallows the use of QUIC protocol.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_quicallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_quicallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended","displayName":"Enable alternate error pages (User)","description":"Setting the policy to True means Google Chrome uses alternate error pages built into (such as \"page not found\"). Setting the policy to False means Google Chrome never uses alternate error pages.\r\n\r\nIf you set the policy, users can't change it. If not set, the policy is on, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alternateerrorpagesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended","displayName":"Always Open PDF files externally (User)","description":"Setting the policy to Enabled turns the internal PDF viewer off in Google Chrome, treats PDF files as a download, and lets users open PDFs with the default application.\r\n\r\nSetting the policy to Disabled means that unless users turns off the PDF plugin, it will open PDF files.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can choose whether to open PDF externally or not.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_alwaysopenpdfexternally_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended","displayName":"Application locale (User)","description":"Setting the policy specifies the locale Google Chrome uses.\r\n\r\nTurning it off or leaving it unset means the locale will be the first valid locale from:\r\n1) The user specified locale (if configured).\r\n2) The system locale.\r\n3) The fallback locale (en-US).\r\n\r\nExample value: en","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_applicationlocalevalue_recommended_applicationlocalevalue","displayName":"Application locale (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended","displayName":"Enable AutoFill for addresses (User)","description":"Setting the policy to True or leaving it unset gives users control of Autofill for addresses in the UI.\r\n\r\nSetting the policy to False means Autofill never suggests or fills address information, nor does it save additional address information that users submit while browsing the web.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofilladdressenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended","displayName":"Enable AutoFill for credit cards (User)","description":"Setting the policy to True or leaving it unset means users can control autofill suggestions for credit cards in the UI.\r\n\r\nSetting the policy to False means autofill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_autofillcreditcardenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended","displayName":"Continue running background apps when Google Chrome is closed (User)","description":"Setting the policy to Enabled turns background mode on. In background mode, a Google Chrome process is started on OS sign-in and keeps running when the last browser window is closed, allowing background apps and the browsing session to remain active. The background process displays an icon in the system tray and can always be closed from there.\r\n\r\nSetting the policy to Disabled turns background mode off.\r\n\r\nIf you set the policy, users can't change it in the browser settings. If unset, background mode is off at first, but users can change it.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_backgroundmodeenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended","displayName":"Block third party cookies (User)","description":"Setting the policy to Enabled prevents webpage elements that aren't from the domain that's in the browser's address bar from setting cookies. Setting the policy to Disabled lets those elements set cookies and prevents users from changing this setting.\r\n\r\nLeaving it unset turns third-party cookies on, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_blockthirdpartycookies_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended","displayName":"Enable Bookmark Bar (User)","description":"Setting the policy to True displays a bookmark bar in Google Chrome. Setting the policy to False means users never see the bookmark bar.\r\n\r\nIf you set the policy, users can't change it. If not set, users decide whether to use this function.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_bookmarkbarenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended","displayName":"Set default download directory (User)","description":"Setting the policy changes the default directory that Chrome downloads files to, but users can change the directory.\r\n\r\nLeaving the policy unset means Chrome uses its platform-specific default directory.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultdownloaddirectory_recommended_defaultdownloaddirectory","displayName":"Set default download directory (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended","displayName":"Allow default search provider context menu search access (User)","description":"Enables the use of a default search provider on the context menu.\r\n\r\nIf you set this policy to disabled the search context menu item that relies on your default search provider will not be available.\r\n\r\nIf this policy is set to enabled or not set, the context menu item for your default search provider will be available.\r\n\r\nThe policy value is only appled when the DefaultSearchProviderEnabled policy is enabled, and is not applicable otherwise.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_defaultsearchprovidercontextmenuaccessallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended","displayName":"Set download directory (User)","description":"Setting the policy sets up the directory Chrome uses for downloading files. It uses the provided directory, whether or not users specify one or turned on the flag to be prompted for download location every time.\r\n\r\nLeaving the policy unset means Chrome uses the default download directory, and users can change it.\r\n\r\nNote: See a list of variables you can use ( https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables ).\r\n\r\nExample value: /home/${user_name}/Downloads","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloaddirectory_recommended_downloaddirectory","displayName":"Set download directory (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended","displayName":"Allow download restrictions (User)","description":"Setting the policy means users can't bypass download security decisions.\r\n\r\nThere are many types of download warnings within Chrome, which roughly break down into these categories (learn more about Safe Browsing verdicts https://support.google.com/chrome/?p=ib_download_blocked):\r\n\r\n* Malicious, as flagged by the Safe Browsing server\r\n* Uncommon or unwanted, as flagged by the Safe Browsing server\r\n* A dangerous file type (e.g. all SWF downloads and many EXE downloads)\r\n\r\nSetting the policy blocks different subsets of these, depending on it's value:\r\n\r\n0: No special restrictions. Default.\r\n\r\n1: Blocks malicious files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n2: Blocks malicious files flagged by the Safe Browsing server AND Blocks uncommon or unwanted files flagged by the Safe Browsing server AND Blocks all dangerous file types. Only recommended for OUs/browsers/users that have a high tolerance for False Positives.\r\n\r\n3: Blocks all downloads. Not recommended, except for special use cases.\r\n\r\n4: Blocks malicious files flagged by the Safe Browsing server, does not block dangerous file types. Recommended.\r\n\r\nNote: These restrictions apply to downloads triggered from webpage content, as well as the Download link... menu option. They don't apply to the download of the currently displayed page or to saving as PDF from the printing options. Read more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions","displayName":"Download restrictions (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_0","displayName":"No special restrictions. Default.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_1","displayName":"Block malicious downloads and dangerous file types.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_2","displayName":"Block malicious downloads, uncommon or unwanted downloads and dangerous file types.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_3","displayName":"Block all downloads.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_downloadrestrictions_recommended_downloadrestrictions_4","displayName":"Block malicious downloads. Recommended.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended","displayName":"Import autofill form data from default browser on first run (User)","description":"Setting the policy to Enabled imports autofill form data from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no autofill form data is imported on first run.\r\n\r\nUsers can trigger an import dialog and the autofill form data checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importautofillformdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended","displayName":"Import bookmarks from default browser on first run (User)","description":"Setting the policy to Enabled imports bookmarks from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no bookmarks are imported on first run.\r\n\r\nUsers can trigger an import dialog and the bookmarks checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importbookmarks_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended","displayName":"Import browsing history from default browser on first run (User)","description":"Setting the policy to Enabled imports browsing history from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no browsing history is imported on first run.\r\n\r\nUsers can trigger an import dialog and the browsing history checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importhistory_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended","displayName":"Import saved passwords from default browser on first run (User)","description":"Setting the policy to Enabled imports saved passwords from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means no saved passwords are imported on first run.\r\n\r\nUsers can trigger an import dialog and the saved passwords checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsavedpasswords_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsearchengine_recommended","displayName":"Import search engines from default browser on first run (User)","description":"Setting the policy to Enabled imports the default search engine from the previous default browser on first run. Setting the policy to Disabled or leaving it unset means the default search engine isn't imported on first run.\r\n\r\nUsers can trigger an import dialog and the default search engine checkbox will be checked or unchecked to match this policy's value.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsearchengine_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_importsearchengine_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended","displayName":"Enable reporting of usage and crash-related data (User)","description":"When this policy is enabled, anonymous reporting of usage and crash-related data about Chrome to Google is enabled by default. Users will still be able to change this setting in the Chrome settings.\r\n\r\nWhen this policy is disabled, anonymous reporting is disabled and no usage or crash data is sent to Google. Users won't be able to change this setting.\r\n\r\nWhen this policy isn't set, users can choose the anonymous reporting behavior at installation or first run, and can later change the setting in the Chrome settings.\r\n\r\nThis policy is available only on Windows instances that are joined to a Microsoft® Active Directory® domain or Windows 10 Pro or Enterprise instances that are enrolled for device management, and macOS instances that are managed via MDM or joined to a domain via MCX.\r\n\r\n(For Chrome OS, see DeviceMetricsReportingEnabled.)","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_metricsreportingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended","displayName":"Enable network prediction (User)","description":"This policy controls network prediction in Google Chrome. It controls DNS prefetching, TCP, and SSL preconnection and prerendering of webpages.\r\n\r\nIf you set the policy, users can't change it. Leaving it unset turns on network prediction, but the user can change it.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions","displayName":"Enable network prediction (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_0","displayName":"Predict network actions on any network connection","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_1","displayName":"Predict network actions on any network that is not cellular.\r\n(Deprecated in 50, removed in 52. After 52, if value 1 is set, it will be treated as 0 - predict network actions on any network connection.)","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_networkpredictionoptions_recommended_networkpredictionoptions_2","displayName":"Do not predict network actions on any network connection","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended","displayName":"Enable Safe Browsing for trusted sources (User)","description":"Setting the policy to Enabled or leaving it unset means downloaded files are sent to be analyzed by Safe Browsing, even when it's from a trusted source.\r\n\r\nSetting the policy to Disabled means downloaded files won't be sent to be analyzed by Safe Browsing when it's from a trusted source.\r\n\r\nThese restrictions apply to downloads triggered from webpage content, as well as the Download link menu option. These restrictions don't apply to the save or download of the currently displayed page or to saving as PDF from the printing options.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_safebrowsingfortrustedsourcesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended","displayName":"Enable search suggestions (User)","description":"Setting the policy to True turns on search suggestions in Google Chrome's address bar. Setting the policy to False turns off these search suggestions.\r\n\r\nIf you set the policy, users can't change it. If not set, search suggestions are on at first, but users can turn them off any time.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_searchsuggestenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended","displayName":"Show Full URLs (User)","description":"This feature enables display of the full URL in the address bar.\r\nIf this policy is set to True, then the full URL will be shown in the address bar, including schemes and subdomains.\r\nIf this policy is set to False, then the default URL display will apply.\r\nIf this policy is left unset, then the default URL display will apply and the user will be able to toggle between default and full URL display with a context menu option.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_showfullurlsinaddressbar_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_spellcheckserviceenabled_recommended","displayName":"Enable or disable spell checking web service (User)","description":"Setting the policy to Enabled puts a Google web service in use to help resolve spelling errors. This policy only controls the use of the online service. Setting the policy to Disabled means this service is never used.\r\n\r\nLeaving the policy unset lets users choose whether to use the spellcheck service.\r\n\r\nThe spell check can always use a downloaded dictionary locally unless the feature is disabled by SpellcheckEnabled in which case this policy will have no effect.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_spellcheckserviceenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_spellcheckserviceenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended","displayName":"Enable Translate (User)","description":"Setting the policy to True provides translation functionality when it's appropriate for users by showing an integrated translate toolbar in Google Chrome and a translate option on the right-click context menu. Setting the policy to False shuts off all built-in translate features.\r\n\r\nIf you set the policy, users can't change this function. Leaving it unset lets them change the setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended_translateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended","displayName":"Register protocol handlers (User)","description":"Setting the policy (as recommended only) lets you register a list of protocol handlers, which merge with the ones that the user registers, putting both sets in use. Set the property \"protocol\" to the scheme, such as \"mailto\", and set the property \"URL\" to the URL pattern of the application that handles the scheme specified in the \"protocol\" field. The pattern can include a \"%s\" placeholder, which the handled URL replaces.\r\n\r\nUsers can't remove a protocol handler registered by policy. However, by installing a new default handler, they can change the protocol handlers installed by policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RegisteredProtocolHandlers for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"protocol\": \"mailto\",\r\n \"url\": \"https://mail.google.com/mail/?extsrc=mailto&url=%s\",\r\n \"default\": true\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~contentsettings_recommended_registeredprotocolhandlers_recommended_registeredprotocolhandlers","displayName":"Register protocol handlers (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended","displayName":"List of alternate URLs for the default search provider (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderAlternateURLs specifies a list of alternate URLs for extracting search terms from the search engine. The URLs should include the string '{searchTerms}'.\r\n\r\nLeaving DefaultSearchProviderAlternateURLs unset means no alternate URLs are used to extract search terms.\r\n\r\nExample value:\r\n\r\nhttps://search.my.company/suggest#q={searchTerms}\r\nhttps://search.my.company/suggest/search#q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovideralternateurls_recommended_defaultsearchprovideralternateurlsdesc","displayName":"List of alternate URLs for the default search provider (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended","displayName":"Enable the default search provider (User)","description":"Setting the policy to Enabled means a default search is performed when a user enters non-URL text in the address bar. To specify the default search provider, set the rest of the default search policies. If you leave those policies empty, the user can choose the default provider. Setting the policy to Disabled means there's no search when the user enters non-URL text in the address bar.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, the default search provider is on, and users can set the search provider list.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended","displayName":"Default search provider encodings (User)","description":"If DefaultSearchProviderEnabled is on, setting DefaultSearchProviderEncodings specifies the character encodings supported by the search provider. Encodings are code page names such as UTF-8, GB2312, and ISO-8859-1. They're tried in the order provided.\r\n\r\nLeaving DefaultSearchProviderEncodings unset puts UTF-8 in use.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderencodings_recommended_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended","displayName":"Default search provider icon (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderIconURL specifies the default search provider's favorite icon URL.\r\n\r\nLeaving DefaultSearchProviderIconURL unset means there's no icon for the search provider.\r\n\r\nExample value: https://search.my.company/favicon.ico","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidericonurl_recommended_defaultsearchprovidericonurl","displayName":"Default search provider icon (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended","displayName":"Parameter providing search-by-image feature for the default search provider (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURL specifies the URL of the search engine used for image search. (If DefaultSearchProviderImageURLPostParams is set, then image search requests use the POST method instead.)\r\n\r\nLeaving DefaultSearchProviderImageURL unset means no image search is used.\r\n\r\nExample value: https://search.my.company/searchbyimage/upload","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurl_recommended_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended","displayName":"Parameters for image URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURLPostParams specifies the parameters during image search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as {imageThumbnail}, real image thumbnail data replaces it.\r\n\r\nLeaving DefaultSearchProviderImageURLPostParams unset means image search request is sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderimageurlpostparams_recommended_defaultsearchproviderimageurlpostparams","displayName":"Parameters for image URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended","displayName":"Default search provider keyword (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderKeyword specifies the keyword or shortcut used in the address bar to trigger the search for this provider.\r\n\r\nLeaving DefaultSearchProviderKeyword unset means no keyword activates the search provider.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchproviderkeyword_recommended_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended","displayName":"Default search provider name (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderName specifies the default search provider's name.\r\n\r\nLeaving DefaultSearchProviderName unset means the hostname specified by the search URL is used.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidername_recommended_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended","displayName":"Default search provider new tab page URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderNewTabURL specifies the URL of the search engine used to provide a New Tab page.\r\n\r\nLeaving DefaultSearchProviderNewTabURL unset means no new tab page is provided.\r\n\r\nExample value: https://search.my.company/newtab","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidernewtaburl_recommended_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended","displayName":"Default search provider search URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURL specifies the URL of the search engine used during a default search. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nExample value: https://search.my.company/search?q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurl_recommended_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended","displayName":"Parameters for search URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURLPostParams specifies the parameters when searching a URL with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSearchURLPostParams unset means search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersearchurlpostparams_recommended_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended","displayName":"Default search provider suggest URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURL specifies the URL of the search engine to provide search suggestions. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nExample value: https://search.my.company/suggest?q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturl_recommended_defaultsearchprovidersuggesturl","displayName":"Default search provider suggest URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended","displayName":"Parameters for suggest URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURLPostParams specifies the parameters during suggestion search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSuggestURLPostParams unset unset means suggest search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~defaultsearchprovider_recommended_defaultsearchprovidersuggesturlpostparams_recommended_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended","displayName":"Enable AutoFill (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_autofillenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended","displayName":"Enable Safe Browsing (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~deprecatedpolicies_recommended_safebrowsingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended","displayName":"Enable leak detection for entered credentials (User)","description":"Setting the policy to Enabled lets users have Google Chrome check whether usernames and passwords entered were part of a leak.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, credential leak checking is allowed, but the user can turn it off.\r\n\r\nThis behavior will not trigger if Safe Browsing is disabled (either by policy or by the user). In order to force Safe Browsing on, use the SafeBrowsingEnabled policy or the SafeBrowsingProtectionLevel policy.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordleakdetectionenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended","displayName":"Enable saving passwords to the password manager (User)","description":"Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.\r\n\r\nSetting the policy to Disabled means users can't save new passwords, but previously saved passwords will still work.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, the user can turn off password saving.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~passwordmanager_recommended_passwordmanagerenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended","displayName":"Print Headers and Footers (User)","description":"Setting the policy to Enabled turns headers and footers on in print preview. Setting the policy to Disabled turns them off in print preview.\r\n\r\nIf you set the policy, users can't change it. If unset, users decides whether headers and footers appear.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printheaderfooter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended","displayName":"Print PDF as Image Default (User)","description":"Controls if Google Chrome makes the Print as image option default to set when printing PDFs.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome then the user selection for Print as image option will be initially unset. The user will be allowed to select it for each individual PDFs print job, if the option is available.\r\n\r\nFor Microsoft® Windows® or macOS this policy only has an effect if PrintPdfAsImageAvailability is also enabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpdfasimagedefault_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended","displayName":"Use System Default Printer as Default (User)","description":"Setting the policy to Enabled means Google Chrome uses the OS default printer as the default destination for print preview.\r\n\r\nSetting the policy to Disabled or leaving it unset means Google Chrome uses the most recently used printer as the default destination for print preview.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~printing_recommended_printpreviewusesystemdefaultprinter_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended","displayName":"Clear site data on browser shutdown (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_clearsitedataonexit_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended","displayName":"Default search provider instant URL (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturl_recommended_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended","displayName":"Parameters for instant URL which uses POST (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchproviderinstanturlpostparams_recommended_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended","displayName":"Parameter controlling search term placement for the default search provider (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_defaultsearchprovidersearchtermsreplacementkey_recommended_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended","displayName":"Enable network prediction (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_dnsprefetchingenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended","displayName":"Enable Instant (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~removedpolicies_recommended_instantenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended","displayName":"Safe Browsing Protection Level (User)","description":"Allows you to control whether Google Chrome's Safe Browsing feature is enabled and the mode it operates in.\r\n\r\nIf this policy is set to 'NoProtection' (value 0), Safe Browsing is never active.\r\n\r\nIf this policy is set to 'StandardProtection' (value 1, which is the default), Safe Browsing is always active in the standard mode.\r\n\r\nIf this policy is set to 'EnhancedProtection' (value 2), Safe Browsing is always active in the enhanced mode, which provides better security, but requires sharing more browsing information with Google.\r\n\r\nIf you set this policy as mandatory, users cannot change or override the Safe Browsing setting in Google Chrome.\r\n\r\nIf this policy is left not set, Safe Browsing will operate in Standard Protection mode but users can change this setting.\r\n\r\nSee https://developers.google.com/safe-browsing for more info on Safe Browsing.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_0","displayName":"Safe Browsing is never active.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_1","displayName":"Safe Browsing is active in the standard mode.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~safebrowsing_recommended_safebrowsingprotectionlevel_recommended_safebrowsingprotectionlevel_2","displayName":"Safe Browsing is active in the enhanced mode. This mode provides better security, but requires sharing more browsing information with Google.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended","displayName":"Use New Tab Page as homepage (User)","description":"Setting the policy to Enabled makes the New Tab page the user's homepage, ignoring any homepage URL location. Setting the policy to Disabled means that their homepage is never the New Tab page, unless the user's homepage URL is set to chrome://newtab.\r\n\r\nIf you set the policy, users can't change their homepage type in Google Chrome. If not set, the user decides whether or not the New Tab page is their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepageisnewtabpage_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended","displayName":"Configure the home page URL (User)","description":"Setting the policy sets the default homepage URL in Google Chrome. You open the homepage using the Home button. On desktop, the RestoreOnStartup policies control the pages that open on startup.\r\n\r\nIf the homepage is set to the New Tab Page, by the user or HomepageIsNewTabPage, this policy has no effect.\r\n\r\n The URL needs a standard scheme, such as http://example.com or https://example.com. When this policy is set, users can't change their homepage URL in Google Chrome.\r\n\r\nLeaving both HomepageLocation and HomepageIsNewTabPage unset lets users choose their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_homepagelocation_recommended_homepagelocation","displayName":"Home page URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended","displayName":"Action on startup (User)","description":"Setting the policy lets you specify system behavior on startup. Turning this setting off amounts to leaving it unset as Google Chrome must have specified start up behavior.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can change it.\r\n\r\nSetting this policy to RestoreOnStartupIsLastSession turns off some settings that rely on sessions or that perform actions on exit, such as clearing browsing data on exit or session-only cookies.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup","displayName":"Action on startup (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_5","displayName":"Open New Tab Page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartup_recommended_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended","displayName":"URLs to open on startup (User)","description":"If RestoreOnStartup is set to RestoreOnStartupIsURLs, then setting RestoreOnStartupURLs to a list of URLs specify which URLs open.\r\n\r\nIf not set, the New Tab page opens on start up.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nhttps://example.com\r\nhttps://www.chromium.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_restoreonstartupurls_recommended_restoreonstartupurlsdesc","displayName":"URLs to open on startup (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended","displayName":"Show Home button on toolbar (User)","description":"Setting the policy to Enabled shows the Home button on Google Chrome's toolbar. Setting the policy to Disabled keeps the Home button from appearing.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users chooses whether to show the Home button.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_recommended~startup_recommended_showhomebutton_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification","displayName":"Notify a user that a browser relaunch or device restart is recommended or required (User)","description":"Notify users that Google Chrome must be relaunched or Google Chrome OS must be restarted to apply a pending update.\r\n\r\nThis policy setting enables notifications to inform the user that a browser relaunch or device restart is recommended or required. If not set, Google Chrome indicates to the user that a relaunch is needed via subtle changes to its menu, while Google Chrome OS indicates such via a notification in the system tray. If set to 'Recommended', a recurring warning will be shown to the user that a relaunch is recommended. The user can dismiss this warning to defer the relaunch. If set to 'Required', a recurring warning will be shown to the user indicating that a browser relaunch will be forced once the notification period passes. The default period is seven days for Google Chrome and four days for Google Chrome OS, and may be configured via the RelaunchNotificationPeriod policy setting.\r\n\r\nThe user's session is restored following the relaunch/restart.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification","displayName":"Notify a user that a browser relaunch or device restart is recommended or required (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification_1","displayName":"Show a recurring prompt to the user indicating that a relaunch is recommended","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotification_relaunchnotification_2","displayName":"Show a recurring prompt to the user indicating that a relaunch is required","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod","displayName":"Set the time period for update notifications (User)","description":"Allows you to set the time period, in milliseconds, over which users are notified that Google Chrome must be relaunched or that a Google Chrome OS device must be restarted to apply a pending update.\r\n\r\nOver this time period, the user will be repeatedly informed of the need for an update. For Google Chrome OS devices, a restart notification appears in the system tray according to the RelaunchHeadsUpPeriod policy. For Google Chrome browsers, the app menu changes to indicate that a relaunch is needed once one third of the notification period passes. This notification changes color once two thirds of the notification period passes, and again once the full notification period has passed. The additional notifications enabled by the RelaunchNotification policy follow this same schedule.\r\n\r\nIf not set, the default period of 604800000 milliseconds (one week) is used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchnotificationperiod_relaunchnotificationperiod","displayName":"Time period (milliseconds): (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow","displayName":"Set the time interval for relaunch (User)","description":"Specify a target time window for the end of the relaunch notification period.\r\n\r\nUsers are notified of the need for a browser relaunch or device restart based on the RelaunchNotification and RelaunchNotificationPeriod policy settings. Browsers and devices are forcibly restarted at the end of the notification period when the RelaunchNotification policy is set to 'Required'. This RelaunchWindow policy can be used to defer the end of the notification period so that it falls within a specific time window.\r\n\r\nIf this policy is not set, the default target time window for Google Chrome OS is between 2 AM and 4 AM. The default target time window for Google Chrome is the whole day (i.e., the end of the notification period is never deferred).\r\n\r\nNote: Though the policy can accept multiple items in entries, all but the first item are ignored.\r\nWarning: Setting this policy may delay application of software updates.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RelaunchWindow for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"entries\": [\r\n {\r\n \"start\": {\r\n \"hour\": 2,\r\n \"minute\": 15\r\n },\r\n \"duration_mins\": 240\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_relaunchwindow_relaunchwindow","displayName":"Relaunch time window (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_remotedebuggingallowed","displayName":"Allow remote debugging (User)","description":"Controls whether users may use remote debugging.\r\n\r\nIf this policy is set to Enabled or not set, users may use remote debugging by specifying --remote-debugging-port and --remote-debugging-pipe command line switches.\r\n\r\nIf this policy is set to Disabled, users are not allowed to use remote debugging.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_remotedebuggingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_remotedebuggingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_renderercodeintegrityenabled","displayName":"Enable Renderer Code Integrity (User)","description":"Setting the policy to Enabled or leaving it unset turns Renderer Code Integrity on.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security and stability as unknown and potentially hostile code can load inside Google Chrome's renderer processes. Only turn off the policy if there are compatibility issues with third-party software that must run inside Google Chrome's renderer processes.\r\n\r\nNote: Read more about Process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_renderercodeintegrityenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_renderercodeintegrityenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors","displayName":"Require online OCSP/CRL checks for local trust anchors (User)","description":"Setting the policy to True means Google Chrome always performs revocation checking for successfully validated server certificates signed by locally installed CA certificates. If Google Chrome can't get revocation status information, Google Chrome treats these certificates as revoked (hard-fail).\r\n\r\nSetting the policy to False or leaving it unset means Google Chrome uses existing online revocation-checking settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_requireonlinerevocationchecksforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern","displayName":"Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome (User)","description":"Contains a regular expression which is used to determine which Google accounts can be set as browser primary accounts in Google Chrome (i.e. the account that is chosen during the Sync opt-in flow).\r\n\r\nAn appropriate error is displayed if a user tries to set a browser primary account with a username that does not match this pattern.\r\n\r\nIf this policy is left not set or blank, then the user can set any Google account as a browser primary account in Google Chrome.\r\n\r\nExample value: .*@example\\.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_restrictsignintopattern_restrictsignintopattern","displayName":"Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation","displayName":"Set the roaming profile directory (User)","description":"Configures the directory that Google Chrome will use for storing the roaming copy of the profiles.\r\n\r\nIf you set this policy, Google Chrome will use the provided directory to store the roaming copy of the profiles if the RoamingProfileSupportEnabled policy has been enabled. If the RoamingProfileSupportEnabled policy is disabled or left unset the value stored in this policy is not used.\r\n\r\nSee https://www.chromium.org/administrators/policy-list-3/user-data-directory-variables for a list of variables that can be used.\r\n\r\nOn non-Windows platforms, this policy must be set for roaming profiles to work.\r\n\r\nOn Windows, if this policy is left unset, the default roaming profile path will be used.\r\n\r\nExample value: ${roaming_app_data}\\chrome-profile","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilelocation_roamingprofilelocation","displayName":"Set the roaming profile directory (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilesupportenabled","displayName":"Enable the creation of roaming copies for Google Chrome profile data (User)","description":"If you enable this setting, the settings stored in Google Chrome profiles like bookmarks, autofill data, passwords, etc. will also be written to a file stored in the Roaming user profile folder or a location specified by the Administrator through the RoamingProfileLocation policy. Enabling this policy disables cloud sync.\r\n\r\nIf this policy is disabled or left not set only the regular local profiles will be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilesupportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_roamingprofilesupportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled","displayName":"Enable Safe Browsing for trusted sources (User)","description":"Setting the policy to Enabled or leaving it unset means downloaded files are sent to be analyzed by Safe Browsing, even when it's from a trusted source.\r\n\r\nSetting the policy to Disabled means downloaded files won't be sent to be analyzed by Safe Browsing when it's from a trusted source.\r\n\r\nThese restrictions apply to downloads triggered from webpage content, as well as the Download link menu option. These restrictions don't apply to the save or download of the currently displayed page or to saving as PDF from the printing options.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safebrowsingfortrustedsourcesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior","displayName":"Control SafeSites adult content filtering. (User)","description":"Setting the policy controls the SafeSites URL filter, which uses the Google Safe Search API to classify URLs as pornographic or not.\r\n\r\nWhen this policy is set to:\r\n\r\n* Do not filter sites for adult content, or not set, sites aren't filtered\r\n\r\n* Filter top level sites for adult content, pornographic sites are filtered","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior","displayName":"Control SafeSites adult content filtering. (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior_0","displayName":"Do not filter sites for adult content","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_safesitesfilterbehavior_safesitesfilterbehavior_1","displayName":"Filter top level sites (but not embedded iframes) for adult content","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked","displayName":"Allow Chrome to block navigations toward external protocols in sandboxed iframes (User)","description":"Chrome will block navigations toward external protocols inside\r\nsandboxed iframe. See https://chromestatus.com/features/5680742077038592.\r\n\r\nWhen True, this lets Chrome blocks those navigations.\r\n\r\nWhen False, this prevents Chrome from blocking those navigations.\r\n\r\nThis defaults to True: security feature enabled.\r\n\r\nThis can be used by administrators who need more time to update their internal website affected by this new restriction. This Enterprise policy is temporary; it's intended to be removed after Google Chrome version 104.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sandboxexternalprotocolblocked_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled","displayName":"Disable saving browser history (User)","description":"Setting the policy to Enabled means browsing history is not saved, tab syncing is off and users can't change this setting.\r\n\r\nSetting the policy to Disabled or leaving it unset saves browsing history.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_savingbrowserhistorydisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled","displayName":"Enable scrolling to text specified in URL fragments (User)","description":"This feature allows for hyperlinks and address bar URL navigations to target specific text within a web page, which will be scrolled to once the loading of the web page is complete.\r\n\r\nIf you enable or don't configure this policy, web page scrolling to specific text fragments via URL will be enabled.\r\n\r\nIf you disable this policy, web page scrolling to specific text fragments via URL will be disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_scrolltotextfragmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled","displayName":"Enable search suggestions (User)","description":"Setting the policy to True turns on search suggestions in Google Chrome's address bar. Setting the policy to False turns off these search suggestions.\r\n\r\nIf you set the policy, users can't change it. If not set, search suggestions are on at first, but users can turn them off any time.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_searchsuggestenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation","displayName":"URLs/domains automatically permitted direct Security Key attestation (User)","description":"Setting the policy specifies URLs and domains for which no prompt appears when attestation certificates from Security Keys are requested. A signal is also sent to the Security Key indicating that individual attestation may be used. Without this, when sites request attestation of Security Keys, users are prompted in Google Chrome version 65 and later.\r\n\r\nURLs will only match as U2F appIDs. Domains only match as webauthn RP IDs. So to cover both U2F and webauthn APIs, list the appID URL and domain for a given site.\r\n\r\nExample value:\r\n\r\nhttps://example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_securitykeypermitattestation_securitykeypermitattestationdesc","displayName":"URLs/domains automatically permitted direct Security Key attestation (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed","displayName":"Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context (User)","description":"\r\nSpecifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context. Google Chrome will require cross-origin isolation when using SharedArrayBuffers from Google Chrome 91 onward (2021-05-25) for Web Compatibility reasons. Additional details can be found on: https://developer.chrome.com/blog/enabling-shared-array-buffer/.\r\n\r\nWhen set to Enabled, sites can use SharedArrayBuffer with no restrictions.\r\n\r\nWhen set to Disabled or not set, sites can only use SharedArrayBuffers when cross-origin isolated.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedarraybufferunrestrictedaccessallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled","displayName":"Enable the Shared Clipboard Feature (User)","description":"Enable the Shared Clipboard feature which allows users to send text between Chrome Desktops and an Android device when Sync is enabled and the user is Signed-in.\r\n\r\nIf this policy is set to true, the capability of sending text, cross device, for chrome user is enabled.\r\n\r\nIf this policy is set to false, the capability of sending text, cross device, for chrome user is disabled.\r\n\r\nIf you set this policy, users cannot change or override it.\r\n\r\nIf this policy is left unset, the shared clipboard feature is enabled by default.\r\n\r\nIt is up to the admins to set policies in all platforms they care about. It's recommended to set this policy to one value in all platforms.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sharedclipboardenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showappsshortcutinbookmarkbar","displayName":"Show the apps shortcut in the bookmark bar (User)","description":"Setting the policy to True displays the apps shortcut. Setting the policy to False means this shortcut never appears.\r\n\r\nIf you set the policy, users can't change it. If not set, users decide to show or hide the apps shortcut from the bookmark bar context menu.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showappsshortcutinbookmarkbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showappsshortcutinbookmarkbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar","displayName":"Show Full URLs (User)","description":"This feature enables display of the full URL in the address bar.\r\nIf this policy is set to True, then the full URL will be shown in the address bar, including schemes and subdomains.\r\nIf this policy is set to False, then the default URL display will apply.\r\nIf this policy is left unset, then the default URL display will apply and the user will be able to toggle between default and full URL display with a context menu option.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_showfullurlsinaddressbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled","displayName":"Enable Signed HTTP Exchange (SXG) support (User)","description":"Setting the policy to True or leaving it unset means Google Chrome will accept web contents served as Signed HTTP Exchanges.\r\n\r\nSetting the policy to False prevents Signed HTTP Exchanges from loading.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signedhttpexchangeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled","displayName":"Enable signin interception (User)","description":"This settings enables or disables signin interception.\r\n\r\nWhen this policy not set or is set to True, the signin interception dialog triggers when a Google account is added on the web, and the user may benefit from moving this account to another (new or existing) profile.\r\n\r\nWhen this is set to False, the signin interception dialog does not trigger.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_signininterceptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess","displayName":"Require Site Isolation for every site (User)","description":"Since Google Chrome 67, site isolation has been enabled by default on all Desktop platforms, causing every site to run in its own process. A site is a scheme plus eTLD+1 (e.g., https://example.com). Setting this policy to Enabled does not change that behavior; it only prevents users from opting out (for example, using Disable site isolation in chrome://flags). Since Google Chrome 76, setting the policy to Disabled or leaving it unset doesn't turn off site isolation, but instead allows users to opt out.\r\n\r\nIsolateOrigins might also be useful for isolating specific origins at a finer granularity than site (e.g., https://a.example.com).\r\n\r\nOn Google Chrome OS version 76 and earlier, set the DeviceLoginScreenSitePerProcess device policy to the same value. (If the values don't match, a delay can occur when entering a user session.)\r\n\r\nNote: For Android, use the SitePerProcessAndroid policy instead.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_siteperprocess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled","displayName":"Enable spellcheck (User)","description":"Setting the policy to Enabled turns spellcheck on, and users can't turn it off. On Microsoft® Windows®, Google Chrome OS and Linux®, spellcheck languages can be switched on or off individually, so users can still turn spellcheck off by switching off every spellcheck language. To avoid that, use the SpellcheckLanguage to force-enable specific spellcheck languages.\r\n\r\nSetting the policy to Disabled turns off spellcheck from all sources, and users can't turn it on. The SpellCheckServiceEnabled, SpellcheckLanguage and SpellcheckLanguageBlocklist policies have no effect when this policy is set to False.\r\n\r\nLeaving the policy unset lets users turn spellcheck on or off in the language settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage","displayName":"Force enable spellcheck languages (User)","description":"Force-enables spellcheck languages. Unrecognized languages in the list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be enabled for the languages specified, in addition to the languages for which the user has enabled spellcheck.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the SpellcheckEnabled policy is set to false, this policy will have no effect.\r\n\r\nIf a language is included in both this policy and the SpellcheckLanguageBlocklist policy, this policy is prioritized and the spellcheck language is enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguage_spellchecklanguagedesc","displayName":"Force enable spellcheck languages (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist","displayName":"Force disable spellcheck languages (User)","description":"Force-disables spellcheck languages. Unrecognized languages in that list will be ignored.\r\n\r\nIf you enable this policy, spellcheck will be disabled for the languages specified. The user can still enable or disable spellcheck for languages not in the list.\r\n\r\nIf you do not set this policy, or disable it, there will be no change to the user's spellcheck preferences.\r\n\r\nIf the SpellcheckEnabled policy is set to false, this policy will have no effect.\r\n\r\nIf a language is included in both this policy and the SpellcheckLanguage policy, the latter is prioritized and the spellcheck language will be enabled.\r\n\r\nThe currently supported languages are: af, bg, ca, cs, da, de, el, en-AU, en-CA, en-GB, en-US, es, es-419, es-AR, es-ES, es-MX, es-US, et, fa, fo, fr, he, hi, hr, hu, id, it, ko, lt, lv, nb, nl, pl, pt-BR, pt-PT, ro, ru, sh, sk, sl, sq, sr, sv, ta, tg, tr, uk, vi.\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellchecklanguageblocklist_spellchecklanguageblocklistdesc","displayName":"Force disable spellcheck languages (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckserviceenabled","displayName":"Enable or disable spell checking web service (User)","description":"Setting the policy to Enabled puts a Google web service in use to help resolve spelling errors. This policy only controls the use of the online service. Setting the policy to Disabled means this service is never used.\r\n\r\nLeaving the policy unset lets users choose whether to use the spellcheck service.\r\n\r\nThe spell check can always use a downloaded dictionary locally unless the feature is disabled by SpellcheckEnabled in which case this policy will have no effect.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckserviceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_spellcheckserviceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowed","displayName":"Allow proceeding from the SSL warning page (User)","description":"Setting the policy to Enabled or leaving it unset lets users click through warning pages Google Chrome shows when users navigate to sites that have SSL errors.\r\n\r\nSetting the policy to Disabled prevent users from clicking through any warning pages.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins","displayName":"Allow proceeding from the SSL warning page on specific origins (User)","description":"If SSLErrorOverrideAllowed is Disabled, setting the policy lets you set a list of origin patterns that specify the sites where a user can click through warning pages Google Chrome shows when users navigate to sites that have SSL errors. Users will not be able to click through SSL warning pages on origins that are not on this list.\r\n\r\nIf SSLErrorOverrideAllowed is Enabled or unset, this policy does nothing.\r\n\r\nLeaving the policy unset means SSLErrorOverrideAllowed applies for all sites.\r\n\r\nFor detailed information on valid input patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslerroroverrideallowedfororigins_sslerroroverrideallowedfororiginsdesc","displayName":"Allow proceeding from the SSL warning page on specific origins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin","displayName":"Minimum SSL version enabled (User)","description":"Setting the policy to a valid value means Google Chrome won't use SSL/TLS versions less than the specified version. Unrecognized values are ignored.\r\n\r\nIf this policy is not set, then Google Chrome will show an error for TLS 1.0 and TLS 1.1, but the user will be able to bypass it.\r\n\r\nIf this policy is set to \"tls1.2\", the user will not be able to bypass this error.\r\n\r\nSupport for setting this policy to \"tls1\" or \"tls1.1\" was removed in version 91. Suppressing the TLS 1.0/1.1 warning is no longer supported.\r\n\r\nExample value: tls1.2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_sslversionmin","displayName":"Minimum SSL version enabled (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_sslversionmin_tls1","displayName":"TLS 1.0","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_sslversionmin_tls1.1","displayName":"TLS 1.1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_sslversionmin_sslversionmin_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs","displayName":"Suppress JavaScript Dialogs triggered from different origin subframes (User)","description":"As described in https://www.chromestatus.com/feature/5148698084376576 , JavaScript modal dialogs, triggered by window.alert, window.confirm, and window.prompt, will be blocked in Google Chrome if triggered from a subframe whose origin is different from the main frame origin.\r\nThis policy allows overriding that change.\r\nIf the policy is set to enabled or unset, JavaScript dialogs triggered from a different origin subframe will be blocked.\r\nIf the policy is set to disabled, JavaScript dialogs triggered from a different origin subframe will not be blocked.\r\n\r\nThis policy will be removed in Google Chrome version 95.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressdifferentoriginsubframedialogs_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressunsupportedoswarning","displayName":"Suppress the unsupported OS warning (User)","description":"Setting the policy to Enabled suppresses the warning that appears when Google Chrome is running on an unsupported computer or operating system.\r\n\r\nSetting the policy to Disabled or leaving it unset means the warnings appear on unsupported systems.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressunsupportedoswarning_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_suppressunsupportedoswarning_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_syncdisabled","displayName":"Disable synchronization of data with Google (User)","description":"Setting the policy to Enabled turns off data synchronization in Google Chrome using Google-hosted synchronization services.\r\nTo fully turn off Chrome Sync services, we recommend that you turn off the service in the Google Admin console.\r\n\r\nIf the policy is set to Disabled or not set, users are allowed to choose whether to use Chrome Sync.\r\n\r\nNote: Do not turn on this policy when RoamingProfileSupportEnabled is Enabled, because that feature shares the same client-side functionality. The Google-hosted synchronization is off completely in this case.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_syncdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_syncdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled","displayName":"List of types that should be excluded from synchronization (User)","description":"If this policy is set all specified data types will be excluded from synchronization both for Chrome Sync as well as for roaming profile synchronization. This can be beneficial to reduce the size of the roaming profile or limit the type of data uploaded to the Chrome Sync Servers.\r\n\r\nThe current data types for this policy are: \"bookmarks\", \"readingList\", \"preferences\", \"passwords\", \"autofill\", \"themes\", \"typedUrls\", \"extensions\", \"apps\", \"tabs\", \"wifiConfigurations\". Those names are case sensitive!\r\n\r\nExample value:\r\n\r\nbookmarks","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_synctypeslistdisabled_synctypeslistdisableddesc","displayName":"List of types that should be excluded from synchronization (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener","displayName":"Do not set window.opener for links targeting _blank (User)","description":"Setting the policy to Disabled allows popups targeting _blank to access (via JavaScript) the page that requested to open the popup.\r\n\r\nSetting the policy to Enabled or leaving it unset causes the window.opener property to be set to null unless the anchor specifies rel=\"opener\".\r\n\r\nThis policy will be removed in Google Chrome version 95.\r\n\r\nSee https://chromestatus.com/feature/6140064063029248.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_targetblankimpliesnoopener_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled","displayName":"Enable ending processes in Task Manager (User)","description":"Setting the policy to Disabled prevents users from ending processes in the Task Manager.\r\n\r\nSetting the policy to Enabled or leaving it unset lets users end processes in the Task Manager.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_taskmanagerendprocessenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_thirdpartyblockingenabled","displayName":"Enable third party software injection blocking (User)","description":"Setting the policy to Enabled or leaving it unset prevents third-party software from injecting executable code into Google Chrome's processes.\r\n\r\nSetting the policy to Disabled allows this software to inject such code into Google Chrome's processes.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_thirdpartyblockingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_thirdpartyblockingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb","displayName":"Set limit on megabytes of memory a single Chrome instance can use. (User)","description":"Configures the amount of memory that a single Google Chrome instance can use before tabs start being discarded (I.E. the memory used by the tab will be freed and the tab will have to be reloaded when switched to) to save memory.\r\n\r\nIf the policy is set, browser will begin to discard tabs to save memory once the limitation is exceeded. However, there is no guarantee that the browser is always running under the limit. Any value under 1024 will be rounded up to 1024.\r\n\r\nIf this policy is not set, the browser will only begin attempts to save memory once it has detected that the amount of physical memory on its machine is low.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_totalmemorylimitmb_totalmemorylimitmb","displayName":"Set memory limit for Chrome instances: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled","displayName":"Enable Translate (User)","description":"Setting the policy to True provides translation functionality when it's appropriate for users by showing an integrated translate toolbar in Google Chrome and a translate option on the right-click context menu. Setting the policy to False shuts off all built-in translate features.\r\n\r\nIf you set the policy, users can't change this function. Leaving it unset lets them change the setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_translateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled","displayName":"Allow using the deprecated U2F Security Key API (User)","description":"If set to Enabled, the deprecated U2F Security Key API can be used and the deprecation reminder prompt shown for U2F API requests is suppressed.\r\n\r\nIf the policy is set to Disabled or left unset, the default behavior will apply.\r\n\r\nThe U2F Security Key API is deprecated and it will be disabled by default in Chrome 98.\r\n\r\nThis is a temporary opt-out mechanism. The U2F API will be removed from Chrome in Chrome 104, at which point this policy will cease to be supported.\r\n\r\nFor more information about the deprecation of the U2F Security Key API, please refer to https://groups.google.com/a/chromium.org/g/blink-dev/c/xHC3AtU_65A.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_u2fsecuritykeyapienabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist","displayName":"Allow access to a list of URLs (User)","description":"Setting the policy provides access to the listed URLs, as exceptions to URLBlocklist. See that policy's description for the format of entries of this list. For example, setting URLBlocklist to * will block all requests, and you can use this policy to allow access to a limited list of URLs. Use it to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths, using the format specified at ( https://www.chromium.org/administrators/url-blocklist-filter-format ). The most specific filter determines if a URL is blocked or allowed. The URLAllowlist policy takes precedence over URLBlocklist. This policy is limited to 1,000 entries.\r\n\r\nThis policy also allows enabling the automatic invocation by the browser of external application registered as protocol handlers for the listed protocols like \"tel:\" or \"ssh:\".\r\n\r\nLeaving the policy unset allows no exceptions to URLBlocklist.\r\n\r\nFrom Google Chrome version 92, this policy is also supported in the headless mode.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlallowlist_urlallowlistdesc","displayName":"Allow access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist","displayName":"Block access to a list of URLs (User)","description":"Setting the policy prevents webpages with prohibited URLs from loading. It provides a list of URL patterns that specify forbidden URLs. Leaving the policy unset means no URLs are prohibited in the browser. Format the URL pattern according to this format ( https://www.chromium.org/administrators/url-blocklist-filter-format ). Up to 1,000 exceptions can be defined in URLAllowlist.\r\n\r\nFrom Google Chrome version 73, you can block javascript://* URLs. However, it affects only JavaScript entered in the address bar (or, for example, bookmarklets). In-page JavaScript URLs with dynamically loaded data aren't subject to this policy. For example, if you block example.com/abc, then example.com can still load example.com/abc using XMLHTTPRequest.\r\n\r\nFrom Google Chrome version 92, this policy is also supported in the headless mode.\r\n\r\nNote: Blocking internal chrome://* URLs can lead to unexpected errors.\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlblocklist_urlblocklistdesc","displayName":"Block access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled","displayName":"Enable URL-keyed anonymized data collection (User)","description":"Setting the policy to Enabled means URL-keyed anonymized data collection, which sends URLs of pages the user visits to Google to make searches and browsing better, is always active.\r\n\r\nSetting the policy to Disabled results in no URL-keyed anonymized data collection.\r\n\r\nIf you set the policy, users can't change. If not set, then URL-keyed anonymized data collection at first, but users can change it.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_urlkeyedanonymizeddatacollectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir","displayName":"Set user data directory (User)","description":"Configures the directory that Google Chrome will use for storing user data.\r\n\r\nIf you set this policy, Google Chrome will use the provided directory regardless whether the user has specified the '--user-data-dir' flag or not. To avoid data loss or other unexpected errors this policy should not be set to a directory used for other purposes, because Google Chrome manages its contents.\r\n\r\nSee https://support.google.com/chrome/a?p=Supported_directory_variables for a list of variables that can be used.\r\n\r\nIf this policy is left not set the default profile path will be used and the user will be able to override it with the '--user-data-dir' command line flag.\r\n\r\nExample value: ${users}/${user_name}/Chrome","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatadir_userdatadir","displayName":"Set user data directory (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback. (User)","description":"Following each major version update, Chrome will create a snapshot of certain portions of the user's browsing data for use in case of a later emergency version rollback. If an emergency rollback is performed to a version for which a user has a corresponding snapshot, the data in the snapshot is restored. This allows users to retain such settings as bookmarks and autofill data.\r\n\r\nIf this policy is not set, the default value of 3 is used\r\n\r\nIf the policy is set, old snapshots are deleted as needed to respect the limit. If the policy is set to 0, no snapshots will be taken","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userdatasnapshotretentionlimit_userdatasnapshotretentionlimit","displayName":"Limits the number of user data snapshots retained for use in case of emergency rollback.: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userfeedbackallowed","displayName":"Allow user feedback (User)","description":"Setting the policy to Enabled or leaving it unset lets users send feedback to Google through Menu > Help > Report an Issue or key combination.\r\n\r\nSetting the policy to Disabled means users can't send feedback to Google.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userfeedbackallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_userfeedbackallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed","displayName":"Allow or deny video capture (User)","description":"Setting the policy to Enabled or leaving it unset means that, with the exception of URLs set in the VideoCaptureAllowedUrls list, users get prompted for video capture access.\r\n\r\nSetting the policy to Disabled turns off prompts, and video capture is only available to URLs set in the VideoCaptureAllowedUrls list.\r\n\r\nNote: The policy affects all video input (not just the built-in camera).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls","displayName":"URLs that will be granted access to video capture devices without prompt (User)","description":"Setting the policy means you specify the URL list whose patterns get matched to the security origin of the requesting URL. A match grants access to video capture devices without prompt\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com/\r\nhttps://[*.]example.edu/","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_videocaptureallowedurls_videocaptureallowedurlsdesc","displayName":"URLs that will be granted access to video capture devices without prompt (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist","displayName":"Configure list of force-installed Web Apps (User)","description":"Setting the policy specifies a list of web apps that install silently, without user interaction, and which users can't uninstall or turn off.\r\n\r\nEach list item of the policy is an object with a mandatory member:\r\nurl (the URL of the web app to install)\r\n\r\nand 5 optional members:\r\n- default_launch_container\r\n(for how the web app opens—a new tab is the default)\r\n\r\n- create_desktop_shortcut\r\n(True if you want to create Linux and\r\nMicrosoft® Windows® desktop shortcuts).\r\n\r\n- fallback_app_name\r\n(Starting with Google Chrome version 90,\r\nallows you to override the app name if it is not a\r\nProgressive Web App (PWA), or the app name that is temporarily\r\ninstalled if it is a PWA but authentication is required before the\r\ninstallation can be completed. If both\r\ncustom_name and\r\nfallback_app_name are provided,\r\nthe latter will be ignored.)\r\n\r\n- custom_name\r\n(Starting with Google Chrome\r\nversion 96, allows you to permanently override the app name for all web\r\napps and PWAs. Currently only supported on\r\nGoogle Chrome OS.)\r\n\r\n- custom_icon\r\n(Starting with Google Chrome\r\nversion 96, allows you to override the app icon of installed apps. The\r\nicons have to be square, maximal 1 MB in size, and in one of the following\r\nformats: jpeg, png, gif, webp, ico. The hash value has to be the SHA256\r\nhash of the icon file. Currently only supported on\r\nGoogle Chrome OS.)\r\n\r\nSee PinnedLauncherApps for pinning apps to the Google Chrome OS shelf.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebAppInstallForceList for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"url\": \"https://www.google.com/maps\",\r\n \"default_launch_container\": \"window\",\r\n \"create_desktop_shortcut\": true\r\n },\r\n {\r\n \"url\": \"https://docs.google.com\",\r\n \"default_launch_container\": \"tab\"\r\n },\r\n {\r\n \"url\": \"https://docs.google.com/editor\",\r\n \"default_launch_container\": \"window\",\r\n \"fallback_app_name\": \"Editor\"\r\n },\r\n {\r\n \"url\": \"https://docs.google.com/sheets\",\r\n \"default_launch_container\": \"window\",\r\n \"custom_name\": \"Spreadsheets\"\r\n },\r\n {\r\n \"url\": \"https://weather.example.com\",\r\n \"custom_icon\": {\r\n \"url\": \"https://mydomain.example.com/sunny_icon.png\",\r\n \"hash\": \"c28f469c450e9ab2b86ea47038d2b324c6ad3b1e9a4bd8960da13214afd0ca38\"\r\n }\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webappinstallforcelist_webappinstallforcelist","displayName":"URLs for Web Apps to be silently installed. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols","displayName":"Allow legacy TLS/DTLS downgrade in WebRTC (User)","description":"If enabled, WebRTC peer connections can downgrade to obsolete\r\nversions of the TLS/DTLS (DTLS 1.0, TLS 1.0 and TLS 1.1) protocols.\r\nWhen this policy is disabled or not set, these TLS/DTLS versions are\r\ndisabled.\r\n\r\nThis policy is temporary and will be removed in a future version\r\nof Google Chrome.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcallowlegacytlsprotocols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed","displayName":"Allow collection of WebRTC event logs from Google services (User)","description":"Setting the policy to Enabled means Google Chrome can collect WebRTC event logs from Google services such as Hangouts Meet and upload them to Google. These logs have diagnostic information for debugging issues with audio or video meetings in Google Chrome, such as the time and size of RTP packets, feedback about congestion on the network, and metadata about time and quality of audio and video frames. These logs have no audio or video content from the meeting. To make debugging easier, Google might associate these logs, by means of a session ID, with other logs collected by the Google service itself.\r\n\r\nSetting the policy to Disabled results in no collection or uploading of such logs.\r\n\r\nLeaving the policy unset on versions up to and including M76 means Google Chrome defaults to not being able to collect and upload these logs. Starting at M77, Google Chrome defaults to being able to collect and upload these logs from most profiles affected by cloud-based, user-level enterprise policies. From M77 up to and including M80, Google Chrome can also collect and upload these logs by default from profiles affected by Google Chrome on-premise management.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtceventlogcollectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling","displayName":"The IP handling policy of WebRTC (User)","description":"This policy allows restricting which IP addresses and interfaces WebRTC uses when attempting to find the best available connection. See RFC 8828 section 5.2 (https://tools.ietf.org/html/rfc8828.html#section-5.2). When unset, defaults to using all available interfaces.\r\n\r\nExample value: default","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling","displayName":"The IP handling policy of WebRTC (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default","displayName":"WebRTC will use all available interfaces when searching for the best path.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default_public_and_private_interfaces","displayName":"WebRTC will only use the interface connecting to the public Internet, but may connect using private IP addresses.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_default_public_interface_only","displayName":"WebRTC will only use the interface connecting to the public Internet, and will not connect using private IP addresses.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtciphandling_webrtciphandling_disable_non_proxied_udp","displayName":"WebRTC will use TCP on the public-facing interface, and will only use UDP if supported by a configured proxy.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls","displayName":"URLs for which local IPs are exposed in WebRTC ICE candidates (User)","description":"Patterns in this list will be matched against the security origin of the requesting URL.\r\nIf a match is found or chrome://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, the local IP addresses are shown in WebRTC ICE candidates.\r\nOtherwise, local IP addresses are concealed with mDNS hostnames.\r\nPlease note that this policy weakens the protection of local IPs if needed by administrators.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n*example.com*","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtclocalipsallowedurls_webrtclocalipsallowedurlsdesc","displayName":"URLs for which local IPs are exposed in WebRTC ICE candidates (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC (User)","description":"If the policy is set, the UDP port range used by WebRTC is restricted to the specified port interval (endpoints included).\r\n\r\nIf the policy is not set, or if it is set to the empty string or an invalid port range, WebRTC is allowed to use any available local UDP port.\r\n\r\nExample value: 10000-11999","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_webrtcudpportrange_webrtcudpportrange","displayName":"Restrict the range of local UDP ports used by WebRTC (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled","displayName":"Force WebSQL in third-party contexts to be re-enabled. (User)","description":"WebSQL in third-party contexts (e.g., cross-site iframes) is off by default as of M97 and will be fully removed in M101.\r\nIf this policy is set to false or unset, WebSQL in third party contexts will remain off.\r\nIf this policy is set to true, WebSQL in third-party contexts will be re-enabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_websqlinthirdpartycontextenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled","displayName":"Enable Window Occlusion (User)","description":"Enables window occlusion in Google Chrome.\r\n\r\nIf you enable this setting, to reduce CPU and power consumption Google Chrome will detect when a window is covered by other windows, and will suspend work painting pixels.\r\n\r\nIf you disable this setting Google Chrome will not detect when a window is covered by other windows.\r\n\r\nIf this policy is left not set, occlusion detection will be enabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_windowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled","displayName":"Enable WPAD optimization (User)","description":"Setting the policy to Enabled or leaving it unset turns on WPAD (Web Proxy Auto-Discovery) optimization in Google Chrome.\r\n\r\nSetting the policy to Disabled turns off WPAD optimization, causing Google Chrome to wait longer for DNS-based WPAD servers.\r\n\r\nWhether or not this policy is set, users can't change the WPAD optimization setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome_wpadquickcheckenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters","displayName":"Command-line parameters for the alternative browser. (User)","description":"Setting the policy to a list of strings means each string is passed to the alternative browser as separate command-line parameters. On Microsoft® Windows®, the parameters are joined with spaces. On macOS and Linux®, a parameter can have spaces and still be treated as a single parameter.\r\n\r\nIf an parameter contains ${url}, ${url} is replaced with the URL of the page to open. If no parameter contains ${url}, the URL is appended at the end of the command line.\r\n\r\nEnvironment variables are expanded. On Microsoft® Windows®, %ABC% is replaced with the value of the ABC environment variable. On macOS and Linux®, ${ABC} is replaced with the value of the ABC environment variable.\r\n\r\nLeaving the policy unset means only the URL is passed as a command-line parameter.\r\n\r\nExample value:\r\n\r\n-foreground\r\n-new-window\r\n${url}\r\n-profile\r\n%HOME%\\browser_profile","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserparameters_alternativebrowserparametersdesc","displayName":"Command-line parameters for the alternative browser. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath","displayName":"Alternative browser to launch for configured websites. (User)","description":"Setting the policy controls which command to use to open URLs in an alternative browser. The policy can be set to one of ${ie}, ${firefox}, ${safari}, ${opera}, ${edge} or a file path. When this policy is set to a file path, that file is used as an executable file. ${ie} is only available on Microsoft® Windows®. ${safari} and ${edge} are only available on Microsoft® Windows® and macOS.\r\n\r\nLeaving the policy unset puts a platform-specific default in use: Internet Explorer® for Microsoft® Windows®, or Safari® for macOS. On Linux®, launching an alternative browser will fail.\r\n\r\nExample value: ${ie}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_alternativebrowserpath_alternativebrowserpath","displayName":"Alternative browser to launch for configured websites. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters","displayName":"Command-line parameters for switching from the alternative browser. (User)","description":"Setting the policy to a list of strings means the strings are joined with spaces and passed from Internet Explorer® to Google Chrome as command-line parameters. If an parameter contains ${url}, ${url} is replaced with the URL of the page to open. If no parameter contains ${url}, the URL is appended at the end of the command line.\r\n\r\nEnvironment variables are expanded. On Microsoft® Windows®, %ABC% is replaced with the value of the ABC environment variable.\r\n\r\nLeaving the policy unset means Internet Explorer® only passes the URL to Google Chrome as a command-line parameter.\r\n\r\nNote: If the Legacy Browser Support add-in for Internet Explorer® isn't installed, this policy has no effect.\r\n\r\nExample value:\r\n\r\n--force-dark-mode","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromeparameters_browserswitcherchromeparametersdesc","displayName":"Command-line parameters for switching from the alternative browser. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath","displayName":"Path to Chrome for switching from the alternative browser. (User)","description":"This policy controls the command to use to open URLs in Google Chrome when switching from Internet Explorer®. This policy can be set to an executable file path or ${chrome} to autodetect the location of Google Chrome.\r\n\r\nLeaving the policy unset means Internet Explorer® autodetects Google Chrome's own executable path when launching Google Chrome from Internet Explorer.\r\n\r\nNote: If the Legacy Browser Support add-in for Internet Explorer® isn't installed, this policy has no effect.\r\n\r\nExample value: ${chrome}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherchromepath_browserswitcherchromepath","displayName":"Path to Chrome for switching from the alternative browser. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay","displayName":"Delay before launching alternative browser (milliseconds) (User)","description":"Setting the policy to a number has Google Chrome show a message for that number of milliseconds, then it opens an alternative browser.\r\n\r\nLeaving the policy unset or set to 0 means navigating to a designated URL immediately opens it in an alternative browser.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherdelay_browserswitcherdelay","displayName":"Delay before launching alternative browser (milliseconds): (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherenabled","displayName":"Enable the Legacy Browser Support feature. (User)","description":"Setting the policy to Enabled means Google Chrome will try to launch some URLs in an alternate browser, such as Internet Explorer®. This feature is set using the policies in the Legacy Browser support group.\r\n\r\nSetting the policy to Disabled or leaving it unset means Google Chrome won't try to launch designated URLs in an alternate browser.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl","displayName":"URL of an XML file that contains URLs that should never trigger a browser switch. (User)","description":"Setting the policy to a valid URL has Google Chrome download the site list from that URL and apply the rules as if they were set up with the BrowserSwitcherUrlGreylist policy. These policies prevent Google Chrome and the alternative browser from opening one another.\r\n\r\nLeaving it unset (or set to a invalid URL) means Google Chrome doesn't use the policy as a source of rules for not switching browsers.\r\n\r\nNote: This policy points to an XML file in the same format as Internet Explorer®'s SiteList policy. This loads rules from an XML file, without sharing those rules with Internet Explorer®. Read more on Internet Explorer®'s SiteList policy ( https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode )\r\n\r\nExample value: http://example.com/greylist.xml","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalgreylisturl_browserswitcherexternalgreylisturl","displayName":"URL of an XML file that contains URLs that should never trigger a browser switch. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl","displayName":"URL of an XML file that contains URLs to load in an alternative browser. (User)","description":"Setting the policy to a valid URL has Google Chrome download the site list from that URL and apply the rules as if they were set up with the BrowserSwitcherUrlList policy.\r\n\r\nLeaving it unset (or set to a invalid URL) means Google Chrome doesn't use the policy as a source of rules for switching browsers.\r\n\r\nNote: This policy points to an XML file in the same format as Internet Explorer®'s SiteList policy. This loads rules from an XML file, without sharing those rules with Internet Explorer®. Read more on Internet Explorer®'s SiteList policy ( https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode)\r\n\r\nExample value: http://example.com/sitelist.xml","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherexternalsitelisturl_browserswitcherexternalsitelisturl","displayName":"URL of an XML file that contains URLs to load in an alternative browser. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab","displayName":"Keep last tab open in Chrome. (User)","description":"Setting the policy to Enabled or leaving it unset has Google Chrome keep at least one tab open, after switching to an alternate browser.\r\n\r\nSetting the policy to Disabled has Google Chrome close the tab after switching to an alternate browser, even if it was the last tab. This causes Google Chrome to exit completely.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherkeeplastchrometab_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode","displayName":"Sitelist parsing mode (User)","description":"This policy controls how Google Chrome interprets sitelist/greylist policies for the Legacy Browser Support feature. It affects the following policies: BrowserSwitcherUrlList, BrowserSwitcherUrlGreylist, BrowserSwitcherUseIeSitelist, BrowserSwitcherExternalSitelistUrl, and BrowserSwitcherExternalGreylistUrl.\r\n\r\nIf 'Default' (0) or unset, URL matching is less strict. Rules that do not contain \"/\" look for a substring anywhere in the URL's hostname. Matching the path component of a URL is case-sensitive.\r\n\r\nIf 'IESiteListMode' (1), URL matching is more strict. Rules that do not contain \"/\" only match at the end of the hostname. They must also be at a domain name boundary. Matching the path component of a URL is case-insensitive. This is more compatible with Microsoft® Internet Explorer® and Microsoft® Edge®.\r\n\r\nFor example, with the rules \"example.com\" and \"acme.com/abc\":\r\n\r\n\"http://example.com/\", \"http://subdomain.example.com/\" and \"http://acme.com/abc\" match regardless of parsing mode.\r\n\r\n\"http://notexample.com/\", \"http://example.com.invalid.com/\", \"http://example.comabc/\" only match in 'Default' mode.\r\n\r\n\"http://acme.com/ABC\" only matches in 'IESiteListMode'.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode","displayName":"Sitelist parsing mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode_0","displayName":"Default behavior for LBS.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherparsingmode_browserswitcherparsingmode_1","displayName":"More compatible with Microsoft IE/Edge enterprise mode sitelists.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist","displayName":"Websites that should never trigger a browser switch. (User)","description":"Setting the policy controls the list of websites that will never cause a browser switch. Each item is treated as a rule. Those rules that match won't open an alternative browser. Unlike the BrowserSwitcherUrlList policy, rules apply to both directions. When the Internet Explorer® add-in is on, it also controls whether Internet Explorer® should open these URLs in Google Chrome.\r\n\r\nLeaving the policy unset adds no websites to the list.\r\n\r\nNote: Elements can also be added to this list through the BrowserSwitcherExternalGreylistUrl policy.\r\n\r\nExample value:\r\n\r\nie.com\r\n!open-in-chrome.ie.com\r\nfoobar.com/ie-only/","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurlgreylist_browserswitcherurlgreylistdesc","displayName":"Websites that should never trigger a browser switch. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist","displayName":"Websites to open in alternative browser (User)","description":"Setting the policy controls the list of websites to open in an alternative browser. Each item is treated as a rule for something to open in an alternative browser. Google Chrome uses those rules when choosing if a URL should open in an alternative browser. When the Internet Explorer® add-in is on, Internet Explorer® switches back to Google Chrome when the rules don't match. If rules contradict each other, Google Chrome uses the most specific rule.\r\n\r\nLeaving the policy unset adds no websites to the list.\r\n\r\nNote: Elements can also be added to this list through the BrowserSwitcherUseIeSitelist and BrowserSwitcherExternalSitelistUrl policies.\r\n\r\nExample value:\r\n\r\nie.com\r\n!open-in-chrome.ie.com\r\nfoobar.com/ie-only/","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcherurllist_browserswitcherurllistdesc","displayName":"Websites to open in alternative browser (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist","displayName":"Use Internet Explorer's SiteList policy for Legacy Browser Support. (User)","description":"This policy controls whether to load rules from Internet Explorer®'s SiteList policy.\r\n\r\nWhen this policy is set to true, Google Chrome reads Internet Explorer®'s SiteList to obtain the site list's URL. Google Chrome then downloads the site list from that URL, and applies the rules as if they had been configured with the BrowserSwitcherUrlList policy.\r\n\r\nWhen this policy is false or unset, Google Chrome does not use Internet Explorer®'s SiteList policy as a source of rules for switching browsers.\r\n\r\nFor more information on Internet Explorer's SiteList policy: https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/what-is-enterprise-mode","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~browserswitcher_browserswitcheruseiesitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls","displayName":"Automatically select client certificates for these sites (User)","description":"Setting the policy lets you make a list of URL patterns that specify sites for which Chrome can automatically select a client certificate. The value is an array of stringified JSON dictionaries, each with the form { \"pattern\": \"$URL_PATTERN\", \"filter\" : $FILTER }, where $URL_PATTERN is a content setting pattern. $FILTER restricts the client certificates the browser automatically selects from. Independent of the filter, only certificates that match the server's certificate request are selected.\r\n\r\nExamples for the usage of the $FILTER section:\r\n\r\n* When $FILTER is set to { \"ISSUER\": { \"CN\": \"$ISSUER_CN\" } }, only client certificates issued by a certificate with the CommonName $ISSUER_CN are selected.\r\n\r\n* When $FILTER contains both the \"ISSUER\" and the \"SUBJECT\" sections, only client certificates that satisfy both conditions are selected.\r\n\r\n* When $FILTER contains a \"SUBJECT\" section with the \"O\" value, a certificate needs at least one organization matching the specified value to be selected.\r\n\r\n* When $FILTER contains a \"SUBJECT\" section with a \"OU\" value, a certificate needs at least one organizational unit matching the specified value to be selected.\r\n\r\n* When $FILTER is set to {}, the selection of client certificates is not additionally restricted. Note that filters provided by the web server still apply.\r\n\r\nLeaving the policy unset means there's no autoselection for any site.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoSelectCertificateForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\"pattern\":\"https://www.example.com\",\"filter\":{\"ISSUER\":{\"CN\":\"certificate issuer name\", \"L\": \"certificate issuer location\", \"O\": \"certificate issuer org\", \"OU\": \"certificate issuer org unit\"}, \"SUBJECT\":{\"CN\":\"certificate subject name\", \"L\": \"certificate subject location\", \"O\": \"certificate subject org\", \"OU\": \"certificate subject org unit\"}}}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_autoselectcertificateforurls_autoselectcertificateforurlsdesc","displayName":"Automatically select client certificates for these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls","displayName":"Allow cookies on these sites (User)","description":"Allows you to set a list of url patterns that specify sites which are allowed to set cookies.\r\n\r\nIf this policy is left not set the global default value will be used for all sites either from the DefaultCookiesSetting policy if it is set, or the user's personal configuration otherwise.\r\n\r\nSee also policies CookiesBlockedForUrls and CookiesSessionOnlyForUrls. Note that there must be no conflicting URL patterns between these three policies - it is unspecified which policy takes precedence.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesallowedforurls_cookiesallowedforurlsdesc","displayName":"Allow cookies on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls","displayName":"Block cookies on these sites (User)","description":"Setting the policy lets you make a list of URL patterns that specify sites that can't set cookies.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nWhile no specific policy takes precedence, see CookiesAllowedForUrls and CookiesSessionOnlyForUrls. URL patterns among these 3 policies must not conflict.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiesblockedforurls_cookiesblockedforurlsdesc","displayName":"Block cookies on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls","displayName":"Limit cookies from matching URLs to the current session (User)","description":"Unless the RestoreOnStartup policy is set to permanently restore URLs from previous sessions, then setting CookiesSessionOnlyForUrls lets you make a list of URL patterns that specify sites that can and can't set cookies for one session.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies. URLs not covered by the patterns specified also result in the use of defaults.\r\n\r\nWhile no specific policy takes precedence, see CookiesBlockedForUrls and CookiesAllowedForUrls. URL patterns among these 3 policies must not conflict.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_cookiessessiononlyforurls_cookiessessiononlyforurlsdesc","displayName":"Limit cookies from matching URLs to the current session (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting","displayName":"Default cookies setting (User)","description":"Unless the RestoreOnStartup policy is set to permanently restore URLs from previous sessions, then setting CookiesSessionOnlyForUrls lets you make a list of URL patterns that specify sites that can and can't set cookies for one session.\r\n\r\nLeaving the policy unset results in the use of DefaultCookiesSetting for all sites, if it's set. If not, the user's personal setting applies. URLs not covered by the patterns specified also result in the use of defaults.\r\n\r\nWhile no specific policy takes precedence, see CookiesBlockedForUrls and CookiesAllowedForUrls. URL patterns among these 3 policies must not conflict.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting","displayName":"Default cookies setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_1","displayName":"Allow all sites to set local data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_2","displayName":"Do not allow any site to set local data","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultcookiessetting_defaultcookiessetting_4","displayName":"Keep cookies for the duration of the session","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading (User)","description":"Setting the policy to 3 lets websites ask for read access to files and directories in the host operating system's file system via the File System API. Setting the policy to 2 denies access.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting","displayName":"Control use of the File System API for reading (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_2","displayName":"Do not allow any site to request read access to files and directories via the File System API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemreadguardsetting_defaultfilesystemreadguardsetting_3","displayName":"Allow sites to ask the user to grant read access to files and directories via the File System API","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing (User)","description":"Setting the policy to 3 lets websites ask for write access to files and directories in the host operating system's file system. Setting the policy to 2 denies access.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting","displayName":"Control use of the File System API for writing (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_2","displayName":"Do not allow any site to request write access to files and directories","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultfilesystemwriteguardsetting_defaultfilesystemwriteguardsetting_3","displayName":"Allow sites to ask the user to grant write access to files and directories","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting","displayName":"Default geolocation setting (User)","description":"Setting the policy to 1 lets sites track the users' physical location as the default state. Setting the policy to 2 denies this tracking by default. You can set the policy to ask whenever a site wants to track the users' physical location.\r\n\r\nLeaving the policy unset means the AskGeolocation policy applies, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting","displayName":"Default geolocation setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_1","displayName":"Allow sites to track the users' physical location","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_2","displayName":"Do not allow any site to track the users' physical location","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultgeolocationsetting_defaultgeolocationsetting_3","displayName":"Ask whenever a site wants to track the users' physical location","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting","displayName":"Default images setting (User)","description":"Setting the policy to 1 lets all websites display images. Setting the policy to 2 denies image display.\r\n\r\nLeaving it unset allows images, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting","displayName":"Default images setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting_1","displayName":"Allow all sites to show all images","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultimagessetting_defaultimagessetting_2","displayName":"Do not allow any site to show images","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions (User)","description":"Allows you to set whether users can add exceptions to allow mixed content for specific sites.\r\n\r\nThis policy can be overridden for specific URL patterns using the 'InsecureContentAllowedForUrls' and 'InsecureContentBlockedForUrls' policies.\r\n\r\nIf this policy is left not set, users will be allowed to add exceptions to allow blockable mixed content and disable autoupgrades for optionally blockable mixed content.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting","displayName":"Control use of insecure content exceptions (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_2","displayName":"Do not allow any site to load mixed content","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultinsecurecontentsetting_defaultinsecurecontentsetting_3","displayName":"Allow users to add exceptions to allow mixed content","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (User)","description":"Allows you to set whether Google Chrome will run the v8 JavaScript engine with JIT (Just In Time) compiler enabled or not.\r\n\r\nDisabling the JavaScript JIT will mean that Google Chrome may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Google Chrome to render web content in a more secure configuration.\r\n\r\nThis policy can be overridden for specific URL patterns using the JavaScriptJitAllowedForSites and JavaScriptJitBlockedForSites policies.\r\n\r\nIf this policy is left not set, JavaScript JIT is enabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting","displayName":"Control use of JavaScript JIT (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_1","displayName":"Allow any site to run JavaScript JIT","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptjitsetting_defaultjavascriptjitsetting_2","displayName":"Do not allow any site to run JavaScript JIT","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting","displayName":"Default JavaScript setting (User)","description":"Setting the policy to 1 lets websites run JavaScript. Setting the policy to 2 denies JavaScript.\r\n\r\nLeaving it unset allows JavaScript, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting","displayName":"Default JavaScript setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_1","displayName":"Allow all sites to run JavaScript","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultjavascriptsetting_defaultjavascriptsetting_2","displayName":"Do not allow any site to run JavaScript","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting","displayName":"Default notification setting (User)","description":"Setting the policy to 1 lets websites display desktop notifications. Setting the policy to 2 denies desktop notifications.\r\n\r\nLeaving it unset means AskNotifications applies, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting","displayName":"Default notification setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_1","displayName":"Allow sites to show desktop notifications","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_2","displayName":"Do not allow any site to show desktop notifications","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultnotificationssetting_defaultnotificationssetting_3","displayName":"Ask every time a site wants to show desktop notifications","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting","displayName":"Default popups setting (User)","description":"Setting the policy to 1 lets websites display pop-ups. Setting the policy to 2 denies pop-ups.\r\n\r\nLeaving it unset means BlockPopups applies, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting","displayName":"Default popups setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting_1","displayName":"Allow all sites to show pop-ups","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultpopupssetting_defaultpopupssetting_2","displayName":"Do not allow any site to show popups","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting","displayName":"Default sensors setting (User)","description":"Setting the policy to 1 lets websites access and use sensors such as motion and light. Setting the policy to 2 denies acess to sensors.\r\n\r\nLeaving it unset means AllowSensors applies, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting","displayName":"Default sensors setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting_1","displayName":"Allow sites to access sensors","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultsensorssetting_defaultsensorssetting_2","displayName":"Do not allow any site to access sensors","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting","displayName":"Control use of the Serial API (User)","description":"Setting the policy to 3 lets websites ask for access to serial ports. Setting the policy to 2 denies access to serial ports.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_defaultserialguardsetting","displayName":"Control use of the Serial API (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_defaultserialguardsetting_2","displayName":"Do not allow any site to request access to serial ports via the Serial API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultserialguardsetting_defaultserialguardsetting_3","displayName":"Allow sites to ask the user to grant access to a serial port","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (User)","description":"Setting the policy to 3 lets websites ask for access to nearby Bluetooth devices. Setting the policy to 2 denies access to nearby Bluetooth devices.\r\n\r\nLeaving the policy unset lets sites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting","displayName":"Control use of the Web Bluetooth API (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_2","displayName":"Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebbluetoothguardsetting_defaultwebbluetoothguardsetting_3","displayName":"Allow sites to ask the user to grant access to a nearby Bluetooth device","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API (User)","description":"Setting the policy to 3 lets websites ask for access to connected USB devices. Setting the policy to 2 denies access to connected USB devices.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting","displayName":"Control use of the WebUSB API (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_2","displayName":"Do not allow any site to request access to USB devices via the WebUSB API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_defaultwebusbguardsetting_defaultwebusbguardsetting_3","displayName":"Allow sites to ask the user to grant access to a connected USB device","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls","displayName":"Allow read access via the File System API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nLeaving the policy unset means DefaultFileSystemReadGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns must not conflict with FileSystemReadBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadaskforurls_filesystemreadaskforurlsdesc","displayName":"Allow read access via the File System API on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls","displayName":"Block read access via the File System API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them read access to files or directories in the host operating system's file system via the File System API.\r\n\r\nLeaving the policy unset means DefaultFileSystemReadGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with FileSystemReadAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemreadblockedforurls_filesystemreadblockedforurlsdesc","displayName":"Block read access via the File System API on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls","displayName":"Allow write access to files and directories on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nLeaving the policy unset means DefaultFileSystemWriteGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns must not conflict with FileSystemWriteBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteaskforurls_filesystemwriteaskforurlsdesc","displayName":"Allow write access to files and directories on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls","displayName":"Block write access to files and directories on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them write access to files or directories in the host operating system's file system.\r\n\r\nLeaving the policy unset means DefaultFileSystemWriteGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns can't conflict with FileSystemWriteAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_filesystemwriteblockedforurls_filesystemwriteblockedforurlsdesc","displayName":"Block write access to files and directories on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesallowedforurls","displayName":"Allow images on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify sites that may display images.\r\n\r\nLeaving the policy unset means DefaultImagesSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nNote that previously this policy was erroneously enabled on Android, but this functionality has never been fully supported on Android.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesallowedforurls_imagesallowedforurlsdesc","displayName":"Allow images on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls","displayName":"Block images on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify sites that can't display images.\r\n\r\nLeaving the policy unset means DefaultImagesSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\n For detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\n Note that previously this policy was erroneously enabled on Android, but this functionality has never been fully supported on Android.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_imagesblockedforurls_imagesblockedforurlsdesc","displayName":"Block images on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls","displayName":"Allow insecure content on these sites (User)","description":"Allows you to set a list of url patterns that specify sites which are allowed to display blockable (i.e. active) mixed content (i.e. HTTP content on HTTPS sites) and for which optionally blockable mixed content upgrades will be disabled.\r\n\r\nIf this policy is left not set blockable mixed content will be blocked and optionally blockable mixed content will be upgraded, and users will be allowed to set exceptions to allow it for specific sites.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentallowedforurls_insecurecontentallowedforurlsdesc","displayName":"Allow insecure content on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls","displayName":"Block insecure content on these sites (User)","description":"Allows you to set a list of url patterns that specify sites which are not allowed to display blockable (i.e. active) mixed content (i.e. HTTP content on HTTPS sites), and for which optionally blockable (i.e. passive) mixed content will be upgraded.\r\n\r\nIf this policy is left not set blockable mixed content will be blocked and optionally blockable mixed content will be upgraded, but users will be allowed to set exceptions to allow it for specific sites.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_insecurecontentblockedforurls_insecurecontentblockedforurlsdesc","displayName":"Block insecure content on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls","displayName":"Allow JavaScript on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can run JavaScript.\r\n\r\nLeaving the policy unset means DefaultJavaScriptSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptallowedforurls_javascriptallowedforurlsdesc","displayName":"Allow JavaScript on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls","displayName":"Block JavaScript on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't run JavaScript.\r\n\r\nLeaving the policy unset means DefaultJavaScriptSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptblockedforurls_javascriptblockedforurlsdesc","displayName":"Block JavaScript on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites","displayName":"Allow JavaScript to use JIT on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which are allowed to run JavaScript with JIT (Just In Time) compiler enabled.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.site.com will not correctly apply to site.com or subdomain.site.com since they both resolve to the same eTLD+1 (site.com) for which there is no policy. In this case, policy must be set on site.com to apply correctly for both site.com and subdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if site-one.com is listed in the JavaScriptJitAllowedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript JIT enabled, but site-two.com will use the policy from DefaultJavaScriptJitSetting, if set, or default to JavaScript JIT enabled.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptJitSetting applies to the site, if set, otherwise Javascript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitallowedforsites_javascriptjitallowedforsitesdesc","displayName":"Allow JavaScript to use JIT on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites","displayName":"Block JavaScript from using JIT on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which are not allowed to run JavaScript JIT (Just In Time) compiler enabled.\r\n\r\nDisabling the JavaScript JIT will mean that Google Chrome may render web content more slowly, and may also disable parts of JavaScript including WebAssembly. Disabling the JavaScript JIT may allow Google Chrome to render web content in a more secure configuration.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nJavaScript JIT policy exceptions will only be enforced at a site granularity (eTLD+1). A policy set for only subdomain.site.com will not correctly apply to site.com or subdomain.site.com since they both resolve to the same eTLD+1 (site.com) for which there is no policy. In this case, policy must be set on site.com to apply correctly for both site.com and subdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level origin url alone, so e.g. if site-one.com is listed in the JavaScriptJitBlockedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript JIT disabled, but site-two.com will use the policy from DefaultJavaScriptJitSetting, if set, or default to JavaScript JIT enabled.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptJitSetting applies to the site, if set, otherwise JavaScript JIT is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_javascriptjitblockedforsites_javascriptjitblockedforsitesdesc","displayName":"Block JavaScript from using JIT on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist","displayName":"Revert to legacy SameSite behavior for cookies on these sites (User)","description":"Cookies set for domains matching these patterns will revert to legacy SameSite behavior. Reverting to legacy behavior causes cookies that don't specify a SameSite attribute to be treated as if they were \"SameSite=None\", removes the requirement for \"SameSite=None\" cookies to carry the \"Secure\" attribute, and skips the scheme comparison when evaluating if two sites are same-site. See https://www.chromium.org/administrators/policy-list-3/cookie-legacy-samesite-policies for full description.\r\n\r\nFor cookies on domains not covered by the patterns specified here, or for all cookies if this policy is not set, the global default value will be the user's personal configuration.\r\n\r\nFor detailed information on valid patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nNote that patterns you list here are treated as domains, not URLs, so you should not specify a scheme or port.\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_legacysamesitecookiebehaviorenabledfordomainlist_legacysamesitecookiebehaviorenabledfordomainlistdesc","displayName":"Revert to legacy SameSite behavior for cookies on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls","displayName":"Allow notifications on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can display notifications.\r\n\r\nLeaving the policy unset means DefaultNotificationsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsallowedforurls_notificationsallowedforurlsdesc","displayName":"Allow notifications on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls","displayName":"Block notifications on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't display notifications.\r\n\r\nLeaving the policy unset means DefaultNotificationsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_notificationsblockedforurls_notificationsblockedforurlsdesc","displayName":"Block notifications on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls","displayName":"Allow popups on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can open pop-ups.\r\n\r\nLeaving the policy unset means DefaultPopupsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsallowedforurls_popupsallowedforurlsdesc","displayName":"Allow popups on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls","displayName":"Block popups on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't open pop-ups.\r\n\r\nLeaving the policy unset means DefaultPopupsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_popupsblockedforurls_popupsblockedforurlsdesc","displayName":"Block popups on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls","displayName":"Allow access to sensors on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can access sensors like motion and light sensors.\r\n\r\nLeaving the policy unset means DefaultSensorsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nIf the same URL pattern exists in both this policy and the SensorsBlockedForUrls policy, the latter is prioritized and access to motion or light sensors will be blocked.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsallowedforurls_sensorsallowedforurlsdesc","displayName":"Allow access to sensors on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls","displayName":"Block access to sensors on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify the sites that can't access sensors like motion and light sensors.\r\n\r\nLeaving the policy unset means DefaultSensorsSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nIf the same URL pattern exists in both this policy and the SensorsAllowedForUrls policy, this policy is prioritized and access to motion or light sensors will be blocked.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_sensorsblockedforurls_sensorsblockedforurlsdesc","displayName":"Block access to sensors on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls","displayName":"Automatically grant permission to sites to connect all serial ports. (User)","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available serial ports.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn Chrome OS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultSerialGuardSetting, SerialAskForUrls, SerialBlockedForUrls and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowallportsforurls_serialallowallportsforurlsdesc","displayName":"Automatically grant permission to sites to connect all serial ports. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls","displayName":"Automatically grant permission to sites to connect to USB serial devices. (User)","description":"Setting the policy allows you to list sites which are automatically granted permission to access USB serial devices with vendor and product IDs matching the vendor_id and product_id fields. Omitting the product_id field allows the given sites permission to access devices with a vendor ID matching the vendor_id field and any product ID.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn Chrome OS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultSerialGuardSetting, SerialAskForUrls, SerialBlockedForUrls and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the Web Serial API. To grant access to USB devices through the WebUSB API see the WebUsbAllowDevicesForUrls policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=SerialAllowUsbDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234,\r\n \"product_id\": 5678\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://specific-device.example.com\"\r\n ]\r\n },\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://all-vendor-devices.example.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialallowusbdevicesforurls_serialallowusbdevicesforurls","displayName":"Automatically grant permission to sites to connect to USB serial devices. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls","displayName":"Allow the Serial API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a serial port.\r\n\r\nLeaving the policy unset means DefaultSerialGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy SerialBlockedForUrls (if there is a match), DefaultSerialGuardSetting (if set), or the users' personal settings take precedence, in that order.\r\n\r\nURL patterns must not conflict with SerialBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialaskforurls_serialaskforurlsdesc","displayName":"Allow the Serial API on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls","displayName":"Block the Serial API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a serial port.\r\n\r\nLeaving the policy unset means DefaultSerialGuardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor URL patterns which do not match the policy SerialAskForUrls (if there is a match), DefaultSerialGuardSetting (if set), or the users' personal settings take precedence, in that order.\r\n\r\nURL patterns can't conflict with SerialAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_serialblockedforurls_serialblockedforurlsdesc","displayName":"Block the Serial API on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to USB devices with the given vendor and product IDs. (User)","description":"Setting the policy lets you list the URL patterns that specify which sites are automatically granted permission to access a USB device with the given vendor and product IDs. Each item in the list requires both devices and urls fields for the policy to be valid. Each item in the devices field can have a vendor_id and product_id field. Omitting the vendor_id field will create a policy matching any device. Omitting the product_id field will create a policy matching any device with the given vendor ID. A policy which has a product_id field without a vendor_id field is invalid.\r\n\r\nThe USB permission model will grant the specified URL permission to access the USB device as a top-level origin. If embedded frames need to access USB devices, the 'usb' feature-policy header should be used to grant access. The URL must be valid, otherwise the policy is ignored.\r\n\r\nDeprecated: The USB permission model used to support specifying both the requesting and embedding URLs. This is deprecated and only supported for backwards compatiblity in this manner: if both a requesting and embedding URL is specified, then the embedding URL will be granted the permission as top-level origin and the requsting URL will be ignored entirely.\r\n\r\nThis policy overrides DefaultWebUsbGuardSetting, WebUsbAskForUrls, WebUsbBlockedForUrls and the user's preferences.\r\n\r\nThis policy only affects access to USB devices through the WebUSB API. To grant access to USB devices through the Web Serial API see the SerialAllowUsbDevicesForUrls policy.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebUsbAllowDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"vendor_id\": 1234,\r\n \"product_id\": 5678\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://google.com\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusballowdevicesforurls_webusballowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to USB devices with the given vendor and product IDs. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls","displayName":"Allow WebUSB on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a USB device.\r\n\r\nLeaving the policy unset means DefaultWebUsbGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nURL patterns must not conflict with WebUsbAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbaskforurls_webusbaskforurlsdesc","displayName":"Allow WebUSB on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls","displayName":"Block WebUSB on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a USB device.\r\n\r\nLeaving the policy unset means DefaultWebUsbGuardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nURL patterns can't conflict with WebUsbAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~contentsettings_webusbblockedforurls_webusbblockedforurlsdesc","displayName":"Block WebUSB on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls","displayName":"List of alternate URLs for the default search provider (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderAlternateURLs specifies a list of alternate URLs for extracting search terms from the search engine. The URLs should include the string '{searchTerms}'.\r\n\r\nLeaving DefaultSearchProviderAlternateURLs unset means no alternate URLs are used to extract search terms.\r\n\r\nExample value:\r\n\r\nhttps://search.my.company/suggest#q={searchTerms}\r\nhttps://search.my.company/suggest/search#q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovideralternateurls_defaultsearchprovideralternateurlsdesc","displayName":"List of alternate URLs for the default search provider (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled","displayName":"Enable the default search provider (User)","description":"Setting the policy to Enabled means a default search is performed when a user enters non-URL text in the address bar. To specify the default search provider, set the rest of the default search policies. If you leave those policies empty, the user can choose the default provider. Setting the policy to Disabled means there's no search when the user enters non-URL text in the address bar.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, the default search provider is on, and users can set the search provider list.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings","displayName":"Default search provider encodings (User)","description":"If DefaultSearchProviderEnabled is on, setting DefaultSearchProviderEncodings specifies the character encodings supported by the search provider. Encodings are code page names such as UTF-8, GB2312, and ISO-8859-1. They're tried in the order provided.\r\n\r\nLeaving DefaultSearchProviderEncodings unset puts UTF-8 in use.\r\n\r\nExample value:\r\n\r\nUTF-8\r\nUTF-16\r\nGB2312\r\nISO-8859-1","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderencodings_defaultsearchproviderencodingsdesc","displayName":"Default search provider encodings (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl","displayName":"Default search provider icon (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderIconURL specifies the default search provider's favorite icon URL.\r\n\r\nLeaving DefaultSearchProviderIconURL unset means there's no icon for the search provider.\r\n\r\nExample value: https://search.my.company/favicon.ico","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidericonurl_defaultsearchprovidericonurl","displayName":"Default search provider icon (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURL specifies the URL of the search engine used for image search. (If DefaultSearchProviderImageURLPostParams is set, then image search requests use the POST method instead.)\r\n\r\nLeaving DefaultSearchProviderImageURL unset means no image search is used.\r\n\r\nExample value: https://search.my.company/searchbyimage/upload","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurl_defaultsearchproviderimageurl","displayName":"Parameter providing search-by-image feature for the default search provider (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams","displayName":"Parameters for image URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderImageURLPostParams specifies the parameters during image search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as {imageThumbnail}, real image thumbnail data replaces it.\r\n\r\nLeaving DefaultSearchProviderImageURLPostParams unset means image search request is sent using the GET method.\r\n\r\nExample value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderimageurlpostparams_defaultsearchproviderimageurlpostparams","displayName":"Parameters for image URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderKeyword specifies the keyword or shortcut used in the address bar to trigger the search for this provider.\r\n\r\nLeaving DefaultSearchProviderKeyword unset means no keyword activates the search provider.\r\n\r\nExample value: mis","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchproviderkeyword_defaultsearchproviderkeyword","displayName":"Default search provider keyword (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderName specifies the default search provider's name.\r\n\r\nLeaving DefaultSearchProviderName unset means the hostname specified by the search URL is used.\r\n\r\nExample value: My Intranet Search","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidername_defaultsearchprovidername","displayName":"Default search provider name (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderNewTabURL specifies the URL of the search engine used to provide a New Tab page.\r\n\r\nLeaving DefaultSearchProviderNewTabURL unset means no new tab page is provided.\r\n\r\nExample value: https://search.my.company/newtab","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidernewtaburl_defaultsearchprovidernewtaburl","displayName":"Default search provider new tab page URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURL specifies the URL of the search engine used during a default search. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}'.\r\n\r\nExample value: https://search.my.company/search?q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurl_defaultsearchprovidersearchurl","displayName":"Default search provider search URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSearchURLPostParams specifies the parameters when searching a URL with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSearchURLPostParams unset means search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersearchurlpostparams_defaultsearchprovidersearchurlpostparams","displayName":"Parameters for search URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturl","displayName":"Default search provider suggest URL (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURL specifies the URL of the search engine to provide search suggestions. The URL should include the string '{searchTerms}', replaced in the query by the user's search terms.\r\n\r\nYou can specify Google's search URL as: '{google:baseURL}complete/search?output=chrome&q={searchTerms}'.\r\n\r\nExample value: https://search.my.company/suggest?q={searchTerms}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturl_defaultsearchprovidersuggesturl","displayName":"Default search provider suggest URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST (User)","description":"If DefaultSearchProviderEnabled is on, then setting DefaultSearchProviderSuggestURLPostParams specifies the parameters during suggestion search with POST. It consists of comma-separated, name-value pairs. If a value is a template parameter, such as '{searchTerms}', real search terms data replaces it.\r\n\r\nLeaving DefaultSearchProviderSuggestURLPostParams unset unset means suggest search requests are sent using the GET method.\r\n\r\nExample value: q={searchTerms},ie=utf-8,oe=utf-8","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~defaultsearchprovider_defaultsearchprovidersuggesturlpostparams_defaultsearchprovidersuggesturlpostparams","displayName":"Parameters for suggest URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist","displayName":"Kerberos delegation server whitelist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: foobar.example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authnegotiatedelegatewhitelist_authnegotiatedelegatewhitelist","displayName":"Kerberos delegation server whitelist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist","displayName":"Authentication server whitelist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: *.example.com,example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_authserverwhitelist_authserverwhitelist","displayName":"Authentication server whitelist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled","displayName":"Enable AutoFill (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autofillenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist","displayName":"Allow media autoplay on a whitelist of URL patterns (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_autoplaywhitelist_autoplaywhitelistdesc","displayName":"Allow media autoplay on a whitelist of URL patterns (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting","displayName":"Default mediastream setting (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting","displayName":"Default mediastream setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting_2","displayName":"Do not allow any site to access the camera and microphone","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_defaultmediastreamsetting_defaultmediastreamsetting_3","displayName":"Ask every time a site wants to access the camera and/or microphone","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled","displayName":"Disable Developer Tools (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_developertoolsdisabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes","displayName":"Disable URL protocol schemes (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nfile\r\nhttps","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_disabledschemes_disabledschemesdesc","displayName":"List of disabled protocol schemes (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist","displayName":"Configure extension installation blacklist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallblacklist_extensioninstallblacklistdesc","displayName":"Extension IDs the user should be prevented from installing (or * for all) (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist","displayName":"Configure extension installation whitelist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_extensioninstallwhitelist_extensioninstallwhitelistdesc","displayName":"Extension IDs to exempt from the blacklist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin","displayName":"Enable force sign in for Google Chrome (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcebrowsersignin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcesafesearch","displayName":"Force SafeSearch (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcesafesearch_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forcesafesearch_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode","displayName":"Force YouTube Safety Mode (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_forceyoutubesafetymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled","displayName":"Enable Incognito mode (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_incognitoenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_javascriptenabled","displayName":"Enable JavaScript (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_javascriptenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_javascriptenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist","displayName":"Configure native messaging blocklist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingblacklist_nativemessagingblacklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist","displayName":"Configure native messaging whitelist (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativemessagingwhitelist_nativemessagingwhitelistdesc","displayName":"Names of the native messaging hosts to exempt from the blocklist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled","displayName":"Enable Native Window Occlusion (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_nativewindowocclusionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist","displayName":"Proxy bypass rules (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: https://www.example1.com,https://www.example2.com,https://internalsite/","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxybypasslist_proxybypasslist","displayName":"Comma-separated list of proxy bypass rules (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode","displayName":"Choose how to specify proxy server settings (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: direct","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode","displayName":"Choose how to specify proxy server settings (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_direct","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_auto_detect","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_pac_script","displayName":"Use a .pac proxy script","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_fixed_servers","displayName":"Use fixed proxy servers","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxymode_proxymode_system","displayName":"Use system proxy settings","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl","displayName":"URL to a proxy .pac file (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: https://internal.site/example.pac","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxypacurl_proxypacurl","displayName":"URL to a proxy .pac file (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver","displayName":"Address or URL of proxy server (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: 123.123.123.123:8080","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyserver_proxyserver","displayName":"Address or URL of proxy server (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode","displayName":"Choose how to specify proxy server settings (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode","displayName":"Choose how to specify proxy server settings (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_0","displayName":"Never use a proxy","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_1","displayName":"Auto detect proxy settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_2","displayName":"Manually specify proxy settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_proxyservermode_proxyservermode_3","displayName":"Use system proxy settings","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain","displayName":"Configure the required domain name for remote access clients (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: my-awesome-domain.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostclientdomain_remoteaccesshostclientdomain","displayName":"Configure the required domain name for remote access clients (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain","displayName":"Configure the required domain name for remote access hosts (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value: my-awesome-domain.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_remoteaccesshostdomain_remoteaccesshostdomain","displayName":"Configure the required domain name for remote access hosts (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled","displayName":"Enable Safe Browsing (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingwhitelistdomains","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings. (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingwhitelistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingwhitelistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_safebrowsingwhitelistdomains_safebrowsingwhitelistdomainsdesc","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed","displayName":"Allow sign in to Google Chrome (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_signinallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist","displayName":"Force disable spellcheck languages (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nfr\r\nes","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_spellchecklanguageblacklist_spellchecklanguageblacklistdesc","displayName":"Force disable spellcheck languages (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_strictermixedcontenttreatmentenabled","displayName":"Enable stricter treatment for mixed content (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_strictermixedcontenttreatmentenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_strictermixedcontenttreatmentenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttp://testserver.example.com/\r\n*.example.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_unsafelytreatinsecureoriginassecure_unsafelytreatinsecureoriginassecuredesc","displayName":"Origins or hostname patterns for which restrictions on\r\ninsecure origins should not apply (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist","displayName":"Block access to a list of URLs (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/bad_path\r\nhttps://server:8080/path\r\n.exact.hostname.com\r\nfile://*\r\ncustom_scheme:*\r\n*","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlblacklist_urlblacklistdesc","displayName":"Block access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist","displayName":"Allow access to a list of URLs (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://ssl.server.com\r\nhosting.com/good_path\r\nhttps://server:8080/path\r\n.exact.hostname.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~deprecatedpolicies_urlwhitelist_urlwhitelistdesc","displayName":"Allow access to a list of URLs (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions","displayName":"Blocks external extensions from being installed (User)","description":"Controls external extensions installation.\r\n\r\nEnabling this setting blocks external extensions from being installed.\r\n\r\nDisabling this setting or leaving it unset allows external extensions to be installed.\r\n\r\nExternal extensions and their installation are documented at https://developer.chrome.com/apps/external_extensions.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_blockexternalextensions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes","displayName":"Configure allowed app/extension types (User)","description":"Setting the policy controls which apps and extensions may be installed in Google Chrome, which hosts they can interact with, and limits runtime access.\r\n\r\nLeaving the policy unset results in no restrictions on the acceptable extension and app types.\r\n\r\nExtensions and apps which have a type that's not on the list won't be installed. Each value should be one of these strings:\r\n\r\n* \"extension\"\r\n\r\n* \"theme\"\r\n\r\n* \"user_script\"\r\n\r\n* \"hosted_app\"\r\n\r\n* \"legacy_packaged_app\"\r\n\r\n* \"platform_app\"\r\n\r\nSee the Google Chrome extensions documentation for more information on these types.\r\n\r\nVersions earlier than 75 that use multiple comma separated extension IDs aren't supported and are skipped. The rest of the policy applies.\r\n\r\nNote: This policy also affects extensions and apps to be force-installed using ExtensionInstallForcelist.\r\n\r\nExample value:\r\n\r\nhosted_app","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionallowedtypes_extensionallowedtypesdesc","displayName":"Types of extensions/apps that are allowed to be installed (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist","displayName":"Configure extension installation allow list (User)","description":"Setting the policy specifies which extensions are not subject to the blocklist.\r\n\r\nA blocklist value of * means all extensions are blocked and users can only install extensions listed in the allow list.\r\n\r\nBy default, all extensions are allowed. But, if you prohibited extensions by policy, use the list of allowed extensions to change that policy.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallallowlist_extensioninstallallowlistdesc","displayName":"Extension IDs to exempt from the blocklist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallblocklist","displayName":"Configure extension installation blocklist (User)","description":"Allows you to specify which extensions the users can NOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. Once an extension disabled due to the blocklist is removed from it, it will automatically get re-enabled.\r\n\r\nA blocklist value of '*' means all extensions are blocked unless they are explicitly listed in the allowlist.\r\n\r\nIf this policy is left not set the user can install any extension in Google Chrome.\r\n\r\nExample value:\r\n\r\nextension_id1\r\nextension_id2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallblocklist_extensioninstallblocklistdesc","displayName":"Extension IDs the user should be prevented from installing (or * for all) (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist","displayName":"Configure the list of force-installed apps and extensions (User)","description":"Setting the policy specifies a list of apps and extensions that install silently, without user interaction, and which users can't uninstall or turn off. Permissions are granted implicitly, including for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These 2 APIs aren't available to apps and extensions that aren't force-installed.)\r\n\r\nLeaving the policy unset means no apps or extensions are autoinstalled, and users can uninstall any app or extension in Google Chrome.\r\n\r\nThis policy superseeds ExtensionInstallBlocklist policy. If a previously force-installed app or extension is removed from this list, Google Chrome automatically uninstalls it.\r\n\r\nOn Microsoft® Windows® instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management.\r\n\r\nOn macOS instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, or joined to a domain via MCX.\r\n\r\nThe source code of any extension may be altered by users through developer tools, potentially rendering the extension dysfunctional. If this is a concern, set the DeveloperToolsDisabled policy.\r\n\r\nEach list item of the policy is a string that contains an extension ID and, optionally, an \"update\" URL separated by a semicolon (;). The extension ID is the 32-letter string found, for example, on chrome://extensions when in Developer mode. If specified, the \"update\" URL should point to an Update Manifest XML document ( https://developer.chrome.com/extensions/autoupdate ). By default, the Chrome Web Store's update URL is used. The \"update\" URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension's manifest.\r\n\r\n Note: This policy doesn't apply to Incognito mode. Read about hosting extensions ( https://developer.chrome.com/extensions/hosting ).\r\n\r\nExample value:\r\n\r\naaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx\r\nabcdefghijklmnopabcdefghijklmnop","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallforcelist_extensioninstallforcelistdesc","displayName":"Extension/App IDs and update URLs to be silently installed (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources","displayName":"Configure extension, app, and user script install sources (User)","description":"Setting the policy specifies which URLs may install extensions, apps, and themes. Before Google Chrome 21, users could click on a link to a *.crx file, and Google Chrome would offer to install the file after a few warnings. Afterwards, such files must be downloaded and dragged to the Google Chrome settings page. This setting allows specific URLs to have the old, easier installation flow.\r\n\r\nEach item in this list is an extension-style match pattern (see https://developer.chrome.com/extensions/match_patterns). Users can easily install items from any URL that matches an item in this list. Both the location of the *.crx file and the page where the download is started from (the referrer) must be allowed by these patterns.\r\n\r\nExtensionInstallBlocklist takes precedence over this policy. That is, an extension on the blocklist won't be installed, even if it happens from a site on this list.\r\n\r\nExample value:\r\n\r\nhttps://corp.mycompany.com/*","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensioninstallsources_extensioninstallsourcesdesc","displayName":"URL patterns to allow extension, app, and user script installs from (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings","displayName":"Extension management settings (User)","description":"Setting the policy controls extension management settings for Google Chrome, including any controlled by existing extension-related policies. The policy supersedes any legacy policies that might be set.\r\n\r\nThis policy maps an extension ID or an update URL to its specific setting only. A default configuration can be set for the special ID \"*\", which applies to all extensions without a custom configuration in this policy. With an update URL, configuration applies to extensions with the exact update URL stated in the extension manifest ( http://support.google.com/chrome/a?p=Configure_ExtensionSettings_policy ). If the 'override_update_url' flag is set to true, the extension is installed and updated using the \"update\" URL specified in the ExtensionInstallForcelist policy or in 'update_url' field in this policy. The flag 'override_update_url' is ignored if the 'update_url' is a Chrome Web Store url.\r\n\r\nNote: For Windows® instances not joined to a Microsoft® Active Directory® domain, forced installation is limited to apps and extensions listed in the Chrome Web Store.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExtensionSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"abcdefghijklmnopabcdefghijklmnop\": {\r\n \"installation_mode\": \"allowed\",\r\n \"blocked_permissions\": [\r\n \"history\"\r\n ],\r\n \"minimum_version_required\": \"1.0.1\",\r\n \"toolbar_pin\": \"force_pinned\"\r\n },\r\n \"bcdefghijklmnopabcdefghijklmnopa\": {\r\n \"installation_mode\": \"force_installed\",\r\n \"update_url\": \"https://example.com/update_url\",\r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ],\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.example.com\"\r\n ],\r\n \"runtime_allowed_hosts\": [\r\n \"*://good.example.com\"\r\n ]\r\n },\r\n \"cdefghijklmnopabcdefghijklmnopab\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_install_message\": \"Custom error message.\"\r\n },\r\n \"defghijklmnopabcdefghijklmnopabc,efghijklmnopabcdefghijklmnopabcd\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_install_message\": \"Custom error message.\"\r\n },\r\n \"update_url:https://www.example.com/update.xml\": {\r\n \"blocked_permissions\": [\r\n \"wallpaper\"\r\n ],\r\n \"allowed_permissions\": [\r\n \"downloads\"\r\n ],\r\n \"installation_mode\": \"allowed\"\r\n },\r\n \"fghijklmnopabcdefghijklmnopabcde\": {\r\n \"installation_mode\": \"removed\",\r\n \"blocked_install_message\": \"Custom removal message.\"\r\n },\r\n \"ghijklmnopabcdefghijklmnopabcdef\": {\r\n \"installation_mode\": \"force_installed\",\r\n \"update_url\": \"https://example.com/update_url\",\r\n \"override_update_url\": true\r\n },\r\n \"*\": {\r\n \"installation_mode\": \"blocked\",\r\n \"blocked_permissions\": [\r\n \"downloads\",\r\n \"bookmarks\"\r\n ],\r\n \"install_sources\": [\r\n \"https://company-intranet/chromeapps\"\r\n ],\r\n \"allowed_types\": [\r\n \"hosted_app\"\r\n ],\r\n \"runtime_blocked_hosts\": [\r\n \"*://*.example.com\"\r\n ],\r\n \"runtime_allowed_hosts\": [\r\n \"*://good.example.com\"\r\n ],\r\n \"blocked_install_message\": \"Custom error message.\"\r\n }\r\n}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~extensions_extensionsettings_extensionsettings","displayName":"Extension management settings (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter","displayName":"Enable Google Cast (User)","description":"Setting the policy to Enabled or leaving it unset turns on Google Cast, which users can launch from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.\r\n\r\nSetting the policy to Disabled turns off Google Cast.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_enablemediarouter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar","displayName":"Show the Google Cast toolbar icon (User)","description":"Setting the policy to Enabled displays the Cast toolbar icon on the toolbar or the overflow menu, and users can't remove it.\r\n\r\nSetting the policy to Disabled or leaving it unset lets users pin or remove the icon through its contextual menu.\r\n\r\nIf the policy EnableMediaRouter is set to Disabled, then this policy's value has no effect, and the toolbar icon doesn't appear.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~googlecast_showcasticonintoolbar_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt","displayName":"Cross-origin HTTP Authentication prompts (User)","description":"Setting the policy to Enabled allows third-party images on a page to show an authentication prompt.\r\n\r\n Setting the policy to Disabled or leaving it unset renders third-party images unable to show an authentication prompt.\r\n\r\nTypically, this policy is Disabled as a phishing defense.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_allowcrossoriginauthprompt_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist","displayName":"Kerberos delegation server allowlist (User)","description":"Setting the policy assigns servers that Google Chrome may delegate to. Separate multiple server names with commas. Wildcards, *, are allowed.\r\n\r\nLeaving the policy unset means Google Chrome won't delegate user credentials, even if a server is detected as intranet.\r\n\r\nExample value: foobar.example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authnegotiatedelegateallowlist_authnegotiatedelegateallowlist","displayName":"Kerberos delegation server allowlist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes","displayName":"Supported authentication schemes (User)","description":"Setting the policy specifies which HTTP authentication schemes Google Chrome supports.\r\n\r\nLeaving the policy unset employs all 4 schemes.\r\n\r\nValid values:\r\n\r\n* basic\r\n\r\n* digest\r\n\r\n* ntlm\r\n\r\n* negotiate\r\n\r\nNote: Separate multiple values with commas.\r\n\r\nExample value: basic,digest,ntlm,negotiate","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authschemes_authschemes","displayName":"Supported authentication schemes (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist","displayName":"Authentication server allowlist (User)","description":"Setting the policy specifies which servers should be allowed for integrated authentication. Integrated authentication is only on when Google Chrome gets an authentication challenge from a proxy or from a server in this permitted list.\r\n\r\nLeaving the policy unset means Google Chrome tries to detect if a server is on the intranet. Only then will it respond to IWA requests. If a server is detected as internet, then Google Chrome ignores IWA requests from it.\r\n\r\nNote: Separate multiple server names with commas. Wildcards, *, are allowed.\r\n\r\nExample value: *.example.com,example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_authserverallowlist_authserverallowlist","displayName":"Authentication server allowlist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled","displayName":"Allow Basic authentication for HTTP (User)","description":"Setting the policy to Enabled or leaving it unset will allow Basic authentication challenges received over non-secure HTTP.\r\n\r\nSetting the policy to Disabled forbids non-secure HTTP requests from using the Basic authentication scheme; only secure HTTPS is allowed.\r\n\r\nThis policy setting is ignored (and Basic is always forbidden) if the AuthSchemes policy is set and does not include Basic.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_basicauthoverhttpenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup","displayName":"Disable CNAME lookup when negotiating Kerberos authentication (User)","description":"Setting the policy to Enabled skips CNAME lookup. The server name is used as entered when generating the Kerberos SPN.\r\n\r\nSetting the policy to Disabled or leaving it unset means CNAME lookup determines the canonical name of the server when generating the Kerberos SPN.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_disableauthnegotiatecnamelookup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport","displayName":"Include non-standard port in Kerberos SPN (User)","description":"Setting the policy to Enabled and entering a nonstandard port (in other words, a port other than 80 or 443) includes it in the generated Kerberos SPN.\r\n\r\nSetting the policy to Disabled or leaving it unset means the generated Kerberos SPN won't include a port.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~httpauthentication_enableauthnegotiateport_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist","displayName":"Configure native messaging allowlist (User)","description":"Setting the policy specifies which native messaging hosts aren't subject to the deny list. A deny list value of * means all native messaging hosts are denied, unless they're explicitly allowed.\r\n\r\nAll native messaging hosts are allowed by default. But, if all native messaging hosts are denied by policy, the admin can use the allow list to change that policy.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingallowlist_nativemessagingallowlistdesc","displayName":"Names of the native messaging hosts to exempt from the blocklist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist","displayName":"Configure native messaging blocklist (User)","description":"Setting the policy specifies which native messaging hosts shouldn't be loaded. A deny list value of * means all native messaging hosts are denied, unless they're explicitly allowed.\r\n\r\nLeaving the policy unset means Google Chrome loads all installed native messaging hosts.\r\n\r\nExample value:\r\n\r\ncom.native.messaging.host.name1\r\ncom.native.messaging.host.name2","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessagingblocklist_nativemessagingblocklistdesc","displayName":"Names of the forbidden native messaging hosts (or * for all) (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts","displayName":"Allow user-level Native Messaging hosts (installed without admin permissions) (User)","description":"Setting the policy to Enabled or leaving it unset means Google Chrome can use native messaging hosts installed at the user level.\r\n\r\nSetting the policy to Disabled means Google Chrome can only use these hosts if installed at the system level.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~nativemessaging_nativemessaginguserlevelhosts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~other_promptonmultiplematchingcertificates","displayName":"Prompt for the client certificate when multiple certificates match. (User)","description":"This policy controls whether the user is prompted to select a client certificate when more than one certificate matches AutoSelectCertificateForUrls.\r\nIf this policy is set to Enabled, the user is prompted to select a client certificate whenever the auto-selection policy matches multiple certificates.\r\nIf this policy is set to Disabled or not set, the user may only be prompted when no certificate matches the auto-selection.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~other_promptonmultiplematchingcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~other_promptonmultiplematchingcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled","displayName":"Enable leak detection for entered credentials (User)","description":"Setting the policy to Enabled lets users have Google Chrome check whether usernames and passwords entered were part of a leak.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, credential leak checking is allowed, but the user can turn it off.\r\n\r\nThis behavior will not trigger if Safe Browsing is disabled (either by policy or by the user). In order to force Safe Browsing on, use the SafeBrowsingEnabled policy or the SafeBrowsingProtectionLevel policy.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordleakdetectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled","displayName":"Enable saving passwords to the password manager (User)","description":"Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.\r\n\r\nSetting the policy to Disabled means users can't save new passwords, but previously saved passwords will still work.\r\n\r\nIf the policy is set, users can't change it in Google Chrome. If not set, the user can turn off password saving.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~passwordmanager_passwordmanagerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintproxyenabled","displayName":"Enable Google Cloud Print proxy (User)","description":"Setting the policy to Enabled or leaving it unset lets Google Chrome act as a proxy between Google Cloud Print and legacy printers connected to the machine. Using their Google Account, users may turn on the cloud print proxy by authentication.\r\n\r\nSetting the policy to Disabled means users can't turn on the proxy, and the machine can't share its printers with Google Cloud Print.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintproxyenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintproxyenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled","displayName":"Enable submission of documents to Google Cloud Print (User)","description":"Setting the policy to Enabled or leaving it unset lets users print to Google Cloud Print from the Google Chrome print dialog. Google Chrome can submit documents to Google Cloud Print for printing. This doesn't prevent users from submitting print jobs on websites.\r\n\r\nSetting the policy to Disabled means users can't print to Google Cloud Print from the Google Chrome print dialog.\r\n\r\nIn order to keep Google Cloud Print destinations discoverable, this policy must be set to Enabled and cloud must not be included in the PrinterTypeDenyList policy.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_cloudprintsubmitenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection","displayName":"Default printer selection rules (User)","description":"Setting the policy sets the rules for selecting the default printer in Google Chrome, overriding the default rules. Printer selection occurs the first time users try to print, when Google Chrome seeks a printer matching the specified attributes. In case of a less than perfect match, Google Chrome can be set to select any matching printer, depending on the order printers are discovered.\r\n\r\nLeaving the policy unset or set to attributes for which there's no match means the built-in PDF printer is the default. If there's no PDF printer, Google Chrome defaults to none.\r\n\r\nPrinters connected to Google Cloud Print are considered \"cloud\", the rest of the printers are classified as \"local\".\r\n\r\nNote: Omitting a field means all values match. For example, not specifying connectivity causes Print Preview to start discovery of all kinds of printers, \"local\" and \"cloud\". Regular expression patterns must follow the JavaScript RegExp syntax, and matches are case sensistive.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=DefaultPrinterSelection for more information about schema and formatting.\r\n\r\n\r\nExample value: { \"kind\": \"cloud\", \"idPattern\": \".*public\", \"namePattern\": \".*Color\" }","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_defaultprinterselection_defaultprinterselection","displayName":"Default printer selection rules (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview","displayName":"Disable Print Preview (User)","description":"Setting the policy to Enabled has Google Chrome open the system print dialog instead of the built-in print preview when users request a printout.\r\n\r\nSetting the policy to Disabled or leaving it unset has print commands trigger the print preview screen.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_disableprintpreview_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist","displayName":"Disable printer types on the deny list (User)","description":"The printers of types placed on the deny list will be disabled from being discovered or having their capabilities fetched.\r\n\r\nPlacing all printer types on the deny list effectively disables printing, as there would be no available destinations to send a document for printing.\r\n\r\nIncluding cloud on the deny list has the same effect as setting the CloudPrintSubmitEnabled policy to false. In order to keep Google Cloud Print destinations discoverable, the CloudPrintSubmitEnabled policy must be set to true and cloud must not be on the deny list.\r\n\r\nIf the policy is not set, or is set to an empty list, all printer types will be available for discovery.\r\n\r\nExtension printers are also known as print provider destinations, and include any destination that belongs to a Google Chrome extension.\r\n\r\nLocal printers are also known as native printing destinations, and include destinations available to the local machine and shared network printers.\r\n\r\nExample value:\r\n\r\ncloud\r\nprivet","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printertypedenylist_printertypedenylistdesc","displayName":"Disable printer types on the deny list (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printheaderfooter","displayName":"Print Headers and Footers (User)","description":"Setting the policy to Enabled turns headers and footers on in print preview. Setting the policy to Disabled turns them off in print preview.\r\n\r\nIf you set the policy, users can't change it. If unset, users decides whether headers and footers appear.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printheaderfooter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printheaderfooter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (User)","description":"Restricts background graphics printing mode. Unset policy is treated as no restriction.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes","displayName":"Restrict background graphics printing mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_any","displayName":"Allow printing both with and without background graphics","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_enabled","displayName":"Allow printing only with background graphics","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingallowedbackgroundgraphicsmodes_printingallowedbackgroundgraphicsmodes_disabled","displayName":"Allow printing only without background graphics","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (User)","description":"Overrides default background graphics printing mode.\r\n\r\nExample value: enabled","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault","displayName":"Default background graphics printing mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_enabled","displayName":"Enable background graphics printing mode by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingbackgroundgraphicsdefault_printingbackgroundgraphicsdefault_disabled","displayName":"Disable background graphics printing mode by default","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled","displayName":"Enable printing (User)","description":"Setting the policy to Enabled or leaving it unset lets users print in Google Chrome, and users can't change this setting.\r\n\r\nSetting the policy to Disabled means users can't print from Google Chrome. Printing is off in the three dots menu, extensions, and JavaScript applications.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault","displayName":"Default printing page size (User)","description":"Overrides default printing page size.\r\n\r\nname should contain one of the listed formats or 'custom' if required paper size is not in the list. If 'custom' value is provided custom_size property should be specified. It describes the desired height and width in micrometers. Otherwise custom_size property shouldn't be specified. Policy that violates these rules is ignored.\r\n\r\nIf the page size is unavailable on the printer chosen by the user this policy is ignored.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=PrintingPaperSizeDefault for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"name\": \"custom\",\r\n \"custom_size\": {\r\n \"width\": 210000,\r\n \"height\": 297000\r\n }\r\n}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printingpapersizedefault_printingpapersizedefault","displayName":"Default printing page size (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability","displayName":"Print PDF as Image Available (User)","description":"Controls how Google Chrome makes the Print as image option available on Microsoft® Windows® and macOS when printing PDFs.\r\n\r\nWhen printing a PDF on Microsoft® Windows® or macOS, sometimes print jobs need to be rasterized to an image for certain printers to get correct looking output.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will make the Print as image option available in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome the Print as image option will not be available to users in Print Preview and PDFs will be printed as usual without being rasterized to an image before being sent to the destination.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpdfasimageavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode","displayName":"Print PostScript Mode (User)","description":"Controls how Google Chrome prints on Microsoft® Windows®.\r\n\r\nWhen printing to a PostScript printer on Microsoft® Windows® different PostScript generation methods can affect printing performance.\r\n\r\nWhen this policy is set to Default, Google Chrome will use a set of default options when generating PostScript. For text in particular, text will always be rendered using Type 3 fonts.\r\n\r\nWhen this policy is set to Type42, Google Chrome will render text using Type 42 fonts if possible. This should increase printing speed for some PostScript printers.\r\n\r\nWhen this policy is not set, Google Chrome will be in Default mode.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode","displayName":"Print PostScript Mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode_0","displayName":"Default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpostscriptmode_printpostscriptmode_1","displayName":"Type42","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpreviewusesystemdefaultprinter","displayName":"Use System Default Printer as Default (User)","description":"Setting the policy to Enabled means Google Chrome uses the OS default printer as the default destination for print preview.\r\n\r\nSetting the policy to Disabled or leaving it unset means Google Chrome uses the most recently used printer as the default destination for print preview.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpreviewusesystemdefaultprinter_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printpreviewusesystemdefaultprinter_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode","displayName":"Print Rasterization Mode (User)","description":"Controls how Google Chrome prints on Microsoft® Windows®.\r\n\r\nWhen printing to a non-PostScript printer on Microsoft® Windows®, sometimes print jobs need to be rasterized to print correctly.\r\n\r\nWhen this policy is set to Full, Google Chrome will do full page rasterization if necessary.\r\n\r\nWhen this policy is set to Fast, Google Chrome will avoid rasterization if possible, reducing the amount of rasterization can help reduce print job sizes and increase printing speed.\r\n\r\nWhen this policy is not set, Google Chrome will be in Full mode.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode","displayName":"Print Rasterization Mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode_0","displayName":"Full","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizationmode_printrasterizationmode_1","displayName":"Fast","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI (User)","description":"Controls print image resolution when Google Chrome prints PDFs with rasterization.\r\n\r\nWhen printing a PDF using the Print to image option, it can be beneficial to specify a print resolution other than a device's printer setting or the PDF default. A high resolution will significantly increase the processing and printing time while a low resolution can lead to poor imaging quality.\r\n\r\nThis policy allows a particular resolution to be specified for use when rasterizing PDFs for printing.\r\n\r\nIf this policy is set to zero or not set at all then the system default resolution will be used during rasterization of page images.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~printing_printrasterizepdfdpi_printrasterizepdfdpi","displayName":"Print Rasterize PDF DPI: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing","displayName":"Enable or disable PIN-less authentication for remote access hosts (User)","description":"Setting the policy to Enabled or leaving it unset lets users pair clients and hosts at connection time, eliminating the need to enter a PIN every time.\r\n\r\nSetting the policy to Disabled makes this feature unavailable.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowclientpairing_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer","displayName":"Allow remote access users to transfer files to/from the host (User)","description":"Setting the policy to Enabled or leaving it unset allows users connected to a remote access host to transfer files between the client and the host. This doesn't apply to remote assistance connections, which don't support file transfer.\r\n\r\nSetting the policy to Disabled disallows file transfer.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowfiletransfer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection","displayName":"Enable the use of relay servers by the remote access host (User)","description":"If RemoteAccessHostFirewallTraversal is set to Enabled, setting RemoteAccessHostAllowRelayedConnection to Enabled or leaving it unset allows the use of remote clients to use relay servers to connect to this machine when a direct connection is not available, for example, because of firewall restrictions.\r\n\r\nSetting the policy to Disabled doesn't turn remote access off, but only allows connections from the same network (not NAT traversal or relay).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowrelayedconnection_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections","displayName":"Allow remote access connections to this machine (User)","description":"If this policy is Disabled, the remote access host service cannot be started or configured to accept incoming connections. This policy does not affect remote support scenarios.\r\n\r\nThis policy has no effect if it is set to Enabled, left empty, or is not set.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremoteaccessconnections_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections","displayName":"Allow remote support connections to this machine (User)","description":"If this policy is disabled, the remote support host cannot be started or configured to accept incoming connections.\r\n\r\nThis policy does not affect remote access scenarios.\r\n\r\nThis policy does not prevent enterprise admins from connecting to managed Chrome OS devices.\r\n\r\nThis policy has no effect if enabled, left empty, or is not set.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowremotesupportconnections_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowuiaccessforremoteassistance","displayName":"Allow remote users to interact with elevated windows in remote assistance sessions (User)","description":"Setting the policy to Enabled means the remote assistance host runs in a process with uiAccess permissions. This lets remote users interact with elevated windows on the local user's desktop.\r\n\r\nSetting the policy to Disabled or leaving it unset means the remote assistance host runs in the user's context, and remote users can't interact with elevated windows on the desktop.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowuiaccessforremoteassistance_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostallowuiaccessforremoteassistance_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist","displayName":"Configure the required domain names for remote access clients (User)","description":"Setting the policy specifies the client domain names that are imposed on remote access clients, and users can't change them. Only clients from one of the specified domains can connect to the host.\r\n\r\nSetting the policy to an empty list or leaving it unset applies the default policy for the connection type. For remote assistance, this allows clients from any domain to connect to the host. For anytime remote access, only the host owner can connect.\r\n\r\nSee also RemoteAccessHostDomainList.\r\n\r\nNote: This setting overrides RemoteAccessHostClientDomain, if present.\r\n\r\nExample value:\r\n\r\nmy-awesome-domain.com\r\nmy-auxiliary-domain.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclientdomainlist_remoteaccesshostclientdomainlistdesc","displayName":"Configure the required domain names for remote access clients (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes","displayName":"The maximum size, in bytes, that can be transferred between client and host via clipboard synchronization (User)","description":"If this policy is set, clipboard data sent to and from the host will be truncated to the limit set by this policy.\r\n\r\nIf a value of 0 is set, then clipboard sync is disabled.\r\n\r\nThis policy affects both remote access and remote support scenarios.\r\n\r\nThis policy has no effect if it is not set.\r\n\r\nSetting the policy to a value that is not within the min/max range may prevent the host from starting.\r\n\r\nPlease note that the actual upper bound for the clipboard size is based on the maximum WebRTC data channel message size which this policy does not control.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostclipboardsizebytes_remoteaccesshostclipboardsizebytes","displayName":"The maximum size, in bytes, that can be transferred between client and host via clipboard synchronization: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist","displayName":"Configure the required domain names for remote access hosts (User)","description":"Setting the policy specifies the host domain names that are imposed on remote access hosts, and users can't change them. Hosts can be shared only using accounts registered on one of the specified domain names.\r\n\r\nSetting the policy to an empty list or leaving it unset means hosts can be shared using any account.\r\n\r\nSee also RemoteAccessHostClientDomainList.\r\n\r\nNote: This setting will override RemoteAccessHostDomain, if present.\r\n\r\nExample value:\r\n\r\nmy-awesome-domain.com\r\nmy-auxiliary-domain.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostdomainlist_remoteaccesshostdomainlistdesc","displayName":"Configure the required domain names for remote access hosts (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal","displayName":"Enable firewall traversal from remote access host (User)","description":"Setting the policy to Enabled or leaving it unset allows the usage of STUN servers, letting remote clients discover and connect to this machine, even if separated by a firewall.\r\n\r\nSetting the policy to Disabled when outgoing UDP connections are filtered by the firewall means the machine only allows connections from client machines within the local network.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostfirewalltraversal_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes","displayName":"Maximum session duration allowed for remote access connections (User)","description":"If this policy is set, remote access connections will automatically disconnect after the number of minutes defined in the policy have elapsed. This does not prevent the client from reconnecting after the maximum session duration has been reached. Setting the policy to a value that is not within the min/max range may prevent the host from starting. This policy does not affect remote support scenarios.\r\n\r\nThis policy has no effect if it is not set. In this case, remote access connections will have no maximum duration on this machine.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostmaximumsessiondurationminutes_remoteaccesshostmaximumsessiondurationminutes","displayName":"Maximum session duration allowed for remote access connections: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain","displayName":"Enable curtaining of remote access hosts (User)","description":"Setting the policy to Enabled turns off remote access hosts' physical input and output devices during a remote connection.\r\n\r\nSetting the policy to Disabled or leaving it unset lets both local and remote users interact with the host while it's shared.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostrequirecurtain_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange","displayName":"Restrict the UDP port range used by the remote access host (User)","description":"Setting the policy restricts the UDP port range used by the remote access host in this machine.\r\n\r\nLeaving the policy unset or set to an empty string means the remote access host can use any available port.\r\n\r\nNote: If RemoteAccessHostFirewallTraversal is Disabled, the remote access host will use UDP ports in the 12400-12409 range.\r\n\r\nExample value: 12400-12409","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~remoteaccess_remoteaccesshostudpportrange_remoteaccesshostudpportrange","displayName":"Restrict the UDP port range used by the remote access host (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters","displayName":"Additional command line parameters for Google Chrome (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_additionallaunchparameters_additionallaunchparameters","displayName":"Additional command line parameters for Google Chrome (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled","displayName":"Enable sending downloads to Google for deep scanning for users enrolled in the Advanced Protection program (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_advancedprotectiondeepscanningenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins","displayName":"Allow running plugins that are outdated (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowoutdatedplugins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload","displayName":"Allows a page to show popups during its unloading (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_allowpopupsduringpageunload_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins","displayName":"Always runs plugins that require authorization (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_alwaysauthorizeplugins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled","displayName":"Allows the AppCache feature to be re-enabled even if it is off by default. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_appcacheforceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes","displayName":"Allow Google Chrome Frame to handle the listed content types (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframecontenttypes_chromeframecontenttypesdesc","displayName":"Allow Google Chrome Frame to handle the listed content types (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings","displayName":"Default HTML renderer for Google Chrome Frame (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_chromeframerenderersettings","displayName":"Default HTML renderer for Google Chrome Frame (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_chromeframerenderersettings_0","displayName":"Use the host browser by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_chromeframerenderersettings_chromeframerenderersettings_1","displayName":"Use Google Chrome Frame by default","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit","displayName":"Clear site data on browser shutdown (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_clearsitedataonexit_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed","displayName":"Suppress Google Cloud Print deprecation messages (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_cloudprintwarningssuppressed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled","displayName":"Use the legacy CORS implementation rather than new CORS (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corslegacymodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist","displayName":"Enable CORS check mitigations in the new CORS implementation (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_corsmitigationlist_corsmitigationlistdesc","displayName":"Enable CORS check mitigations in the new CORS implementation (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting","displayName":"Control use of the File Handling API (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting","displayName":"Control use of the File Handling API (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting_2","displayName":"Do not allow any web app to access file types via the File Handling API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultfilehandlingguardsetting_defaultfilehandlingguardsetting_3","displayName":"Allow web apps to ask the user to grant access to file types via the File Handling API","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting","displayName":"Default key generation setting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting","displayName":"Default key generation setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting_1","displayName":"Allow all sites to use key generation","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultkeygensetting_defaultkeygensetting_2","displayName":"Do not allow any site to use key generation","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting","displayName":"Default Flash setting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting","displayName":"Default Flash setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_1","displayName":"Allow all sites to automatically run the Flash plugin","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_2","displayName":"Block the Flash plugin","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultpluginssetting_defaultpluginssetting_3","displayName":"Click to play","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturl_defaultsearchproviderinstanturl","displayName":"Default search provider instant URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchproviderinstanturlpostparams_defaultsearchproviderinstanturlpostparams","displayName":"Parameters for instant URL which uses POST (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_defaultsearchprovidersearchtermsreplacementkey_defaultsearchprovidersearchtermsreplacementkey","displayName":"Parameter controlling search term placement for the default search provider (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled","displayName":"Enable DHE cipher suites in TLS (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dheenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins","displayName":"Specify a list of disabled plugins (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledplugins_disabledpluginsdesc","displayName":"List of disabled plugins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledpluginsexceptions","displayName":"Specify a list of plugins that the user can enable or disable (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledpluginsexceptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledpluginsexceptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disabledpluginsexceptions_disabledpluginsexceptionsdesc","displayName":"List of exceptions to the list of disabled plugins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder","displayName":"Specify whether the plugin finder should be disabled (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablepluginfinder_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy","displayName":"Disable SPDY protocol (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablespdy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting","displayName":"Disable TLS False Start (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_disablesslrecordsplitting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled","displayName":"Enable network prediction (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_dnsprefetchingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors","displayName":"Allow certificates issued by local trust anchors without subjectAlternativeName extension (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablecommonnamefallbackforlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting","displayName":"Enable deprecated privet printing (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedprivetprinting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin","displayName":"Enable the old web-based signin flow (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebbasedsignin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures","displayName":"Enable deprecated web platform features for a limited time (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledeprecatedwebplatformfeatures_enabledeprecatedwebplatformfeaturesdesc","displayName":"Enable deprecated web platform features for a limited time (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins","displayName":"Specify a list of enabled plugins (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enabledplugins_enabledpluginsdesc","displayName":"List of enabled plugins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors","displayName":"Allow SHA-1 signed certificates issued by local trust anchors (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesha1forlocalanchors_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure","displayName":"Enable trust in Symantec Corporation's Legacy PKI Infrastructure (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enablesymanteclegacyinfrastructure_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename","displayName":"Enterprise web store name (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstorename_enterprisewebstorename","displayName":"Enterprise web store name (deprecated) (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl","displayName":"Enterprise web store URL (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_enterprisewebstoreurl_enterprisewebstoreurl","displayName":"Enterprise web store URL (deprecated) (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates","displayName":"Allow insecure algorithms in integrity checks on extension updates and installs (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_extensionallowinsecureupdates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls","displayName":"Allow the File Handling API on these web apps (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingallowedforurls_filehandlingallowedforurlsdesc","displayName":"Allow the File Handling API on these web apps (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls","displayName":"Block the File Handling API on these web apps (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_filehandlingblockedforurls_filehandlingblockedforurlsdesc","displayName":"Block the File Handling API on these web apps (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcelegacydefaultreferrerpolicy","displayName":"Use a default referrer policy of no-referrer-when-downgrade. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcelegacydefaultreferrerpolicy_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcelegacydefaultreferrerpolicy_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcenetworkinprocess","displayName":"Force networking code to run in the browser process (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcenetworkinprocess_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_forcenetworkinprocess_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir","displayName":"Set Google Chrome Frame user data directory (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_gcfuserdatadir_gcfuserdatadir","displayName":"Set user data directory (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo","displayName":"Prevent app promotions from appearing on the new tab page (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_hidewebstorepromo_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled","displayName":"Enable HTTP/0.9 support on non-default ports (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_http09onnondefaultportsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled","displayName":"Enable Instant (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_instantenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls","displayName":"Allow key generation on these sites (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenallowedforurls_keygenallowedforurlsdesc","displayName":"Allow key generation on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls","displayName":"Block key generation on these sites (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_keygenblockedforurls_keygenblockedforurlsdesc","displayName":"Block key generation on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled","displayName":"Default legacy SameSite cookie behavior setting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled","displayName":"Default legacy SameSite cookie behavior setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_1","displayName":"Revert to legacy SameSite behavior for cookies on all sites","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_legacysamesitecookiebehaviorenabled_legacysamesitecookiebehaviorenabled_2","displayName":"Use SameSite-by-default behavior for cookies on all sites","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled","displayName":"Enable chrome://devices (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_localdiscoveryenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_machinelevelusercloudpolicyenrollmenttoken_machinelevelusercloudpolicyenrollmenttoken","displayName":"The enrollment token of cloud policy on desktop (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize","displayName":"Set media disk cache size in bytes (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_mediacachesize_mediacachesize","displayName":"Set media disk cache size: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled","displayName":"Enable PAC URL stripping (for https://) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pachttpsurlstrippingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords","displayName":"Allow users to show passwords in Password Manager (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_passwordmanagerallowshowpasswords_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls","displayName":"Allow the Flash plugin on these sites (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsallowedforurls_pluginsallowedforurlsdesc","displayName":"Allow the Flash plugin on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls","displayName":"Block the Flash plugin on these sites (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_pluginsblockedforurls_pluginsblockedforurlsdesc","displayName":"Block the Flash plugin on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled","displayName":"Enable RC4 cipher suites in TLS (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_rc4enabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccessclientfirewalltraversal","displayName":"Enable firewall traversal from remote access client (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccessclientfirewalltraversal_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccessclientfirewalltraversal_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies","displayName":"Policy overrides for Debug builds of the remote access host (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostdebugoverridepolicies_remoteaccesshostdebugoverridepolicies","displayName":"Policy overrides for Debug builds of the remote access host (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostrequiretwofactor","displayName":"Enable two-factor authentication for remote access hosts (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostrequiretwofactor_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshostrequiretwofactor_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix","displayName":"Configure the TalkGadget prefix for remote access hosts (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_remoteaccesshosttalkgadgetprefix_remoteaccesshosttalkgadgetprefix","displayName":"Configure the TalkGadget prefix for remote access hosts (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist","displayName":"Always render the following URL patterns in Google Chrome Frame (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinchromeframelist_renderinchromeframelistdesc","displayName":"Always render the following URL patterns in Google Chrome Frame (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist","displayName":"Always render the following URL patterns in the host browser (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_renderinhostlist_renderinhostlistdesc","displayName":"Always render the following URL patterns in the host browser (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_runallflashinallowmode","displayName":"Extend Flash content setting to all content (deprecated) (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_runallflashinallowmode_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_runallflashinallowmode_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed","displayName":"Allow users to opt in to Safe Browsing extended reporting (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_safebrowsingextendedreportingoptinallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck","displayName":"Skip the meta tag check in Google Chrome Frame (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_skipmetadatacheck_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin","displayName":"Minimum TLS version to fallback to (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin","displayName":"Minimum TLS version to fallback to (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin_tls1.1","displayName":"TLS 1.1","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionfallbackmin_sslversionfallbackmin_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax","displayName":"Maximum SSL version enabled (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax","displayName":"Maximum SSL version enabled (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax_tls1.2","displayName":"TLS 1.2","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_sslversionmax_sslversionmax_tls1.3","displayName":"TLS 1.3","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_supervisedusercreationenabled","displayName":"Enable creation of supervised users (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_supervisedusercreationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_supervisedusercreationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt","displayName":"Suppress the Google Chrome Frame turndown prompt (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_suppresschromeframeturndownprompt_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled","displayName":"Allow background tabs freeze (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabfreezingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed","displayName":"Allow sites to simultaneously navigate and open pop-ups (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tabunderallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled","displayName":"Enable a TLS 1.3 security feature for local trust anchors. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tls13hardeningforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled","displayName":"Enable 3DES cipher suites in TLS (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_tripledesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols","displayName":"Use Legacy Form Controls until M84. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_uselegacyformcontrols_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled","displayName":"Control the User-Agent Client Hints feature. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_useragentclienthintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled","displayName":"Re-enable Web Components v0 API until M84. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webcomponentsv0enabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies","displayName":"Allow WebDriver to Override Incompatible Policies (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_webdriveroverridesincompatiblepolicies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled","displayName":"Enable showing the welcome page on the first browser launch following OS upgrade (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~removedpolicies_welcomepageonosupgradeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL. (User)","description":"Setting the policy sets the URL for users to change their password after seeing a warning in the browser. The password protection service sends users to the URL (HTTP and HTTPS protocols only) you designate through this policy. For Google Chrome to correctly capture the salted hash of the new password on this change password page, make sure your change password page follows these guidelines ( https://www.chromium.org/developers/design-documents/create-amazing-password-forms ).\r\n\r\nTurning the policy off or leaving it unset means the service sends users to https://myaccount.google.com to change their password.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://mydomain.com/change_password.html","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionchangepasswordurl_passwordprotectionchangepasswordurl","displayName":"Configure the change password URL. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls","displayName":"Configure the list of enterprise login URLs where password protection service should capture salted hashes of passwords. (User)","description":"Setting the policy sets the list of enterprise login URLs (HTTP and HTTPS protocols only). Password protection service will capture salted hashes of passwords on these URLs and use them for password reuse detection. For Google Chrome to correctly capture password salted hashes, ensure your sign-in pages follow these guidelines ( https://www.chromium.org/developers/design-documents/create-amazing-password-forms ).\r\n\r\nTurning this setting off or leaving it unset means the password protection service only captures the password salted hashes on https://accounts.google.com.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nhttps://mydomain.com/login.html\r\nhttps://login.mydomain.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionloginurls_passwordprotectionloginurlsdesc","displayName":"Configure the list of enterprise login URLs where password protection service should capture salted hashes of passwords. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger","displayName":"Password protection warning trigger (User)","description":"Setting the policy lets you control the triggering of password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.\r\n\r\nUse PasswordProtectionLoginURLs and PasswordProtectionChangePasswordURL to set which password to protect.\r\n\r\nIf this policy is set to:\r\n\r\n* PasswordProtectionWarningOff, no password protection warning will be shown.\r\n\r\n* PasswordProtectionWarningOnPasswordReuse, password protection warning will be shown when the user reuses their protected password on a non-allowed site.\r\n\r\n* PasswordProtectionWarningOnPhishingReuse, password protection warning will be shown when the user reuses their protected password on a phishing site.\r\n\r\nLeaving the policy unset has the password protection service only protect Google passwords, but users can change this setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger","displayName":"Password protection warning trigger (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_0","displayName":"Password protection warning is off","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_1","displayName":"Password protection warning is triggered by password reuse","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_passwordprotectionwarningtrigger_passwordprotectionwarningtrigger_2","displayName":"Password protection warning is triggered by password reuse on phishing page","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings. (User)","description":"Setting the policy to Enabled means Safe Browsing will trust the domains you designate. It won't check them for dangerous resources such as phishing, malware, or unwanted software. Safe Browsing's download protection service won't check downloads hosted on these domains. Its password protection service won't check for password reuse.\r\n\r\nLeaving the policy unset means default Safe Browsing protection applies to all resources.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nmydomain.com\r\nmyuniversity.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingallowlistdomains_safebrowsingallowlistdomainsdesc","displayName":"Configure the list of domains on which Safe Browsing will not trigger warnings. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled","displayName":"Enable Safe Browsing Extended Reporting (User)","description":"Setting the policy to Enabled turns on Google Chrome's Safe Browsing Extended Reporting, which sends some system information and page content to Google servers to help detect dangerous apps and sites.\r\n\r\nSetting the policy to Disabled means reports are never sent.\r\n\r\nIf you set this policy, users can't change it. If not set, users can decide whether to send reports or not.\r\n\r\nSee more about Safe Browsing ( https://developers.google.com/safe-browsing ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingextendedreportingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level (User)","description":"Allows you to control whether Google Chrome's Safe Browsing feature is enabled and the mode it operates in.\r\n\r\nIf this policy is set to 'NoProtection' (value 0), Safe Browsing is never active.\r\n\r\nIf this policy is set to 'StandardProtection' (value 1, which is the default), Safe Browsing is always active in the standard mode.\r\n\r\nIf this policy is set to 'EnhancedProtection' (value 2), Safe Browsing is always active in the enhanced mode, which provides better security, but requires sharing more browsing information with Google.\r\n\r\nIf you set this policy as mandatory, users cannot change or override the Safe Browsing setting in Google Chrome.\r\n\r\nIf this policy is left not set, Safe Browsing will operate in Standard Protection mode but users can change this setting.\r\n\r\nSee https://developers.google.com/safe-browsing for more info on Safe Browsing.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel","displayName":"Safe Browsing Protection Level (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_0","displayName":"Safe Browsing is never active.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_1","displayName":"Safe Browsing is active in the standard mode.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~safebrowsing_safebrowsingprotectionlevel_safebrowsingprotectionlevel_2","displayName":"Safe Browsing is active in the enhanced mode. This mode provides better security, but requires sharing more browsing information with Google.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins","displayName":"Allow Same Origin Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can capture tabs with their same Origin.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of capture.\r\n\r\nNote that windowed Chrome Apps with the same origin as this site will still be allowed to be captured.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: TabCaptureAllowedByOrigins, WindowCaptureAllowedByOrigins, ScreenCaptureAllowedByOrigins, ScreenCaptureAllowed.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_sameorigintabcaptureallowedbyorigins_sameorigintabcaptureallowedbyoriginsdesc","displayName":"Allow Same Origin Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowed","displayName":"Allow or deny screen capture (User)","description":"If enabled or not configured (default), a Web page can use\r\nscreen-share APIs (e.g., getDisplayMedia() or the Desktop Capture extension API)\r\nto prompt the user to select a tab, window or desktop to capture.\r\n\r\nWhen this policy is disabled, any calls to screen-share APIs will fail\r\nwith an error; however this policy is not considered (and a site will be\r\nallowed to use screen-share APIs) if the site matches an origin pattern in\r\nany of the following policies:\r\nScreenCaptureAllowedByOrigins,\r\nWindowCaptureAllowedByOrigins,\r\nTabCaptureAllowedByOrigins,\r\nSameOriginTabCaptureAllowedByOrigins.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins","displayName":"Allow Desktop, Window, and Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can use Desktop, Window, and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: WindowCaptureAllowedByOrigins, TabCaptureAllowedByOrigins, SameOriginTabCaptureAllowedByOrigins.\r\n\r\nIf a site matches a URL pattern in this policy, the ScreenCaptureAllowed will not be considered.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_screencaptureallowedbyorigins_screencaptureallowedbyoriginsdesc","displayName":"Allow Desktop, Window, and Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins","displayName":"Allow Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can use Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of capture.\r\n\r\nNote that windowed Chrome Apps will still be allowed to be captured.\r\n\r\nThis policy is not considered if a site matches a URL pattern in the SameOriginTabCaptureAllowedByOrigins policy.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: WindowCaptureAllowedByOrigins, ScreenCaptureAllowedByOrigins, ScreenCaptureAllowed.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_tabcaptureallowedbyorigins_tabcaptureallowedbyoriginsdesc","displayName":"Allow Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins","displayName":"Allow Window and Tab capture by these origins (User)","description":"Setting the policy lets you set a list of URL patterns that can use Window and Tab Capture.\r\n\r\nLeaving the policy unset means that sites will not be considered for an override at this level of Capture.\r\n\r\nThis policy is not considered if a site matches a URL pattern in any of the following policies: TabCaptureAllowedByOrigins, SameOriginTabCaptureAllowedByOrigins.\r\n\r\nIf a site matches a URL pattern in this policy, the following policies will not be considered: ScreenCaptureAllowedByOrigins, ScreenCaptureAllowed.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~screencapture_windowcaptureallowedbyorigins_windowcaptureallowedbyoriginsdesc","displayName":"Allow Window and Tab capture by these origins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepageisnewtabpage","displayName":"Use New Tab Page as homepage (User)","description":"Setting the policy to Enabled makes the New Tab page the user's homepage, ignoring any homepage URL location. Setting the policy to Disabled means that their homepage is never the New Tab page, unless the user's homepage URL is set to chrome://newtab.\r\n\r\nIf you set the policy, users can't change their homepage type in Google Chrome. If not set, the user decides whether or not the New Tab page is their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepageisnewtabpage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepageisnewtabpage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation","displayName":"Configure the home page URL (User)","description":"Setting the policy sets the default homepage URL in Google Chrome. You open the homepage using the Home button. On desktop, the RestoreOnStartup policies control the pages that open on startup.\r\n\r\nIf the homepage is set to the New Tab Page, by the user or HomepageIsNewTabPage, this policy has no effect.\r\n\r\n The URL needs a standard scheme, such as http://example.com or https://example.com. When this policy is set, users can't change their homepage URL in Google Chrome.\r\n\r\nLeaving both HomepageLocation and HomepageIsNewTabPage unset lets users choose their homepage.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_homepagelocation_homepagelocation","displayName":"Home page URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation","displayName":"Configure the New Tab page URL (User)","description":"Setting the policy configures the default New Tab page URL and prevents users from changing it.\r\n\r\nThe New Tab page opens with new tabs and windows.\r\n\r\nThis policy doesn't decide which pages open on start up. Those are controlled by the RestoreOnStartup policies. This policy does affect the homepage, if that's set to open the New Tab page, as well as the startup page if it's set to open the New Tab page.\r\n\r\nIt is a best practice to provide fully canonicalized URL, if the URL is not fully canonicalized Google Chrome will default to https://.\r\n\r\nLeaving the policy unset or empty puts the default New Tab page in use.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value: https://www.chromium.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_newtabpagelocation_newtabpagelocation","displayName":"New Tab page URL (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup","displayName":"Action on startup (User)","description":"Setting the policy lets you specify system behavior on startup. Turning this setting off amounts to leaving it unset as Google Chrome must have specified start up behavior.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users can change it.\r\n\r\nSetting this policy to RestoreOnStartupIsLastSession turns off some settings that rely on sessions or that perform actions on exit, such as clearing browsing data on exit or session-only cookies.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup","displayName":"Action on startup (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_5","displayName":"Open New Tab Page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_1","displayName":"Restore the last session","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartup_restoreonstartup_4","displayName":"Open a list of URLs","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls","displayName":"URLs to open on startup (User)","description":"If RestoreOnStartup is set to RestoreOnStartupIsURLs, then setting RestoreOnStartupURLs to a list of URLs specify which URLs open.\r\n\r\nIf not set, the New Tab page opens on start up.\r\n\r\nOn Microsoft® Windows®, this functionality is only available on instances that are joined to a Microsoft® Active Directory® domain domain, running on Windows 10 Pro, or enrolled in Chrome Browser Cloud Management. On macOS, this functionality is only available on instances that are managed via MDM, or joined to a domain via MCX.\r\n\r\nExample value:\r\n\r\nhttps://example.com\r\nhttps://www.chromium.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_restoreonstartupurls_restoreonstartupurlsdesc","displayName":"URLs to open on startup (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton","displayName":"Show Home button on toolbar (User)","description":"Setting the policy to Enabled shows the Home button on Google Chrome's toolbar. Setting the policy to Disabled keeps the Home button from appearing.\r\n\r\nIf you set the policy, users can't change it in Google Chrome. If not set, users chooses whether to show the Home button.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev1~policy~googlechrome~startup_showhomebutton_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts","displayName":"Allow Web Authentication requests on sites with broken TLS certificates. (User)","description":"If set to Enabled, Google Chrome will\r\nallow Web Authentication requests on websites that have TLS certificates with\r\nerrors (i.e. websites considered not secure).\r\n\r\nIf the policy is set to Disabled or left unset, the default behavior of\r\nblocking such requests will apply.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_allowwebauthnwithbrokentlscerts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled","displayName":"Enable Application Bound Encryption (User)","description":"Setting the policy to Enabled or leaving it unset binds encryption keys used for local data storage to Google Chrome whenever that is possible.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security as unknown and potentially hostile apps can retrieve encryption keys used to secure data.\r\n\r\nOnly turn off the policy if there are compatibility issues, such as other applications that need legitimate access to Google Chrome's data, encrypted user data is expected to be fully portable between different computers or the integrity and location of Google Chrome's executable files is not consistent.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_applicationboundencryptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability","displayName":"Enable Battery Saver Mode (User)","description":"This policy enables or disables the Battery Saver Mode setting.\r\nOn Chrome, this setting makes it so that frame rate is throttled to lower power consumption. If this policy is unset, the end user can control this setting in chrome://settings/performance.\r\nOn ChromeOS, this setting makes it so that frame rate and CPU frequency are throttled, backlights are dimmed, and Android is put in Battery Saver Mode. On devices with multiple CPUs, some CPUs will be turned off.\r\nThe different levels are:\r\nDisabled (0): Battery Saver Mode will be disabled.\r\nEnabledBelowThreshold (1): Battery Saver Mode will be enabled when the device is on battery power and battery level is low.\r\nEnabledOnBattery (2): This value is deprecated as of M121. From M121 onwards, values will be treated as EnabledBelowThreshold.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability","displayName":"Enable Battery Saver Mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_0","displayName":"Battery Saver Mode will be disabled.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_1","displayName":"Battery Saver Mode will be enabled when the device is on battery power and battery level is low.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_batterysavermodeavailability_batterysavermodeavailability_2","displayName":"This value is deprecated as of M121. In M121 and after, values will be treated as EnabledBelowThreshold.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled","displayName":"Allow pages to use the built-in AI APIs. (User)","description":"This policy controls if a page can use the built-in AI APIs (such as LanguageModel API, Summarization API, Writer API, and Rewriter API).\r\n\r\nIf the policy is enabled or unset, the APIs are enabled to be used.\r\n\r\nIf the policy is disabled, attempting using the APIs will result in an error.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_builtinaiapisenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed","displayName":"Allow Chrome for Testing (User)","description":"Controls whether users may use Chrome for Testing.\r\n\r\nIf this policy is set to Enabled or not set, users may install and run Chrome for Testing.\r\n\r\nIf this policy is set to Disabled, users are not allowed to run Chrome for Testing. Users will still be able to install Chrome for Testing, however it will not run with the profiles where this policy is set to Disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_chromefortestingallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed","displayName":"Allow reporting of domain reliability related data (User)","description":"If this policy is set false, domain reliability diagnostic data reporting is disabled and no data is sent to Google.\r\nIf this policy is set true or not set, domain reliability diagnostic data reporting will follow the behavior of MetricsReportingEnabled for Google Chrome or DeviceMetricsReportingEnabled for Google ChromeOS.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_domainreliabilityallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings","displayName":"Dynamic Code Settings (User)","description":"This policy controls the dynamic code settings for Google Chrome.\r\n\r\nDisabling dynamic code improves the security of Google Chrome by preventing potentially hostile dynamic code and third-party code from making changes to Google Chrome's behavior, but might cause compatibility issues with third-party software (e.g. certain printer drivers) that must run inside the browser process.\r\n\r\nIf the policy is set to 0 - Default or left unset then Google Chrome will use the default settings.\r\n\r\nIf the policy is set to 1 - DisabledForBrowser then the Google Chrome browser process will be prevented from creating dynamic code.\r\n\r\nNote: Read more about process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings","displayName":"Dynamic Code Settings (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings_0","displayName":"Default dynamic code settings","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_dynamiccodesettings_dynamiccodesettings_1","displayName":"Prevent the browser process from creating dynamic code","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enableunsafeswiftshader","displayName":"Allow software WebGL fallback using SwiftShader (User)","description":"A policy that controls if SwiftShader will be used as a WebGL fallback when hardware GPU acceleration is not available.\r\n\r\nSwiftShader has been used to support WebGL on systems without GPU acceleration such as headless systems or virtual machines but has been deprecated due to security issues. Starting in M139, WebGL context creation will fail when it would have otherwise used SwiftShader. This policy allows the browser or administrator to temporarily defer the deprecation.\r\n\r\nSetting the policy to Enabled, SwiftShader will be used as a software WebGL fallback.\r\n\r\nSetting the policy to Disabled or not set, WebGL context creation may fail if hardware GPU acceleration is not available. Web pages may misbehave if they do not gracefully handle WebGL context creation failure.\r\n\r\nThis is a temporary policy which will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enableunsafeswiftshader_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enableunsafeswiftshader_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled","displayName":"Enable TLS Encrypted ClientHello (User)","description":"Encrypted ClientHello (ECH) is an extension to TLS to encrypt sensitive fields of the ClientHello and improve privacy.\r\n\r\nIf this policy is not configured, or is set to enabled, Google Chrome will follow the default rollout process for ECH. If it is disabled, Google Chrome will not enable ECH.\r\n\r\nWhen the feature is enabled, Google Chrome may or may not use ECH depending on server support, availability of the HTTPS DNS record, or rollout status.\r\n\r\nECH is an evolving protocol, so Google Chrome's implementation is subject to change. As such, this policy is a temporary measure to control the initial experimental implementation. It will be replaced with final controls as the protocol finalizes.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_encryptedclienthelloenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel","displayName":"Set a custom enterprise label for a managed profile (User)","description":"This policy controls a custom label used to identify managed profiles. For managed profiles, this label will be shown next to the avatar in the toolbar. The custom label will not be translated.\r\n\r\nWhen this policy is applied, any strings that surpass 16 characters will be truncated with a “...” Please refrain from using extended names.\r\n\r\nThis policy can only be set as a user policy.\r\n\r\nNote that this policy has no effect if the EnterpriseProfileBadgeToolbarSettings policy is set to hide_expanded_enterprise_toolbar_badge (value 1).\r\n\r\nExample value: Chromium","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabel_enterprisecustomlabel","displayName":"Set a custom enterprise label for a managed profile (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser","displayName":"Set a custom enterprise label for a managed browser (User)","description":"This policy controls a custom label used to indicate a managed browser. For managed browsers, this label will be shown in a management disclaimer on a footer on the New Tab page. The custom label will not be translated.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nExample value: Chromium","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisecustomlabelforbrowser_enterprisecustomlabelforbrowser","displayName":"Set a custom enterprise label for a managed browser (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl","displayName":"Enterprise Logo URL for a managed profile (User)","description":"A URL to an image that will be used as an enterprise badge for a managed profile. The URL must point to an image.\r\n\r\nThis policy can only be set as a user policy.\r\n\r\nIt is recommended to use the favicon (example https://www.google.com/favicon.ico) or an icon no smaller than 48 x 48 px.\r\n\r\nExample value: https://example.com/image.png","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourl_enterpriselogourl","displayName":"Enterprise Logo URL for a managed profile (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser","displayName":"Enterprise Logo URL for a managed browser (User)","description":"A URL to an image that will be used as an enterprise badge for a managed browser. The URL must point to an image.\r\n\r\nIt is recommended to use the favicon (example https://www.google.com/favicon.ico) or an icon no smaller than 48 x 48 px.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nExample value: https://example.com/image.png","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriselogourlforbrowser_enterpriselogourlforbrowser","displayName":"Enterprise Logo URL for a managed browser (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings","displayName":"Controls visibility of enterprise profile badge in the toolbar (User)","description":"For work and school profiles, the toolbar will show a \"Work\" or \"School\" label by default next to the toolbar avatar. The label will only be shown if the signed in account is managed.\r\n\r\nSetting this policy to hide_expanded_enterprise_toolbar_badge (value 1) will hide the enterprise badge for a managed profile in the toolbar.\r\n\r\nLeaving this policy unset or setting it to show_expanded_enterprise_toolbar_badge (value 0) will show the enterprise badge.\r\n\r\nThe label is customizable via the EnterpriseCustomLabel policy.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings","displayName":"Controls visibility of enterprise profile badge in the toolbar (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings_0","displayName":"Show expanded enterprise toolbar badge","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilebadgetoolbarsettings_enterpriseprofilebadgetoolbarsettings_1","displayName":"Hide expanded enterprise toolbar badge","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata","displayName":"Keep browsing data when creating enterprise profile by default (User)","description":"If this policy is Enabled, the option to keep any existing browsing data when creating an enterprise profile will be checked by default.\r\n\r\nIf this policy is unset or Disabled, the option to keep any existing browsing data when creating an enterprise profile will not be checked by default.\r\n\r\nRegardless of the value, the user will be able to decide whether or not to keep any existing browsing data when creating an enterprise profile.\r\n\r\nThis policy has no effect if the option to keep existing browsing data is not available; this happens if enterprise profile separation is strictly enforced, or if the data would be from an already managed profile.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterpriseprofilecreationkeepbrowsingdata_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings","displayName":"Enterprise search aggregator settings (User)","description":"This policy allows administrators to set a designated enterprise search aggregator that will provide search recommendations and results within the omnibox (address bar) and the search box on the New Tab page.\r\n\r\nBy default, enterprise search suggestions will be blended and shown alongside regular Google Chrome recommendations. Users can explicitly scope their search to just the enterprise search aggregator by typing the keyword specified in the shortcut field with or without the @ prefix (e.g. @work) followed by Space or Tab in the omnibox. Scoped enterprise searches (triggered by a keyword) are currently only supported in the omnibox and not in the search box on the New Tab page.\r\n\r\nThe following fields are required: name, shortcut, search_url, suggest_url.\r\n\r\nThe name field corresponds to the search engine name shown to the user in the address bar.\r\n\r\nThe shortcut field corresponds to the keyword that the user enters to trigger the search. The shortcut can include plain words and characters, but cannot include spaces or start with the @ symbol. Shortcuts must be unique.\r\n\r\nThe search_url field specifies the URL on which to search. Enter the web address for the search engine's results page, and use '{searchTerms}' in place of the query.\r\n\r\nThe suggest_url field specifies the URL that provides search suggestions. A POST request will be made and the user's query will be passed in the POST params under key 'query'.\r\n\r\nThe icon_url field specifies the URL to an image that will be used on the search suggestions. A default icon will be used when this field is not set. It's recommended to use a favicon (example https://www.google.com/favicon.ico). Supported image file formats: JPEG, PNG, and ICO.\r\n\r\nThe require_shortcut field specifies whether the address bar shortcut is required to see search recommendations. If required, suggestions will not be shown in the search box on the New Tab page, but will continue to be shown in the omnibox (address bar) in scoped search mode. If this field is not set, the address bar shortcut is not required.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=EnterpriseSearchAggregatorSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"name\": \"My Search Aggregator\",\r\n \"shortcut\": \"work\",\r\n \"search_url\": \"https://www.aggregator.com/search?q={searchTerms}\",\r\n \"suggest_url\": \"https://www.aggregator.com/suggest\",\r\n \"icon_url\": \"https://www.google.com/favicon.ico\",\r\n \"require_shortcut\": true\r\n}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_enterprisesearchaggregatorsettings_enterprisesearchaggregatorsettings","displayName":"Enterprise search aggregator settings (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (User)","description":"You can enable this policy to create a dictionary of file type extensions with a corresponding list of domains that will be exempted from file type extension-based download warnings. This lets enterprise administrators block file type extension-based download warnings for files that are associated with a listed domain. For example, if the \"jnlp\" extension is associated with \"website1.com\", users would not see a warning when downloading \"jnlp\" files from \"website1.com\", but see a download warning when downloading \"jnlp\" files from \"website2.com\".\r\n\r\nFiles with file type extensions specified for domains identified by this policy will still be subject to non-file type extension-based security warnings such as mixed-content download warnings and Safe Browsing warnings.\r\n\r\nIf you disable this policy or don't configure it, file types that trigger extension-based download warnings will show warnings to the user.\r\n\r\nIf you enable this policy:\r\n\r\n* The URL pattern should be formatted according to https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\n* The file type extension entered must be in lower-cased ASCII. The leading separator should not be included when listing the file type extension, so list \"jnlp\" should be used instead of \".jnlp\".\r\n\r\nExample:\r\n\r\nThe following example value would prevent file type extension-based download warnings on \"exe\" and \"jnlp\" extensions for *.example.com domains, and on \"swf\" extensions for all domains. It will show the user a file type extension-based download warning on any other domain for exe and jnlp files, but not for swf files.\r\n\r\n[\r\n{ \"file_extension\": \"jnlp\", \"domains\": [\"example.com\"] },\r\n{ \"file_extension\": \"exe\", \"domains\": [\"example.com\"] },\r\n{ \"file_extension\": \"swf\", \"domains\": [\"*\"] }\r\n]\r\n\r\nNote that while the preceding example shows the suppression of file type extension-based download warnings for \"swf\" files for all domains, applying suppression of such warnings for all domains for any dangerous file type extension is not recommended due to security concerns. It is shown in the example merely to demonstrate the ability to do so.\r\n\r\nIf this policy is enabled alongside DownloadRestrictions, then the exemptions to file type extension-based warnings specified by this policy take precedence over a DownloadRestrictions setting that would block dangerous file types. The exemptions specified by this policy only apply to the \"block dangerous file types\" behavior specified by values 1 and 2 of DownloadRestrictions.\r\n\r\nFor example, if this policy specifies an exemption for \"exe\" downloads from \"website1.com\", and DownloadRestrictions is set to block malicious downloads and dangerous file types (value 1), then \"exe\" downloads from \"website1.com\" will be exempt from file type extension-based blocking but will still be blocked if they are malicious.\r\n\r\nMore information about DownloadRestrictions can be found at https://chromeenterprise.google/policies/?policy=DownloadRestrictions.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ExemptDomainFileTypePairsFromFileTypeDownloadWarnings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"domains\": [\r\n \"https://example.com\",\r\n \"example2.com\"\r\n ],\r\n \"file_extension\": \"jnlp\"\r\n },\r\n {\r\n \"domains\": [\r\n \"*\"\r\n ],\r\n \"file_extension\": \"swf\"\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_exemptdomainfiletypepairsfromfiletypedownloadwarnings_exemptdomainfiletypepairsfromfiletypedownloadwarnings","displayName":"Disable download file type extension-based warnings for specified file types on domains (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled","displayName":"Specifies whether in-product Google Chrome surveys are shown to users. (User)","description":"Google Chrome in-product surveys collect user feedback for the browser. Survey responses are not associated with user accounts.\r\nWhen this policy is Enabled or not set, in-product surveys may be shown to users.\r\nWhen this policy is Disabled, in-product surveys are not shown to users.\r\n\r\nThis policy has no effect if MetricsReportingEnabled is set to Disabled, which disables in-product surveys as well.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_feedbacksurveysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins","displayName":"Allow file or directory picker APIs to be called without prior user gesture (User)","description":"For security reasons, the\r\nshowOpenFilePicker(),\r\nshowSaveFilePicker() and\r\nshowDirectoryPicker() web APIs\r\nrequire a prior user gesture (\"transient activation\") to be called or will\r\notherwise fail.\r\n\r\nWith this policy set, admins can specify origins on which these APIs can be\r\ncalled without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is\r\nnot an accepted value for this policy.\r\n\r\nIf this policy is unset, all origins will require a prior user gesture to call\r\nthese APIs.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_fileordirectorypickerwithoutgestureallowedfororigins_fileordirectorypickerwithoutgestureallowedfororiginsdesc","displayName":"Allow file or directory picker APIs to be called without prior user gesture (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_forcepermissionpolicyunloaddefaultenabled","displayName":"Controls whether unload event handlers can be disabled. (User)","description":"unload event handlers are being deprecated. Whether they fire depends on the unload Permissions-Policy. Currently, they are allowed by policy by default. In the future they will gradually move to being disallowed by default and sites must explicitly enable them using Permissions-Policy headers. This enterprise policy can be used to opt out of this gradual deprecation by forcing the default to remain as enabled.\r\n\r\nPages may depend on unload event handlers to save data or signal the end of a user session to the server. This is not recommended as it is unreliable and impacts performance by blocking use of BackForwardCache. Recommended alternatives exist, however the unload event has been used for a long time. Some applications may still rely on them.\r\n\r\nIf this policy is set to false or not set, then unload events handlers will be gradually deprecated in-line with the deprecation rollout and sites which do not set Permissions-Policy header will stop firing `unload` events.\r\n\r\nIf this policy is set to true then unload event handlers will continue to work by default.\r\n\r\nNOTE: This policy had an incorrectly documented default of `true` in M117. The unload event did and will not change in M117, so this policy has no effect in that version.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_forcepermissionpolicyunloaddefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_forcepermissionpolicyunloaddefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled","displayName":"Enable Google Search Side Panel (User)","description":"If set to Enabled or not set, Google Search Side Panel is allowed on all web pages.\r\n\r\nIf set to Disabled, Google Search Side Panel is not available on any webpage.\r\n\r\nGenAI capabilities that are part of this feature are not available for Educational or Enterprise accounts.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_googlesearchsidepanelenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_highefficiencymodeenabled","displayName":"Enable High Efficiency Mode (User)","description":"This policy enables or disables the High Efficiency Mode setting. This setting makes it so that tabs are discarded after some period of time in the background to reclaim memory.\r\nIf this policy is unset, the end user can control this setting in chrome://settings/performance.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_highefficiencymodeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_highefficiencymodeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist","displayName":"HTTP Allowlist (User)","description":"Setting the policy specifies a list of hostnames or hostname patterns (such as\r\n'[*.]example.com') that will not be upgraded to HTTPS and will not show an\r\nerror interstitial if HTTPS-First Mode is enabled. Organizations can use this\r\npolicy to maintain access to servers that do not support HTTPS, without\r\nneeding to disable HTTPS Upgrades and/or HTTPS-First Mode.\r\n\r\nSupplied hostnames must be canonicalized: Any IDNs must be converted to their\r\nA-label format, and all ASCII letters must be lowercase.\r\n\r\nBlanket host wildcards (i.e., \"*\" or \"[*]\") are not allowed. Instead,\r\nHTTPS-First Mode and HTTPS Upgrades should be explicitly disabled via their\r\nspecific policies.\r\n\r\nNote: This policy does not apply to HSTS upgrades.\r\n\r\nExample value:\r\n\r\ntestserver.example.com\r\n[*.]example.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpallowlist_httpallowlistdesc","displayName":"HTTP Allowlist (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled","displayName":"Enable automatic HTTPS upgrades (User)","description":"Google Chrome attempts to upgrade some\r\nnavigations from HTTP to HTTPS, when possible. This policy can be used to\r\ndisable this behavior. If set to \"true\" or left unset, this feature will be\r\nenabled by default.\r\n\r\nThe separate HttpAllowlist policy\r\ncan be used to exempt specific hostnames or hostname patterns from being\r\nupgraded to HTTPS by this feature.\r\n\r\nSee also the HttpsOnlyMode policy.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_httpsupgradesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensdesktopntpsearchenabled","displayName":"Allow Google Lens button to be shown in the search box on the New Tab page if supported. (User)","description":"Leaving the policy unset or setting it to Enabled allows users to view and use the Google Lens button in the search box on the New Tab page. Setting the policy to Disabled means users will not see the Google Lens button in the search box on the New Tab page.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensdesktopntpsearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensdesktopntpsearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings","displayName":"Settings for the Lens Overlay feature (User)","description":"Lens Overlay lets users perform contextual Google searches either via a screenshot or by asking a question about the current page's contents. This feature requires the end user to opt-in.\r\n\r\nThis feature is available to all users with Google as their default search engine, unless it is disabled by this policy.\r\n\r\nWhen policy is set to 0 - Allow or not set, the feature will be available to users.\r\n\r\nWhen policy is set to 1 - Do not allow, the feature will not be available.\r\n\r\nStarting in Google Chrome 140, if the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_lensoverlaysettings","displayName":"Settings for the Lens Overlay feature (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_lensoverlaysettings_0","displayName":"Allow","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_lensoverlaysettings_lensoverlaysettings_1","displayName":"Do not allow","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings","displayName":"Change Memory Saver Mode Savings (User)","description":"This policy changes the savings level of Memory Saver.\r\n\r\nThis only takes effect when Memory Saver is enabled through settings or through the HighEfficiencyModeEnabled policy, and will affect how heuristics are used to determine when to discard tabs. For example, reducing the lifetime of an inactive tab before discarding it can save memory, but it also means that tabs will be reloaded more frequently which can lead to bad user experience and cost more network traffic.\r\n\r\nSetting the policy to 0 - Memory Saver will get moderate memory savings. Tabs become inactive after a longer period of time\r\n\r\nSetting the policy to 1 - Memory Saver will get balanced memory savings. Tabs become inactive after an optimal period of time.\r\n\r\nSetting the policy to 2 - Memory Saver will get maximum memory savings. Tabs become inactive after a shorter period of time.\r\n\r\nIf this policy is unset, the end user can control this setting in chrome://settings/performance.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings","displayName":"Change Memory Saver Mode Savings (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_0","displayName":"Moderate memory savings.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_1","displayName":"Balanced memory savings.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_memorysavermodesavings_memorysavermodesavings_2","displayName":"Maximum memory savings.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_nativehostsexecutableslaunchdirectly","displayName":"Force Windows executable Native Messaging hosts to launch directly (User)","description":"This policy controls whether native host executables launch directly on Windows.\r\n\r\nSetting the policy to Enabled forces Google Chrome to launch native messaging hosts implemented as executables directly.\r\n\r\nSetting the policy to Disabled will result in Google Chrome launching hosts using cmd.exe as an intermediary process.\r\n\r\nLeaving the policy unset allows Google Chrome to decide which approach to use.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_nativehostsexecutableslaunchdirectly_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_nativehostsexecutableslaunchdirectly_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled","displayName":"Control the visibility of the extension attribution on the New Tab page (User)","description":"This policy determines whether an attribution to the extension modifying the New Tab Page (NTP) is displayed in the NTP's footer.\r\n\r\nBy default, if an extension has overridden the standard NTP, a message attributing this change to the specific extension will appear in the footer. This attribution typically includes a link to the relevant extension in the Chrome Web Store.\r\n\r\nIf this policy is left unset or set to true, the extension attribution will be visible on the NTP footer when an extension is controlling the NTP.\r\n\r\nIf this policy is set to false, the attribution to the extension in the NTP footer will be suppressed.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfooterextensionattributionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled","displayName":"Control the visibility of the management notice on the New Tab Page for managed browsers (User)","description":"This policy controls the visibility of the management notice within the footer of the New Tab Page (NTP). By default, the NTP footer displays information when the browser is managed by an organization (indicated by a building icon and \"Managed by [domain name]\"). This can be customized using the EnterpriseCustomLabelForBrowser and EnterpriseLogoUrlForBrowser policies.\r\n\r\nIf this policy is left unset or set to true, managed browsers will display a “Managed by…” notice with an icon.\r\n\r\nIf this policy is set to false, the management notice will be hidden.\r\n\r\nNote that this policy is only applied for managed browsers, so it will have no effect for managed users on unmanaged browsers.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpfootermanagementnoticeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpmiddleslotannouncementvisible","displayName":"Show the middle slot announcement on the New Tab Page (User)","description":"This policy controls the visibility of the middle slot announcement on the New Tab Page.\r\n\r\nIf the policy is set to Enabled, the New Tab Page will show the middle slot announcement if it is available.\r\n\r\nIf the policy is set to Disabled, the New Tab Page will not show the middle slot announcement even if it is available.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpmiddleslotannouncementvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpmiddleslotannouncementvisible_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible","displayName":"Show Outlook Calendar card on the New Tab Page (User)","description":"This policy controls the visibility of the Outlook Card on the New Tab Page. The card will only be displayed on the New Tab Page if the policy is enabled and your organization authorized the usage of the Outlook Calendar data in the browser.\r\n\r\nOutlook data will not be stored by the browser.\r\n\r\nThe Outlook card shows the next calendar event, along with a glanceable look at the rest of the day's meetings. It aims to address the issue of context switching and enhance productivity by giving users a shortcut to their next meeting.\r\n\r\nThe Microsoft Outlook card will require additional admin configuration. For detailed information on connecting the Chrome New Tab Page Card to Outlook, please see https://support.google.com/chrome/a?p=chrome_ntp_microsoft_cards.\r\n\r\nIf the NTPCardsVisible is disabled, the Outlook Card will not be shown. If NTPCardsVisible is enabled, the Outlook card will be shown if this policy is also enabled and there is data to be shown. If NTPCardsVisible is unset, the Outlook card will be shown if this policy is also enabled, the user has the card enabled in Customize Chrome, and there is data to be shown.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpoutlookcardvisible_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpsharepointcardvisible","displayName":"Show SharePoint and OneDrive File Card on the New Tab Page (User)","description":"This policy controls the visibility of the SharePoint and OneDrive File Card on the New Tab Page. The card will only be displayed on the New Tab Page if the policy is enabled and your organization authorized the usage of the SharePoint and OneDrive File data in the browser.\r\n\r\nSharePoint and OneDrive data will not be stored by the browser.\r\n\r\nThe SharePoint and OneDrive Files recommendation card shows a list of recommended files. It aims to address the issue of context switching and enhance productivity by giving users a shortcut to their most important documents.\r\n\r\nThe Microsoft SharePoint and OneDrive card will require additional admin configuration. For detailed information on connecting the Chrome New Tab Page Card to Sharepoint, please see https://support.google.com/chrome/a?p=chrome_ntp_microsoft_cards.\r\n\r\nIf the NTPCardsVisible is disabled, the SharePoint and OneDrive Card will not be shown. If NTPCardsVisible is enabled, the SharePoint and OneDrive card will be shown if this policy is also enabled and there is data to be shown. If NTPCardsVisible is unset, the SharePoint and OneDrive card will be shown if this policy is also enabled, the user has the card enabled in Customize Chrome, and there is data to be shown.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpsharepointcardvisible_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpsharepointcardvisible_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts","displayName":"Setting shortcuts on the New Tab Page (Beta) (User)","description":"In development: for early preview only.\r\n\r\nSetting the policy pre-configures up to 10 custom shortcuts on the Google Chrome New Tab page.\r\n\r\nIf set, users will see these shortcuts by default and users can toggle between “My shortcuts,\" \"Most visited sites\" or \"My organization's shortcuts\" on the \"Customize Chrome\" panel. If empty or unset, the user will only be able to toggle between “My shortcuts\" or \"Most visited sites\" on the \"Customize Chrome\" panel.\r\n\r\nShortcut URLs must be unique.\r\n\r\nIf allow_user_edit is set to true, users can change the name of the shortcut. If set to false or unset, users cannot edit the name.\r\n\r\nIf allow_user_delete is set to true, users can remove the shortcut. If set to false or unset, users cannot remove the shortcut.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=NTPShortcuts for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"name\": \"Google\",\r\n \"url\": \"https://www.google.com\"\r\n },\r\n {\r\n \"name\": \"YouTube\",\r\n \"url\": \"https://www.youtube.com\"\r\n },\r\n {\r\n \"name\": \"Google Drive\",\r\n \"url\": \"https://www.drive.google.com\",\r\n \"allow_user_edit\": true,\r\n \"allow_user_delete\": true\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_ntpshortcuts_ntpshortcuts","displayName":"Setting shortcuts on the New Tab Page (Beta) (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled","displayName":"Allows origin-keyed agent clustering by default. (User)","description":"This policy allows origin-keyed agent clustering by default.\r\n\r\nThe Origin-Agent-Cluster HTTP header controls whether a document is\r\nisolated in an origin-keyed agent cluster, or in a site-keyed agent\r\ncluster. This has security implications since an origin-keyed agent\r\ncluster allows isolating documents by origin. The developer-visible\r\nconsequence of this is that the document.domain accessor can no longer\r\nbe set.\r\n\r\nThe default behaviour - when no Origin-Agent-Cluster header has been set -\r\nchanges in M111 from site-keyed to origin-keyed.\r\n\r\nIf this policy is enabled or not set, the browser will follow this\r\nnew default from that version on.\r\n\r\nIf this policy is disabled this change is reversed and\r\ndocuments without Origin-Agent-Cluster headers will be assigned to\r\nsite-keyed agent clusters. As a consequence, the document.domain accessor\r\nremains settable by default. This matches the legacy behaviour.\r\n\r\nSee https://developer.chrome.com/blog/immutable-document-domain/ for\r\nadditional details.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_originagentclusterdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled","displayName":"Enable PDF Annotations (User)","description":"Controls if the PDF viewer in Google Chrome can annotate PDFs.\r\n\r\nWhen this policy is not set, or is set to true, then the PDF viewer will be able to annotate PDFs.\r\n\r\nWhen this policy is set to false, then the PDF viewer will not be able to annotate PDFs.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfannotationsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled","displayName":"Use Skia renderer for PDF rendering (User)","description":"Controls whether the PDF viewer in Google Chrome uses Skia renderer.\r\n\r\nWhen this policy is enabled, the PDF viewer uses Skia renderer.\r\n\r\nWhen this policy is disabled, the PDF viewer uses its current AGG renderer.\r\n\r\nWhen this policy is not set, the PDF renderer will be chosen by the browser.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfuseskiarendererenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled","displayName":"Use out-of-process iframe PDF Viewer (User)","description":"Controls whether the PDF viewer in Google Chrome uses an out-of-process iframe (OOPIF). This will be the new PDF viewer architecture in the future, as it is simpler and makes adding new features easier. The existing GuestView PDF viewer is an outdated, complex architecture that is being deprecated.\r\n\r\nWhen this policy is set to Enabled or not set, Google Chrome will be able to use the OOPIF PDF viewer architecture. Once Enabled or not set, the default behavior will be decided by Google Chrome.\r\n\r\nWhen this policy is set to Disabled, Google Chrome will strictly use the existing GuestView PDF viewer. It embeds a web page with a separate frame tree into another web page.\r\n\r\nThis policy will be removed in the future, after the OOPIF PDF viewer feature has fully rolled out.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_pdfvieweroutofprocessiframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_postquantumkeyagreementenabled","displayName":"Enable post-quantum key agreement for TLS (User)","description":"This policy configures whether Google Chrome will offer a post-quantum key agreement algorithm in TLS, using the ML-KEM NIST standard. Prior to Google Chrome 131, the algorithm was Kyber, an earlier draft iteration of the standard. This allows supporting servers to protect user traffic from being later decrypted by quantum computers.\r\n\r\nIf this policy is Enabled or not set, Google Chrome will offer a post-quantum key agreement in TLS connections. User traffic will then be protected from quantum computers when communicating with compatible servers.\r\n\r\nIf this policy is Disabled, Google Chrome will not offer a post-quantum key agreement in TLS connections. User traffic will then be unprotected from quantum computers.\r\n\r\nOffering a post-quantum key agreement is backwards-compatible. Existing TLS servers and networking middleware are expected to ignore the new option and continue selecting previous options.\r\n\r\nHowever, devices that do not correctly implement TLS may malfunction when offered the new option. For example, they may disconnect in response to unrecognized options or the resulting larger messages. Such devices are not post-quantum-ready and will interfere with an enterprise's post-quantum transition. If encountered, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure and will be removed sometime after Google Chrome version 145. It may be Enabled to allow you to test for issues, and may be Disabled while issues are being resolved.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_postquantumkeyagreementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_postquantumkeyagreementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_prefetchwithserviceworkerenabled","displayName":"Allow SpeculationRules prefetch to ServiceWorker-controlled URLs (User)","description":"SpeculationRules prefetch can be issued to URLs that are controlled by\r\nServiceWorker. However, legacy code did not allow it and canceled the prefetch\r\nrequests. This policy enables to control the behavior.\r\n\r\nSetting this policy to Enabled or not set allows SpeculationRules prefetch to\r\nServiceWorker-controlled URLs (if the PrefetchServiceWorker feature flag is\r\nenabled). This is the current default behavior and is aligned with the\r\nspecifications.\r\n\r\nSetting this policy to Disabled disallows SpeculationRules prefetch to\r\nServiceWorker-controlled URLs. This is the legacy behavior.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_prefetchwithserviceworkerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_prefetchwithserviceworkerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt","displayName":"Prompt users to re-authenticate to the profile (User)","description":"When set to DoNotPrompt or left unset, Google Chrome does not automatically prompt the user to re-authenticate to the browser.\r\n\r\nWhen set to PromptInTab, when the user's authentication expires, immediately open a new tab with the Google login page. This only happens if using Chrome Sync.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt","displayName":"Prompt users to re-authenticate to the profile (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt_0","displayName":"Do not prompt for reauth","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_profilereauthprompt_profilereauthprompt_1","displayName":"Prompt for reauth in a tab","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled","displayName":"Enable showing promotional content (User)","description":"Setting the policy to True or leaving it unset lets Google Chrome show users product promotional content.\r\n\r\nSetting the policy to False prevents Google Chrome from showing product promotional content.\r\n\r\nSetting the policy controls the presentation of promotional content, including the welcome pages that help users sign in to Google Chrome, set Google Chrome as users' default browser, or otherwise inform them of product features.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_promotionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled","displayName":"Enable QR Code Generator (User)","description":"This policy enables the QR Code generator feature in Google Chrome.\r\n\r\nIf you enable this policy or don't configure it, the QR Code Generator feature is enabled.\r\n\r\nIf you disable this policy, the QR Code Generator feature is disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_qrcodegeneratorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended","displayName":"Enable Battery Saver Mode (User)","description":"This policy enables or disables the Battery Saver Mode setting.\r\nOn Chrome, this setting makes it so that frame rate is throttled to lower power consumption. If this policy is unset, the end user can control this setting in chrome://settings/performance.\r\nOn ChromeOS, this setting makes it so that frame rate and CPU frequency are throttled, backlights are dimmed, and Android is put in Battery Saver Mode. On devices with multiple CPUs, some CPUs will be turned off.\r\nThe different levels are:\r\nDisabled (0): Battery Saver Mode will be disabled.\r\nEnabledBelowThreshold (1): Battery Saver Mode will be enabled when the device is on battery power and battery level is low.\r\nEnabledOnBattery (2): This value is deprecated as of M121. From M121 onwards, values will be treated as EnabledBelowThreshold.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability","displayName":"Enable Battery Saver Mode (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_0","displayName":"Battery Saver Mode will be disabled.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_1","displayName":"Battery Saver Mode will be enabled when the device is on battery power and battery level is low.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_batterysavermodeavailability_recommended_batterysavermodeavailability_2","displayName":"This value is deprecated as of M121. In M121 and after, values will be treated as EnabledBelowThreshold.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_domainreliabilityallowed_recommended","displayName":"Allow reporting of domain reliability related data (User)","description":"If this policy is set false, domain reliability diagnostic data reporting is disabled and no data is sent to Google.\r\nIf this policy is set true or not set, domain reliability diagnostic data reporting will follow the behavior of MetricsReportingEnabled for Google Chrome or DeviceMetricsReportingEnabled for Google ChromeOS.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_domainreliabilityallowed_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_domainreliabilityallowed_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended","displayName":"Keep browsing data when creating enterprise profile by default (User)","description":"If this policy is Enabled, the option to keep any existing browsing data when creating an enterprise profile will be checked by default.\r\n\r\nIf this policy is unset or Disabled, the option to keep any existing browsing data when creating an enterprise profile will not be checked by default.\r\n\r\nRegardless of the value, the user will be able to decide whether or not to keep any existing browsing data when creating an enterprise profile.\r\n\r\nThis policy has no effect if the option to keep existing browsing data is not available; this happens if enterprise profile separation is strictly enforced, or if the data would be from an already managed profile.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_enterpriseprofilecreationkeepbrowsingdata_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended","displayName":"Enable origin-keyed process isolation by default. (User)","description":"Enables origin-keyed process isolation for most pages (i.e., those assigned to an origin-keyed agent cluster by default). This improves security but also increases the number of processes created. Users are allowed to override the set policy value via the command-line flags or chrome://flags (both to turn this feature on or off).\r\n\r\nSetting the policy to Enabled results in most origins being isolated, even from other origins in the same site. See also the IsolateOrigins and SitePerProcess policies.\r\n\r\nSetting the policy to Disabled results in no origins being isolated from the rest of their site unless an origin explicitly asks to.\r\n\r\nNot setting the policy results in the browser determining which origins to isolate and when to isolate them.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended_originkeyedprocessesenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended","displayName":"Enable Live Caption (User)","description":"Enable the Live Caption feature.\r\n\r\nIf this policy is set to Enabled, Live Caption will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Caption will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Caption is disabled initially but can be enabled by the user anytime.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livecaptionenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended","displayName":"Enable Live Translate (User)","description":"Enable translation of live captions. Captions will be sent to Google for translation.\r\n\r\nIf this policy is set to Enabled, Live Translate will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Translate will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Translate is disabled initially but can be enabled by the user anytime.\r\n\r\nIn LiveCaptionEnabled is set to Disabled, Live Translate will be disabled regardless of this policy setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_recommended~accessibility_recommended_livetranslateenabled_recommended_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled","displayName":"Control Accept-Language Reduction (User)","description":"The Accept-Language HTTP request header and the JavaScript navigator.languages getter are planned for reduction for privacy reasons.\r\nTo facilitate testing and ensure compatibility, this policy allows you to enable or disable the Accept-Language Reduction feature.\r\n\r\nIf this policy is set to enabled or left unset, Accept-Language Reduction will be applied through field trials.\r\nIf this policy is set to disabled, field trials will not be able to activate Accept-Language Reduction.\r\n\r\nFor more information about this feature, please visit: https://github.com/explainers-by-googlers/reduce-accept-language.\r\n\r\nNOTE: Only newly-started renderer processes will reflect changes to this policy while the browser is running.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_reduceacceptlanguageenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated","displayName":"Relaunch fast if outdated (User)","description":"Specifies the minimum release age beyond which relaunch notifications are more aggressive. The age is calculated from the time the currently-running version was last served to clients.\r\n\r\nIf a browser relaunch or device restart is needed to finalize a pending update and the current version has been outdated for more than the number of days specified by this setting, the RelaunchNotificationPeriod policy is overridden to 2 hours. If the RelaunchNotification policy is set to 1 ('Required'), users will be forced to relaunch or restart at the end of the period.\r\n\r\nIf not set, or if the release age cannot be determined, the RelaunchNotificationPeriod policy will be used for all updates.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_relaunchfastifoutdated_relaunchfastifoutdated","displayName":"Time period (days): (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled","displayName":"Enable Renderer App Container (User)","description":"Setting the policy to Enabled or leaving it unset means Renderer App Container configuration will be enabled on supported platforms.\r\n\r\nSetting the policy to Disabled has a detrimental effect on the security and stability of Google Chrome as it will weaken the sandbox that renderer processes use. Only turn off the policy if there are compatibility issues with third-party software that must run inside renderer processes.\r\n\r\nNote: Read more about Process mitigation policies ( https://chromium.googlesource.com/chromium/src/+/HEAD/docs/design/sandbox.md#Process-mitigation-policies ).","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_rendererappcontainerenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer","displayName":"Restrict CPU core sharing for renderer process (User)","description":"This policy mitigates side-channel cross process memory attacks by isolating the renderer process on the CPU core and preventing other processes from sharing the same core. The mitigation is supported on Microsoft® Windows® 11 24H2 and above. If the OS does not have the required scheduling support, this policy will have no effect. This policy may slow down performance in some demanding scenarios similar to disabling hyperthreading. For more information refer https://learn.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-process_mitigation_side_channel_isolation_policy\r\nIf this policy is enabled, all other processes will not be scheduled on the same CPU core when the renderer process is running.\r\nIf this policy is disabled, all other processes can be scheduled on the same CPU core if a renderer process is running on it.\r\nIf this policy is not set, all other processes can be scheduled on the same CPU core if a renderer process is running on the core. This may vary depending on Google Chrome release, currently running field trials, and platform.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_restrictcoresharingonrenderer_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins","displayName":"Allow screen capture without prior user gesture (User)","description":"For security reasons, the\r\ngetDisplayMedia() web API requires\r\na prior user gesture (\"transient activation\") to be called or will otherwise\r\nfail.\r\n\r\nWith this policy set, admins can specify origins on which this API can be\r\ncalled without prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is\r\nnot an accepted value for this policy.\r\n\r\nIf this policy is unset, all origins will require a prior user gesture to call\r\nthis API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_screencapturewithoutgestureallowedfororigins_screencapturewithoutgestureallowedfororiginsdesc","displayName":"Allow screen capture without prior user gesture (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled","displayName":"Allow ServiceWorker to dispatch navigation requests without waiting for its startup (User)","description":"https://github.com/WICG/service-worker-auto-preload\r\nThe ServiceWorkerAutoPreload feature dispatches a network request for a main resource at the same time it begins the ServiceWorker bootstrap process.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome enables ServiceWorkerAutoPreload. The navigation request is automatically dispatched while starting the ServiceWorker in some scenarios, e.g. ServiceWorker is not running,\r\n\r\nIf it is disabled, Google Chrome will not enable ServiceWorkerAutoPreload. The navigation request is dispatched always after starting the ServiceWorker.\r\n\r\nThis policy is a temporary measure to control the feature and will be removed in M144.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkerautopreloadenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled","displayName":"Allow ServiceWorker to control srcdoc iframes (User)","description":"https://github.com/w3c/ServiceWorker/issues/765 asks srcdoc iframe with\r\nthe \"allow-same-origin\" sandbox attribute to be under ServiceWorker control.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome makes srcdoc iframes\r\nwith \"allow-same-origin\" sandbox attributes to be under ServiceWorker control.\r\n\r\nSetting the policy to Disabled leaves the srcdoc iframe not controlled by\r\nServiceWorker.\r\n\r\nThis policy is intended to be temporary and will be removed in 2026.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_serviceworkertocontrolsrcdociframeenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled","displayName":"Make SharedWorker blob URL behavior aligned with the specification (User)","description":"Upon https://w3c.github.io/ServiceWorker/#control-and-use-worker-client,\r\nworkers should inherit controllers for the blob URL. However, existing code\r\nallows only DedicatedWorkers to inherit the controller, and SharedWorkers do\r\nnot inherit the controller.\r\n\r\nSetting the policy to Enabled or leaving it unset means\r\nGoogle Chrome inherit the controller\r\nif a blob URL is used as a SharedWorker URL.\r\n\r\nSetting the policy to Disabled leaves the behavior not aligned with the\r\nspecification as-is.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sharedworkerbloburlfixenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled","displayName":"Allow the shopping list feature to be enabled (User)","description":"This policy controls the availability of the shopping list feature.\r\nIf enabled, users will be presented with UI to track the price of the product displayed on the current page. The tracked product will be shown in the bookmarks side panel.\r\nIf this policy is set to Enabled or not set, the shopping list feature will be available to users.\r\nIf this policy is set to Disabled, the shopping list feature will be unavailable.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_shoppinglistenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled","displayName":"Allow showing the most recent default search engine results page in a Browser side panel (User)","description":"Setting the policy to Enabled or leaving the policy unset means that users can bring up their most recent default search engine results page in a side panel via toggling an icon in the toolbar.\r\n\r\nSetting the policy to Disabled removes the icon from the toolbar that opens the side panel with the default search engine results page.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sidesearchenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings","displayName":"Site search settings (User)","description":"This policy provides a list of sites that users can quickly search using shortcuts in the address bar. Users can initiate a search by typing the shortcut or @shortcut (e.g. @work), followed by Space or Tab, in the address bar.\r\n\r\nThe following fields are required for each site: name, shortcut, url.\r\n\r\nThe name field corresponds to the site or search engine name to be shown to the user in the address bar.\r\n\r\nThe shortcut can include plain words and characters, but cannot include spaces or start with the @ symbol. Shortcuts must also be unique.\r\n\r\nFor each entry, the url field specifies the URL of the search engine used during a search with the corresponding keyword. The URL must include the string '{searchTerms}', replaced in the query by the user's search terms. Invalid entries and entries with duplicate shortcuts are ignored.\r\n\r\nSite search entries configured as featured are displayed in the address bar when the user types \"@\". Up to three entries can be selected as featured.\r\n\r\nFor a site search entry where allow_user_override is true, users have the ability to edit or disable that entry. However, featured engines (beginning with \"@\") can only be disabled. If a user modifies an entry that was initially created by this policy, it will no longer be managed by policy and will be treated like a user-created shortcut. When allow_user_override is false or unspecified for a site search entry, users cannot edit or disable that entry. The setting to allow user override is only supported on M139 and later; earlier versions will default to disabling user override.\r\n\r\nUsers cannot create new site search entries with a shortcut previously created via this policy unless allow_user_override is set to true for the site search entry.\r\n\r\nIn case of a conflict with a shortcut previously created by the user, the user setting takes precedence. However, users can still trigger the option created by the policy by typing \"@\" in the search bar. For example, if the user already defined \"work\" as a shortcut to URL1 and the policy defines \"work\" as a shortcut to URL2, then typing \"work\" in the search bar will trigger a search to URL1, but typing \"@work\" in the search bar will trigger a search to URL2.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=SiteSearchSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"featured\": true,\r\n \"name\": \"Google Wikipedia\",\r\n \"shortcut\": \"wikipedia\",\r\n \"url\": \"https://www.google.com/search?q=site%3Awikipedia.com+%s\"\r\n },\r\n {\r\n \"name\": \"YouTube\",\r\n \"shortcut\": \"youtube\",\r\n \"url\": \"https://www.youtube.com/results?search_query=%s\"\r\n },\r\n {\r\n \"name\": \"Google Drive\",\r\n \"shortcut\": \"drive\",\r\n \"url\": \"https://drive.google.com/?q=%s\",\r\n \"allow_user_override\": true\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_sitesearchsettings_sitesearchsettings","displayName":"Site search settings (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_standardizedbrowserzoomenabled","displayName":"Enable Standardized Browser Zoom Behavior (User)","description":"This policy enables conformance to the newly-adopted specification of CSS zoom.\r\n\r\nWhen this policy is Enabled or unset, the CSS \"zoom\" property will adhere to the specification:\r\n\r\nhttps://drafts.csswg.org/css-viewport/#zoom-property\r\n\r\nWhen Disabled, the CSS \"zoom\" property will fall back to its legacy pre-standardized behavior.\r\n\r\nThis policy is a temporary reprieve to allow time to migrate web content to the new behavior. There is also an origin trial (\"DisableStandardizedBrowserZoom\") that corresponds to the behavior when this policy is Disabled. This policy will be removed and the \"Enabled\" behavior made permanent in milestone 134.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_standardizedbrowserzoomenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_standardizedbrowserzoomenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled","displayName":"Enable strict MIME type checking for worker scripts (User)","description":"This policy enables strict MIME type checking for worker scripts.\r\n\r\nWhen enabled or unset, then worker scripts will use strict MIME type checking for JavaScript, which is the new default behaviour. Worker scripts with legacy MIME types will be rejected.\r\n\r\nWhen disabled, then worker scripts will use lax MIME type checking, so that worker scripts with legacy MIME types, e.g. text/ascii, will continue to be loaded and executed.\r\n\r\nBrowsers traditionally used lax MIME type checking, so that resources with a number of legacy MIME types were supported. E.g. for JavaScript resources, text/ascii is a legacy supported MIME type. This may cause security issues, by allowing to load resources as scripts that were never intended to be used as such. Chrome will transition to use strict MIME type checking in the near future. The enabled policy will track the default behaviour. Disabling this policy allows administrators to retain the legacy behaviour, if desired.\r\n\r\nSee https://html.spec.whatwg.org/multipage/scripting.html#scriptingLanguage for details about JavaScript / ECMAScript media types.\r\n","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_strictmimetypecheckforworkerscriptsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions","displayName":"URL pattern Exceptions to tab discarding (User)","description":"This policy makes it so that any URL matching one or more of the patterns it specifies (using the URLBlocklist filter format) will never be discarded by the browser.\r\nThis applies to memory pressure and high efficiency mode discarding.\r\nA discarded page is unloaded and its resources fully reclaimed. The tab its associated with remains in the tabstrip, but making it visible will trigger a full reload.\r\n\r\n\r\nExample value:\r\n\r\nexample.com\r\nhttps://*\r\n*","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tabdiscardingexceptions_tabdiscardingexceptionsdesc","displayName":"URL pattern Exceptions to tab discarding (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled","displayName":"Enable TLS 1.3 Early Data (User)","description":"TLS 1.3 Early Data is an extension to TLS 1.3 to send an HTTP request simultaneously with the TLS handshake.\r\n\r\nIf this policy is not configured, Google Chrome will follow the default rollout process for TLS 1.3 Early Data.\r\n\r\nIf it is enabled, Google Chrome will enable TLS 1.3 Early Data.\r\n\r\nIf it is disabled, Google Chrome will not enable TLS 1.3 Early Data.\r\n\r\nWhen the feature is enabled, Google Chrome may or may not use TLS 1.3 Early Data depending on server support.\r\n\r\nTLS 1.3 Early Data is an established protocol. Existing TLS servers, middleboxes, and security software are expected to either handle or reject TLS 1.3 Early Data without dropping the connection.\r\n\r\nHowever, devices that do not correctly implement TLS may malfunction and disconnect when TLS 1.3 Early Data is in use. If this occurs, administrators should contact the vendor for a fix.\r\n\r\nThis policy is a temporary measure to control the feature and will be removed afterwards. The policy may be enabled to allow you to test for issues and disabled while issues are being resolved.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_tls13earlydataenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed","displayName":"Allow Translator API (User)","description":"Setting the policy to Enabled or leaving it unset allows the use of Translator API in Google Chrome.\r\n\r\nSetting the policy to Disabled disallows the use of Translator API.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_translatorapiallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings","displayName":"Web App management settings (User)","description":"This policy allows an admin to specify settings for installed web apps. This policy maps a Web App ID to its specific setting. A default configuration can be set using the special ID *, which applies to all web apps without a custom configuration in this policy.\r\n\r\nThe manifest_id field is the Manifest ID for the Web App. See https://developer.chrome.com/blog/pwa-manifest-id/ for instructions on how to determine the Manifest ID for an installed web app.\r\nThe run_on_os_login field specifies if a web app can be run during OS login. If this field is set to blocked, the web app will not run during OS login and the user will not be able to enable this later. If this field is set to run_windowed, the web app will run during OS login and the user will not be able to disable this later. If this field is set to allowed, the user will be able to configure the web app to run at OS login. The default configuration only allows the allowed and blocked values.\r\n(Since version 117) The prevent_close_after_run_on_os_login field specifies if a web app shall be prevented from closing in any way (e.g. by the user, task manager, web APIs). This behavior can only be enabled if run_on_os_login is set to run_windowed. If the app were already running, this property will only come into effect after the app is restarted. If this field is not defined, apps will be closable by users.\r\n(Since version 118) The force_unregister_os_integration field specifies if all OS integration for a web app, i.e. shortcuts, file handlers, protocol handlers etc will be removed or not. If an app is already running, this property will come into effect after the app has restarted. This should be used with caution, since this can override any OS integration that is set automatically during the startup of the web applications system. Currently only works on Windows, Mac and Linux platforms.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebAppSettings for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://bar.example/index.html\",\r\n \"run_on_os_login\": \"allowed\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foobar.example/index.html\",\r\n \"run_on_os_login\": \"run_windowed\",\r\n \"prevent_close_after_run_on_os_login\": true\r\n },\r\n {\r\n \"manifest_id\": \"*\",\r\n \"run_on_os_login\": \"blocked\"\r\n },\r\n {\r\n \"manifest_id\": \"https://foo.example/index.html\",\r\n \"force_unregister_os_integration\": true\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webappsettings_webappsettings","displayName":"Web App management settings (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled","displayName":"Enable adaptive buffering for Web Audio (User)","description":"This policy controls whether the browser uses adaptive buffering for\r\nWeb Audio, which may decrease audio glitches but may increase\r\nlatency by a variable amount.\r\n\r\nSetting the policy to Enabled will always use adaptive buffering.\r\n\r\nSetting the policy to Disabled or not set will allow the browser\r\nfeature launch process to decide if adaptive buffering is used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webaudiooutputbufferingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (User)","description":"A list of origins of remote desktop client apps that may execute WebAuthn API\r\nrequests that originate from a browsing session on a remote host.\r\n\r\nAny origin configured in this policy can make WebAuthn requests for Relying\r\nParty IDs (RP IDs) that it would normally not allowed to be able to claim.\r\n\r\nOnly valid HTTPS origins are allowed. Wildcards are not supported.\r\nAny invalid entries are ignored.\r\n\r\nExample value:\r\n\r\nhttps://remotedesktop.google.com\r\nhttps://vdi.corp.example\r\nhttps://server:8080/","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webauthenticationremotedesktopallowedorigins_webauthenticationremotedesktopallowedoriginsdesc","displayName":"Allowed Origins for Proxied WebAuthn Requests from Remote Desktop Applications. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed","displayName":"Allow WebRTC text logs collection from Google Services (User)","description":"Setting the policy to enabled means Google Chrome can collect WebRTC text logs from Google services such as Google Meet and upload them to Google. These logs have diagnostic information for debugging issues with audio or video meetings in Google Chrome, such as textual metadata describing incoming and outgoing WebRTC streams, WebRTC specific log entries and additional system information. These logs have no audio or video content from the meeting.\r\nSetting the policy to disabled results in no uploading of such logs to Google. Logs would still accumulate locally on the user's device.\r\nLeaving the policy unset means Google Chrome defaults to being able to collect and upload these logs.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome_webrtctextlogcollectionallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled","displayName":"Enable Live Caption (User)","description":"Enable the Live Caption feature.\r\n\r\nIf this policy is set to Enabled, Live Caption will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Caption will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Caption is disabled initially but can be enabled by the user anytime.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livecaptionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled","displayName":"Enable Live Translate (User)","description":"Enable translation of live captions. Captions will be sent to Google for translation.\r\n\r\nIf this policy is set to Enabled, Live Translate will always be turned on.\r\n\r\nIf this policy is set to Disabled, Live Translate will always be turned off.\r\n\r\nIf you set this policy as mandatory, users cannot change or override it.\r\n\r\nIf this policy is left unset, Live Translate is disabled initially but can be enabled by the user anytime.\r\n\r\nIn LiveCaptionEnabled is set to Disabled, Live Translate will be disabled regardless of this policy setting.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_livetranslateenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled","displayName":"Enable the browser's UI Automation accessibility framework provider on Windows (User)","description":"Enables the UI Automation accessibility framework\r\nprovider in Google Chrome for use by\r\naccessibility tools.\r\n\r\nThis policy is supported in\r\nGoogle Chrome for a one-year\r\ntransition period to allow enterprise administrators to control the deployment\r\nof the browser's UI Automation accessibility\r\nframework provider. Accessibility and other tools that use the\r\nUI Automation accessibility framework to interoperate\r\nwith the browser may require updates to function properly with the browser's\r\nUI Automation provider. Administrators can use this\r\npolicy to temporarily disable the browser's\r\nUI Automation provider (thereby reverting to the old\r\nbehavior) while they work with vendors to provide updates to impacted tools.\r\n\r\nWhen set to false, Google Chrome only\r\nenables its Microsoft Active Accessibility\r\nprovider. Accessibility and other tools that use the newer\r\nUI Automation accessibility framework to interoperate\r\nwith the browser will communicate with it by way of a compatibility shim in\r\nMicrosoft® Windows®.\r\n\r\nWhen set to true, Google Chrome\r\nenables its UI Automation provider in addition to its\r\nMicrosoft Active Accessibility provider.\r\nAccessibility and other tools that use the newer\r\nUI Automation accessibility framework to interoperate\r\nwith the browser will communicate directly with it.\r\n\r\nWhen left unset, the variations framework in Google Chrome is used to enable or disable\r\nthe provider.\r\n\r\nSupport for this policy setting will end in Google Chrome 146.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~accessibility_uiautomationproviderenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled","displayName":"Allow automatic sign-in to Microsoft® cloud identity providers (User)","description":"Configures automatic user sign-in for accounts backed by a Microsoft® cloud identity provider.\r\n\r\nBy setting this policy to 1 (Enabled), users who sign into their computer with an account backed by a Microsoft® cloud identity provider (i.e., Microsoft® Azure® Active Directory® or the consumer Microsoft® account identity provider) or who have added a work or school account to Microsoft® Windows® can be signed into web properties using that identity automatically. Information pertaining to the user's device and account is transmitted to the user's cloud identity provider for each authentication event.\r\n\r\nBy setting this policy to 0 (Disabled) or leaving it unset, automatic sign-in as described above is disabled.\r\n\r\nThis feature is available starting in Microsoft® Windows® 10.\r\n\r\nNote: This policy doesn't apply to Incognito or Guest modes.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_cloudapauthenabled","displayName":"Allow automatic sign-in to Microsoft® cloud identity providers (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_cloudapauthenabled_0","displayName":"Disable Microsoft® cloud authentication","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~activedirectorymanagement_cloudapauthenabled_cloudapauthenabled_1","displayName":"Enable Microsoft® cloud authentication","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout","displayName":"Delay before running idle actions (User)","description":"Triggers an action when the computer is idle.\r\n\r\nIf this policy is set, it specifies the length of time without user input (in minutes) before the browser runs actions configured via the IdleTimeoutActions policy.\r\n\r\nIf this policy is not set, no action will be ran.\r\n\r\nThe minimum threshold is 1 minute.\r\n\r\n\"User input\" is defined by Operating System APIs, and includes things like moving the mouse or typing on the keyboard.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeout_idletimeout","displayName":"Delay before running idle actions: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions","displayName":"Actions to run when the computer is idle (User)","description":"List of actions to run when the timeout from the IdleTimeout policy is reached.\r\n\r\nWarning: Setting this policy can impact and permanently remove local personal data. It is recommended to test your settings before deploying to prevent accidental deletion of personal data.\r\n\r\nIf the IdleTimeout policy is unset, this policy has no effect.\r\n\r\nWhen the timeout from the IdleTimeout policy is reached, the browser runs the actions configured in this policy.\r\n\r\nIf this policy is empty or left unset, the IdleTimeout policy has no effect.\r\n\r\nSupported actions are:\r\n\r\n'close_browsers': close all browser windows and PWAs for this profile. Not supported on Android and iOS.\r\n\r\n'close_tabs': close all open tabs in open windows. Only supported on iOS.\r\n\r\n'show_profile_picker': show the Profile Picker window. Not supported on Android and iOS.\r\n\r\n'sign_out': Signs out the current signed in user. Only supported on iOS.\r\n\r\n'clear_browsing_history', 'clear_download_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', 'clear_autofill', 'clear_site_settings', 'clear_hosted_app_data': clear the corresponding browsing data. See the ClearBrowsingDataOnExitList policy for more details. The types supported on iOS are 'clear_browsing_history', 'clear_cookies_and_other_site_data', 'clear_cached_images_and_files', 'clear_password_signing', and 'clear_autofill'\r\n\r\n'reload_pages': reload all webpages. For some pages, the user may be prompted for confirmation first. Not supported on iOS.\r\n\r\nThe user will stay signed into their Google account when deleting cookies using 'clear_cookies_and_other_site_data'.\r\n\r\nSetting 'clear_browsing_history', 'clear_password_signing', 'clear_autofill', and 'clear_site_settings' will disable sync for the respective data types if neither `Chrome Sync` is disabled by setting the SyncDisabled policy nor BrowserSignin is disabled.\r\n\r\nExample value:\r\n\r\nclose_browsers\r\nshow_profile_picker","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~browseridle_idletimeoutactions_idletimeoutactionsdesc","displayName":"Actions to run when the computer is idle (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates. (User)","description":"Setting the policy to All (0) or leaving it unset lets users edit trust settings for all CA certificates, remove user-imported certificates, and import certificates using Certificate Manager. Setting the policy to UserOnly (1) lets users manage only user-imported certificates, but not change trust settings of built-in certificates. Setting it to None (2) lets users view (not manage) CA certificates.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed","displayName":"Allow users to manage installed CA certificates. (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_0","displayName":"Allow users to manage all certificates","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_1","displayName":"Allow users to manage user certificates","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificatemanagementallowed_cacertificatemanagementallowed_2","displayName":"Disallow users from managing certificates","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication (User)","description":"A list of TLS certificates that should be trusted by Google Chrome for server authentication.\r\nCertificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificates_cacertificatesdesc","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication with constraints (User)","description":"A list of TLS certificates that should be trusted by Google Chrome for server authentication, with constraints added outside the certificate. If no constraint of a certain type is present, then any name of that type is allowed.\r\nCertificates should be base64-encoded. At least one constraint must be specified for each certificate.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=CACertificatesWithConstraints for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"certificate\": \"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\",\r\n \"constraints\": {\r\n \"permitted_dns_names\": [\r\n \"example.org\"\r\n ],\r\n \"permitted_cidrs\": [\r\n \"10.1.1.0/24\"\r\n ]\r\n }\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cacertificateswithconstraints_cacertificateswithconstraints","displayName":"TLS certificates that should be trusted by Google Chrome for server authentication with constraints (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates","displayName":"TLS certificates that should be distrusted by Google Chrome for server authentication (User)","description":"A list of certificate public keys that should be distrusted by Google Chrome for TLS server\r\nauthentication.\r\n\r\nThe policy value is a list of base64-encoded X.509 certificates. Any\r\ncertificate with a matching SPKI (SubjectPublicKeyInfo) will be distrusted.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cadistrustedcertificates_cadistrustedcertificatesdesc","displayName":"TLS certificates that should be distrusted by Google Chrome for server authentication (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication (User)","description":"A list of certificates that are not trusted or distrusted in Google Chrome\r\nbut can be used as hints for path-building. Certificates should be base64-encoded.\r\n\r\nExample value:\r\n\r\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","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_cahintcertificates_cahintcertificatesdesc","displayName":"TLS certificates that are not trusted or distrusted but can be used in path-building for server authentication (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled","displayName":"Use user-added TLS certificates from platform trust stores for server authentication (User)","description":"If enabled(or not set), user-added TLS certificates from platform trust stores will be used in path-building for TLS server authentication.\r\n\r\nIf disabled, user-added TLS certificates from platform trust stores will not be used in path-building for TLS server authentication.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~certificatemanagement_caplatformintegrationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls","displayName":"Allow automatic fullscreen on these sites (User)","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or will\r\notherwise fail. Users' personal settings may allow certain origins to call\r\nthis API without a prior user gesture, as described in\r\nhttps://chromestatus.com/feature/6218822004768768.\r\n\r\nThis policy supersedes users' personal settings and allows matching origins to\r\ncall the API without a prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy nor user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenallowedforurls_automaticfullscreenallowedforurlsdesc","displayName":"Allow automatic fullscreen on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls","displayName":"Block automatic fullscreen on these sites (User)","description":"For security reasons, the\r\nrequestFullscreen() web API\r\nrequires a prior user gesture (\"transient activation\") to be called or will\r\notherwise fail. Users' personal settings may allow certain origins to call\r\nthis API without a prior user gesture, as described in\r\nhttps://chromestatus.com/feature/6218822004768768.\r\n\r\nThis policy supersedes users' personal settings and blocks matching origins\r\nfrom calling the API without a prior user gesture.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nOrigins matching both blocked and allowed policy patterns will be blocked.\r\nOrigins not specified by policy nor user settings will require a prior user\r\ngesture to call this API.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_automaticfullscreenblockedforurls_automaticfullscreenblockedforurlsdesc","displayName":"Block automatic fullscreen on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls","displayName":"Allow clipboard on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify sites that can use the clipboard site permission. This does not include all clipboard operations on origins matching the patterns. For instance, users will still be able to paste using keyboard shortcuts as this isn't gated by the clipboard site permission.\r\n\r\n\r\nLeaving the policy unset means DefaultClipboardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardallowedforurls_clipboardallowedforurlsdesc","displayName":"Allow clipboard on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls","displayName":"Block clipboard on these sites (User)","description":"Setting the policy lets you set a list of URL patterns that specify sites that can't use the clipboard site permission. This does not include all clipboard operations on origins matching the patterns. For instance, users will still be able to paste using keyboard shortcuts as this isn't gated by the clipboard site permission.\r\n\r\nLeaving the policy unset means DefaultClipboardSetting applies for all sites, if it's set. If not, the user's personal setting applies.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_clipboardblockedforurls_clipboardblockedforurlsdesc","displayName":"Block clipboard on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled","displayName":"Data URL support for SVGUseElement. (User)","description":"This policy enables Data URL support for SVGUseElement, which will be disabled\r\nby default starting in M119.\r\nIf this policy is set to Enabled, Data URLs will continue to work in SVGUseElement.\r\nIf this policy is set to Disabled or not set, Data URLs won't work in SVGUseElement.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_dataurlinsvguseenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting","displayName":"Default clipboard setting (User)","description":"Setting the policy to 2 blocks sites from using the clipboard site permission. Setting the policy to 3 or leaving it unset lets the user change the setting and decide if the clipboard APIs are available when a site wants to use one.\r\n\r\nThis policy can be overridden for specific URL patterns using the ClipboardAllowedForUrls and ClipboardBlockedForUrls policies.\r\n\r\nThis policy only affects clipboard operations controlled by the clipboard site permission, and does not affect sanitized clipboard writes or trusted copy and paste operations.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting","displayName":"Default clipboard setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting_2","displayName":"Do not allow any site to use the clipboard site permission","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultclipboardsetting_defaultclipboardsetting_3","displayName":"Allow sites to ask the user to grant the clipboard site permission","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (User)","description":"Allows you to set whether Google Chrome\r\nwill run the v8 JavaScript engine with more advanced JavaScript optimizations enabled.\r\n\r\nDisabling JavaScript optimizations (by setting this policy's value to 2) will\r\nmean that Google Chrome may render web\r\ncontent more slowly.\r\n\r\nThis policy can be overridden for specific URL patterns using the JavaScriptOptimizerAllowedForSites and JavaScriptOptimizerBlockedForSites policies.\r\n\r\nIf this policy is left not set, JavaScript optimizations are enabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting","displayName":"Control use of JavaScript optimizers (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_1","displayName":"Enable advanced JavaScript optimizations on all sites","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultjavascriptoptimizersetting_defaultjavascriptoptimizersetting_2","displayName":"Disable advanced JavaScript optimizations on all sites","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting (User)","description":"Setting the policy to BlockLocalFonts (value 2) automatically denies the local fonts permission to sites by default. This will limit the ability of sites to see information about local fonts.\r\n\r\nSetting the policy to AskLocalFonts (value 3) will prompt the user when the local fonts permission is requested by default. If users allow the permission, it will extend the ability of sites to see information about local fonts.\r\n\r\nLeaving the policy unset means the default behavior applies which is to prompt the user, but users can change this setting","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting","displayName":"Default Local Fonts permission setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_2","displayName":"Denies the Local Fonts permission on all sites by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultlocalfontssetting_defaultlocalfontssetting_3","displayName":"Ask every time a site wants obtain the Local Fonts permission","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting","displayName":"Control use of the WebHID API (User)","description":"Setting the policy to 3 lets websites ask for access to HID devices. Setting the policy to 2 denies access to HID devices.\r\n\r\nLeaving it unset lets websites ask for access, but users can change this setting.\r\n\r\nThis policy can be overridden for specific url patterns using the WebHidAskForUrls and WebHidBlockedForUrls policies.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting","displayName":"Control use of the WebHID API (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_2","displayName":"Do not allow any site to request access to HID devices via the WebHID API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwebhidguardsetting_defaultwebhidguardsetting_3","displayName":"Allow sites to ask the user to grant access to a HID device","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting (User)","description":"Setting the policy to BlockWindowManagement (value 2) automatically denies the window management permission to sites by default. This will limit the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nSetting the policy to AskWindowManagement (value 3) will prompt the user when the window management permission is requested by default. If users allow the permission, it will extend the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nLeaving the policy unset means the AskWindowManagement policy applies, but users can change this setting.\r\n\r\nThis replaces the deprecated DefaultWindowPlacementSetting policy.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting","displayName":"Default Window Management permission setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_2","displayName":"Denies the Window Management permission on all sites by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_defaultwindowmanagementsetting_defaultwindowmanagementsetting_3","displayName":"Ask every time a site wants obtain the Window Management permission","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites","displayName":"Allow JavaScript optimization on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites for which\r\nadvanced JavaScript optimizations are enabled.\r\n\r\nFor detailed information on valid site url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site\r\ngranularity (eTLD+1). A policy set for only subdomain.site.com will not\r\ncorrectly apply to site.com or subdomain.site.com since they both resolve to\r\nthe same eTLD+1 (site.com) for which there is no policy. In this case, policy\r\nmust be set on site.com to apply correctly for both site.com and\r\nsubdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level\r\norigin url alone, so e.g. if site-one.com is listed in the JavaScriptOptimizerAllowedForSites policy but site-one.com loads a frame containing site-two.com then site-one.com will have JavaScript optimizations\r\nenabled, but site-two.com will use the policy from DefaultJavaScriptOptimizerSetting, if set, or default to JavaScript\r\noptimizations enabled. Blocklist entries have higher priority than allowlist\r\nentries, which in turn have higher priority than the configured default value.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptOptimizerSetting applies to the site, if set, otherwise\r\nJavascript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerallowedforsites_javascriptoptimizerallowedforsitesdesc","displayName":"Allow JavaScript optimization on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites","displayName":"Block JavaScript optimizations on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites for which\r\nadvanced JavaScript optimizations are disabled.\r\n\r\nDisabling JavaScript optimizations will mean that Google Chrome may render web content more slowly.\r\n\r\nFor detailed information on valid url patterns, please see\r\nhttps://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\nWildcards, *, are allowed.\r\n\r\nJavaScript optimization policy exceptions will only be enforced at a site\r\ngranularity (eTLD+1). A policy set for only subdomain.site.com will not\r\ncorrectly apply to site.com or subdomain.site.com since they both resolve to\r\nthe same eTLD+1 (site.com) for which there is no policy. In this case, policy\r\nmust be set on site.com to apply correctly for both site.com and\r\nsubdomain.site.com.\r\n\r\nThis policy applies on a frame-by-frame basis and not based on top level\r\norigin url alone, so e.g. if site-one.com is listed in the JavaScriptOptimizerBlockedForSites policy but site-one.com loads a frame\r\ncontaining site-two.com then site-one.com will have JavaScript optimizations\r\ndisabled, but site-two.com will use the policy from DefaultJavaScriptOptimizerSetting, if set, or default to JavaScript\r\noptimizations enabled. Blocklist entries have higher priority than allowlist\r\nentries, which in turn have higher priority than the configured default value.\r\n\r\nIf this policy is not set for a site then the policy from DefaultJavaScriptOptimizerSetting applies to the site, if set, otherwise\r\nJavaScript optimization is enabled for the site.\r\n\r\nExample value:\r\n\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_javascriptoptimizerblockedforsites_javascriptoptimizerblockedforsitesdesc","displayName":"Block JavaScript optimizations on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls","displayName":"Allow Local Fonts permission on these sites (User)","description":"Sets a list of site url patterns that specify sites which will automatically grant the local fonts permission. This will extend the ability of sites to see information about local fonts.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultLocalFontsSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsallowedforurls_localfontsallowedforurlsdesc","displayName":"Allow Local Fonts permission on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls","displayName":"Block Local Fonts permission on these sites (User)","description":"Sets a list of site url patterns that specify sites which will automatically deny the local fonts permission. This will limit the ability of sites to see information about local fonts.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultLocalFontsSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_localfontsblockedforurls_localfontsblockedforurlsdesc","displayName":"Block Local Fonts permission on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage","displayName":"Choose whether Blob URLs are partitioned during fetching and navigations (User)","description":"This policy controls whether Blob URLs are partitioned during fetching and navigation.\r\nIf this policy is set to Enabled or not set, Blob URLs will be partitioned.\r\nIf this policy is set to Disabled, Blob URLs won't be partitioned.\r\n\r\nIf storage partitioning is disabled for a given top-level origin by either\r\nThirdPartyStoragePartitioningBlockedForOrigins\r\nor DefaultThirdPartyStoragePartitioningSetting,\r\nthen Blob URLs will also not be partitioned.\r\n\r\nIf you must use the policy, please file a bug at\r\nGoogle Chrome\r\nexplaining your use case. The policy is scheduled to be offered through\r\nGoogle Chrome version 143, after which\r\nthe old implementation will be removed.\r\n\r\nNOTE: Only newly-started renderer processes will reflect changes to this\r\npolicy while the browser is running.\r\n\r\nFor detailed information on third-party storage partitioning, please see\r\nhttps://developers.google.com/privacy-sandbox/cookies/storage-partitioning.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_partitionedbloburlusage_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains","displayName":"Allow local file access to file:// URLs on these sites in the PDF Viewer (User)","description":"Setting this policy allows the domains listed to access file:// URLs in the PDF Viewer.\r\nAdding to the policy allows the domain to access file:// URLs in the PDF Viewer.\r\nRemoving from the policy disallows the domain from accessing file:// URLs in the PDF Viewer.\r\nLeaving the policy unset disallows all domains from accessing file:// URLs in the PDF Viewer.\r\n\r\nExample value:\r\n\r\nexample.com\r\ngoogle.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_pdflocalfileaccessallowedfordomains_pdflocalfileaccessallowedfordomainsdesc","displayName":"Allow local file access to file:// URLs on these sites in the PDF Viewer (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls","displayName":"Automatically grant permission to sites to connect to any HID device. (User)","description":"Setting the policy allows you to list sites which are automatically granted permission to access all available devices.\r\n\r\nThe URLs must be valid, otherwise the policy is ignored. Only the origin (scheme, host and port) of the URL is considered.\r\n\r\nOn ChromeOS, this policy only applies to affiliated users.\r\n\r\nThis policy overrides DefaultWebHidGuardSetting, WebHidAskForUrls, WebHidBlockedForUrls and the user's preferences.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowalldevicesforurls_webhidallowalldevicesforurlsdesc","displayName":"Automatically grant permission to sites to connect to any HID device. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices with the given vendor and product IDs. (User)","description":"Setting the policy lets you list the URLs that specify which sites are automatically granted permission to access a HID device with the given vendor and product IDs. Each item in the list requires both devices and urls fields for the item to be valid, otherwise the item is ignored. Each item in the devices field must have a vendor_id and may have a product_id field. Omitting the product_id field will create a policy matching any device with the specified vendor ID. An item which has a product_id field without a vendor_id field is invalid and is ignored.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies, if it's set. If not, the user's personal setting applies.\r\n\r\nURLs in this policy shouldn't conflict with those configured through WebHidBlockedForUrls. If they do, this policy takes precedence over WebHidBlockedForUrls.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebHidAllowDevicesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"devices\": [\r\n {\r\n \"product_id\": 5678,\r\n \"vendor_id\": 1234\r\n }\r\n ],\r\n \"urls\": [\r\n \"https://google.com\",\r\n \"https://chromium.org\"\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdevicesforurls_webhidallowdevicesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices with the given vendor and product IDs. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage. (User)","description":"Setting the policy lets you list the URLs that specify which sites are automatically granted permission to access a HID device containing a top-level collection with the given HID usage. Each item in the list requires both usages and urls fields for the policy to be valid. Each item in the usages field must have a usage_page and may have a usage field. Omitting the usage field will create a policy matching any device containing a top-level collection with a usage from the specified usage page. An item which has a usage field without a usage_page field is invalid and is ignored.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies, if it's set. If not, the user's personal setting applies.\r\n\r\nURLs in this policy shouldn't conflict with those configured through WebHidBlockedForUrls. If they do, this policy takes precedence over WebHidBlockedForUrls.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=WebHidAllowDevicesWithHidUsagesForUrls for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n[\r\n {\r\n \"urls\": [\r\n \"https://google.com\",\r\n \"https://chromium.org\"\r\n ],\r\n \"usages\": [\r\n {\r\n \"usage\": 5678,\r\n \"usage_page\": 1234\r\n }\r\n ]\r\n }\r\n]","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidallowdeviceswithhidusagesforurls_webhidallowdeviceswithhidusagesforurls","displayName":"Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls","displayName":"Allow the WebHID API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy, the following take precedence, in this order:\r\n\r\n * WebHidBlockedForUrls (if there is a match),\r\n\r\n * DefaultWebHidGuardSetting (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns must not conflict with WebHidBlockedForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidaskforurls_webhidaskforurlsdesc","displayName":"Allow the WebHID API on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls","displayName":"Block the WebHID API on these sites (User)","description":"Setting the policy lets you list the URL patterns that specify which sites can't ask users to grant them access to a HID device.\r\n\r\nLeaving the policy unset means DefaultWebHidGuardSetting applies for all sites, if it's set. If not, users' personal settings apply.\r\n\r\nFor URL patterns which do not match the policy, the following take precedence, in this order:\r\n\r\n * WebHidAskForUrls (if there is a match),\r\n\r\n * DefaultWebHidGuardSetting (if set), or\r\n\r\n * Users' personal settings.\r\n\r\nURL patterns can't conflict with WebHidAskForUrls. Neither policy takes precedence if a URL matches with both.\r\n\r\nFor detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.\r\n\r\nExample value:\r\n\r\nhttps://google.com\r\nhttps://chromium.org","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_webhidblockedforurls_webhidblockedforurlsdesc","displayName":"Block the WebHID API on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls","displayName":"Allow Window Management permission on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which will automatically grant the window management permission. This will extend the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultWindowManagementSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nThis replaces the deprecated WindowPlacementAllowedForUrls policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementallowedforurls_windowmanagementallowedforurlsdesc","displayName":"Allow Window Management permission on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls","displayName":"Block Window Management permission on these sites (User)","description":"Allows you to set a list of site url patterns that specify sites which will automatically deny the window management permission. This will limit the ability of sites to see information about the device's screens and use that information to open and place windows or request fullscreen on specific screens.\r\n\r\nFor detailed information on valid site url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. This policy only matches based on origin, so any path in the URL pattern is ignored.\r\n\r\nIf this policy is not set for a site then the policy from DefaultWindowManagementSetting applies to the site, if set, otherwise the permission will follow the browser's defaults and allow users to choose this permission per site.\r\n\r\nThis replaces the deprecated WindowPlacementBlockedForUrls policy.\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~contentsettings_windowmanagementblockedforurls_windowmanagementblockedforurlsdesc","displayName":"Block Window Management permission on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting","displayName":"Default third-party storage partitioning setting (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting","displayName":"Default third-party storage partitioning setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_1","displayName":"Allow third-party storage partitioning by default.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultthirdpartystoragepartitioningsetting_defaultthirdpartystoragepartitioningsetting_2","displayName":"Disable third-party storage partitioning.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting","displayName":"Default Window Placement permission setting (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting","displayName":"Default Window Placement permission setting (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting_2","displayName":"Denies the Window Placement permission on all sites by default","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_defaultwindowplacementsetting_defaultwindowplacementsetting_3","displayName":"Ask every time a site wants obtain the Window Placement permission","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins","displayName":"Disable third-party storage partitioning for specific top-level origins (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nwww.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_thirdpartystoragepartitioningblockedfororigins_thirdpartystoragepartitioningblockedfororiginsdesc","displayName":"Disable third-party storage partitioning for specific top-level origins (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction","displayName":"Enable or disable the User-Agent Reduction. (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_useragentreduction","displayName":"Enable or disable the User-Agent Reduction. (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_useragentreduction_0","displayName":"Reduced User Agent.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_useragentreduction_1","displayName":"Full (legacy) User Agent.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_useragentreduction_useragentreduction_2","displayName":"Reduced User Agent.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls","displayName":"Allow Window Placement permission on these sites (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementallowedforurls_windowplacementallowedforurlsdesc","displayName":"Allow Window Placement permission on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls","displayName":"Block Window Placement permission on these sites (User)","description":"This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500\r\n\r\nExample value:\r\n\r\nhttps://www.example.com\r\n[*.]example.edu","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~deprecatedpolicies_windowplacementblockedforurls_windowplacementblockedforurlsdesc","displayName":"Block Window Placement permission on these sites (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (User)","description":"Control if users can turn on Developer Mode on chrome://extensions.\r\n\r\nIf the policy is not set, users can turn on developer mode on extension page unless DeveloperToolsAvailability policy is set to DeveloperToolsDisallowed (2).\r\nIf the policy is set to Allow (0), users can turn on developer mode on extensions page.\r\nIf the policy is set to Disallow (1), users can not turn on developer mode on extensions page.\r\n\r\nIf this policy is set, DeveloperToolsAvailability can no longer control extensions developer mode.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings","displayName":"Control the availability of developer mode on extensions page (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_0","displayName":"Allow the usage of developer mode on extensions page","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensiondevelopermodesettings_extensiondevelopermodesettings_1","displayName":"Do not allow the usage of developer mode on extensions page","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls","displayName":"Configure a list of origins that grant extended background lifetime to the connecting extensions. (User)","description":"Extensions that connect to one of these origins will be be kept running as long as the port is connected.\r\n\r\nIf unset, the policy's default values will be used. These are app origins that offer SDKs that are known to not offer the possibility to restart a closed connection to a previous state:\r\n- Smart Card Connector\r\n- Citrix Receiver (stable, beta, back-up)\r\n- VMware Horizon (stable, beta)\r\n\r\nIf set, the default value list is extended with the newly configured values. Both defaults and the policy-provided entries will grant the exception to the connecting extensions, as long as the port is connected.\r\n\r\nExample value:\r\n\r\nchrome-extension://abcdefghijklmnopabcdefghijklmnop/\r\nchrome-extension://bcdefghijklmnopabcdefghijklmnopa/","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionextendedbackgroundlifetimeforportconnectionstourls_extensionextendedbackgroundlifetimeforportconnectionstourlsdesc","displayName":"Configure a list of origins that grant extended background lifetime to the connecting extensions. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist","displayName":"Blocklist for install types of extensions (User)","description":"The blocklist controls which extensions install types are disallowed.\r\n\r\nSetting \"command_line\" will block extension from being loaded from\r\ncommand line.\r\n\r\nExample value:\r\n\r\ncommand_line","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensioninstalltypeblocklist_extensioninstalltypeblocklistdesc","displayName":"Blocklist for install types of extensions (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability","displayName":"Control availability of extensions unpublished on the Chrome Web Store. (User)","description":"If this policy is enabled, extensions that are unpublished on the Chrome Web\r\nStore will be disabled in Google Chrome.\r\nThis policy only applies to extensions that are installed and updated from the\r\nChrome Web Store.\r\n\r\nOff-store extensions such as unpacked extensions installed using developer\r\nmode and extensions installed using the command-line switch are ignored.\r\nForce-installed extensions that are self-hosted are ignored. All\r\nversion-pinned extensions are also ignored.\r\n\r\nIf the policy is set to AllowUnpublished (0) or not set, extensions that are unpublished on the Chrome Web Store are allowed.\r\nIf the policy is set to DisableUnpublished (1), extensions that are unpublished on the Chrome Web Store are disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability","displayName":"Control availability of extensions unpublished on the Chrome Web Store. (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability_0","displayName":"Allow unpublished extensions","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~extensions_extensionunpublishedavailability_extensionunpublishedavailability_1","displayName":"Disable unpublished extensions","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled","displayName":"Enable First-Party Sets. (User)","description":"This policy is provided as a way to opt-out of the First-Party Sets feature.\r\n\r\nWhen this policy is unset or set to Enabled, the First-Party Sets feature is enabled.\r\n\r\nWhen this policy is set to Disabled, the First-Party Sets feature is disabled.\r\n\r\nIt controls whether Chrome supports First-Party Sets related integrations.\r\n\r\nThis is the equivalent of the RelatedWebsiteSetsEnabled policy.\r\nEither policy may be used, but this one will be deprecated soon so the RelatedWebsiteSetsEnabled policy is preferred.\r\nThey both have the same effect on the browser's behavior.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides","displayName":"Override First-Party Sets. (User)","description":"This policy provides a way to override the list of sets the browser uses for First-Party Sets features.\r\n\r\nEach set in the browser's list of First-Party Sets must meet the requirements of a First-Party Set.\r\nA First-Party Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all of its ccTLD variants.\r\nSee https://github.com/WICG/first-party-sets for more information on First-Party Sets are used by Google Chrome.\r\n\r\nAll sites in a First-Party Set must be a registrable domain served over HTTPS. Each site in a First-Party Set must also be unique,\r\nmeaning a site cannot be listed more than once in a First-Party Set.\r\n\r\nWhen this policy is given an empty dictionary, the browser uses the public list of First-Party Sets.\r\n\r\nFor all sites in a First-Party Set from the replacements list, if a site is also present\r\non a First-Party Set in the browser's list, then that site will be removed from the browser's First-Party Set.\r\nAfter this, the policy's First-Party Set will be added to the browser's list of First-Party Sets.\r\n\r\nFor all sites in a First-Party Set from the additions list, if a site is also present\r\non a First-Party Set in the browser's list, then the browser's First-Party Set will be updated so that the\r\nnew First-Party Set can be added to the browser's list. After the browser's list has been updated,\r\nthe policy's First-Party Set will be added to the browser's list of First-Party Sets.\r\n\r\nThe browser's list of First-Party Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site cannot be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) are not supported as a policy value, nor within any First-Party Set in these lists.\r\n\r\nAll sets provided by the policy must be valid First-Party Sets, if they aren't then an\r\nappropriate error will be outputted.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\n\r\nThis is the equivalent of the RelatedWebsiteSetsOverrides policy.\r\nEither policy may be used, but this one will be deprecated soon so the RelatedWebsiteSetsOverrides policy is preferred.\r\nThey both have the same effect on the browser's behavior.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=FirstPartySetsOverrides for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~firstpartysets_firstpartysetsoverrides_firstpartysetsoverrides","displayName":"Override First-Party Sets. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings","displayName":"Settings for Google's AI Mode integrations in the address bar and New Tab page search box. (User)","description":"This policy controls Google's AI Mode integrations in the address bar and the New Tab page search box.\r\n\r\nTo access this feature, Google must be set as the user's default search engine.\r\n\r\n0/unset = The feature will be available to users.\r\n\r\n1 = The feature will not be available to users.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings","displayName":"Settings for Google's AI Mode integrations in the address bar and New Tab page search box. (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings_0","displayName":"Allow AI Mode integrations.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_aimodesettings_aimodesettings_1","displayName":"Do not allow AI Mode integrations.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings","displayName":"Settings for enhanced autofill (User)","description":"Specifies whether users can let Google Chrome use Generative AI to better understand forms and help them fill more fields.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings","displayName":"Settings for enhanced autofill (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_0","displayName":"Allow enhanced autofill and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_1","displayName":"Allow enhanced autofill without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_autofillpredictionsettings_autofillpredictionsettings_2","displayName":"Do not allow enhanced autofill.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings","displayName":"Settings for Create Themes with AI (User)","description":"Create Themes with AI lets users create custom themes/wallpapers by preselecting from a list of options.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings","displayName":"Settings for Create Themes with AI (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_0","displayName":"Allow Create Themes and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_1","displayName":"Allow Create Themes without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_createthemessettings_createthemessettings_2","displayName":"Do not allow Create Themes.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings","displayName":"Settings for DevTools Generative AI Features (User)","description":"These features in Google Chrome's DevTools employ generative AI models to provide additional debugging information. To use these features, Google Chrome has to collect data such as error messages, stack traces, code snippets, and network requests and send them to a server owned by Google, which runs a generative AI model. Response body or authentication and cookie headers in network requests are not included in the data sent to the server.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nDevTools Generative AI features include:\r\n\r\n- Console Insights: explains console messages and offers suggestions on how to fix console errors.\r\n\r\n- AI assistance: get help with understanding CSS styles (since version 131), network requests, performance, and files (all since version 132).\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings","displayName":"Settings for DevTools Generative AI Features (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_0","displayName":"Allow DevTools Generative AI Features and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_1","displayName":"Allow DevTools Generative AI Features without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_devtoolsgenaisettings_devtoolsgenaisettings_2","displayName":"Do not allow DevTools Generative AI Features.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings","displayName":"Settings for Gemini integration (User)","description":"This setting allows Gemini app integrations.\r\n\r\n0/unset = Gemini integration will be available for users.\r\n\r\n1 = Gemini integration will not be available for users.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information, please check the Help Center article https://support.google.com/chrome/a?p=gemini_in_chrome.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings","displayName":"Settings for Gemini integration (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings_0","displayName":"Allow Gemini integrations.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_geminisettings_geminisettings_1","displayName":"Do not allow Gemini integrations.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model (User)","description":"Configure how Google Chrome downloads the foundational GenAI model and uses for inference locally.\r\n\r\nWhen the policy is set to Allowed (0) or not set, the model is downloaded automatically, and used for inference.\r\n\r\nWhen the policy is set to Disabled (1), the model will not be downloaded.\r\n\r\nModel downloading can also be disabled by ComponentUpdatesEnabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings","displayName":"Settings for GenAI local foundational model (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_0","displayName":"Downloads model automatically","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_genailocalfoundationalmodelsettings_genailocalfoundationalmodelsettings_1","displayName":"Do not download model","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings","displayName":"Settings for Help Me Write (User)","description":"Help Me Write is an AI-based writing assistant for short-form content on the web. Suggested content is based on prompts entered by the user and the content of the web page.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings","displayName":"Settings for Help Me Write (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_0","displayName":"Allow Help Me Write and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_1","displayName":"Allow Help Me Write without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_helpmewritesettings_helpmewritesettings_2","displayName":"Do not allow Help Me Write.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings","displayName":"Settings for AI-powered History Search (User)","description":"AI History Search is a feature that allows users to search their browsing history and receive generated answers based on page contents and not just the page title and URL.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings","displayName":"Settings for AI-powered History Search (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_0","displayName":"Allow AI History Search and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_1","displayName":"Allow AI History Search without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_historysearchsettings_historysearchsettings_2","displayName":"Do not allow AI History Search.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings","displayName":"Tab Compare settings (User)","description":"Tab Compare is an AI-powered tool for comparing information across a user's tabs. As an example, the feature can be offered to the user when multiple tabs with products in a similar category are open.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings","displayName":"Tab Compare settings (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_0","displayName":"Allow Tab Compare and improve AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_1","displayName":"Allow Tab Compare without improving AI models.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~generativeai_tabcomparesettings_tabcomparesettings_2","displayName":"Do not allow Tab Compare.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration","displayName":"Specifies how long (in seconds) a cast device selected with an access code or QR code stays in the Google Cast menu's list of cast devices. (User)","description":"This policy specifies how long (in seconds) a cast device that was previously selected via an access code or QR code can be seen within the Google Cast menu of cast devices.\r\nThe lifetime of an entry starts at the time the access code was first entered or the QR code was first scanned.\r\nDuring this period the cast device will appear in the Google Cast menu's list of cast devices.\r\nAfter this period, in order to use the cast device again the access code must be reentered or the QR code must be rescanned.\r\nBy default, the period is zero seconds, so cast devices will not stay in the Google Cast menu, and so the access code must be reentered, or the QR code rescanned, in order to initiate a new casting session.\r\nNote that this policy only affects how long a cast devices appears in the Google Cast menu, and has no effect on any ongoing cast session which will continue even if the period expires.\r\nThis policy has no effect unless the AccessCodeCastEnabled policy is Enabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastdeviceduration_accesscodecastdeviceduration","displayName":"Specifies how long (in seconds) a cast device selected with an access code or QR code stays in the Google Cast menu's list of cast devices.: (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled","displayName":"Allow users to select cast devices with an access code or QR code from within the Google Cast menu. (User)","description":"This policy controls whether a user will be presented with an option, within the Google Cast menu which allows them to cast to cast devices that do not appear in the Google Cast menu, using either the access code or QR code displayed on the cast devices's screen.\r\nBy default, a user must reenter the access code or rescan the QR code in order to initiate a subsequent casting session, but if the AccessCodeCastDeviceDuration policy has been set to a non-zero value (the default is zero), then the cast device will remain in the list of available cast devices until the specified period of time has expired.\r\nWhen this policy is set to Enabled, users will be presented with the option to select cast devices by using an access code or by scanning a QR code.\r\nWhen this policy is set to Disabled or not set, users will not be given the option to select cast devices by using an access code or by scanning a QR code.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_accesscodecastenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices","displayName":"Show media controls for Google Cast sessions started by other devices on the local network (User)","description":"When this policy is enabled, media playback controls UI is available for Google Cast sessions started by other devices on the local network.\r\n\r\nWhen this policy is unset for enterprise users or is disabled, media playback controls UI is unavailable for Google Cast sessions started by other devices on the local network.\r\n\r\nIf the policy EnableMediaRouter is disabled, then this policy's value has no effect, as the entire Google Cast functionality is disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~googlecast_showcastsessionsstartedbyotherdevices_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins","displayName":"List of origins allowing all HTTP authentication (User)","description":"Setting the policy specifies for which origins to allow all the HTTP authentication schemes Google Chrome supports regardless of the AuthSchemes policy.\r\n\r\nFormat the origin pattern according to this format (https://support.google.com/chrome/a?p=url_blocklist_filter_format). Up to 1,000 exceptions can be defined in AllHttpAuthSchemesAllowedForOrigins.\r\nWildcards are allowed for the whole origin or parts of the origin, either the scheme, host, port.\r\n\r\nExample value:\r\n\r\n*.example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~httpauthentication_allhttpauthschemesallowedfororigins_allhttpauthschemesallowedfororiginsdesc","displayName":"List of origins allowing all HTTP authentication (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessallowedforurls","displayName":"Allow sites to make requests to local network endpoints. (User)","description":"List of URL patterns. Requests initiated from websites served by matching origins are not subject to Local Network Access checks.\r\n\r\nIf an origin is covered by both this policy and by LocalNetworkAccessBlockedForUrls, LocalNetworkAccessBlockedForUrls takes precedence.\r\n\r\nFor origins not covered by the patterns specified here, the user's personal configuration will apply.\r\n\r\nFor detailed information on valid URL patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nSee https://wicg.github.io/local-network-access/ for Local Network Access restrictions.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessallowedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessallowedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessallowedforurls_localnetworkaccessallowedforurlsdesc","displayName":"Allow sites to make requests to local network endpoints. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls","displayName":"Block sites from making requests to local network endpoints. (User)","description":"List of URL patterns. Requests initiated from websites served by matching origins are blocked from issuing Local Network Access requests.\r\n\r\nIf an origin is covered by both this policy and by LocalNetworkAccessAllowedForUrls, this policy takes precedence.\r\n\r\nDepending on the stage of the rollout of Local Network Access, LocalNetworkAccessRestrictionsEnabled may also need to be enabled for this policy to block Local Network Access requests.\r\n\r\nFor origins not covered by the patterns specified here, the user's personal configuration will apply.\r\n\r\nFor detailed information on valid URL patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns.\r\n\r\nSee https://wicg.github.io/local-network-access/ for Local Network Access restrictions.\r\n\r\nExample value:\r\n\r\nhttp://www.example.com:8080\r\n[*.]example.edu\r\n*","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessblockedforurls_localnetworkaccessblockedforurlsdesc","displayName":"Block sites from making requests to local network endpoints. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled","displayName":"Specifies whether to apply restrictions to requests to local network endpoints (User)","description":"When this policy is set to Enabled, any time when a warning is supposed to be\r\ndisplayed in the DevTools due to Local Network Access checks failing, the\r\nmain request will be blocked instead.\r\n\r\nWhen this policy is set to Disabled or unset, Local Network Access requests will use the\r\ndefault handling of these requests.\r\n\r\nSee https://wicg.github.io/local-network-access/ for Local Network Access restrictions.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~localnetworkaccesssettings_localnetworkaccessrestrictionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant","displayName":"Make Access-Control-Allow-Methods matching in CORS preflight spec conformant (User)","description":"This policy controls whether request methods are uppercased when matching with Access-Control-Allow-Methods response headers in CORS preflight.\r\n\r\nIf the policy is Disabled, request methods are uppercased.\r\nThis is the behavior on or before Google Chrome 108.\r\n\r\nIf the policy is Enabled or not set, request methods are not uppercased, unless matching case-insensitively with DELETE, GET, HEAD, OPTIONS, POST, or PUT.\r\nThis would reject fetch(url, {method: 'Foo'}) + \"Access-Control-Allow-Methods: FOO\" response header,\r\nand would accept fetch(url, {method: 'Foo'}) + \"Access-Control-Allow-Methods: Foo\" response header.\r\n\r\nNote: request methods \"post\" and \"put\" are not affected, while \"patch\" is affected.\r\n\r\nThis policy is intended to be temporary and will be removed in the future.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_accesscontrolallowmethodsincorspreflightspecconformant_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled","displayName":"Enable compression dictionary transport support (User)","description":"This feature enables the use of dictionary-specific content encodings in the Accept-Encoding request header (\"sbr\" and \"zst-d\") when dictionaries are available for use.\r\n\r\nSetting the policy to Enabled or leaving it unset means Google Chrome will accept web contents using the compression dictionary transport feature.\r\nSetting the policy to Disabled turns off the compression dictionary transport feature.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_compressiondictionarytransportenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled","displayName":"DataURL Whitespace Preservation for all media types (User)","description":"This policy provides a temporary opt-out for changes to how Chrome handles whitepsace in data URLS.\r\nPreviously, whitespace would be kept only if the top level media type was text or contained the media type string xml.\r\nNow, whitespace will be preserved in all data URLs, regardless of media type.\r\n\r\nIf this policy is left unset or is set to True, the new behavior is enabled.\r\n\r\nWhen this policy is set to False, the old behavior is enabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_dataurlwhitespacepreservationenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled","displayName":"Use the Happy Eyeballs V3 algorithm (User)","description":"This feature enables the Happy Eyeballs V3 algorithm to make connection attempts. See https://datatracker.ietf.org/doc/draft-pauly-happy-happyeyeballs-v3 for details.\r\n\r\nSetting the policy to Enabled means Google Chrome will use the Happy Eyeballs V3 algorithm for connection attempts.\r\n\r\nSetting the policy to Disabled turns off the Happy Eyeballs V3 algorithm.\r\n\r\nNot setting the policy, Google Chrome will turn on or off the Happy Eyeballs V3 algorithm based on chrome://flags/#happy-eyeballs-v3.\r\n\r\nThis policy supports dynamic refresh.\r\n\r\nThis policy is a temporary measure and will be removed in future versions of Google Chrome.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_happyeyeballsv3enabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled","displayName":"Enable IPv6 reachability check override (User)","description":"Setting the policy to true overrides the IPv6 reachability check. This means that the\r\nsystem will always query AAAA records when resolving host names. It applies to\r\nall users and interfaces on the device.\r\n\r\nSetting the policy to false or leaving it unset does not overrides the IPv6 reachability check.\r\nThe system only queries AAAA records when it is reachable to a global IPv6 host.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~network_ipv6reachabilityoverrideenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings","displayName":"Enable automated password change (User)","description":"This policy controls the availability of Google Chrome's automated password change feature.\r\n\r\nIf enabled, a user can trigger a process where the browser attempts to change their password on a website automatically. This process is managed by Generative AI. The new password is saved in the browser's password manager.\r\n\r\n0 = Allow the feature to be used, while allowing Google to use relevant data to improve its AI models. Relevant data may include prompts, inputs, outputs, source materials, and written feedback, depending on the feature. It may also be reviewed by humans to improve AI models. 0 is the default value, except when noted below.\r\n\r\n1 = Allow the feature to be used, but does not allow Google to improve models using users' content (including prompts, inputs, outputs, source materials, and written feedback). 1 is the default value for Enterprise users managed by Google Admin console and for Education accounts managed by Google Workspace.\r\n\r\n2 = Do not allow the feature.\r\n\r\nIf the policy is unset, its behavior is determined by the GenAiDefaultSettings policy.\r\n\r\nFor more information on data handling for generative AI features, please see https://support.google.com/chrome/a?p=generative_ai_settings.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_automatedpasswordchangesettings","displayName":"Enable automated password change (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_automatedpasswordchangesettings_0","displayName":"Allow feature use and improving AI models","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_automatedpasswordchangesettings_1","displayName":"Allow feature use without improving AI models","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_automatedpasswordchangesettings_automatedpasswordchangesettings_2","displayName":"Do not allow feature","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled","displayName":"Enable deleting undecryptable passwords (User)","description":"This policy controls whether the built-in password manager can delete undecryptable passwords from its database. This is required to restore the full functionality of the built-in password manager, but it may include a permanent data loss. Undecryptable password values will not become decryptable on their own and, if fixing them is possible, it usually requires complex user actions.\r\n\r\nSetting the policy to Enabled or leaving it unset means that users with undecryptable passwords saved to the built-in password manager will lose them. Passwords that are still in a working state will remain untouched.\r\n\r\nSetting the policy to Disabled means users will leave their password manager data untouched, but will experience a broken password manager functionality.\r\n\r\nIf the policy is set, users can't change it in Google Chrome.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_deletingundecryptablepasswordsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passworddismisscompromisedalertenabled","displayName":"Enable dismissing compromised password alerts for entered credentials (User)","description":"Setting the policy to Enabled or leaving it unset gives the user the option to dismiss/restore compromised password alerts.\r\n\r\nIf you disable this setting, users will not be able to dismiss alerts about compromised passwords. If enabled, users will be able to dismiss alerts about compromised passwords.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passworddismisscompromisedalertenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passworddismisscompromisedalertenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist","displayName":"Configure the list of domains for which the Password Manager (Save and Fill) will be disabled (User)","description":"Configure the list of domains where Google Chrome should disable the Password Manager. This means that Save and Fill workflows will be disabled, ensuring that passwords for those websites can't be saved or auto filled into web forms.\r\n\r\nIf a domain is present in the list, the Password Manager will be disabled for it.\r\n\r\nIf a domain is not present in the list, the Password Manager will be available for it.\r\n\r\nIf the policy is unset, the Password Manager will be available for all domains.\r\n\r\nExample value:\r\n\r\nexample.com\r\nlogin.example.com","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerblocklist_passwordmanagerblocklistdesc","displayName":"Configure the list of domains for which the Password Manager (Save and Fill) will be disabled (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerpasskeysenabled","displayName":"Enable saving passkeys to the password manager (User)","description":"This policy controls the browser's ability to save passkeys in the built-in password manager. It does not limit access to, or change the contents of, passkeys already saved in the password manager. If the PasswordManagerEnabled policy is set to Disabled then saving in the built-in password manager is disabled in general, including passkeys and passwords, and thus this policy is not applicable.\r\n\r\nSetting the policy to Enabled or leaving unset means that users can save passkeys in the built-in password manager if signed into Google Chrome.\r\n\r\nSetting the policy to Disabled means users can't save passkeys to the built-in password manager, but previously saved passkeys will still work.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerpasskeysenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordmanagerpasskeysenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled","displayName":"Enable sharing user credentials with other users (User)","description":"Setting the policy to Enabled lets users send to and receive from family members (according to Family Service) their passwords.\r\nWhen the policy is Enabled or not set, there is a button in the Password Manager allowing to send a password.\r\nThe received passwords are stored into user's account and are available in the Password Manager.\r\n\r\nSetting the policy to Disabled means users can't send passwords from Password Manager to other users, and can't receive passwords from other users.\r\n\r\nThe feature is not available if synchronization of Passwords is turned off (either via user settings or SyncDisabled policy is Enabled).\r\n\r\nManaged accounts aren't eligible to join or create a family group and therefore cannot share passwords.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~passwordmanager_passwordsharingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed","displayName":"Out-of-process print drivers allowed (User)","description":"Controls if Google Chrome interacts with printer drivers from a separate service process. Platform printing calls to query available printers, get print driver settings, and submit documents for printing to local printers are made from a service process. Moving such calls out of the browser process helps improve stability and reduce frozen UI behavior in Print Preview.\r\n\r\nWhen this policy is set to Enabled or not set, Google Chrome will use a separate service process for platform printing tasks.\r\n\r\nWhen this policy is set to Disabled, Google Chrome will use the browser process for platform printing tasks.\r\n\r\nThis policy will be removed in the future, after the out-of-process print drivers feature has fully rolled out.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_oopprintdriversallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled","displayName":"Enable Printing LPAC Sandbox (User)","description":"Setting the policy to Enabled or leaving it unset enables the LPAC Sandbox for printing services whenever the system configuration supports it.\r\n\r\nSetting the policy to Disabled has a detrimental effect on Google Chrome's security as services used for printing might run in a weaker sandbox configuration.\r\n\r\nOnly turn off the policy if there are compatibility issues with third party software that prevent printing services from operating correctly inside the LPAC Sandbox.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printinglpacsandboxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault","displayName":"Print PDF as Image Default (User)","description":"Controls if Google Chrome makes the Print as image option default to set when printing PDFs.\r\n\r\nWhen this policy is set to Enabled, Google Chrome will default to setting the Print as image option in the Print Preview when printing a PDF.\r\n\r\nWhen this policy is set to Disabled or not set Google Chrome then the user selection for Print as image option will be initially unset. The user will be allowed to select it for each individual PDFs print job, if the option is available.\r\n\r\nFor Microsoft® Windows® or macOS this policy only has an effect if PrintPdfAsImageAvailability is also enabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~printing_printpdfasimagedefault_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled","displayName":"Choose whether the Privacy Sandbox ad measurement setting can be disabled (User)","description":"A policy to control whether the Privacy Sandbox Ad measurement setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Ad measurement setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Ad measurement setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadmeasurementenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled","displayName":"Choose whether the Privacy Sandbox Ad topics setting can be disabled (User)","description":"A policy to control whether the Privacy Sandbox Ad topics setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Ad topics setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Ad topics setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxadtopicsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled","displayName":"Choose whether the Privacy Sandbox Fingerprinting Protection feature is to be enabled in Incognito mode. (User)","description":"A policy to control whether the Privacy Sandbox Fingerprinting Protection setting is to be enabled in Incognito mode or disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Fingerprinting Protection feature setting will be turned off for your users.\r\nIf you set this policy to Enabled, your users will have the Fingerprinting Protection feature setting turned on in Incognito mode.\r\nIf the policy is not set, users will be able to turn on or off the Fingerprinting Protection feature for Incognito mode in their UI settings. The default state will be false or disabled, meaning the Fingerprinting Protection feature will be turned off.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxfingerprintingprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled","displayName":"Choose whether the Privacy Sandbox IP Protection feature should be enabled. (User)","description":"A policy to control whether the Privacy Sandbox IP Protection feature should be enabled.\r\n\r\nIP Protection is a feature that limits availability of a user's original IP address for certain third-party network requests made while browsing in Incognito mode, enhancing protections against cross-site tracking during Incognito browsing sessions.\r\n\r\nIf the policy is set to Disabled, then IP Protection will be disabled and users won't be able to enable the feature via UI settings.\r\nIf the policy is set to Enabled, then IP Protection will be enabled and users won't be able to disable the feature via UI settings.\r\nIf the policy is not set, IP Protection will be enabled by default and users will be able to control the feature on their device via UI settings.\r\n\r\nSome considerations regarding whether enterprises should disable IP Protection include:\r\n\r\n- DNS lookups won't be performed for requests that are proxied, which may impact DNS-based monitoring or filtering.\r\n\r\n- Enterprise applications may experience breakage when used in Incognito mode if they rely on requests to domains (or subdomains of those domains) on the Masked Domain List (Google Chrome) and require those requests to come from specific IP address ranges.\r\n\r\n- Traffic might not be proxied in Incognito mode under certain conditions, for example when users launch Incognito mode from a Chrome profile they aren't signed in to. In general the feature requires the user to have been signed in to Chrome with a personal Google account when launching Incognito mode.\r\n\r\n- The list of domains on the Masked Domain List may change over time, with new versions being pushed to users automatically. For more information on the Masked Domain List, see: Google Chrome.\r\n\r\nFor more information on IP Protection, see: Google Chrome.\r\n\r\nIP Protection will be launched no sooner than M139.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxipprotectionenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled","displayName":"Choose whether the Privacy Sandbox prompt can be shown to your users (User)","description":"A policy to control whether your users see the Privacy Sandbox prompt.\r\nThe prompt is a user-blocking flow which informs your users of the Privacy Sandbox settings. See https://privacysandbox.com for details about Chrome’s effort to deprecate third-party cookies.\r\n\r\nIf you set this policy to Disabled, then Google Chrome won’t show the Privacy Sandbox prompt.\r\nIf you set this policy to Enabled or keep it unset, then Google Chrome determines whether the Privacy Sandbox prompt can be shown or not and then show it if possible.\r\n\r\nIf any of the following policies are set, it’s required to set this policy to Disabled:\r\nPrivacySandboxAdTopicsEnabled\r\nPrivacySandboxSiteEnabledAdsEnabled\r\nPrivacySandboxAdMeasurementEnabled","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxpromptenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled","displayName":"Choose whether the Privacy Sandbox Site-suggested ads setting can be disabled (User)","description":"A policy to control whether the Privacy Sandbox Site-suggested ads setting can be disabled for your users.\r\n\r\nIf you set this policy to Disabled, then the Site-suggested ads setting will be turned off for your users.\r\nIf you set this policy to Enabled or keep it unset, your users will be able to turn on or off the Privacy Sandbox Site-suggested ads setting on their device.\r\n\r\nSetting this policy requires setting the PrivacySandboxPromptEnabled policy to Disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~privacysandbox_privacysandboxsiteenabledadsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed","displayName":"Allows web pages to use identifiers for the purpose of protected content playback (User)","description":"If the policy is set to true or unset, the use of protected content identifiers is allowed, which can help enable higher quality of protected content playback.\r\n\r\nIf the policy is set to false, protected content identifiers are not allowed to be used.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~protectedcontent_protectedcontentidentifiersallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled","displayName":"Enable Related Website Sets (User)","description":"This policy allows to control the Related Website Sets feature enablement.\r\n\r\nThis policy overrides the FirstPartySetsEnabled policy.\r\n\r\nWhen this policy is unset or set to True, the Related Website Sets feature is enabled.\r\n\r\nWhen this policy is set to False, the Related Website Sets feature is disabled.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (User)","description":"This policy provides a way to override the list of sets the browser uses for Related Website Sets features.\r\n\r\nThis policy overrides the FirstPartySetsOverrides policy.\r\n\r\nEach set in the browser's list of Related Website Sets must meet the requirements of a Related Website Set.\r\nA Related Website Set must contain a primary site and one or more member sites.\r\nA set can also contain a list of service sites that it owns, as well as a map from a site to all of its ccTLD variants.\r\nSee https://github.com/WICG/first-party-sets for more information on how Google Chrome uses Related Website Sets.\r\n\r\n\r\nAll sites in a Related Website Set must be a registrable domain served over HTTPS. Each site in a Related Website Set must also be unique,\r\nmeaning a site cannot be listed more than once in a Related Website Set.\r\n\r\nWhen this policy is given an empty dictionary, the browser uses the public list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the replacements list, if a site is also present\r\non a Related Website Set in the browser's list, then that site will be removed from the browser's Related Website Set.\r\nAfter this, the policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nFor all sites in a Related Website Set from the additions list, if a site is also present\r\non a Related Website Set in the browser's list, then the browser's Related Website Set will be updated so that the\r\nnew Related Website Set can be added to the browser's list. After the browser's list has been updated,\r\nthe policy's Related Website Set will be added to the browser's list of Related Website Sets.\r\n\r\nThe browser's list of Related Website Sets requires that for all sites in its list, no site is in\r\nmore than one set. This is also required for both the replacements list\r\nand the additions list. Similarly, a site cannot be in both the\r\nreplacements list and the additions list.\r\n\r\nWildcards (*) are not supported as a policy value, nor within any Related Website Set in these lists.\r\n\r\nAll sets provided by the policy must be valid Related Website Sets, if they aren't then an\r\nappropriate error will be outputted.\r\n\r\nOn Microsoft® Windows®, this policy is only available on instances that are joined to a Microsoft® Active Directory® domain, joined to Microsoft® Azure® Active Directory® or enrolled in Chrome Enterprise Core.\r\n\r\nOn macOS, this policy is only available on instances that are managed via MDM, joined to a domain via MCX or enrolled in Chrome Enterprise Core.\r\nSee https://cloud.google.com/docs/chrome-enterprise/policies/?policy=RelatedWebsiteSetsOverrides for more information about schema and formatting.\r\n\r\n\r\nExample value:\r\n\r\n{\r\n \"additions\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate2.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate2.test\": [\r\n \"https://associate2.com\"\r\n ]\r\n },\r\n \"primary\": \"https://primary2.test\",\r\n \"serviceSites\": [\r\n \"https://associate2-content.test\"\r\n ]\r\n }\r\n ],\r\n \"replacements\": [\r\n {\r\n \"associatedSites\": [\r\n \"https://associate1.test\"\r\n ],\r\n \"ccTLDs\": {\r\n \"https://associate1.test\": [\r\n \"https://associate1.co.uk\"\r\n ]\r\n },\r\n \"primary\": \"https://primary1.test\",\r\n \"serviceSites\": [\r\n \"https://associate1-content.test\"\r\n ]\r\n }\r\n ]\r\n}","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~relatedwebsitesets_relatedwebsitesetsoverrides_relatedwebsitesetsoverrides","displayName":"Override Related Website Sets. (User)","description":"","helpText":"","infoUrls":[],"options":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication","displayName":"Allow PIN and pairing authentication methods for remote access hosts (User)","description":"Setting the policy to Enabled allows the remote access host to use PIN and pairing authentications when accepting client connections.\r\n\r\nSetting the policy to Disabled disallows PIN or pairing authentications.\r\n\r\nLeaving it unset lets the host decide whether PIN and/or pairing authentications can be used.\r\n\r\nNote: If the setting results in no mutually supported authentication methods by both the host and the client, then the connection will be rejected.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowpinauthentication_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding","displayName":"Allow remote access users to open host-side URLs in their local client browser (User)","description":"Setting the policy to Enabled or leaving it unset may allow users connected to a remote access host to open host-side URLs in their local client browser.\r\n\r\nSetting the policy to Disabled will prevent the remote access host from sending URLs to the client.\r\n\r\nThis setting doesn't apply to remote assistance connections as the feature is not supported for that connection mode.\r\n\r\nNote: This feature is not yet generally available so enabling it does not mean that the feature will be visible in the client UI.","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~remoteaccess_remoteaccesshostallowurlforwarding_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled","displayName":"Allow using Google Assistant on the web, e.g. to enable changing passwords automatically (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_assistantwebenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled","displayName":"Control new behavior for the cancel dialog produced by the beforeunload event (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_beforeunloadeventcancelbypreventdefaultenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies","displayName":"Block truncated cookies (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_blocktruncatedcookies_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled","displayName":"Extend support for Chrome Apps on Microsoft® Windows®, macOS, and Linux. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed","displayName":"Restore permissive Chrome Apps behavior (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromeappswebviewpermissivebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled","displayName":"Determines whether the Chrome Root Store and built-in certificate verifier will be used to verify server certificates (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_chromerootstoreenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled","displayName":"Controls whether the deprecated :--foo syntax for CSS custom state is enabled (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_csscustomstatedeprecatedsyntaxenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_downloadbubbleenabled","displayName":"Enable download bubble UI (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_downloadbubbleenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_downloadbubbleenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_enforcelocalanchorconstraintsenabled","displayName":"Determines whether the built-in certificate verifier will enforce constraints encoded into trust anchors loaded from the platform trust store. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_enforcelocalanchorconstraintsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_enforcelocalanchorconstraintsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled","displayName":"Re-enable the Event.path API until M115. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_eventpathenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability","displayName":"Control Manifest v2 extension availability (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_0","displayName":"Default browser behavior","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_1","displayName":"Manifest v2 is disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_2","displayName":"Manifest v2 is enabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_extensionmanifestv2availability_extensionmanifestv2availability_3","displayName":"Manifest v2 is enabled for forced extensions only","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled","displayName":"Re-enable the deprecated async interface for FileSystemSyncAccessHandle in File System Access API (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_filesystemsyncaccesshandleasyncinterfaceenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi","displayName":"Enable support for the PPB_VideoDecoder(Dev) API. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forceenablepeppervideodecoderdevapi_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent","displayName":"Freeze User-Agent string major version at 99 (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent","displayName":"Freeze User-Agent string major version at 99 (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_0","displayName":"Default to browser settings for User-Agent string version.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_1","displayName":"The User-Agent string will not freeze the major version.","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_forcemajorversiontominorpositioninuseragent_forcemajorversiontominorpositioninuseragent_2","displayName":"The User-Agent string will freeze the major version as 99 and include the browser's major version in the minor position.","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_insecurehashesintlshandshakesenabled","displayName":"Insecure Hashes in TLS Handshakes Enabled (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_insecurehashesintlshandshakesenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_insecurehashesintlshandshakesenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled","displayName":"Enable keyboard focusable scrollers (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_keyboardfocusablescrollersenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension","displayName":"Load the CryptoToken component extension at startup (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_loadcryptotokenextension_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled","displayName":"Re-enable deprecated/removed Mutation Events (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_mutationeventsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_nativeclientforceallowed","displayName":"Forces Native Client (NaCl) to be allowed to run. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_nativeclientforceallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_nativeclientforceallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed","displayName":"Allows enabling the feature NewBaseUrlInheritanceBehavior (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_newbaseurlinheritancebehaviorallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled","displayName":"Control the new behavior of HTMLElement.offsetParent (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_offsetparentnewspecbehaviorenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled","displayName":"Enable Optimization Guide Fetching (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_optimizationguidefetchingenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_persistentquotaenabled","displayName":"Force persistent quota to be enabled (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_persistentquotaenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_persistentquotaenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed","displayName":"Allow modern buffer allocation for Graphics3D APIs PPAPI plugin. (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_ppapisharedimagesswapchainallowed_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedstorageinfoenabled","displayName":"Re-enable the deprecated window.webkitStorageInfo API (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedstorageinfoenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedstorageinfoenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability","displayName":"Manage the deprecated prefixed video fullscreen API's availability (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability","displayName":"Manage the deprecated prefixed video fullscreen API's availability (User)","description":"","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_runtime-enabled","displayName":"Follows regular deprecation timelines for the PrefixedVideoFullscreen API","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_disabled","displayName":"Disables prefixed video fullscreen APIs","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_prefixedvideofullscreenapiavailability_prefixedvideofullscreenapiavailability_enabled","displayName":"Enables prefixed video fullscreen APIs","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled","displayName":"Specifies whether to apply restrictions to requests to more-private network endpoints (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_privatenetworkaccessrestrictionsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled","displayName":"Check RSA key usage for server certificates issued by local trust anchors (User)","description":"This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500","helpText":"","infoUrls":[],"options":[{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled_0","displayName":"Disabled","description":null,"helpText":null},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_rsakeyusageforlocalanchorsenabled_1","displayName":"Enabled","description":null,"helpText":null}]},{"id":"user_vendor_msft_policy_config_chromeintunev141~policy~googlechrome~removedpolicies_selectparserrelaxationenabled","displayName":"Controls whether the new HTML parser behavior for the element is enabled (User)","description":"The HTML parser is being changed to allow additional HTML tags inside the element.\r\n\r\nIf this policy is disabled, then the HTML parser will restrict which tags can be put in the + + + + {/* ── KPI bar ── */} + + + {/* ── Compact pool / jobs / limiter stats ── */} + + + {/* ── Worker tables ── */} + + + + {/* ── Job Queue ── */} + {isImported && importedJobs ? ( + + + + {importedJobs.length === 0 ? ( + + + No job data was captured in this export + + + ) : ( + + + + + {jobSimpleColumns.map((col) => ( + {col} + ))} + + + + {importedJobs.slice(0, 200).map((row, i) => ( + + {jobSimpleColumns.map((col) => ( + + {row[col] != null ? String(row[col]) : "—"} + + ))} + + ))} + +
    +     + )} +     +     + ) : ( + } + color="warning" + onClick={() => + jobAction.mutate({ + url: "/api/ListWorkerHealth", + data: { Action: "PurgeCompleted" }, + }) + } + > + Purge Completed + + } + /> + )} + + {/* ── Historical Trends header with controls ── */} + + } + action={ + + {!isImported && ( + + + + + + )} + val !== null && setHistoryRange(val)} + size="small" + disabled={isImported} + > + {TIME_RANGES.map((r) => ( + + {r.label} + + ))} + + + } + /> + + + + + } + > + {(data, t) => ( + + + + + + + + + + )} + + + + } + > + {(data, t) => ( + + + + + + + + + + )} + + + + + + + } + > + {(data, t) => ( + + + + + + + + + + )} + + + + } + > + {(data, t) => ( + + + + + + + + + + + + + )} + + + + + {/* ── Startup Timing (bottom) ── */} + + + + + + ); +}; + +Page.getLayout = (page) => {page}; + +export default Page; diff --git a/src/pages/cipp/integrations/index.js b/src/pages/cipp/integrations/index.js index 60ee764853b4..6d3f24f86ee4 100644 --- a/src/pages/cipp/integrations/index.js +++ b/src/pages/cipp/integrations/index.js @@ -68,45 +68,83 @@ const Page = () => { status = 'Enabled' } - return ( - - - + {extension.comingSoon && ( + + Coming Soon + + )} + + - - {extension?.logo && ( + {extension?.logo && ( + + )} + + + {extension.description} + + +
    + + + {extension.comingSoon ? ( + <> - )} - - {extension.description} - - -
    - - + Coming Soon + + ) : ( + <> {integrations.isSuccess ? ( { {integrations.isSuccess ? status : 'Loading'} - - - - + + )} + + + + ) + + return ( + + {extension.comingSoon ? ( + cardContent + ) : ( + + {cardContent} + + )} ) })} diff --git a/src/pages/cipp/logs/index.js b/src/pages/cipp/logs/index.js index 1cbd2fa8e02d..1896cf3e2349 100644 --- a/src/pages/cipp/logs/index.js +++ b/src/pages/cipp/logs/index.js @@ -1,6 +1,6 @@ -import { useState } from "react"; -import { Layout as DashboardLayout } from "../../../layouts/index.js"; -import { CippTablePage } from "../../../components/CippComponents/CippTablePage.jsx"; +import { useState } from 'react' +import { Layout as DashboardLayout } from '../../../layouts/index.js' +import { CippTablePage } from '../../../components/CippComponents/CippTablePage.jsx' import { Button, Accordion, @@ -11,73 +11,73 @@ import { Stack, Alert, Box, -} from "@mui/material"; -import { Grid } from "@mui/system"; -import ExpandMoreIcon from "@mui/icons-material/ExpandMore"; -import { useForm } from "react-hook-form"; -import CippFormComponent from "../../../components/CippComponents/CippFormComponent"; -import { FunnelIcon, XMarkIcon } from "@heroicons/react/24/outline"; -import { EyeIcon } from "@heroicons/react/24/outline"; -import { useSettings } from "../../../hooks/use-settings.js"; +} from '@mui/material' +import { Grid } from '@mui/system' +import ExpandMoreIcon from '@mui/icons-material/ExpandMore' +import { useForm } from 'react-hook-form' +import CippFormComponent from '../../../components/CippComponents/CippFormComponent' +import { FunnelIcon, XMarkIcon } from '@heroicons/react/24/outline' +import { EyeIcon } from '@heroicons/react/24/outline' +import { useSettings } from '../../../hooks/use-settings.js' const simpleColumns = [ - "DateTime", - "Tenant", - "User", - "Message", - "API", - "Severity", - "AppId", - "IP", - "LogData", -]; + 'DateTime', + 'Tenant', + 'User', + 'Message', + 'API', + 'Severity', + 'AppId', + 'IP', + 'LogData', +] const offcanvas = { - extendedInfoFields: ["DateTime", "API", "Severity", "Message", "User", "AppId", "IP", "LogData"], -}; + extendedInfoFields: ['DateTime', 'API', 'Severity', 'Message', 'User', 'AppId', 'IP', 'LogData'], +} -const apiUrl = "/api/Listlogs"; -const pageTitle = "Logbook Results"; +const apiUrl = '/api/Listlogs' +const pageTitle = 'Logbook Results' const actions = [ { - label: "View Log Entry", - link: "/cipp/logs/logentry?logentry=[RowKey]&dateFilter=[DateFilter]", + label: 'View Log Entry', + link: '/cipp/logs/logentry?logentry=[RowKey]&dateFilter=[DateFilter]', icon: , - color: "primary", + color: 'primary', }, -]; +] const Page = () => { const formControl = useForm({ defaultValues: { startDate: null, endDate: null, - username: "", + username: '', severity: [], }, - }); + }) - const [expanded, setExpanded] = useState(false); // State for Accordion - const [filterEnabled, setFilterEnabled] = useState(false); // State for filter toggle - const [startDate, setStartDate] = useState(null); // State for start date filter - const [endDate, setEndDate] = useState(null); // State for end date filter - const [username, setUsername] = useState(null); // State for username filter - const [severity, setSeverity] = useState(null); // State for severity filter - const settings = useSettings(); // Hook to access settings - const currentTenant = settings?.currentTenant; + const [expanded, setExpanded] = useState(false) // State for Accordion + const [filterEnabled, setFilterEnabled] = useState(false) // State for filter toggle + const [startDate, setStartDate] = useState(null) // State for start date filter + const [endDate, setEndDate] = useState(null) // State for end date filter + const [username, setUsername] = useState(null) // State for username filter + const [severity, setSeverity] = useState(null) // State for severity filter + const settings = useSettings() // Hook to access settings + const currentTenant = settings?.currentTenant // Watch date fields to show warning for large date ranges - const watchStartDate = formControl.watch("startDate"); - const watchEndDate = formControl.watch("endDate"); + const watchStartDate = formControl.watch('startDate') + const watchEndDate = formControl.watch('endDate') // Component to display warning for large date ranges const DateRangeWarning = () => { - if (!watchStartDate || !watchEndDate) return null; + if (!watchStartDate || !watchEndDate) return null - const startDateMs = new Date(watchStartDate * 1000); - const endDateMs = new Date(watchEndDate * 1000); - const daysDifference = (endDateMs - startDateMs) / (1000 * 60 * 60 * 24); + const startDateMs = new Date(watchStartDate * 1000) + const endDateMs = new Date(watchEndDate * 1000) + const daysDifference = (endDateMs - startDateMs) / (1000 * 60 * 60 * 24) if (daysDifference > 10) { return ( @@ -88,11 +88,11 @@ const Page = () => { narrowing your date range if you encounter issues. - ); + ) } - return null; - }; + return null + } const onSubmit = (data) => { // Check if any filter is applied @@ -100,51 +100,51 @@ const Page = () => { data.startDate !== null || data.endDate !== null || data.username !== null || - data.severity?.length > 0; - setFilterEnabled(hasFilter); + data.severity?.length > 0 + setFilterEnabled(hasFilter) // Format start date if available setStartDate( data.startDate - ? new Date(data.startDate * 1000).toISOString().split("T")[0].replace(/-/g, "") - : null, - ); + ? new Date(data.startDate * 1000).toISOString().split('T')[0].replace(/-/g, '') + : null + ) // Format end date if available setEndDate( data.endDate - ? new Date(data.endDate * 1000).toISOString().split("T")[0].replace(/-/g, "") - : null, - ); + ? new Date(data.endDate * 1000).toISOString().split('T')[0].replace(/-/g, '') + : null + ) // Set username filter if available - setUsername(data.username || null); + setUsername(data.username || null) // Set severity filter if available (convert array to comma-separated string) setSeverity( data.severity && data.severity.length > 0 - ? data.severity.map((item) => item.value).join(",") - : null, - ); + ? data.severity.map((item) => item.value).join(',') + : null + ) // Close the accordion after applying filters - setExpanded(false); - }; + setExpanded(false) + } const clearFilters = () => { formControl.reset({ startDate: null, endDate: null, - username: "", + username: '', severity: [], - }); - setFilterEnabled(false); - setStartDate(null); - setEndDate(null); - setUsername(null); - setSeverity(null); - setExpanded(false); // Close the accordion when clearing filters - }; + }) + setFilterEnabled(false) + setStartDate(null) + setEndDate(null) + setUsername(null) + setSeverity(null) + setExpanded(false) // Close the accordion when clearing filters + } return ( { Logbook Filters {filterEnabled ? ( - + ( {startDate || endDate ? ( <> {startDate ? new Date( - startDate.replace(/(\d{4})(\d{2})(\d{2})/, "$1-$2-$3") + "T00:00:00", + startDate.replace(/(\d{4})(\d{2})(\d{2})/, '$1-$2-$3') + 'T00:00:00' ).toLocaleDateString() : new Date().toLocaleDateString()} - {startDate && endDate ? " - " : ""} + {startDate && endDate ? ' - ' : ''} {endDate ? new Date( - endDate.replace(/(\d{4})(\d{2})(\d{2})/, "$1-$2-$3") + "T00:00:00", + endDate.replace(/(\d{4})(\d{2})(\d{2})/, '$1-$2-$3') + 'T00:00:00' ).toLocaleDateString() - : ""} + : ''} ) : null} - {username && (startDate || endDate) && " | "} + {username && (startDate || endDate) && ' | '} {username && <>User: {username}} - {severity && (username || startDate || endDate) && " | "} - {severity && <>Severity: {severity.replace(/,/g, ", ")}}) + {severity && (username || startDate || endDate) && ' | '} + {severity && <>Severity: {severity.replace(/,/g, ', ')}}) ) : ( - + (Today: {new Date().toLocaleDateString()}) )} @@ -196,7 +196,7 @@ const Page = () => { Use the filters below to narrow down your logbook results. You can filter by date range, username, and severity levels. By default, the logbook shows the - current day based on UTC time. Your local time is{" "} + current day based on UTC time. Your local time is{' '} {new Date().getTimezoneOffset() / -60} hours offset from UTC. @@ -220,18 +220,18 @@ const Page = () => { formControl={formControl} validators={{ validate: (value) => { - const startDate = formControl.getValues("startDate"); + const startDate = formControl.getValues('startDate') if (value && !startDate) { - return "Start date must be set when using an end date"; + return 'Start date must be set when using an end date' } if ( startDate && value && new Date(value * 1000) < new Date(startDate * 1000) ) { - return "End date must be after start date"; + return 'End date must be after start date' } - return true; + return true }, }} /> @@ -263,12 +263,12 @@ const Page = () => { formControl={formControl} multiple={true} options={[ - { value: "Info", label: "Info" }, - { value: "Warn", label: "Warning" }, - { value: "Error", label: "Error" }, - { value: "Critical", label: "Critical" }, - { value: "Alert", label: "Alert" }, - { value: "Debug", label: "Debug" }, + { value: 'Info', label: 'Info' }, + { value: 'Warn', label: 'Warning' }, + { value: 'Error', label: 'Error' }, + { value: 'Critical', label: 'Critical' }, + { value: 'Alert', label: 'Alert' }, + { value: 'Debug', label: 'Debug' }, ]} placeholder="Select severity levels" /> @@ -312,7 +312,7 @@ const Page = () => { apiUrl={apiUrl} simpleColumns={simpleColumns} queryKey={`Listlogs-${startDate}-${endDate}-${username}-${severity}-${filterEnabled}-${currentTenant}`} - tenantInTitle={true} + tenantInTitle={false} apiData={{ StartDate: startDate, // Pass start date filter from state EndDate: endDate, // Pass end date filter from state @@ -324,9 +324,9 @@ const Page = () => { actions={actions} offCanvas={offcanvas} /> - ); -}; + ) +} -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page} -export default Page; +export default Page diff --git a/src/pages/cipp/preferences.js b/src/pages/cipp/preferences.js index f6bbde2e7704..2b5303fa8225 100644 --- a/src/pages/cipp/preferences.js +++ b/src/pages/cipp/preferences.js @@ -183,47 +183,47 @@ const Page = () => { const portalLinksConfig = [ { name: "portalLinks.M365_Portal", - label: "M365 Portal", + label: "M365", }, { name: "portalLinks.Exchange_Portal", - label: "Exchange Portal", + label: "Exchange", }, { name: "portalLinks.Entra_Portal", - label: "Entra Portal", + label: "Entra", }, { name: "portalLinks.Teams_Portal", - label: "Teams Portal", + label: "Teams", }, { name: "portalLinks.Azure_Portal", - label: "Azure Portal", + label: "Azure", }, { name: "portalLinks.Intune_Portal", - label: "Intune Portal", + label: "Intune", }, { name: "portalLinks.SharePoint_Admin", - label: "SharePoint Admin", + label: "SharePoint", }, { name: "portalLinks.Security_Portal", - label: "Security Portal", + label: "Security", }, { name: "portalLinks.Compliance_Portal", - label: "Compliance Portal", + label: "Compliance", }, { name: "portalLinks.Power_Platform_Portal", - label: "Power Platform Portal", + label: "Power Platform", }, { name: "portalLinks.Power_BI_Portal", - label: "Power BI Portal", + label: "Power BI", }, ]; diff --git a/src/pages/cipp/settings/features.js b/src/pages/cipp/settings/features.js index 15b6fd3a111e..d630e93eb2ba 100644 --- a/src/pages/cipp/settings/features.js +++ b/src/pages/cipp/settings/features.js @@ -59,6 +59,7 @@ const Page = () => { offCanvas={offCanvas} simpleColumns={simpleColumns} tenantInTitle={false} + dataFilter={(row) => !row.Hidden} /> ); }; diff --git a/src/pages/cipp/settings/password-config/index.js b/src/pages/cipp/settings/password-config/index.js index 540dd2853b2f..06d2c452a60a 100644 --- a/src/pages/cipp/settings/password-config/index.js +++ b/src/pages/cipp/settings/password-config/index.js @@ -41,32 +41,32 @@ function normalizeConfigForBackend(config) { return { passwordType: String(config.passwordType || PASSWORD_TYPES.CLASSIC), charCount: String(parseInt(config.charCount, 10) || DEFAULT_VALUES.CHAR_COUNT), - includeUppercase: String(Boolean(config.includeUppercase)), - includeLowercase: String(Boolean(config.includeLowercase)), - includeDigits: String(Boolean(config.includeDigits)), - includeSpecialChars: String(Boolean(config.includeSpecialChars)), + includeUppercase: Boolean(config.includeUppercase), + includeLowercase: Boolean(config.includeLowercase), + includeDigits: Boolean(config.includeDigits), + includeSpecialChars: Boolean(config.includeSpecialChars), specialCharSet: String(config.specialCharSet || DEFAULT_VALUES.SPECIAL_CHAR_SET), wordCount: String(parseInt(config.wordCount, 10) || DEFAULT_VALUES.WORD_COUNT), separator: config.separator !== undefined && config.separator !== null ? String(config.separator) : DEFAULT_VALUES.SEPARATOR, - capitalizeWords: String(Boolean(config.capitalizeWords)), - appendNumber: String(Boolean(config.appendNumber)), - appendSpecialChar: String(Boolean(config.appendSpecialChar)), + capitalizeWords: Boolean(config.capitalizeWords), + appendNumber: Boolean(config.appendNumber), + appendSpecialChar: Boolean(config.appendSpecialChar), }; } const DEFAULT_CONFIG = { - passwordType: PASSWORD_TYPES.CLASSIC, + passwordType: PASSWORD_TYPES.CLASSIC, charCount: String(DEFAULT_VALUES.CHAR_COUNT), - includeUppercase: true, - includeLowercase: true, + includeUppercase: true, + includeLowercase: true, includeDigits: true, - includeSpecialChars: true, + includeSpecialChars: true, specialCharSet: DEFAULT_VALUES.SPECIAL_CHAR_SET, - wordCount: String(DEFAULT_VALUES.WORD_COUNT), + wordCount: String(DEFAULT_VALUES.WORD_COUNT), separator: DEFAULT_VALUES.SEPARATOR, - capitalizeWords: false, - appendNumber: false, + capitalizeWords: false, + appendNumber: false, appendSpecialChar: false, }; @@ -89,7 +89,7 @@ const Page = () => { if (typeof v === 'number') return v === 1; return def; }; - + setConfig({ passwordType: r.passwordType || DEFAULT_CONFIG.passwordType, charCount: String(parseInt(r.charCount, 10) || DEFAULT_CONFIG.charCount), @@ -115,11 +115,11 @@ const Page = () => { const handleSave = () => { const normalizedConfig = normalizeConfigForBackend(config); - + passwordSave.mutate( - { - url: "/api/ExecPasswordConfig", - data: normalizedConfig, + { + url: "/api/ExecPasswordConfig", + data: normalizedConfig, queryKey: "PasswordSettingsPost", } ); diff --git a/src/pages/email/administration/hve-accounts/index.js b/src/pages/email/administration/hve-accounts/index.js new file mode 100644 index 000000000000..265884d44650 --- /dev/null +++ b/src/pages/email/administration/hve-accounts/index.js @@ -0,0 +1,204 @@ +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { CippHVEUserDrawer } from '../../../../components/CippComponents/CippHVEUserDrawer.jsx' +import { useCippReportDB } from '../../../../components/CippComponents/CippReportDBControls' +import { Stack } from '@mui/system' +import { TrashIcon } from '@heroicons/react/24/outline' +import { + Edit, + AlternateEmail, + Receipt, + RemoveCircleOutline, + Reply, +} from '@mui/icons-material' + +const Page = () => { + const pageTitle = 'HVE Accounts' + + const reportDB = useCippReportDB({ + apiUrl: '/api/ListHVEAccounts', + queryKey: 'ListHVEAccounts', + cacheName: 'HVEAccounts', + syncTitle: 'Sync HVE Accounts', + allowToggle: true, + defaultCached: true, + }) + + const actions = [ + { + label: 'Edit Display Name', + type: 'POST', + url: '/api/ExecHVEUser', + icon: , + data: { Identity: 'primarySmtpAddress', Action: 'Edit' }, + fields: [ + { + type: 'textField', + name: 'DisplayName', + label: 'Display Name', + }, + ], + confirmText: 'Update display name for [primarySmtpAddress]', + hideBulk: true, + }, + { + label: 'Set Reply-To Address', + type: 'POST', + url: '/api/ExecHVEUser', + icon: , + data: { Identity: 'primarySmtpAddress', Action: 'Edit' }, + fields: [ + { + type: 'textField', + name: 'ReplyTo', + label: 'Reply-To Address', + placeholder: 'e.g. replies@contoso.com (leave empty to clear)', + }, + ], + confirmText: 'Update reply-to address for [primarySmtpAddress]', + hideBulk: true, + }, + { + label: 'Change Primary SMTP Address', + type: 'POST', + url: '/api/ExecHVEUser', + icon: , + data: { Identity: 'primarySmtpAddress', Action: 'Edit' }, + fields: [ + { + type: 'textField', + name: 'username', + label: 'Username (local part)', + placeholder: 'e.g. hveaccount01', + }, + { + type: 'autoComplete', + name: 'domain', + label: 'Domain', + api: { + url: '/api/ListGraphRequest', + dataKey: 'Results', + queryKey: 'listDomains-hve', + labelField: (option) => option.id, + valueField: 'id', + addedField: { + isDefault: 'isDefault', + isVerified: 'isVerified', + }, + data: { + Endpoint: 'domains', + manualPagination: true, + $count: true, + $top: 99, + }, + dataFilter: (domains) => + domains + .filter((d) => d?.addedFields?.isVerified === true) + .sort((a, b) => { + if (a.addedFields?.isDefault === true) return -1 + if (b.addedFields?.isDefault === true) return 1 + return 0 + }), + }, + }, + ], + confirmText: 'Change primary SMTP address for [primarySmtpAddress]', + hideBulk: true, + }, + { + label: 'Assign Billing Policy', + type: 'POST', + url: '/api/ExecHVEUser', + icon: , + data: { Identity: 'primarySmtpAddress', Action: 'AssignBillingPolicy' }, + fields: [ + { + type: 'autoComplete', + name: 'BillingPolicyId', + label: 'Billing Policy', + multiple: false, + api: { + url: '/api/ListHVEAccounts', + queryKey: 'ListHVEBillingPolicies', + labelField: (option) => + `${option.Name || option.BillingPolicyName || option.BillingPolicyId} (${option.BillingPolicyId || option.Guid || option.Identity})`, + valueField: (option) => option.BillingPolicyId || option.Guid || option.Identity, + data: { + ListBillingPolicies: true, + }, + }, + }, + ], + confirmText: 'Assign billing policy to [primarySmtpAddress]. Current policy: [BillingPolicyName]', + hideBulk: true, + }, + { + label: 'Remove Billing Policy', + type: 'POST', + url: '/api/ExecHVEUser', + icon: , + data: { Identity: 'primarySmtpAddress', Action: 'RemoveBillingPolicy' }, + confirmText: + 'Remove billing policy [BillingPolicyName] from [primarySmtpAddress]?', + condition: (row) => row.BillingPolicyName && row.BillingPolicyName !== 'None', + hideBulk: true, + }, + { + label: 'Delete HVE Account', + type: 'POST', + icon: , + url: '/api/ExecHVEUser', + data: { Identity: 'primarySmtpAddress', Action: 'Remove' }, + confirmText: 'Are you sure you want to delete HVE account [primarySmtpAddress]?', + multiPost: false, + }, + ] + + const offCanvas = { + extendedInfoFields: [ + 'displayName', + 'primarySmtpAddress', + 'Alias', + 'AdditionalEmailAddresses', + 'BillingPolicyName', + 'BillingPolicyId', + 'WhenCreated', + 'ExternalDirectoryObjectId', + ], + actions: actions, + } + + const simpleColumns = [ + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), + 'displayName', + 'primarySmtpAddress', + 'Alias', + 'WhenCreated', + 'AdditionalEmailAddresses', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), + ] + + return ( + <> + + + {reportDB.controls} + + } + /> + {reportDB.syncDialog} + + ) +} + +Page.getLayout = (page) => {page} + +export default Page diff --git a/src/pages/email/administration/mailbox-rules/index.js b/src/pages/email/administration/mailbox-rules/index.js index eb414aae760e..98f0d076caff 100644 --- a/src/pages/email/administration/mailbox-rules/index.js +++ b/src/pages/email/administration/mailbox-rules/index.js @@ -1,89 +1,97 @@ -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; -import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { getCippTranslation } from "../../../../utils/get-cipp-translation"; -import { getCippFormatting } from "../../../../utils/get-cipp-formatting"; -import { CippPropertyListCard } from "../../../../components/CippCards/CippPropertyListCard"; -import { Block, PlayArrow, DeleteForever, Sync, Info } from "@mui/icons-material"; -import { Button, SvgIcon, IconButton, Tooltip } from "@mui/material"; -import { Stack } from "@mui/system"; -import { useDialog } from "../../../../hooks/use-dialog"; -import { CippApiDialog } from "../../../../components/CippComponents/CippApiDialog"; -import { useSettings } from "../../../../hooks/use-settings"; -import { CippQueueTracker } from "../../../../components/CippTable/CippQueueTracker"; -import { useState } from "react"; +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { getCippTranslation } from '../../../../utils/get-cipp-translation' +import { getCippFormatting } from '../../../../utils/get-cipp-formatting' +import { CippPropertyListCard } from '../../../../components/CippCards/CippPropertyListCard' +import { Block, PlayArrow, DeleteForever } from '@mui/icons-material' +import { useCippReportDB } from '../../../../components/CippComponents/CippReportDBControls' const Page = () => { - const pageTitle = "Mailbox Rules"; - const currentTenant = useSettings().currentTenant; - const syncDialog = useDialog(); - const [syncQueueId, setSyncQueueId] = useState(null); + const pageTitle = 'Mailbox Rules' - const isAllTenants = currentTenant === "AllTenants"; + const reportDB = useCippReportDB({ + apiUrl: '/api/ListMailboxRules', + queryKey: 'ListMailboxRules', + cacheName: 'Mailboxes', + syncTitle: 'Sync Mailbox Rules', + syncData: { Types: 'Rules' }, + allowToggle: false, + defaultCached: true, + }) - const apiData = { - UseReportDB: true, - }; - - const simpleColumns = isAllTenants - ? ["Tenant", "UserPrincipalName", "Name", "Priority", "Enabled", "From", "CacheTimestamp"] - : ["UserPrincipalName", "Name", "Priority", "Enabled", "From", "CacheTimestamp"]; + const simpleColumns = [ + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), + 'UserPrincipalName', + 'Name', + 'Priority', + 'Enabled', + 'From', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), + ] const actions = [ { - label: "Enable Mailbox Rule", - type: "POST", + label: 'Enable Mailbox Rule', + type: 'POST', icon: , - url: "/api/ExecSetMailboxRule", + url: '/api/ExecSetMailboxRule', data: { - ruleId: "Identity", - userPrincipalName: "OperationGuid", - ruleName: "Name", + ruleId: 'Identity', + userPrincipalName: 'OperationGuid', + ruleName: 'Name', Enable: true, + tenantFilter: 'Tenant', }, condition: (row) => !row.Enabled, - confirmText: "Are you sure you want to enable this mailbox rule?", + confirmText: 'Are you sure you want to enable this mailbox rule?', multiPost: false, }, { - label: "Disable Mailbox Rule", - type: "POST", + label: 'Disable Mailbox Rule', + type: 'POST', icon: , - url: "/api/ExecSetMailboxRule", + url: '/api/ExecSetMailboxRule', data: { - ruleId: "Identity", - userPrincipalName: "OperationGuid", - ruleName: "Name", + ruleId: 'Identity', + userPrincipalName: 'OperationGuid', + ruleName: 'Name', Disable: true, + tenantFilter: 'Tenant', }, condition: (row) => row.Enabled, - confirmText: "Are you sure you want to disable this mailbox rule?", + confirmText: 'Are you sure you want to disable this mailbox rule?', multiPost: false, }, { - label: "Remove Mailbox Rule", - type: "POST", + label: 'Remove Mailbox Rule', + type: 'POST', icon: , - url: "/api/ExecRemoveMailboxRule", - data: { ruleId: "Identity", userPrincipalName: "OperationGuid", ruleName: "Name" }, - confirmText: "Are you sure you want to remove this mailbox rule?", + url: '/api/ExecRemoveMailboxRule', + data: { + ruleId: 'Identity', + userPrincipalName: 'OperationGuid', + ruleName: 'Name', + tenantFilter: 'Tenant', + }, + confirmText: 'Are you sure you want to remove this mailbox rule?', multiPost: false, }, - ]; + ] const offCanvas = { children: (data) => { const keys = Object.keys(data).filter( - (key) => !key.includes("@odata") && !key.includes("@data"), - ); - const properties = []; + (key) => !key.includes('@odata') && !key.includes('@data') + ) + const properties = [] keys.forEach((key) => { if (data[key] && data[key].length > 0) { properties.push({ label: getCippTranslation(key), value: getCippFormatting(data[key], key), - }); + }) } - }); + }) return ( { actionItems={actions} data={data} /> - ); + ) }, - }; - - const pageActions = [ - - - - - - - - - , - ]; + } return ( <> - { - if (result?.Metadata?.QueueId) { - setSyncQueueId(result.Metadata.QueueId); - } - }, - url: "/api/ExecCIPPDBCache", - confirmText: `Run mailbox rules cache sync for ${currentTenant}? This will update mailbox rules data immediately.`, - relatedQueryKeys: [`ListMailboxRules-${currentTenant}`], - data: { - Name: "Mailboxes", - Types: "Rules", - }, - }} + cardButton={reportDB.controls} /> + {reportDB.syncDialog} - ); -}; + ) +} -Page.getLayout = (page) => {page}; -export default Page; +Page.getLayout = (page) => {page} +export default Page diff --git a/src/pages/email/administration/mailboxes/index.js b/src/pages/email/administration/mailboxes/index.js index bb3d72bb40fe..01bc84afae65 100644 --- a/src/pages/email/administration/mailboxes/index.js +++ b/src/pages/email/administration/mailboxes/index.js @@ -1,29 +1,21 @@ import { Layout as DashboardLayout } from '../../../../layouts/index.js' import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' import CippExchangeActions from '../../../../components/CippComponents/CippExchangeActions' -import { CippHVEUserDrawer } from '../../../../components/CippComponents/CippHVEUserDrawer.jsx' import { CippSharedMailboxDrawer } from '../../../../components/CippComponents/CippSharedMailboxDrawer.jsx' -import { Sync, CloudDone, Bolt } from '@mui/icons-material' -import { Button, SvgIcon, Tooltip, Chip } from '@mui/material' -import { useSettings } from '../../../../hooks/use-settings' +import { useCippReportDB } from '../../../../components/CippComponents/CippReportDBControls' import { Stack } from '@mui/system' -import { useDialog } from '../../../../hooks/use-dialog' -import { CippApiDialog } from '../../../../components/CippComponents/CippApiDialog' -import { useState, useEffect } from 'react' -import { CippQueueTracker } from '../../../../components/CippTable/CippQueueTracker' const Page = () => { const pageTitle = 'Mailboxes' - const currentTenant = useSettings().currentTenant - const syncDialog = useDialog() - const [syncQueueId, setSyncQueueId] = useState(null) - const isAllTenants = currentTenant === 'AllTenants' - const [useReportDB, setUseReportDB] = useState(true) - - useEffect(() => { - setUseReportDB(true) - }, [currentTenant]) + const reportDB = useCippReportDB({ + apiUrl: '/api/ListMailboxes', + queryKey: 'ListMailboxes', + cacheName: 'Mailboxes', + syncTitle: 'Sync Mailboxes', + allowToggle: true, + defaultCached: true, + }) // Define off-canvas details const offCanvas = { @@ -55,31 +47,22 @@ const Page = () => { ] // Simplified columns for the table - const simpleColumns = isAllTenants - ? [ - 'Tenant', // Tenant - 'displayName', // Display Name - 'recipientTypeDetails', // Recipient Type Details - 'UPN', // User Principal Name - 'primarySmtpAddress', // Primary Email Address - 'AdditionalEmailAddresses', // Additional Email Addresses - 'CacheTimestamp', // Cache Timestamp - ] - : [ - 'displayName', // Display Name - 'recipientTypeDetails', // Recipient Type Details - 'UPN', // User Principal Name - 'primarySmtpAddress', // Primary Email Address - 'AdditionalEmailAddresses', // Additional Email Addresses - 'CacheTimestamp', // Cache Timestamp - ] + const simpleColumns = [ + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), + 'displayName', + 'recipientTypeDetails', + 'UPN', + 'primarySmtpAddress', + 'AdditionalEmailAddresses', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), + ] return ( <> { cardButton={ - - {useReportDB && ( - <> - - - - )} - - - : } - label={useReportDB ? 'Cached' : 'Live'} - color="primary" - size="small" - onClick={isAllTenants ? undefined : () => setUseReportDB((prev) => !prev)} - clickable={!isAllTenants} - disabled={isAllTenants} - variant="outlined" - /> - - + {reportDB.controls} } /> - { - if (response?.Metadata?.QueueId) { - setSyncQueueId(response.Metadata.QueueId) - } - }, - }} - /> + {reportDB.syncDialog} ) } diff --git a/src/pages/email/administration/quarantine/index.js b/src/pages/email/administration/quarantine/index.js index 92aac9f435c0..7443eb5e714f 100644 --- a/src/pages/email/administration/quarantine/index.js +++ b/src/pages/email/administration/quarantine/index.js @@ -1,6 +1,6 @@ -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; -import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { useEffect, useState } from "react"; +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { useEffect, useState } from 'react' import { Dialog, DialogTitle, @@ -9,166 +9,172 @@ import { Skeleton, Typography, CircularProgress, -} from "@mui/material"; -import { Block, Close, Done, DoneAll } from "@mui/icons-material"; -import { CippMessageViewer } from "../../../../components/CippComponents/CippMessageViewer.jsx"; -import { ApiGetCall, ApiPostCall } from "../../../../api/ApiCall"; -import { useSettings } from "../../../../hooks/use-settings"; -import { EyeIcon, DocumentTextIcon } from "@heroicons/react/24/outline"; -import { CippDataTable } from "../../../../components/CippTable/CippDataTable"; +} from '@mui/material' +import { Block, Close, Done, DoneAll } from '@mui/icons-material' +import { CippMessageViewer } from '../../../../components/CippComponents/CippMessageViewer.jsx' +import { ApiGetCall, ApiPostCall } from '../../../../api/ApiCall' +import { useSettings } from '../../../../hooks/use-settings' +import { EyeIcon, DocumentTextIcon } from '@heroicons/react/24/outline' +import { CippDataTable } from '../../../../components/CippTable/CippDataTable' const simpleColumns = [ - "ReceivedTime", - "ReleaseStatus", - "Subject", - "SenderAddress", - "RecipientAddress", - "Type", - "PolicyName", - "Tenant", -]; -const detailColumns = ["Received", "Status", "SenderAddress", "RecipientAddress"]; -const pageTitle = "Quarantine Management"; + 'ReceivedTime', + 'ReleaseStatus', + 'Subject', + 'SenderAddress', + 'RecipientAddress', + 'Type', + 'PolicyName', + 'Tenant', +] +const detailColumns = ['Received', 'Status', 'SenderAddress', 'RecipientAddress'] +const pageTitle = 'Quarantine Management' const Page = () => { - const tenantFilter = useSettings().currentTenant; - const [dialogOpen, setDialogOpen] = useState(false); - const [dialogContent, setDialogContent] = useState(null); - const [messageId, setMessageId] = useState(null); - const [traceDialogOpen, setTraceDialogOpen] = useState(false); - const [traceDetails, setTraceDetails] = useState([]); - const [traceMessageId, setTraceMessageId] = useState(null); - const [messageSubject, setMessageSubject] = useState(null); - const [messageContentsWaiting, setMessageContentsWaiting] = useState(false); + const tenantFilter = useSettings().currentTenant + const [dialogOpen, setDialogOpen] = useState(false) + const [dialogContent, setDialogContent] = useState(null) + const [messageId, setMessageId] = useState(null) + const [traceDialogOpen, setTraceDialogOpen] = useState(false) + const [traceDetails, setTraceDetails] = useState([]) + const [traceMessageId, setTraceMessageId] = useState(null) + const [messageSubject, setMessageSubject] = useState(null) + const [messageContentsWaiting, setMessageContentsWaiting] = useState(false) const getMessageContents = ApiGetCall({ - url: "/api/ListMailQuarantineMessage", + url: '/api/ListMailQuarantineMessage', data: { tenantFilter: tenantFilter, Identity: messageId, }, waiting: messageContentsWaiting, queryKey: `ListMailQuarantineMessage-${messageId}`, - }); + }) const getMessageTraceDetails = ApiPostCall({ urlFromData: true, queryKey: `MessageTraceDetail-${traceMessageId}`, onResult: (result) => { - setTraceDetails(result); + setTraceDetails(result) }, - }); + }) const viewMessage = (row) => { - const id = row.Identity; - setMessageId(id); + const id = row.Identity + setMessageId(id) if (!messageContentsWaiting) { - setMessageContentsWaiting(true); + setMessageContentsWaiting(true) } - getMessageContents.refetch(); - setDialogOpen(true); - }; + getMessageContents.refetch() + setDialogOpen(true) + } const viewMessageTrace = (row) => { - setTraceMessageId(row.MessageId); + setTraceMessageId(row.MessageId) getMessageTraceDetails.mutate({ - url: "/api/ListMessageTrace", + url: '/api/ListMessageTrace', data: { tenantFilter: tenantFilter, messageId: row.MessageId, }, - }); - setMessageSubject(row.Subject); - setTraceDialogOpen(true); - }; + }) + setMessageSubject(row.Subject) + setTraceDialogOpen(true) + } useEffect(() => { if (getMessageContents.isSuccess) { - setDialogContent(); + setDialogContent() } else { - setDialogContent(); + setDialogContent() } - }, [getMessageContents.isSuccess, getMessageContents.data]); + }, [getMessageContents.isSuccess, getMessageContents.data]) const actions = [ { - label: "View Message", + label: 'View Message', noConfirm: true, customFunction: viewMessage, icon: , + hideBulk: true, }, { - label: "View Message Trace", + label: 'View Message Trace', noConfirm: true, customFunction: viewMessageTrace, icon: , + hideBulk: true, }, { - label: "Release", - type: "POST", - url: "/api/ExecQuarantineManagement", + label: 'Release', + type: 'POST', + url: '/api/ExecQuarantineManagement', multiPost: true, data: { - Identity: "Identity", - Type: "!Release", + Identity: 'Identity', + Type: '!Release', }, - confirmText: "Are you sure you want to release this message?", + confirmText: 'Are you sure you want to release this message?', icon: , - condition: (row) => row.ReleaseStatus !== "RELEASED", + condition: (row) => row.ReleaseStatus !== 'RELEASED', }, { - label: "Deny", - type: "POST", - url: "/api/ExecQuarantineManagement", + label: 'Deny', + type: 'POST', + url: '/api/ExecQuarantineManagement', + multiPost: true, data: { - Identity: "Identity", - Type: "!Deny", + Identity: 'Identity', + Type: '!Deny', }, - confirmText: "Are you sure you want to deny this message?", + confirmText: 'Are you sure you want to deny this message?', icon: , - condition: (row) => row.ReleaseStatus !== "DENIED", + condition: (row) => row.ReleaseStatus === 'REQUESTED', }, { - label: "Release & Allow Sender", - type: "POST", - url: "/api/ExecQuarantineManagement", + label: 'Release & Allow Sender', + type: 'POST', + url: '/api/ExecQuarantineManagement', + multiPost: true, data: { - Identity: "Identity", - Type: "!Release", + Identity: 'Identity', + Type: '!Release', AllowSender: true, + SenderAddress: 'SenderAddress', + PolicyName: 'PolicyName', }, confirmText: - "Are you sure you want to release this email and add the sender to the whitelist?", + 'Are you sure you want to release this email and add the sender to the whitelist?', icon: , - condition: (row) => row.ReleaseStatus !== "RELEASED", + condition: (row) => row.ReleaseStatus !== 'RELEASED', }, - ]; + ] const offCanvas = { - extendedInfoFields: ["MessageId", "RecipientAddress", "Type"], + extendedInfoFields: ['MessageId', 'RecipientAddress', 'Type'], actions: actions, - }; + } const filterList = [ { - filterName: "Not Released", - value: [{ id: "ReleaseStatus", value: "NOTRELEASED" }], - type: "column", - filterType: "equal", + filterName: 'Not Released', + value: [{ id: 'ReleaseStatus', value: 'NOTRELEASED' }], + type: 'column', + filterType: 'equal', }, { - filterName: "Released", - value: [{ id: "ReleaseStatus", value: "RELEASED" }], - type: "column", - filterType: "equal", + filterName: 'Released', + value: [{ id: 'ReleaseStatus', value: 'RELEASED' }], + type: 'column', + filterType: 'equal', }, { - filterName: "Requested", - value: [{ id: "ReleaseStatus", value: "REQUESTED" }], - type: "column", - filterType: "equal", + filterName: 'Requested', + value: [{ id: 'ReleaseStatus', value: 'REQUESTED' }], + type: 'column', + filterType: 'equal', }, - ]; + ] return ( <> @@ -187,7 +193,7 @@ const Page = () => { setDialogOpen(false)} - sx={{ position: "absolute", right: 8, top: 8 }} + sx={{ position: 'absolute', right: 8, top: 8 }} > @@ -205,7 +211,7 @@ const Page = () => { setTraceDialogOpen(false)} - sx={{ position: "absolute", right: 8, top: 8 }} + sx={{ position: 'absolute', right: 8, top: 8 }} > @@ -225,7 +231,7 @@ const Page = () => { data={traceDetails ?? []} refreshFunction={() => getMessageTraceDetails.mutate({ - url: "/api/ListMessageTrace", + url: '/api/ListMessageTrace', data: { tenantFilter: tenantFilter, messageId: traceMessageId, @@ -238,9 +244,9 @@ const Page = () => {
    - ); -}; + ) +} -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page} -export default Page; +export default Page diff --git a/src/pages/email/administration/tenant-allow-block-list-templates/index.js b/src/pages/email/administration/tenant-allow-block-list-templates/index.js index 85de23ce2ec4..4e945b486c4d 100644 --- a/src/pages/email/administration/tenant-allow-block-list-templates/index.js +++ b/src/pages/email/administration/tenant-allow-block-list-templates/index.js @@ -1,13 +1,26 @@ +import { useState } from 'react' import { Layout as DashboardLayout } from '../../../../layouts/index.js' import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' -import { Delete } from '@mui/icons-material' +import { Delete, Edit } from '@mui/icons-material' import CippJsonView from '../../../../components/CippFormPages/CippJSONView' import { CippTenantAllowBlockListTemplateDrawer } from '../../../../components/CippComponents/CippTenantAllowBlockListTemplateDrawer.jsx' const Page = () => { const pageTitle = 'Tenant Allow/Block List Templates' + const [editDrawerVisible, setEditDrawerVisible] = useState(false) + const [editData, setEditData] = useState(null) const actions = [ + { + label: 'Edit Template', + noConfirm: true, + customFunction: (row) => { + setEditData(row) + setEditDrawerVisible(true) + }, + icon: , + color: 'primary', + }, { label: 'Delete Template', type: 'POST', @@ -36,18 +49,26 @@ const Page = () => { ] return ( - - } - /> + <> + } + /> + { + setEditDrawerVisible(visible) + if (!visible) setEditData(null) + }} + /> + ) } diff --git a/src/pages/email/reports/activesync-devices/index.js b/src/pages/email/reports/activesync-devices/index.js index 38b7ea65f87d..4ddd6306cd99 100644 --- a/src/pages/email/reports/activesync-devices/index.js +++ b/src/pages/email/reports/activesync-devices/index.js @@ -76,6 +76,7 @@ const Page = () => { 'firstSyncTime', 'lastSyncAttemptTime', 'lastSuccessSync', + 'syncInfoNote', 'deviceID', ], actions: actions, diff --git a/src/pages/email/reports/calendar-permissions/index.js b/src/pages/email/reports/calendar-permissions/index.js index 6ca2faac6d0d..eb4620f1cf4f 100644 --- a/src/pages/email/reports/calendar-permissions/index.js +++ b/src/pages/email/reports/calendar-permissions/index.js @@ -1,54 +1,44 @@ import { Layout as DashboardLayout } from '../../../../layouts/index.js' import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' import { useState } from 'react' -import { Button, Alert, SvgIcon, Tooltip, Chip } from '@mui/material' -import { useSettings } from '../../../../hooks/use-settings' +import { Tooltip, Chip } from '@mui/material' import { Stack } from '@mui/system' -import { Sync, CloudDone, Person, CalendarMonth } from '@mui/icons-material' -import { useDialog } from '../../../../hooks/use-dialog' -import { CippApiDialog } from '../../../../components/CippComponents/CippApiDialog' -import { CippQueueTracker } from '../../../../components/CippTable/CippQueueTracker' +import { Person, CalendarMonth } from '@mui/icons-material' +import { useCippReportDB } from '../../../../components/CippComponents/CippReportDBControls' const Page = () => { const [byUser, setByUser] = useState(true) - const currentTenant = useSettings().currentTenant - const syncDialog = useDialog() - const [syncQueueId, setSyncQueueId] = useState(null) - const isAllTenants = currentTenant === 'AllTenants' + const reportDB = useCippReportDB({ + apiUrl: '/api/ListCalendarPermissions', + queryKey: 'calendar-permissions', + cacheName: 'Mailboxes', + syncTitle: 'Sync Calendar Permissions Cache', + syncData: { Types: 'CalendarPermissions' }, + allowToggle: false, + defaultCached: true, + cacheColumns: ['MailboxCacheTimestamp', 'PermissionCacheTimestamp'], + }) const columns = byUser ? [ - ...(isAllTenants ? ['Tenant'] : []), + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), 'User', 'UserMailboxType', 'Permissions', - 'MailboxCacheTimestamp', - 'PermissionCacheTimestamp', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), ] : [ - ...(isAllTenants ? ['Tenant'] : []), + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), 'CalendarUPN', 'CalendarDisplayName', 'CalendarType', 'Permissions', - 'MailboxCacheTimestamp', - 'PermissionCacheTimestamp', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), ] - // Compute apiData based on byUser directly (no useState needed) - const apiData = { - UseReportDB: true, - ByUser: byUser, - } - - const pageActions = [ - - + const pageActions = ( + { variant="outlined" /> - - - - } - label="Cached" - color="primary" - size="small" - disabled - variant="outlined" - /> - - - , - ] + {reportDB.controls} + + ) return ( <> - {currentTenant && currentTenant !== '' ? ( - - ) : ( - Please select a tenant to view calendar permissions. - )} - { - if (result?.Metadata?.QueueId) { - setSyncQueueId(result.Metadata.QueueId) - } - }, - }} + + {reportDB.syncDialog} ) } diff --git a/src/pages/email/reports/mailbox-forwarding/index.js b/src/pages/email/reports/mailbox-forwarding/index.js index 008637df1a97..a24c324f983f 100644 --- a/src/pages/email/reports/mailbox-forwarding/index.js +++ b/src/pages/email/reports/mailbox-forwarding/index.js @@ -1,36 +1,28 @@ import { Layout as DashboardLayout } from "../../../../layouts/index.js"; import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { useState } from "react"; -import { Button, Alert, SvgIcon, IconButton, Tooltip } from "@mui/material"; -import { useSettings } from "../../../../hooks/use-settings"; -import { Stack } from "@mui/system"; -import { Sync, Info } from "@mui/icons-material"; -import { useDialog } from "../../../../hooks/use-dialog"; -import { CippApiDialog } from "../../../../components/CippComponents/CippApiDialog"; -import { CippQueueTracker } from "../../../../components/CippTable/CippQueueTracker"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const Page = () => { - const currentTenant = useSettings().currentTenant; - const syncDialog = useDialog(); - const [syncQueueId, setSyncQueueId] = useState(null); - - const isAllTenants = currentTenant === "AllTenants"; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListMailboxForwarding", + queryKey: "mailbox-forwarding", + cacheName: "Mailboxes", + syncTitle: "Sync Mailbox Cache", + allowToggle: false, + defaultCached: true, + }); const columns = [ - ...(isAllTenants ? ["Tenant"] : []), + ...reportDB.cacheColumns.filter((c) => c === "Tenant"), "UPN", "DisplayName", "RecipientTypeDetails", "ForwardingType", "ForwardTo", "DeliverToMailboxAndForward", - "CacheTimestamp", + ...reportDB.cacheColumns.filter((c) => c !== "Tenant"), ]; - const apiData = { - UseReportDB: true, - }; - const filters = [ { filterName: "External Forwarding", @@ -44,69 +36,19 @@ const Page = () => { }, ]; - const pageActions = [ - - - - - - - - - , - ]; - return ( <> - {currentTenant && currentTenant !== "" ? ( - - ) : ( - Please select a tenant to view mailbox forwarding settings. - )} - { - if (result?.Metadata?.QueueId) { - setSyncQueueId(result.Metadata.QueueId); - } - }, - }} + + {reportDB.syncDialog} ); }; diff --git a/src/pages/email/reports/mailbox-permissions/index.js b/src/pages/email/reports/mailbox-permissions/index.js index cdeff1997a46..da771b6e90f0 100644 --- a/src/pages/email/reports/mailbox-permissions/index.js +++ b/src/pages/email/reports/mailbox-permissions/index.js @@ -1,54 +1,44 @@ import { Layout as DashboardLayout } from '../../../../layouts/index.js' import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' import { useState } from 'react' -import { Button, Alert, SvgIcon, Tooltip, Chip } from '@mui/material' -import { useSettings } from '../../../../hooks/use-settings' +import { Tooltip, Chip } from '@mui/material' import { Stack } from '@mui/system' -import { Sync, CloudDone, Person, Inbox } from '@mui/icons-material' -import { useDialog } from '../../../../hooks/use-dialog' -import { CippApiDialog } from '../../../../components/CippComponents/CippApiDialog' -import { CippQueueTracker } from '../../../../components/CippTable/CippQueueTracker' +import { Person, Inbox } from '@mui/icons-material' +import { useCippReportDB } from '../../../../components/CippComponents/CippReportDBControls' const Page = () => { const [byUser, setByUser] = useState(true) - const currentTenant = useSettings().currentTenant - const syncDialog = useDialog() - const [syncQueueId, setSyncQueueId] = useState(null) - const isAllTenants = currentTenant === 'AllTenants' + const reportDB = useCippReportDB({ + apiUrl: '/api/ListMailboxPermissions', + queryKey: 'mailbox-permissions', + cacheName: 'Mailboxes', + syncTitle: 'Sync Mailbox Permissions Cache', + syncData: { Types: 'Permissions' }, + allowToggle: false, + defaultCached: true, + cacheColumns: ['MailboxCacheTimestamp', 'PermissionCacheTimestamp'], + }) const columns = byUser ? [ - ...(isAllTenants ? ['Tenant'] : []), + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), 'User', 'UserMailboxType', 'Permissions', - 'MailboxCacheTimestamp', - 'PermissionCacheTimestamp', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), ] : [ - ...(isAllTenants ? ['Tenant'] : []), + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), 'MailboxUPN', 'MailboxDisplayName', 'MailboxType', 'Permissions', - 'MailboxCacheTimestamp', - 'PermissionCacheTimestamp', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), ] - // Compute apiData based on byUser directly (no useState needed) - const apiData = { - UseReportDB: true, - ByUser: byUser, - } - - const pageActions = [ - - + const pageActions = ( + { variant="outlined" /> - - - - } - label="Cached" - color="primary" - size="small" - disabled - variant="outlined" - /> - - - , - ] + {reportDB.controls} + + ) return ( <> - {currentTenant && currentTenant !== '' ? ( - - ) : ( - Please select a tenant to view mailbox permissions. - )} - { - if (result?.Metadata?.QueueId) { - setSyncQueueId(result.Metadata.QueueId) - } - }, - }} + + {reportDB.syncDialog} ) } diff --git a/src/pages/email/tools/message-trace/index.js b/src/pages/email/tools/message-trace/index.js index 56ccf9bcd20a..d5876859b182 100644 --- a/src/pages/email/tools/message-trace/index.js +++ b/src/pages/email/tools/message-trace/index.js @@ -347,6 +347,5 @@ const Page = () => { ); }; -Page.getLayout = (page) => {page}; - +Page.getLayout = (page) => {page}; export default Page; diff --git a/src/pages/endpoint/MEM/assignment-filters/index.js b/src/pages/endpoint/MEM/assignment-filters/index.js index 462647494c98..bedf0ef1ada4 100644 --- a/src/pages/endpoint/MEM/assignment-filters/index.js +++ b/src/pages/endpoint/MEM/assignment-filters/index.js @@ -5,11 +5,19 @@ import Link from "next/link"; import { TrashIcon } from "@heroicons/react/24/outline"; import { Edit, Add, Book } from "@mui/icons-material"; import { Stack } from "@mui/system"; -import { useSettings } from "../../../../hooks/use-settings"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const Page = () => { const pageTitle = "Assignment Filters"; - const { currentTenant } = useSettings(); + + const reportDB = useCippReportDB({ + apiUrl: "/api/ListAssignmentFilters", + queryKey: "assignment-filters", + cacheName: "IntuneAssignmentFilters", + syncTitle: "Sync Assignment Filters Report", + allowToggle: true, + defaultCached: false, + }); const actions = [ { @@ -62,28 +70,35 @@ const Page = () => { actions: actions, }; + const simpleColumns = [ + ...reportDB.cacheColumns, + "displayName", + "description", + "platform", + "assignmentFilterManagementType", + "rule", + ]; + return ( - - - - } - apiUrl="/api/ListAssignmentFilters" - queryKey={`assignment-filters-${currentTenant}`} - actions={actions} - offCanvas={offCanvas} - simpleColumns={[ - "displayName", - "description", - "platform", - "assignmentFilterManagementType", - "rule", - ]} - /> + <> + + + {reportDB.controls} + + } + apiUrl={reportDB.resolvedApiUrl} + queryKey={reportDB.resolvedQueryKey} + actions={actions} + offCanvas={offCanvas} + simpleColumns={simpleColumns} + /> + {reportDB.syncDialog} + ); }; diff --git a/src/pages/endpoint/MEM/compare-policies/index.js b/src/pages/endpoint/MEM/compare-policies/index.js index da74c739462b..80b660e666a1 100644 --- a/src/pages/endpoint/MEM/compare-policies/index.js +++ b/src/pages/endpoint/MEM/compare-policies/index.js @@ -4,7 +4,7 @@ import { ApiPostCall } from "../../../../api/ApiCall"; import { CippFormComponent } from "../../../../components/CippComponents/CippFormComponent"; import { CippFormCondition } from "../../../../components/CippComponents/CippFormCondition"; import { CippFormTenantSelector } from "../../../../components/CippComponents/CippFormTenantSelector"; -import { CippCodeBlock } from "../../../../components/CippComponents/CippCodeBlock"; +import CippJsonView from "../../../../components/CippFormPages/CippJSONView"; import { Box, Button, @@ -19,16 +19,12 @@ import { TableHead, TableRow, Paper, - Accordion, - AccordionSummary, - AccordionDetails, Alert, Stack, Chip, Skeleton, } from "@mui/material"; import { - ExpandMore as ExpandMoreIcon, CompareArrows as CompareArrowsIcon, CheckCircle as CheckCircleIcon, Error as ErrorIcon, @@ -359,14 +355,10 @@ const Page = () => { return errData?.Results || compareApi.error?.message || "An error occurred"; }, [compareApi.isError, compareApi.error]); - const sourceAJson = useMemo( - () => (results?.sourceAData ? JSON.stringify(results.sourceAData, null, 2) : ""), - [results?.sourceAData], - ); - const sourceBJson = useMemo( - () => (results?.sourceBData ? JSON.stringify(results.sourceBData, null, 2) : ""), - [results?.sourceBData], - ); + const comparisonRows = useMemo(() => { + if (!Array.isArray(results?.Results)) return []; + return results.Results.filter(Boolean); + }, [results?.Results]); return ( @@ -418,14 +410,14 @@ const Page = () => { > {results.identical ? "Policies are identical - no differences found." - : `${results.Results?.length || 0} difference${results.Results?.length === 1 ? "" : "s"} found between policies.`} + : `${comparisonRows.length} difference${comparisonRows.length === 1 ? "" : "s"} found between policies.`} A: {results.sourceALabel} — B:{" "} {results.sourceBLabel} - {!results.identical && results.Results?.length > 0 && ( + {!results.identical && comparisonRows.length > 0 && ( @@ -437,7 +429,7 @@ const Page = () => { - {results.Results.map((row, index) => ( + {comparisonRows.map((row, index) => ( ({ @@ -457,23 +449,17 @@ const Page = () => { )} - - }> - Source A Raw JSON — {results.sourceALabel} - - - - - - - - }> - Source B Raw JSON — {results.sourceBLabel} - - - - - + + + )} diff --git a/src/pages/endpoint/MEM/devices/index.js b/src/pages/endpoint/MEM/devices/index.js index e8e34e9338d5..087052560120 100644 --- a/src/pages/endpoint/MEM/devices/index.js +++ b/src/pages/endpoint/MEM/devices/index.js @@ -4,7 +4,8 @@ import { CippApiDialog } from "../../../../components/CippComponents/CippApiDial import { useSettings } from "../../../../hooks/use-settings"; import { useDialog } from "../../../../hooks/use-dialog.js"; import { EyeIcon } from "@heroicons/react/24/outline"; -import { Box, Button } from "@mui/material"; +import { Button } from "@mui/material"; +import { Stack } from "@mui/system"; import { Sync, RestartAlt, @@ -412,11 +413,11 @@ const Page = () => { offCanvas={offCanvas} simpleColumns={simpleColumns} cardButton={ - + - + } /> { const pageTitle = 'App Protection & Configuration Policies' const cardButtonPermissions = ['Endpoint.MEM.ReadWrite'] const tenant = useSettings().currentTenant + const reportDB = useCippReportDB({ + apiUrl: '/api/ListAppProtectionPolicies', + queryKey: 'ListAppProtectionPolicies', + cacheName: 'IntuneAppProtectionPolicies', + syncTitle: 'Sync App Protection Policies Report', + allowToggle: true, + defaultCached: false, + }) + const actions = useCippIntunePolicyActions(tenant, 'URLName', { templateData: { ID: 'id', @@ -31,6 +42,7 @@ const Page = () => { } const simpleColumns = [ + ...reportDB.cacheColumns, 'displayName', 'PolicyTypeName', 'PolicyAssignment', @@ -39,20 +51,27 @@ const Page = () => { ] return ( - - } - /> + <> + + + {reportDB.controls} + + } + /> + {reportDB.syncDialog} + ) } diff --git a/src/pages/endpoint/MEM/list-compliance-policies/index.js b/src/pages/endpoint/MEM/list-compliance-policies/index.js index b3394023c492..32574567a0ff 100644 --- a/src/pages/endpoint/MEM/list-compliance-policies/index.js +++ b/src/pages/endpoint/MEM/list-compliance-policies/index.js @@ -4,12 +4,23 @@ import { PermissionButton } from "../../../../utils/permissions.js"; import { CippPolicyDeployDrawer } from "../../../../components/CippComponents/CippPolicyDeployDrawer.jsx"; import { useSettings } from "../../../../hooks/use-settings.js"; import { useCippIntunePolicyActions } from "../../../../components/CippComponents/CippIntunePolicyActions.jsx"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; +import { Stack } from "@mui/system"; const Page = () => { const pageTitle = "Intune Compliance Policies"; const cardButtonPermissions = ["Endpoint.MEM.ReadWrite"]; const tenant = useSettings().currentTenant; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListCompliancePolicies", + queryKey: "ListCompliancePolicies", + cacheName: "IntuneCompliancePolicies", + syncTitle: "Sync Compliance Policies Report", + allowToggle: true, + defaultCached: false, + }); + const actions = useCippIntunePolicyActions(tenant, "deviceCompliancePolicies", { templateData: { ID: "id", @@ -29,6 +40,7 @@ const Page = () => { }; const simpleColumns = [ + ...reportDB.cacheColumns, "displayName", "PolicyTypeName", "PolicyAssignment", @@ -38,20 +50,27 @@ const Page = () => { ]; return ( - - } - /> + <> + + + {reportDB.controls} + + } + /> + {reportDB.syncDialog} + ); }; diff --git a/src/pages/endpoint/MEM/list-policies/index.js b/src/pages/endpoint/MEM/list-policies/index.js index 1a78f45906cb..22559f99097c 100644 --- a/src/pages/endpoint/MEM/list-policies/index.js +++ b/src/pages/endpoint/MEM/list-policies/index.js @@ -4,27 +4,23 @@ import { PermissionButton } from '../../../../utils/permissions.js' import { CippPolicyDeployDrawer } from '../../../../components/CippComponents/CippPolicyDeployDrawer.jsx' import { useSettings } from '../../../../hooks/use-settings.js' import { useCippIntunePolicyActions } from '../../../../components/CippComponents/CippIntunePolicyActions.jsx' -import { Sync, Info, CloudDone, Bolt } from '@mui/icons-material' -import { Button, SvgIcon, IconButton, Tooltip, Chip } from '@mui/material' +import { useCippReportDB } from '../../../../components/CippComponents/CippReportDBControls' +import { CippIntunePolicyDetails } from '../../../../components/CippComponents/CippIntunePolicyDetails.jsx' import { Stack } from '@mui/system' -import { useDialog } from '../../../../hooks/use-dialog' -import { CippApiDialog } from '../../../../components/CippComponents/CippApiDialog' -import { CippQueueTracker } from '../../../../components/CippTable/CippQueueTracker' -import { useState, useEffect } from 'react' const Page = () => { const pageTitle = 'Configuration Policies' const cardButtonPermissions = ['Endpoint.MEM.ReadWrite'] const tenant = useSettings().currentTenant - const isAllTenants = tenant === 'AllTenants' - const syncDialog = useDialog() - const [syncQueueId, setSyncQueueId] = useState(null) - const [useReportDB, setUseReportDB] = useState(isAllTenants) - // Reset toggle whenever the tenant changes - useEffect(() => { - setUseReportDB(tenant === 'AllTenants') - }, [tenant]) + const reportDB = useCippReportDB({ + apiUrl: '/api/ListIntunePolicy', + queryKey: 'ListIntunePolicy', + cacheName: 'IntunePolicies', + syncTitle: 'Sync Intune Policy Report', + allowToggle: true, + defaultCached: false, + }) const actions = useCippIntunePolicyActions(tenant, 'URLName', { templateData: { @@ -42,10 +38,12 @@ const Page = () => { 'PolicyTypeName', ], actions: actions, + children: (row) => , + size: 'lg', } const simpleColumns = [ - ...(useReportDB ? ['Tenant', 'CacheTimestamp'] : []), + ...reportDB.cacheColumns, 'displayName', 'PolicyTypeName', 'PolicyAssignment', @@ -54,62 +52,16 @@ const Page = () => { 'lastModifiedDateTime', ] - const pageActions = [ - - {useReportDB && ( - <> - - - - )} - - - : } - label={useReportDB ? 'Cached' : 'Live'} - color="primary" - size="small" - onClick={isAllTenants ? undefined : () => setUseReportDB((prev) => !prev)} - clickable={!isAllTenants} - disabled={isAllTenants} - variant="outlined" - /> - - - , - ] return ( <> { requiredPermissions={cardButtonPermissions} PermissionButton={PermissionButton} /> - {pageActions} + {reportDB.controls} } /> - { - if (result?.Metadata?.QueueId) { - setSyncQueueId(result?.Metadata?.QueueId) - } - }, - }} - /> + {reportDB.syncDialog} ) } diff --git a/src/pages/endpoint/MEM/list-scripts/index.jsx b/src/pages/endpoint/MEM/list-scripts/index.jsx index 91eb0bf675a6..07abf51f5fc1 100644 --- a/src/pages/endpoint/MEM/list-scripts/index.jsx +++ b/src/pages/endpoint/MEM/list-scripts/index.jsx @@ -24,6 +24,7 @@ import { Close, Save, LaptopChromebook } from "@mui/icons-material"; import { useSettings } from "../../../../hooks/use-settings"; import { Stack } from "@mui/system"; import { useQuery, useQueryClient } from "@tanstack/react-query"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const assignmentModeOptions = [ { label: "Replace existing assignments", value: "replace" }, @@ -39,6 +40,17 @@ const Page = () => { const [codeContentChanged, setCodeContentChanged] = useState(false); const [warnOpen, setWarnOpen] = useState(false); const [currentScript, setCurrentScript] = useState(null); + const [scriptTenant, setScriptTenant] = useState(null); + + const tenantFilter = useSettings().currentTenant; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListIntuneScript", + queryKey: "ListIntuneScript", + cacheName: "IntuneScripts", + syncTitle: "Sync Intune Scripts Report", + allowToggle: true, + defaultCached: false, + }); const dispatch = useDispatch(); @@ -48,17 +60,16 @@ const Page = () => { : "powershell"; }, [currentScript?.scriptType]); - const tenantFilter = useSettings().currentTenant; const { isLoading: scriptIsLoading, isRefetching: scriptIsFetching, refetch: scriptRefetch, data, } = useQuery({ - queryKey: ["script", { scriptId }], + queryKey: ["script", { scriptId, scriptTenant }], queryFn: async () => { const response = await fetch( - `/api/EditIntuneScript?TenantFilter=${tenantFilter}&ScriptId=${scriptId}` + `/api/EditIntuneScript?TenantFilter=${scriptTenant || tenantFilter}&ScriptId=${scriptId}` ); return response.json(); }, @@ -79,6 +90,7 @@ const Page = () => { const handleScriptEdit = async (row, action) => { setScriptId(row.id); + setScriptTenant(row?.Tenant || tenantFilter); setCodeOpen(!codeOpen); }; @@ -94,6 +106,7 @@ const Page = () => { setCodeOpen(!codeOpen); setCodeContentChanged(false); setScriptId(null); + setScriptTenant(null); setCodeContent(""); } }; @@ -114,7 +127,7 @@ const Page = () => { scriptType, } = currentScript; const patchData = { - TenantFilter: tenantFilter, + TenantFilter: scriptTenant || tenantFilter, ScriptId: id, ScriptType: scriptType, IntuneScript: JSON.stringify({ @@ -197,7 +210,7 @@ const Page = () => { ], confirmText: 'Are you sure you want to assign "[displayName]" to all users?', customDataformatter: (row, action, formData) => ({ - tenantFilter: tenantFilter, + tenantFilter: tenantFilter === "AllTenants" && row?.Tenant ? row.Tenant : tenantFilter, ID: row?.id, Type: getScriptEndpoint(row?.scriptType), AssignTo: "allLicensedUsers", @@ -223,7 +236,7 @@ const Page = () => { ], confirmText: 'Are you sure you want to assign "[displayName]" to all devices?', customDataformatter: (row, action, formData) => ({ - tenantFilter: tenantFilter, + tenantFilter: tenantFilter === "AllTenants" && row?.Tenant ? row.Tenant : tenantFilter, ID: row?.id, Type: getScriptEndpoint(row?.scriptType), AssignTo: "AllDevices", @@ -249,7 +262,7 @@ const Page = () => { ], confirmText: 'Are you sure you want to assign "[displayName]" to all users and devices?', customDataformatter: (row, action, formData) => ({ - tenantFilter: tenantFilter, + tenantFilter: tenantFilter === "AllTenants" && row?.Tenant ? row.Tenant : tenantFilter, ID: row?.id, Type: getScriptEndpoint(row?.scriptType), AssignTo: "AllDevicesAndUsers", @@ -305,7 +318,7 @@ const Page = () => { customDataformatter: (row, action, formData) => { const selectedGroups = Array.isArray(formData?.groupTargets) ? formData.groupTargets : []; return { - tenantFilter: tenantFilter, + tenantFilter: tenantFilter === "AllTenants" && row?.Tenant ? row.Tenant : tenantFilter, ID: row?.id, Type: getScriptEndpoint(row?.scriptType), GroupIds: selectedGroups.map((group) => group.value).filter(Boolean), @@ -354,6 +367,7 @@ const Page = () => { }; const simpleColumns = [ + ...reportDB.cacheColumns, "scriptType", "displayName", "ScriptAssignment", @@ -367,10 +381,12 @@ const Page = () => { <> @@ -427,6 +443,7 @@ const Page = () => { setWarnOpen(false); setCodeContent(""); setScriptId(null); + setScriptTenant(null); setCodeContentChanged(false); }} > @@ -434,9 +451,10 @@ const Page = () => { + {reportDB.syncDialog} ); }; -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page}; export default Page; diff --git a/src/pages/endpoint/MEM/list-templates/index.js b/src/pages/endpoint/MEM/list-templates/index.js index fcfc8aa81e5a..c1c81670d8b7 100644 --- a/src/pages/endpoint/MEM/list-templates/index.js +++ b/src/pages/endpoint/MEM/list-templates/index.js @@ -1,161 +1,251 @@ -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; -import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { PencilIcon, TrashIcon } from "@heroicons/react/24/outline"; -import { Edit, GitHub, LocalOffer, LocalOfferOutlined, CopyAll } from "@mui/icons-material"; -import CippJsonView from "../../../../components/CippFormPages/CippJSONView"; -import { ApiGetCall } from "../../../../api/ApiCall"; -import { CippPolicyImportDrawer } from "../../../../components/CippComponents/CippPolicyImportDrawer.jsx"; -import { PermissionButton } from "../../../../utils/permissions.js"; +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { PencilIcon, TrashIcon } from '@heroicons/react/24/outline' +import { Edit, GitHub, LocalOffer, LocalOfferOutlined, CopyAll } from '@mui/icons-material' +import CippJsonView from '../../../../components/CippFormPages/CippJSONView' +import { ApiGetCall } from '../../../../api/ApiCall' +import { CippPolicyImportDrawer } from '../../../../components/CippComponents/CippPolicyImportDrawer.jsx' +import { PermissionButton } from '../../../../utils/permissions.js' +import { + Box, + Chip, + Link, + Stack, + Table, + TableBody, + TableCell, + TableHead, + TableRow, + Tooltip, + Typography, +} from '@mui/material' +import NextLink from 'next/link' const Page = () => { - const pageTitle = "Available Endpoint Manager Templates"; - const cardButtonPermissions = ["Endpoint.MEM.ReadWrite"]; + const pageTitle = 'Available Endpoint Manager Templates' + const cardButtonPermissions = ['Endpoint.MEM.ReadWrite'] const integrations = ApiGetCall({ - url: "/api/ListExtensionsConfig", - queryKey: "Integrations", + url: '/api/ListExtensionsConfig', + queryKey: 'Integrations', refetchOnMount: false, refetchOnReconnect: false, - }); + }) const actions = [ { - label: "Edit Template", + label: 'Edit Template', link: `/endpoint/MEM/list-templates/edit?id=[GUID]`, icon: , - color: "info", + color: 'info', condition: (row) => row.isSynced === false, }, { - label: "Edit Template Name and Description", - type: "POST", - url: "/api/ExecEditTemplate", + label: 'Edit Template Name and Description', + type: 'POST', + url: '/api/ExecEditTemplate', fields: [ { - type: "textField", - name: "displayName", - label: "Display Name", + type: 'textField', + name: 'displayName', + label: 'Display Name', }, { - type: "textField", - name: "description", - label: "Description", + type: 'textField', + name: 'description', + label: 'Description', }, ], - data: { GUID: "GUID", Type: "!IntuneTemplate" }, + data: { GUID: 'GUID', Type: '!IntuneTemplate' }, defaultvalues: (row) => ({ displayName: row.displayName, description: row.description, }), confirmText: - "Enter the new name and description for the template. Warning: This will disconnect the template from a template library if applied.", + 'Enter the new name and description for the template. Warning: This will disconnect the template from a template library if applied.', multiPost: false, icon: , - color: "info", + color: 'info', }, { - label: "Clone Template", - type: "POST", - url: "/api/ExecCloneTemplate", - data: { GUID: "GUID", Type: "!IntuneTemplate" }, + label: 'Clone Template', + type: 'POST', + url: '/api/ExecCloneTemplate', + data: { GUID: 'GUID', Type: '!IntuneTemplate' }, confirmText: - "Are you sure you want to clone [displayName]? Cloned template are no longer synced with a template library.", + 'Are you sure you want to clone [displayName]? Cloned template are no longer synced with a template library.', multiPost: false, icon: , - color: "info", + color: 'info', }, { - label: "Add to package", - type: "POST", - url: "/api/ExecSetPackageTag", - data: { GUID: "GUID" }, + label: 'Add to package', + type: 'POST', + url: '/api/ExecSetPackageTag', + data: { GUID: 'GUID' }, fields: [ { - type: "textField", - name: "Package", - label: "Package Name", + type: 'textField', + name: 'Package', + label: 'Package Name', required: true, validators: { - required: { value: true, message: "Package name is required" }, + required: { value: true, message: 'Package name is required' }, }, }, ], - confirmText: "Enter the package name to assign to the selected template(s).", + confirmText: 'Enter the package name to assign to the selected template(s).', multiPost: true, icon: , - color: "info", + color: 'info', }, { - label: "Remove from package", - type: "POST", - url: "/api/ExecSetPackageTag", - data: { GUID: "GUID", Remove: true }, - confirmText: "Are you sure you want to remove the selected template(s) from their package?", + label: 'Remove from package', + type: 'POST', + url: '/api/ExecSetPackageTag', + data: { GUID: 'GUID', Remove: true }, + confirmText: 'Are you sure you want to remove the selected template(s) from their package?', multiPost: true, icon: , - color: "warning", + color: 'warning', }, { - label: "Save to GitHub", - type: "POST", - url: "/api/ExecCommunityRepo", + label: 'Save to GitHub', + type: 'POST', + url: '/api/ExecCommunityRepo', icon: , data: { - Action: "UploadTemplate", - GUID: "GUID", + Action: 'UploadTemplate', + GUID: 'GUID', }, fields: [ { - label: "Repository", - name: "FullName", - type: "select", + label: 'Repository', + name: 'FullName', + type: 'select', api: { - url: "/api/ListCommunityRepos", + url: '/api/ListCommunityRepos', data: { WriteAccess: true, }, - queryKey: "CommunityRepos-Write", - dataKey: "Results", - valueField: "FullName", - labelField: "FullName", + queryKey: 'CommunityRepos-Write', + dataKey: 'Results', + valueField: 'FullName', + labelField: 'FullName', }, multiple: false, creatable: false, required: true, validators: { - required: { value: true, message: "This field is required" }, + required: { value: true, message: 'This field is required' }, }, }, { - label: "Commit Message", - placeholder: "Enter a commit message for adding this file to GitHub", - name: "Message", - type: "textField", + label: 'Commit Message', + placeholder: 'Enter a commit message for adding this file to GitHub', + name: 'Message', + type: 'textField', multiline: true, required: true, rows: 4, }, ], - confirmText: "Are you sure you want to save this template to the selected repository?", + confirmText: 'Are you sure you want to save this template to the selected repository?', condition: () => integrations.isSuccess && integrations?.data?.GitHub?.Enabled, }, { - label: "Delete Template", - type: "POST", - url: "/api/RemoveIntuneTemplate", - data: { ID: "GUID" }, - confirmText: "Do you want to delete the template?", + label: 'Delete Template', + type: 'POST', + url: '/api/RemoveIntuneTemplate', + data: { ID: 'GUID' }, + confirmText: 'Do you want to delete the template?', multiPost: false, icon: , - color: "danger", + color: 'danger', }, - ]; + ] const offCanvas = { - children: (row) => , - size: "lg", - }; + children: (row) => ( + + {Array.isArray(row.usage) && row.usage.length > 0 && ( + + + Used in Standards Templates + +
    + + + Template Name + Included In + + + + {row.usage.map((u, i) => ( + + + + {u.templateName ?? u.templateId} + + + + {u.matchType === 'package' ? ( + + } + /> + + ) : ( + + + + )} + + + ))} + +
    + + )} + + + ), + size: 'lg', + } - const simpleColumns = ["displayName", "isSynced", "package", "description", "Type"]; + const simpleColumns = ['displayName', 'isSynced', 'package', 'description', 'Type', 'usage'] + + const filterList = [ + { + filterName: 'Synced Templates', + value: [{ id: 'isSynced', value: 'Yes' }], + type: 'column', + }, + { + filterName: 'Custom Templates', + value: [{ id: 'isSynced', value: 'No' }], + type: 'column', + }, + ] return ( <> @@ -166,6 +256,7 @@ const Page = () => { actions={actions} offCanvas={offCanvas} simpleColumns={simpleColumns} + filters={filterList} queryKey="ListIntuneTemplates-table" cardButton={ { } /> - ); -}; + ) +} -Page.getLayout = (page) => {page}; -export default Page; +Page.getLayout = (page) => {page} +export default Page diff --git a/src/pages/endpoint/MEM/reusable-settings/index.js b/src/pages/endpoint/MEM/reusable-settings/index.js index c301082ea1f0..75219f0d4136 100644 --- a/src/pages/endpoint/MEM/reusable-settings/index.js +++ b/src/pages/endpoint/MEM/reusable-settings/index.js @@ -4,15 +4,29 @@ import { CippTablePage } from "../../../../components/CippComponents/CippTablePa import { Layout as DashboardLayout } from "../../../../layouts/index.js"; import { useSettings } from "../../../../hooks/use-settings"; import CippJsonView from "../../../../components/CippFormPages/CippJSONView"; +import { Stack } from "@mui/system"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const Page = () => { const { currentTenant } = useSettings(); const pageTitle = "Reusable Settings"; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListIntuneReusableSettings", + queryKey: "ListIntuneReusableSettings", + cacheName: "IntuneReusableSettings", + syncTitle: "Sync Reusable Settings Report", + allowToggle: true, + defaultCached: false, + }); + const isAllTenants = reportDB.isAllTenants; + const actions = [ { label: "Edit Reusable Setting", - link: `/endpoint/MEM/reusable-settings/edit?id=[id]&tenant=${currentTenant}&tenantFilter=${currentTenant}`, + link: isAllTenants + ? "/endpoint/MEM/reusable-settings/edit?id=[id]&tenant=[Tenant]&tenantFilter=[Tenant]" + : `/endpoint/MEM/reusable-settings/edit?id=[id]&tenant=${currentTenant}&tenantFilter=${currentTenant}`, }, { label: "Delete Reusable Setting", @@ -47,18 +61,32 @@ const Page = () => { size: "lg", }; + const simpleColumns = [ + ...reportDB.cacheColumns, + "displayName", + "description", + "id", + "version", + ]; + return ( - - } - apiUrl="/api/ListIntuneReusableSettings" - queryKey={`ListIntuneReusableSettings-${currentTenant}`} - actions={actions} - offCanvas={offCanvas} - simpleColumns={["displayName", "description", "id", "version"]} - /> + <> + + + {reportDB.controls} + + } + apiUrl={reportDB.resolvedApiUrl} + queryKey={reportDB.resolvedQueryKey} + actions={actions} + offCanvas={offCanvas} + simpleColumns={simpleColumns} + /> + {reportDB.syncDialog} + ); }; diff --git a/src/pages/endpoint/applications/list/index.js b/src/pages/endpoint/applications/list/index.js index 41671638cfce..fec79a4cf7f9 100644 --- a/src/pages/endpoint/applications/list/index.js +++ b/src/pages/endpoint/applications/list/index.js @@ -4,9 +4,11 @@ import { CippApiDialog } from "../../../../components/CippComponents/CippApiDial import { GlobeAltIcon, TrashIcon, UserIcon, UserGroupIcon } from "@heroicons/react/24/outline"; import { LaptopMac, Sync, BookmarkAdd } from "@mui/icons-material"; import { CippApplicationDeployDrawer } from "../../../../components/CippComponents/CippApplicationDeployDrawer"; -import { Button, Box } from "@mui/material"; +import { Button } from "@mui/material"; +import { Stack } from "@mui/system"; import { useSettings } from "../../../../hooks/use-settings.js"; import { useDialog } from "../../../../hooks/use-dialog.js"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const assignmentIntentOptions = [ { label: "Required", value: "Required" }, @@ -44,9 +46,18 @@ const mapOdataToAppType = (odataType) => { const Page = () => { const pageTitle = "Applications"; - const syncDialog = useDialog(); + const vppSyncDialog = useDialog(); const tenant = useSettings().currentTenant; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListApps", + queryKey: "ListApps", + cacheName: "IntuneApplications", + syncTitle: "Sync Intune Applications Report", + allowToggle: true, + defaultCached: false, + }); + const getAssignmentFilterFields = () => [ { type: "autoComplete", @@ -291,6 +302,7 @@ const Page = () => { }; const simpleColumns = [ + ...reportDB.cacheColumns, "displayName", "AppAssignment", "AppExclude", @@ -303,22 +315,24 @@ const Page = () => { <> + - - + {reportDB.controls} + } /> { confirmText: `Are you sure you want to sync Apple Volume Purchase Program (VPP) tokens? This will sync all VPP tokens for ${tenant}.`, }} /> + {reportDB.syncDialog} ); }; -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page}; export default Page; diff --git a/src/pages/endpoint/applications/templates/index.js b/src/pages/endpoint/applications/templates/index.js index 6c4a0eb53285..b4a2a2bd1e28 100644 --- a/src/pages/endpoint/applications/templates/index.js +++ b/src/pages/endpoint/applications/templates/index.js @@ -1,122 +1,127 @@ -import { useState } from "react"; -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; -import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { TrashIcon } from "@heroicons/react/24/outline"; -import { Edit, RocketLaunch } from "@mui/icons-material"; -import { CippAppTemplateDrawer } from "../../../../components/CippComponents/CippAppTemplateDrawer"; -import CippJsonView from "../../../../components/CippFormPages/CippJSONView"; -import { Box } from "@mui/material"; -import { ApiGetCall } from "../../../../api/ApiCall"; -import { GitHub } from "@mui/icons-material"; +import { useState } from 'react' +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { TrashIcon } from '@heroicons/react/24/outline' +import { Edit, RocketLaunch } from '@mui/icons-material' +import { CippAppTemplateDrawer } from '../../../../components/CippComponents/CippAppTemplateDrawer' +import CippJsonView from '../../../../components/CippFormPages/CippJSONView' +import { Box } from '@mui/material' +import { ApiGetCall } from '../../../../api/ApiCall' +import { GitHub } from '@mui/icons-material' const Page = () => { - const pageTitle = "Application Templates"; - const [editDrawerOpen, setEditDrawerOpen] = useState(false); - const [editTemplate, setEditTemplate] = useState(null); + const pageTitle = 'Application Templates' + const [editDrawerOpen, setEditDrawerOpen] = useState(false) + const [editTemplate, setEditTemplate] = useState(null) const integrations = ApiGetCall({ - url: "/api/ListExtensionsConfig", - queryKey: "Integrations", + url: '/api/ListExtensionsConfig', + queryKey: 'Integrations', refetchOnMount: false, refetchOnReconnect: false, - }); + }) const actions = [ { - label: "Edit Template", + label: 'Edit Template', icon: , - color: "info", + color: 'info', noConfirm: true, customFunction: (row) => { - setEditTemplate({ ...row }); - setEditDrawerOpen(true); + setEditTemplate({ ...row }) + setEditDrawerOpen(true) }, }, { - label: "Save to GitHub", - type: "POST", - url: "/api/ExecCommunityRepo", + label: 'Save to GitHub', + type: 'POST', + url: '/api/ExecCommunityRepo', icon: , data: { - Action: "UploadTemplate", - GUID: "GUID", + Action: 'UploadTemplate', + GUID: 'GUID', }, fields: [ { - label: "Repository", - name: "FullName", - type: "select", + label: 'Repository', + name: 'FullName', + type: 'select', api: { - url: "/api/ListCommunityRepos", + url: '/api/ListCommunityRepos', data: { WriteAccess: true, }, - queryKey: "CommunityRepos-Write", - dataKey: "Results", - valueField: "FullName", - labelField: "FullName", + queryKey: 'CommunityRepos-Write', + dataKey: 'Results', + valueField: 'FullName', + labelField: 'FullName', }, multiple: false, creatable: false, required: true, validators: { - required: { value: true, message: "This field is required" }, + required: { value: true, message: 'This field is required' }, }, }, { - label: "Commit Message", - placeholder: "Enter a commit message for adding this file to GitHub", - name: "Message", - type: "textField", + label: 'Commit Message', + placeholder: 'Enter a commit message for adding this file to GitHub', + name: 'Message', + type: 'textField', multiline: true, required: true, rows: 4, }, ], - confirmText: "Are you sure you want to save this template to the selected repository?", + confirmText: 'Are you sure you want to save this template to the selected repository?', condition: () => integrations.isSuccess && integrations?.data?.GitHub?.Enabled, }, { - label: "Deploy Template", - type: "POST", - url: "/api/ExecDeployAppTemplate", + label: 'Deploy Template', + type: 'POST', + url: '/api/ExecDeployAppTemplate', icon: , - color: "info", + color: 'info', fields: [ { - type: "autoComplete", - name: "selectedTenants", - label: "Select Tenants", + type: 'autoComplete', + name: 'selectedTenants', + label: 'Select Tenants', multiple: true, creatable: false, api: { - url: "/api/ListTenants?AllTenantSelector=true", - queryKey: "ListTenants-AppTemplateDeploy", + url: '/api/ListTenants?AllTenantSelector=true', + queryKey: 'ListTenants-AppTemplateDeploy', labelField: (tenant) => `${tenant.displayName} (${tenant.defaultDomainName})`, - valueField: "defaultDomainName", + valueField: 'defaultDomainName', addedField: { - customerId: "customerId", - defaultDomainName: "defaultDomainName", + customerId: 'customerId', + defaultDomainName: 'defaultDomainName', }, }, - validators: { required: "Please select at least one tenant" }, + validators: { required: 'Please select at least one tenant' }, }, { - type: "radio", - name: "AssignTo", - label: "Override Assignment (optional)", + type: 'radio', + name: 'AssignTo', + label: 'Override Assignment (optional)', options: [ - { label: "Keep template assignment", value: "" }, - { label: "Do not assign", value: "On" }, - { label: "Assign to all users", value: "allLicensedUsers" }, - { label: "Assign to all devices", value: "AllDevices" }, - { label: "Assign to all users and devices", value: "AllDevicesAndUsers" }, - { label: "Assign to Custom Group", value: "customGroup" }, + { label: 'Keep template assignment', value: '' }, + { label: 'Do not assign', value: 'On' }, + { label: 'Assign to all users', value: 'allLicensedUsers' }, + { label: 'Assign to all devices', value: 'AllDevices' }, + { label: 'Assign to all users and devices', value: 'AllDevicesAndUsers' }, + { label: 'Assign to Custom Group', value: 'customGroup' }, ], }, { - type: "textField", - name: "customGroup", - label: "Custom Group Names (comma separated, wildcards allowed)", + type: 'textField', + name: 'customGroup', + label: 'Custom Group Names (comma separated, wildcards allowed)', + }, + { + type: 'textField', + name: 'excludeGroup', + label: 'Exclude Group Names (comma separated, wildcards allowed)', }, ], customDataformatter: (row, action, formData) => ({ @@ -125,26 +130,27 @@ const Page = () => { defaultDomainName: t.value, customerId: t.addedFields?.customerId, })), - AssignTo: formData?.AssignTo || "", - customGroup: formData?.customGroup || "", + AssignTo: formData?.AssignTo || '', + customGroup: formData?.customGroup || '', + excludeGroup: formData?.excludeGroup || '', }), confirmText: 'Deploy "[displayName]" ([appCount] apps) to the selected tenants?', }, { - label: "Delete Template", - type: "POST", - url: "/api/RemoveAppTemplate", - data: { ID: "GUID" }, + label: 'Delete Template', + type: 'POST', + url: '/api/RemoveAppTemplate', + data: { ID: 'GUID' }, confirmText: 'Delete the template "[displayName]"?', icon: , - color: "danger", + color: 'danger', }, - ]; + ] const offCanvas = { children: (row) => , - size: "lg", - }; + size: 'lg', + } return ( <> @@ -154,10 +160,10 @@ const Page = () => { apiUrl="/api/ListAppTemplates" actions={actions} offCanvas={offCanvas} - simpleColumns={["displayName", "description", "appCount", "appTypes", "appNames"]} + simpleColumns={['displayName', 'description', 'appCount', 'appTypes', 'appNames']} queryKey="ListAppTemplates" cardButton={ - + } @@ -166,13 +172,13 @@ const Page = () => { editData={editTemplate} open={editDrawerOpen} onClose={() => { - setEditDrawerOpen(false); - setEditTemplate(null); + setEditDrawerOpen(false) + setEditTemplate(null) }} /> - ); -}; + ) +} -Page.getLayout = (page) => {page}; -export default Page; +Page.getLayout = (page) => {page} +export default Page diff --git a/src/pages/endpoint/autopilot/list-devices/index.js b/src/pages/endpoint/autopilot/list-devices/index.js index 3c25271def7c..c6694e3d1920 100644 --- a/src/pages/endpoint/autopilot/list-devices/index.js +++ b/src/pages/endpoint/autopilot/list-devices/index.js @@ -1,145 +1,151 @@ -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; -import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { CippApiDialog } from "../../../../components/CippComponents/CippApiDialog.jsx"; -import { Button } from "@mui/material"; -import { PersonAdd, Delete, Sync, Add, Edit, Sell } from "@mui/icons-material"; -import { useDialog } from "../../../../hooks/use-dialog"; -import Link from "next/link"; +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { CippApiDialog } from '../../../../components/CippComponents/CippApiDialog.jsx' +import { Button } from '@mui/material' +import { PersonAdd, Delete, Sync, Add, Edit, Sell } from '@mui/icons-material' +import { useDialog } from '../../../../hooks/use-dialog' +import Link from 'next/link' const Page = () => { - const pageTitle = "Autopilot Devices"; - const createDialog = useDialog(); + const pageTitle = 'Autopilot Devices' + const createDialog = useDialog() const actions = [ { - label: "Assign device", + label: 'Assign device', icon: , - type: "POST", - url: "/api/ExecAssignAPDevice", + type: 'POST', + url: '/api/ExecAssignAPDevice', data: { - device: "id", - serialNumber: "serialNumber", + device: 'id', + serialNumber: 'serialNumber', }, - confirmText: "Select the user to assign the device to", + confirmText: 'Select the user to assign the device to', fields: [ { - type: "autoComplete", - name: "user", - label: "Select User", + type: 'autoComplete', + name: 'user', + label: 'Select User', multiple: false, creatable: false, api: { - url: "/api/listUsers", + url: '/api/listUsers', labelField: (user) => `${user.displayName} (${user.userPrincipalName})`, - valueField: "userPrincipalName", + valueField: 'userPrincipalName', addedField: { - userPrincipalName: "userPrincipalName", - addressableUserName: "displayName", + userPrincipalName: 'userPrincipalName', + addressableUserName: 'displayName', }, }, }, ], - color: "info", + color: 'info', }, { - label: "Rename Device", + label: 'Rename Device', icon: , - type: "POST", - url: "/api/ExecRenameAPDevice", + type: 'POST', + url: '/api/ExecRenameAPDevice', data: { - deviceId: "id", - serialNumber: "serialNumber", + deviceId: 'id', + serialNumber: 'serialNumber', }, - confirmText: "Enter the new display name for the device.", + confirmText: 'Enter the new display name for the device.', fields: [ { - type: "textField", - name: "displayName", - label: "New Display Name", + type: 'textField', + name: 'displayName', + label: 'New Display Name', required: true, validate: (value) => { if (!value) { - return "Display name is required."; + return 'Display name is required.' } if (value.length > 15) { - return "Display name must be 15 characters or less."; + return 'Display name must be 15 characters or less.' } if (/\s/.test(value)) { - return "Display name cannot contain spaces."; + return 'Display name cannot contain spaces.' } if (!/^[a-zA-Z0-9-]+$/.test(value)) { - return "Display name can only contain letters, numbers, and hyphens."; + return 'Display name can only contain letters, numbers, and hyphens.' } if (/^[0-9]+$/.test(value)) { - return "Display name cannot contain only numbers."; + return 'Display name cannot contain only numbers.' } - return true; // Indicates validation passed + return true // Indicates validation passed }, }, ], - color: "secondary", + color: 'secondary', }, { - label: "Edit Group Tag", + label: 'Edit Group Tag', icon: , - type: "POST", - url: "/api/ExecSetAPDeviceGroupTag", + type: 'POST', + url: '/api/ExecSetAPDeviceGroupTag', data: { - deviceId: "id", - serialNumber: "serialNumber", + deviceId: 'id', + serialNumber: 'serialNumber', }, - confirmText: "Enter the new group tag for the device.", + confirmText: 'Enter the new group tag for the device.', fields: [ { - type: "textField", - name: "groupTag", - label: "Group Tag", + type: 'textField', + name: 'groupTag', + label: 'Group Tag', validate: (value) => { if (value && value.length > 128) { - return "Group tag cannot exceed 128 characters."; + return 'Group tag cannot exceed 128 characters.' } - return true; // Validation passed + return true // Validation passed }, }, ], - color: "secondary", + color: 'secondary', }, { - label: "Delete Device", + label: 'Delete Device', icon: , - type: "POST", - url: "/api/RemoveAPDevice", - data: { ID: "id" }, - confirmText: "Are you sure you want to delete this device?", - color: "danger", + type: 'POST', + url: '/api/RemoveAPDevice', + data: { ID: 'id' }, + confirmText: 'Are you sure you want to delete this device?', + color: 'danger', }, - ]; + ] const offCanvas = { extendedInfoFields: [ - "userPrincipalName", - "productKey", - "serialNumber", - "model", - "manufacturer", + 'userPrincipalName', + 'productKey', + 'serialNumber', + 'model', + 'manufacturer', ], actions: actions, - }; + } const simpleColumns = [ - "displayName", - "serialNumber", - "model", - "manufacturer", - "groupTag", - "enrollmentState", - ]; + 'Tenant', + 'displayName', + 'serialNumber', + 'model', + 'manufacturer', + 'groupTag', + 'enrollmentState', + ] return ( <> { title="Sync Autopilot Devices" createDialog={createDialog} api={{ - type: "POST", - url: "/api/ExecSyncAPDevices", + type: 'POST', + url: '/api/ExecSyncAPDevices', data: {}, confirmText: - "Are you sure you want to sync Autopilot devices? This can only be done every 10 minutes.", + 'Are you sure you want to sync Autopilot devices? This can only be done every 10 minutes.', }} /> - ); -}; + ) +} -Page.getLayout = (page) => {page}; -export default Page; +Page.getLayout = (page) => {page} +export default Page diff --git a/src/pages/endpoint/autopilot/list-status-pages/index.js b/src/pages/endpoint/autopilot/list-status-pages/index.js index 4ec8a3b93313..affa4e128579 100644 --- a/src/pages/endpoint/autopilot/list-status-pages/index.js +++ b/src/pages/endpoint/autopilot/list-status-pages/index.js @@ -1,26 +1,34 @@ -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; -import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { CippAutopilotStatusPageDrawer } from "../../../../components/CippComponents/CippAutopilotStatusPageDrawer"; +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { CippAutopilotStatusPageDrawer } from '../../../../components/CippComponents/CippAutopilotStatusPageDrawer' const Page = () => { - const pageTitle = "Autopilot Status Pages"; + const pageTitle = 'Autopilot Status Pages' const simpleColumns = [ - "displayName", - "Description", - "installProgressTimeoutInMinutes", - "showInstallationProgress", - "blockDeviceSetupRetryByUser", - "allowDeviceResetOnInstallFailure", - "allowDeviceUseOnInstallFailure", - ]; + 'Tenant', + 'displayName', + 'Description', + 'installProgressTimeoutInMinutes', + 'showInstallationProgress', + 'blockDeviceSetupRetryByUser', + 'allowDeviceResetOnInstallFailure', + 'allowDeviceUseOnInstallFailure', + ] // No actions specified in the original file, so none are included here. return ( @@ -28,8 +36,8 @@ const Page = () => { } /> - ); -}; + ) +} -Page.getLayout = (page) => {page}; -export default Page; +Page.getLayout = (page) => {page} +export default Page diff --git a/src/pages/identity/administration/groups/index.js b/src/pages/identity/administration/groups/index.js index 3320ac353204..c64f443f5728 100644 --- a/src/pages/identity/administration/groups/index.js +++ b/src/pages/identity/administration/groups/index.js @@ -1,8 +1,8 @@ -import { Button } from "@mui/material"; -import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; -import Link from "next/link"; -import { TrashIcon, EyeIcon } from "@heroicons/react/24/outline"; +import { Button } from '@mui/material' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import Link from 'next/link' +import { TrashIcon, EyeIcon } from '@heroicons/react/24/outline' import { Visibility, GroupAdd, @@ -12,108 +12,120 @@ import { GroupSharp, CloudSync, RocketLaunch, -} from "@mui/icons-material"; -import { Stack } from "@mui/system"; -import { useState } from "react"; -import { useSettings } from "../../../../hooks/use-settings"; +} from '@mui/icons-material' +import { Stack } from '@mui/system' +import { useState } from 'react' +import { useSettings } from '../../../../hooks/use-settings' +import { useCippReportDB } from '../../../../components/CippComponents/CippReportDBControls' const Page = () => { - const pageTitle = "Groups"; - const [showMembers, setShowMembers] = useState(false); - const { currentTenant } = useSettings(); + const pageTitle = 'Groups' + const [showMembers, setShowMembers] = useState(false) + const { currentTenant } = useSettings() + + const reportDB = useCippReportDB({ + apiUrl: '/api/ListGroups', + queryKey: 'ListGroups', + cacheName: 'Groups', + syncTitle: 'Sync Groups Report', + allowToggle: true, + defaultCached: false, + allowAllTenantSync: true, + cacheColumns: ['CacheTimestamp'], + }) const handleMembersToggle = () => { - setShowMembers(!showMembers); - }; + setShowMembers(!showMembers) + } const actions = [ { - label: "View Group", + label: 'View Group', link: `/identity/administration/groups/group?groupId=[id]&tenantFilter=${currentTenant}`, - color: "info", + color: 'info', icon: , multiPost: false, }, { //tested - label: "Edit Group", - link: "/identity/administration/groups/edit?groupId=[id]&groupType=[groupType]", + label: 'Edit Group', + link: '/identity/administration/groups/edit?groupId=[id]&groupType=[groupType]', multiPost: false, icon: , - color: "success", + color: 'success', }, { - label: "Set Global Address List Visibility", - type: "POST", - url: "/api/ExecGroupsHideFromGAL", + label: 'Set Global Address List Visibility', + type: 'POST', + url: '/api/ExecGroupsHideFromGAL', icon: , data: { - ID: "mail", - GroupType: "groupType", + ID: 'mail', + GroupType: 'groupType', }, fields: [ { - type: "radio", - name: "HidefromGAL", - label: "Global Address List Visibility", + type: 'radio', + name: 'HidefromGAL', + label: 'Global Address List Visibility', options: [ - { label: "Hidden", value: true }, - { label: "Shown", value: false }, + { label: 'Hidden', value: true }, + { label: 'Shown', value: false }, ], - validators: { required: "Please select a visibility option" }, + validators: { required: 'Please select a visibility option' }, }, ], confirmText: - "Are you sure you want to hide this group from the global address list? Remember this will not work if the group is AD Synched.", + 'Are you sure you want to hide this group from the global address list? Remember this will not work if the group is AD Synched.', multiPost: false, }, { - label: "Only allow messages from people inside the organisation", - type: "POST", - url: "/api/ExecGroupsDeliveryManagement", + label: 'Only allow messages from people inside the organisation', + type: 'POST', + url: '/api/ExecGroupsDeliveryManagement', icon: , data: { - ID: "mail", - GroupType: "groupType", + ID: 'mail', + GroupType: 'groupType', OnlyAllowInternal: true, }, confirmText: - "Are you sure you want to only allow messages from people inside the organisation? Remember this will not work if the group is AD Synched.", + 'Are you sure you want to only allow messages from people inside the organisation? Remember this will not work if the group is AD Synched.', multiPost: false, }, { - label: "Allow messages from people inside and outside the organisation", - type: "POST", + label: 'Allow messages from people inside and outside the organisation', + type: 'POST', icon: , - url: "/api/ExecGroupsDeliveryManagement", + url: '/api/ExecGroupsDeliveryManagement', data: { - ID: "mail", - GroupType: "groupType", + ID: 'mail', + GroupType: 'groupType', OnlyAllowInternal: false, }, confirmText: - "Are you sure you want to allow messages from people inside and outside the organisation? Remember this will not work if the group is AD Synched.", + 'Are you sure you want to allow messages from people inside and outside the organisation? Remember this will not work if the group is AD Synched.', multiPost: false, }, { - label: "Set Source of Authority", - type: "POST", - url: "/api/ExecSetCloudManaged", + label: 'Set Source of Authority', + type: 'POST', + url: '/api/ExecSetCloudManaged', icon: , data: { - ID: "id", - displayName: "displayName", - type: "!Group", + ID: 'id', + displayName: 'displayName', + type: '!Group', }, fields: [ { - type: "radio", - name: "isCloudManaged", - label: "Source of Authority", + type: 'radio', + name: 'isCloudManaged', + label: 'Source of Authority', options: [ - { label: "Cloud Managed", value: true }, - { label: "On-Premises Managed", value: false }, + { label: 'Cloud Managed', value: true }, + { label: 'On-Premises Managed', value: false }, ], - validators: { required: "Please select a source of authority" }, + validators: { required: 'Please select a source of authority' }, }, ], confirmText: @@ -121,31 +133,31 @@ const Page = () => { multiPost: false, }, { - label: "Create template based on group", - type: "POST", - url: "/api/AddGroupTemplate", + label: 'Create template based on group', + type: 'POST', + url: '/api/AddGroupTemplate', icon: , data: { - displayName: "displayName", - description: "description", - groupType: "calculatedGroupType", - membershipRules: "membershipRule", - allowExternal: "allowExternal", - username: "mailNickname", + displayName: 'displayName', + description: 'description', + groupType: 'calculatedGroupType', + membershipRules: 'membershipRule', + allowExternal: 'allowExternal', + username: 'mailNickname', }, - confirmText: "Are you sure you want to create a template based on this group?", + confirmText: 'Are you sure you want to create a template based on this group?', multiPost: false, }, { - label: "Create Team from Group", - type: "POST", - url: "/api/AddGroupTeam", + label: 'Create Team from Group', + type: 'POST', + url: '/api/AddGroupTeam', icon: , data: { - GroupId: "id", + GroupId: 'id', }, confirmText: - "Are you sure you want to create a Team from this group? Note: The group must be at least 15 minutes old for this to work.", + 'Are you sure you want to create a Team from this group? Note: The group must be at least 15 minutes old for this to work.', multiPost: false, defaultvalues: { TeamSettings: { @@ -166,7 +178,7 @@ const Page = () => { }, funSettings: { allowGiphy: true, - giphyContentRating: "strict", + giphyContentRating: 'strict', allowStickersAndMemes: false, allowCustomMemes: false, }, @@ -174,181 +186,191 @@ const Page = () => { }, fields: [ { - type: "heading", - name: "memberSettingsHeading", - label: "Member Settings", + type: 'heading', + name: 'memberSettingsHeading', + label: 'Member Settings', }, { - type: "switch", - name: "TeamSettings.memberSettings.allowCreatePrivateChannels", - label: "Allow members to create private channels", + type: 'switch', + name: 'TeamSettings.memberSettings.allowCreatePrivateChannels', + label: 'Allow members to create private channels', }, { - type: "switch", - name: "TeamSettings.memberSettings.allowCreateUpdateChannels", - label: "Allow members to create and update channels", + type: 'switch', + name: 'TeamSettings.memberSettings.allowCreateUpdateChannels', + label: 'Allow members to create and update channels', }, { - type: "switch", - name: "TeamSettings.memberSettings.allowDeleteChannels", - label: "Allow members to delete channels", + type: 'switch', + name: 'TeamSettings.memberSettings.allowDeleteChannels', + label: 'Allow members to delete channels', }, { - type: "switch", - name: "TeamSettings.memberSettings.allowAddRemoveApps", - label: "Allow members to add and remove apps", + type: 'switch', + name: 'TeamSettings.memberSettings.allowAddRemoveApps', + label: 'Allow members to add and remove apps', }, { - type: "switch", - name: "TeamSettings.memberSettings.allowCreateUpdateRemoveTabs", - label: "Allow members to create, update and remove tabs", + type: 'switch', + name: 'TeamSettings.memberSettings.allowCreateUpdateRemoveTabs', + label: 'Allow members to create, update and remove tabs', }, { - type: "switch", - name: "TeamSettings.memberSettings.allowCreateUpdateRemoveConnectors", - label: "Allow members to create, update and remove connectors", + type: 'switch', + name: 'TeamSettings.memberSettings.allowCreateUpdateRemoveConnectors', + label: 'Allow members to create, update and remove connectors', }, { - type: "heading", - name: "messagingSettingsHeading", - label: "Messaging Settings", + type: 'heading', + name: 'messagingSettingsHeading', + label: 'Messaging Settings', }, { - type: "switch", - name: "TeamSettings.messagingSettings.allowUserEditMessages", - label: "Allow users to edit their messages", + type: 'switch', + name: 'TeamSettings.messagingSettings.allowUserEditMessages', + label: 'Allow users to edit their messages', }, { - type: "switch", - name: "TeamSettings.messagingSettings.allowUserDeleteMessages", - label: "Allow users to delete their messages", + type: 'switch', + name: 'TeamSettings.messagingSettings.allowUserDeleteMessages', + label: 'Allow users to delete their messages', }, { - type: "switch", - name: "TeamSettings.messagingSettings.allowOwnerDeleteMessages", - label: "Allow owners to delete messages", + type: 'switch', + name: 'TeamSettings.messagingSettings.allowOwnerDeleteMessages', + label: 'Allow owners to delete messages', }, { - type: "switch", - name: "TeamSettings.messagingSettings.allowTeamMentions", - label: "Allow @team mentions", + type: 'switch', + name: 'TeamSettings.messagingSettings.allowTeamMentions', + label: 'Allow @team mentions', }, { - type: "switch", - name: "TeamSettings.messagingSettings.allowChannelMentions", - label: "Allow @channel mentions", + type: 'switch', + name: 'TeamSettings.messagingSettings.allowChannelMentions', + label: 'Allow @channel mentions', }, { - type: "heading", - name: "funSettingsHeading", - label: "Fun Settings", + type: 'heading', + name: 'funSettingsHeading', + label: 'Fun Settings', }, { - type: "switch", - name: "TeamSettings.funSettings.allowGiphy", - label: "Allow Giphy", + type: 'switch', + name: 'TeamSettings.funSettings.allowGiphy', + label: 'Allow Giphy', }, { - type: "select", - name: "TeamSettings.funSettings.giphyContentRating", - label: "Giphy content rating", + type: 'select', + name: 'TeamSettings.funSettings.giphyContentRating', + label: 'Giphy content rating', options: [ - { value: "strict", label: "Strict" }, - { value: "moderate", label: "Moderate" }, + { value: 'strict', label: 'Strict' }, + { value: 'moderate', label: 'Moderate' }, ], }, { - type: "switch", - name: "TeamSettings.funSettings.allowStickersAndMemes", - label: "Allow stickers and memes", + type: 'switch', + name: 'TeamSettings.funSettings.allowStickersAndMemes', + label: 'Allow stickers and memes', }, { - type: "switch", - name: "TeamSettings.funSettings.allowCustomMemes", - label: "Allow custom memes", + type: 'switch', + name: 'TeamSettings.funSettings.allowCustomMemes', + label: 'Allow custom memes', }, ], - condition: (row) => row?.calculatedGroupType === "m365", + condition: (row) => row?.calculatedGroupType === 'm365', }, { - label: "Delete Group", - type: "POST", - url: "/api/ExecGroupsDelete", + label: 'Delete Group', + type: 'POST', + url: '/api/ExecGroupsDelete', icon: , data: { - ID: "id", - GroupType: "groupType", - DisplayName: "displayName", + ID: 'id', + GroupType: 'groupType', + DisplayName: 'displayName', }, - confirmText: "Are you sure you want to delete this group.", + confirmText: 'Are you sure you want to delete this group.', multiPost: false, }, - ]; + ] const offCanvas = { extendedInfoFields: [ - "displayName", - "userPrincipalName", - "id", - "mail", - "description", - "mailEnabled", - "securityEnabled", - "visibility", - "assignedLicenses", - "licenseProcessingState.state", - "onPremisesSamAccountName", - "membershipRule", - "onPremisesSyncEnabled", + 'displayName', + 'userPrincipalName', + 'id', + 'mail', + 'description', + 'mailEnabled', + 'securityEnabled', + 'visibility', + 'assignedLicenses', + 'licenseProcessingState.state', + 'onPremisesSamAccountName', + 'membershipRule', + 'onPremisesSyncEnabled', ], actions: actions, - }; + } return ( - - - - - - } - apiUrl="/api/ListGroups" - apiData={{ expandMembers: showMembers }} - queryKey={ - showMembers - ? `groups-with-members-${currentTenant}` - : `groups-without-members-${currentTenant}` - } - actions={actions} - offCanvas={offCanvas} - simpleColumns={[ - "displayName", - "description", - "mail", - "mailEnabled", - "mailNickname", - "groupType", - "assignedLicenses", - "licenseProcessingState.state", - "visibility", - "onPremisesSamAccountName", - "membershipRule", - "onPremisesSyncEnabled", - ]} - /> - ); -}; + <> + + {!reportDB.useReportDB && ( + + )} + + + {reportDB.controls} + + } + apiUrl={reportDB.resolvedApiUrl} + apiData={reportDB.useReportDB ? undefined : { expandMembers: showMembers }} + queryKey={ + reportDB.useReportDB + ? reportDB.resolvedQueryKey + : showMembers + ? `groups-with-members-${currentTenant}` + : `groups-without-members-${currentTenant}` + } + actions={actions} + offCanvas={offCanvas} + simpleColumns={[ + ...reportDB.cacheColumns, + ...(reportDB.isAllTenants && reportDB.useReportDB ? ['Tenant'] : []), + 'displayName', + 'description', + 'mail', + 'mailEnabled', + 'mailNickname', + 'groupType', + 'assignedLicenses', + 'licenseProcessingState.state', + 'visibility', + 'onPremisesSamAccountName', + 'membershipRule', + 'onPremisesSyncEnabled', + ]} + /> + {reportDB.syncDialog} + + ) +} -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page} -export default Page; +export default Page diff --git a/src/pages/identity/administration/jit-admin-templates/add.jsx b/src/pages/identity/administration/jit-admin-templates/add.jsx index 895bc63e8332..0a57a8b33882 100644 --- a/src/pages/identity/administration/jit-admin-templates/add.jsx +++ b/src/pages/identity/administration/jit-admin-templates/add.jsx @@ -7,8 +7,11 @@ import CippFormComponent from "../../../../components/CippComponents/CippFormCom import { CippFormCondition } from "../../../../components/CippComponents/CippFormCondition"; import { CippFormDomainSelector } from "../../../../components/CippComponents/CippFormDomainSelector"; import { CippFormUserSelector } from "../../../../components/CippComponents/CippFormUserSelector"; +import { CippFormGroupSelector } from "../../../../components/CippComponents/CippFormGroupSelector"; import gdaproles from "../../../../data/GDAPRoles.json"; +import countryList from "../../../../data/countryList.json"; import { useSettings } from "../../../../hooks/use-settings"; +import { useEffect } from "react"; const Page = () => { const userSettingsDefaults = useSettings(); @@ -21,6 +24,39 @@ const Page = () => { const watchedTenant = useWatch({ control: formControl.control, name: "tenantFilter" }); const isAllTenants = watchedTenant?.value === "AllTenants" || watchedTenant === "AllTenants"; + const useRoles = useWatch({ control: formControl.control, name: "defaultUseRoles" }); + const useGroups = useWatch({ control: formControl.control, name: "defaultUseGroups" }); + + // Clear fields when switches are toggled off + useEffect(() => { + if (!useRoles) { + formControl.setValue("defaultRoles", []); + } + }, [useRoles]); + + useEffect(() => { + if (!useGroups) { + formControl.setValue("defaultGroups", []); + } + }, [useGroups]); + + // Reset expiration action when switches change + useEffect(() => { + const currentAction = formControl.getValues("defaultExpireAction"); + if (!currentAction?.value) return; + + if (!useRoles && currentAction.value === "RemoveRoles") { + formControl.setValue("defaultExpireAction", null); + } else if (!useGroups && currentAction.value === "RemoveGroups") { + formControl.setValue("defaultExpireAction", null); + } else if ((!useRoles || !useGroups) && currentAction.value === "RemoveRolesAndGroups") { + formControl.setValue("defaultExpireAction", null); + } else if (useRoles && useGroups && currentAction.value === "RemoveRoles") { + formControl.setValue("defaultExpireAction", null); + } else if (useRoles && useGroups && currentAction.value === "RemoveGroups") { + formControl.setValue("defaultExpireAction", null); + } + }, [useRoles, useGroups]); return ( <> @@ -64,26 +100,83 @@ const Page = () => { ({ label: role.Name, value: role.ObjectId }))} + type="switch" + label="Admin Roles" + name="defaultUseRoles" formControl={formControl} - required={true} - validators={{ - required: "At least one default role is required", - validate: (options) => { - if (!options?.length) { - return "At least one default role is required"; - } - return true; - }, - }} /> + {!isAllTenants && ( + + )} + {!useRoles && !useGroups && ( + + Please select at least "Admin Roles" or "Group Membership" + + )} + + + ({ label: role.Name, value: role.ObjectId }))} + formControl={formControl} + required={true} + validators={{ + required: "At least one default role is required", + validate: (options) => { + if (!options?.length) { + return "At least one default role is required"; + } + return true; + }, + }} + /> + + + + {!isAllTenants && ( + + + { + if (!options?.length) { + return "At least one group is required"; + } + return true; + }, + }} + /> + + + )} + { name="defaultExpireAction" multiple={false} creatable={false} - options={[ - { label: "Delete User", value: "DeleteUser" }, - { label: "Disable User", value: "DisableUser" }, - { label: "Remove Roles", value: "RemoveRoles" }, - ]} + options={(() => { + const opts = [ + { label: "Delete User", value: "DeleteUser" }, + { label: "Disable User", value: "DisableUser" }, + ]; + if (useRoles && useGroups) { + opts.push({ label: "Remove Roles and Groups", value: "RemoveRolesAndGroups" }); + } else if (useRoles) { + opts.push({ label: "Remove Roles", value: "RemoveRoles" }); + } else if (useGroups) { + opts.push({ label: "Remove Groups", value: "RemoveGroups" }); + } + return opts; + })()} formControl={formControl} + required={true} + validators={{ required: "Expiration action is required" }} /> @@ -249,6 +353,19 @@ const Page = () => { /> )} + + ({ + label: Name, + value: Code, + }))} + formControl={formControl} + /> + { const watchedTenant = useWatch({ control: formControl.control, name: "tenantFilter" }); const isAllTenants = watchedTenant?.value === "AllTenants" || watchedTenant === "AllTenants"; + const useRoles = useWatch({ control: formControl.control, name: "defaultUseRoles" }); + const useGroups = useWatch({ control: formControl.control, name: "defaultUseGroups" }); + + // Clear fields when switches are toggled off + useEffect(() => { + if (!useRoles) { + formControl.setValue("defaultRoles", []); + } + }, [useRoles]); + + useEffect(() => { + if (!useGroups) { + formControl.setValue("defaultGroups", []); + } + }, [useGroups]); + + // Reset expiration action when switches change + useEffect(() => { + const currentAction = formControl.getValues("defaultExpireAction"); + if (!currentAction?.value) return; + + if (!useRoles && currentAction.value === "RemoveRoles") { + formControl.setValue("defaultExpireAction", null); + } else if (!useGroups && currentAction.value === "RemoveGroups") { + formControl.setValue("defaultExpireAction", null); + } else if ((!useRoles || !useGroups) && currentAction.value === "RemoveRolesAndGroups") { + formControl.setValue("defaultExpireAction", null); + } else if (useRoles && useGroups && currentAction.value === "RemoveRoles") { + formControl.setValue("defaultExpireAction", null); + } else if (useRoles && useGroups && currentAction.value === "RemoveGroups") { + formControl.setValue("defaultExpireAction", null); + } + }, [useRoles, useGroups]); // Get the template data const template = ApiGetCall({ @@ -88,26 +123,83 @@ const Page = () => { ({ label: role.Name, value: role.ObjectId }))} + type="switch" + label="Admin Roles" + name="defaultUseRoles" formControl={formControl} - required={true} - validators={{ - required: "At least one default role is required", - validate: (options) => { - if (!options?.length) { - return "At least one default role is required"; - } - return true; - }, - }} /> + {!isAllTenants && ( + + )} + {!useRoles && !useGroups && ( + + Please select at least "Admin Roles" or "Group Membership" + + )} + + + ({ label: role.Name, value: role.ObjectId }))} + formControl={formControl} + required={true} + validators={{ + required: "At least one default role is required", + validate: (options) => { + if (!options?.length) { + return "At least one default role is required"; + } + return true; + }, + }} + /> + + + + {!isAllTenants && ( + + + { + if (!options?.length) { + return "At least one group is required"; + } + return true; + }, + }} + /> + + + )} + { name="defaultExpireAction" multiple={false} creatable={false} - options={[ - { label: "Delete User", value: "DeleteUser" }, - { label: "Disable User", value: "DisableUser" }, - { label: "Remove Roles", value: "RemoveRoles" }, - ]} + options={(() => { + const opts = [ + { label: "Delete User", value: "DeleteUser" }, + { label: "Disable User", value: "DisableUser" }, + ]; + if (useRoles && useGroups) { + opts.push({ label: "Remove Roles and Groups", value: "RemoveRolesAndGroups" }); + } else if (useRoles) { + opts.push({ label: "Remove Roles", value: "RemoveRoles" }); + } else if (useGroups) { + opts.push({ label: "Remove Groups", value: "RemoveGroups" }); + } + return opts; + })()} formControl={formControl} + required={true} + validators={{ required: "Expiration action is required" }} /> @@ -273,6 +376,19 @@ const Page = () => { /> )} + + ({ + label: Name, + value: Code, + }))} + formControl={formControl} + /> + { const watcher = useWatch({ control: formControl.control }); const useTAP = useWatch({ control: formControl.control, name: "UseTAP" }); + const startDate = useWatch({ control: formControl.control, name: "startDate" }); + const endDate = useWatch({ control: formControl.control, name: "endDate" }); + const tapLifetimeInMinutes = useWatch({ + control: formControl.control, + name: "tapLifetimeInMinutes", + }); const tapPolicy = ApiGetCall({ url: selectedTenant @@ -46,6 +53,22 @@ const Page = () => { const useRoles = useWatch({ control: formControl.control, name: "useRoles" }); const useGroups = useWatch({ control: formControl.control, name: "useGroups" }); + useEffect(() => { + if (!useTAP || !startDate || !endDate) { + formControl.setValue("tapLifetimeInMinutes", null); + return; + } + + const requestedMinutes = Math.max(1, Math.round((endDate - startDate) / 60)); + const tapPolicyConfig = tapPolicy.data?.Results?.[0]; + const policyMax = tapPolicyConfig?.maximumLifetimeInMinutes ?? 1440; + const policyMin = Math.min(tapPolicyConfig?.minimumLifetimeInMinutes ?? 1, policyMax); + formControl.setValue( + "tapLifetimeInMinutes", + Math.min(Math.max(requestedMinutes, policyMin), policyMax) + ); + }, [useTAP, startDate, endDate, tapPolicy.data, formControl]); + // Clear fields when switches are toggled off useEffect(() => { if (!useRoles) { @@ -173,7 +196,10 @@ const Page = () => { }; // Set all template-driven fields + formControl.setValue("useRoles", template.defaultUseRoles ?? true, { shouldDirty: true }); + formControl.setValue("useGroups", template.defaultUseGroups ?? false, { shouldDirty: true }); formControl.setValue("adminRoles", template.defaultRoles || [], { shouldDirty: true }); + formControl.setValue("groupMemberships", template.defaultGroups || [], { shouldDirty: true }); formControl.setValue("expireAction", template.defaultExpireAction || null, { shouldDirty: true, }); @@ -202,6 +228,9 @@ const Page = () => { if (template.defaultExistingUser) { formControl.setValue("existingUser", template.defaultExistingUser, { shouldDirty: true }); } + if (template.defaultUsageLocation) { + formControl.setValue("usageLocation", template.defaultUsageLocation, { shouldDirty: true }); + } // Dates if (template.defaultDuration) { @@ -340,6 +369,19 @@ const Page = () => { validators={{ required: "Domain is required" }} /> + + ({ + label: Name, + value: Code, + }))} + formControl={formControl} + /> + @@ -481,6 +523,11 @@ const Page = () => { /> + { TAP is not enabled in this tenant. TAP generation will fail. )} + {useTAP && tapLifetimeInMinutes && ( + + TAP will be valid for {tapLifetimeInMinutes} minutes. + + )} { const filterList = [ { filterName: "Users at Risk", - value: [{ id: "riskState", value: "atRisk" }], + value: [{ id: "riskState", value: "at Risk" }], type: "column", }, { diff --git a/src/pages/identity/administration/users/patch-wizard.jsx b/src/pages/identity/administration/users/patch-wizard.jsx index 300aebfaafa0..1168f12f593e 100644 --- a/src/pages/identity/administration/users/patch-wizard.jsx +++ b/src/pages/identity/administration/users/patch-wizard.jsx @@ -15,11 +15,13 @@ import { Switch, FormControlLabel, Autocomplete, + Alert, } from '@mui/material' import { CippWizardStepButtons } from '../../../../components/CippWizard/CippWizardStepButtons' import { ApiPostCall, ApiGetCall } from '../../../../api/ApiCall' import { CippApiResults } from '../../../../components/CippComponents/CippApiResults' import { CippDataTable } from '../../../../components/CippTable/CippDataTable' +import { CippFormUserSelector } from '../../../../components/CippComponents/CippFormUserSelector' import { Delete } from '@mui/icons-material' // User properties that can be patched @@ -54,6 +56,11 @@ const PATCHABLE_PROPERTIES = [ label: 'Job Title', type: 'string', }, + { + property: 'manager', + label: 'Manager', + type: 'userSelector', + }, { property: 'officeLocation', label: 'Office Location', @@ -79,6 +86,11 @@ const PATCHABLE_PROPERTIES = [ label: 'Show in Address List', type: 'boolean', }, + { + property: 'sponsor', + label: 'Sponsor', + type: 'userSelector', + }, { property: 'state', label: 'State/Province', @@ -182,6 +194,21 @@ const PropertySelectionStep = (props) => { // Get unique tenant domains from users const tenantDomains = [...new Set(users?.map((user) => user.Tenant || user.tenantFilter).filter(Boolean))] || [] + const firstTenantDomain = tenantDomains[0] + const hasManagerSelected = selectedProperties.includes('manager') + const hasSponsorSelected = selectedProperties.includes('sponsor') + const hasRelationshipSelected = hasManagerSelected || hasSponsorSelected + + useEffect(() => { + if (!hasRelationshipSelected || !firstTenantDomain) { + return + } + + const currentTenantFilter = formControl.getValues('tenantFilter') + if (currentTenantFilter?.value !== firstTenantDomain) { + formControl.setValue('tenantFilter', { value: firstTenantDomain }) + } + }, [firstTenantDomain, formControl, hasRelationshipSelected]) // Fetch custom data mappings for all tenants const customDataMappings = ApiGetCall({ @@ -248,6 +275,21 @@ const PropertySelectionStep = (props) => { ) } + if (property?.type === 'userSelector') { + return ( + + ) + } + // Default to text input for string types with consistent styling return ( { Properties to update + {hasRelationshipSelected && tenantDomains.length > 1 && ( + + The user picker is scoped to {firstTenantDomain}. Cross-tenant manager or sponsor + assignment is not supported, so the selected user must exist in each target tenant. + + )} {selectedProperties.map(renderPropertyInput)} @@ -455,7 +503,14 @@ const ConfirmationStep = (props) => { } selectedProperties.forEach((propName) => { - if (propertyValues[propName] !== undefined && propertyValues[propName] !== '') { + const propertyValue = propertyValues[propName] + + if (propertyValue !== undefined && propertyValue !== '' && propertyValue !== null) { + if (propName === 'manager' || propName === 'sponsor') { + if (propertyValue?.value) userData[propName] = propertyValue.value + return + } + // Handle dot notation properties (e.g., "extension_abc123.customField") if (propName.includes('.')) { const parts = propName.split('.') @@ -470,10 +525,10 @@ const ConfirmationStep = (props) => { } // Set the final property value - current[parts[parts.length - 1]] = propertyValues[propName] + current[parts[parts.length - 1]] = propertyValue } else { // Handle regular properties - userData[propName] = propertyValues[propName] + userData[propName] = propertyValue } } }) @@ -522,8 +577,13 @@ const ConfirmationStep = (props) => { {selectedProperties.map((propName) => { const property = allProperties.find((p) => p.property === propName) const value = propertyValues[propName] - const displayValue = - property?.type === 'boolean' ? (value ? 'Yes' : 'No') : value || 'Not set' + let displayValue = value || 'Not set' + + if (propName === 'manager' || propName === 'sponsor') { + displayValue = value?.label || value?.value || 'Not set' + } else if (property?.type === 'boolean') { + displayValue = value ? 'Yes' : 'No' + } return ( diff --git a/src/pages/identity/administration/users/user/exchange.jsx b/src/pages/identity/administration/users/user/exchange.jsx index 1d01f699c5a7..1336a740612d 100644 --- a/src/pages/identity/administration/users/user/exchange.jsx +++ b/src/pages/identity/administration/users/user/exchange.jsx @@ -947,13 +947,15 @@ const Page = () => { icon: , url: "/api/ExecSetMailboxRule", customDataformatter: (row, action, formData) => { - return { - ruleId: row?.Identity, + const rows = Array.isArray(row) ? row : [row]; + const result = rows.map((r) => ({ + ruleId: r?.Identity, userPrincipalName: graphUserRequest.data?.[0]?.userPrincipalName, - ruleName: row?.Name, + ruleName: r?.Name, Enable: true, tenantFilter: userSettingsDefaults.currentTenant, - }; + })); + return Array.isArray(row) ? result : result[0]; }, condition: (row) => row && !row.Enabled, confirmText: "Are you sure you want to enable this mailbox rule?", @@ -965,13 +967,15 @@ const Page = () => { icon: , url: "/api/ExecSetMailboxRule", customDataformatter: (row, action, formData) => { - return { - ruleId: row?.Identity, + const rows = Array.isArray(row) ? row : [row]; + const result = rows.map((r) => ({ + ruleId: r?.Identity, userPrincipalName: graphUserRequest.data?.[0]?.userPrincipalName, - ruleName: row?.Name, + ruleName: r?.Name, Disable: true, tenantFilter: userSettingsDefaults.currentTenant, - }; + })); + return Array.isArray(row) ? result : result[0]; }, condition: (row) => row && row.Enabled, confirmText: "Are you sure you want to disable this mailbox rule?", @@ -983,12 +987,14 @@ const Page = () => { icon: , url: "/api/ExecRemoveMailboxRule", customDataformatter: (row, action, formData) => { - return { - ruleId: row?.Identity, - ruleName: row?.Name, + const rows = Array.isArray(row) ? row : [row]; + const result = rows.map((r) => ({ + ruleId: r?.Identity, + ruleName: r?.Name, userPrincipalName: graphUserRequest.data?.[0]?.userPrincipalName, tenantFilter: userSettingsDefaults.currentTenant, - }; + })); + return Array.isArray(row) ? result : result[0]; }, confirmText: "Are you sure you want to remove this mailbox rule?", multiPost: false, diff --git a/src/pages/identity/reports/inactive-users-report/index.js b/src/pages/identity/reports/inactive-users-report/index.js index 168231bf6c26..8e8e7a0edc50 100644 --- a/src/pages/identity/reports/inactive-users-report/index.js +++ b/src/pages/identity/reports/inactive-users-report/index.js @@ -1,26 +1,21 @@ import { Layout as DashboardLayout } from "../../../../layouts/index.js"; import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; import { EyeIcon, TrashIcon } from "@heroicons/react/24/outline"; -import { Edit, Block, Sync, Info } from "@mui/icons-material"; -import { - Button, - SvgIcon, - IconButton, - Tooltip, - Alert, -} from "@mui/material"; -import { Stack } from "@mui/system"; -import { useSettings } from "../../../../hooks/use-settings"; -import { useDialog } from "../../../../hooks/use-dialog"; -import { CippApiDialog } from "../../../../components/CippComponents/CippApiDialog"; +import { Edit, Block } from "@mui/icons-material"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const Page = () => { const pageTitle = "Inactive users (6 months)"; - const apiUrl = "/api/ListInactiveAccounts"; - const currentTenant = useSettings().currentTenant; - const syncDialog = useDialog(); - const isAllTenants = currentTenant === "AllTenants"; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListInactiveAccounts", + queryKey: "inactive-users", + cacheName: "Users", + syncTitle: "Sync User Cache", + allowToggle: false, + defaultCached: true, + cacheColumns: ["lastRefreshedDateTime"], + }); const actions = [ { @@ -74,6 +69,7 @@ const Page = () => { }; const simpleColumns = [ + ...reportDB.cacheColumns.filter((c) => c === "Tenant"), "tenantDisplayName", "userPrincipalName", "displayName", @@ -81,60 +77,21 @@ const Page = () => { "lastNonInteractiveSignInDateTime", "numberOfAssignedLicenses", "daysSinceLastSignIn", - "lastRefreshedDateTime", - ]; - - const pageActions = [ - - - - - - - - , + ...reportDB.cacheColumns.filter((c) => c !== "Tenant"), ]; return ( <> - {currentTenant && currentTenant !== "" ? ( - - ) : ( - Please select a tenant to view inactive users. - )} - + {reportDB.syncDialog} ); }; diff --git a/src/pages/identity/reports/mfa-report/index.js b/src/pages/identity/reports/mfa-report/index.js index d6ee22e99081..668030f9f923 100644 --- a/src/pages/identity/reports/mfa-report/index.js +++ b/src/pages/identity/reports/mfa-report/index.js @@ -1,58 +1,39 @@ import { Layout as DashboardLayout } from '../../../../layouts/index.js' import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' -import { LockPerson, Sync, CloudDone } from '@mui/icons-material' -import { Button, Alert, SvgIcon, Tooltip, Chip } from '@mui/material' -import { useSettings } from '../../../../hooks/use-settings' -import { Stack } from '@mui/system' -import { useDialog } from '../../../../hooks/use-dialog' -import { CippApiDialog } from '../../../../components/CippComponents/CippApiDialog' +import { LockPerson } from '@mui/icons-material' +import { useCippReportDB } from '../../../../components/CippComponents/CippReportDBControls' import { useRouter } from 'next/router' -import { useMemo, useState } from 'react' -import { CippQueueTracker } from '../../../../components/CippTable/CippQueueTracker' +import { useMemo } from 'react' const Page = () => { const pageTitle = 'MFA Report' - const apiUrl = '/api/ListMFAUsers' - const currentTenant = useSettings().currentTenant - const syncDialog = useDialog() const router = useRouter() - const [syncQueueId, setSyncQueueId] = useState(null) - const isAllTenants = currentTenant === 'AllTenants' + const reportDB = useCippReportDB({ + apiUrl: '/api/ListMFAUsers', + queryKey: 'ListMFAUsers', + cacheName: 'MFAState', + syncTitle: 'Sync MFA Report', + allowToggle: false, + defaultCached: true, + }) + + const simpleColumns = [ + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), + 'UPN', + 'AccountEnabled', + 'isLicensed', + 'MFARegistration', + 'PerUser', + 'CoveredBySD', + 'CoveredByCA', + 'MFAMethods', + 'CAPolicies', + 'IsAdmin', + 'UserType', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), + ] - const apiData = { - UseReportDB: true, - } - const simpleColumns = isAllTenants - ? [ - 'Tenant', - 'UPN', - 'AccountEnabled', - 'isLicensed', - 'MFARegistration', - 'PerUser', - 'CoveredBySD', - 'CoveredByCA', - 'MFAMethods', - 'CAPolicies', - 'IsAdmin', - 'UserType', - 'CacheTimestamp', - ] - : [ - 'UPN', - 'AccountEnabled', - 'isLicensed', - 'MFARegistration', - 'PerUser', - 'CoveredBySD', - 'CoveredByCA', - 'MFAMethods', - 'CAPolicies', - 'IsAdmin', - 'UserType', - 'CacheTimestamp', - ] const filters = [ { filterName: 'Enabled, licensed users', @@ -88,7 +69,6 @@ const Page = () => { }, ] - // Parse filters from URL query parameters const urlFilters = useMemo(() => { if (router.query.filters) { try { @@ -127,71 +107,20 @@ const Page = () => { }, ] - const pageActions = [ - - - - - - } - label="Cached" - color="primary" - size="small" - disabled - variant="outlined" - /> - - - , - ] - return ( <> - { - if (result?.Metadata?.QueueId) { - setSyncQueueId(result?.Metadata?.QueueId) - } - }, - }} - /> + {reportDB.syncDialog} ) } diff --git a/src/pages/identity/reports/risk-detections/index.js b/src/pages/identity/reports/risk-detections/index.js index ef62600025d3..cd68e4eb13ed 100644 --- a/src/pages/identity/reports/risk-detections/index.js +++ b/src/pages/identity/reports/risk-detections/index.js @@ -52,7 +52,7 @@ const Page = () => { const filterList = [ { filterName: "Users at Risk", - value: [{ id: "riskState", value: "atRisk" }], + value: [{ id: "riskState", value: "at Risk" }], type: "column", }, { diff --git a/src/pages/onboardingv2.js b/src/pages/onboardingv2.js index 59f101d6f8f8..c32d85a24b8c 100644 --- a/src/pages/onboardingv2.js +++ b/src/pages/onboardingv2.js @@ -1,147 +1,8 @@ -import { Layout as DashboardLayout } from "../layouts/index.js"; -import { CippWizardConfirmation } from "../components/CippWizard/CippWizardConfirmation.jsx"; -import { CippDeploymentStep } from "../components/CippWizard/CIPPDeploymentStep.jsx"; -import CippWizardPage from "../components/CippWizard/CippWizardPage.jsx"; -import { CippWizardOptionsList } from "../components/CippWizard/CippWizardOptionsList.jsx"; -import { CippSAMDeploy } from "../components/CippWizard/CippSAMDeploy.jsx"; -import { CippTenantModeDeploy } from "../components/CippWizard/CippTenantModeDeploy.jsx"; -import { CippBaselinesStep } from "../components/CippWizard/CippBaselinesStep.jsx"; -import { CippNotificationsStep } from "../components/CippWizard/CippNotificationsStep.jsx"; -import { CippAlertsStep } from "../components/CippWizard/CippAlertsStep.jsx"; -import { CippAddTenantTypeSelection } from "../components/CippWizard/CippAddTenantTypeSelection.jsx"; -import { CippDirectTenantDeploy } from "../components/CippWizard/CippDirectTenantDeploy.jsx"; -import { CippGDAPTenantSetup } from "../components/CippWizard/CippGDAPTenantSetup.jsx"; -import { CippGDAPTenantOnboarding } from "../components/CippWizard/CippGDAPTenantOnboarding.jsx"; -import { BuildingOfficeIcon, CloudIcon, CpuChipIcon } from "@heroicons/react/24/outline"; +import { Layout as DashboardLayout } from '../layouts/index.js' +import OnboardingWizardPage from '../components/CippWizard/OnboardingWizardPage.jsx' -const Page = () => { - const steps = [ - { - description: "Onboarding", - component: CippWizardOptionsList, - componentProps: { - title: "Select your setup method", - subtext: `This wizard will guide you through setting up CIPPs access to your client tenants. If this is your first time setting up CIPP you will want to choose the option "Create application for me and connect to my tenants",`, - valuesKey: "SyncTool", - options: [ - { - description: - "Choose this option if this is your first setup, or if you'd like to redo the previous setup.", - icon: , - label: "First Setup", - value: "FirstSetup", - }, - { - description: - "Choose this option if you would like to add a tenant to your environment.", - icon: , - label: "Add a tenant", - value: "AddTenant", - }, - { - description: - "Choose this option if you want to setup which application registration is used to connect to your tenants.", - icon: , - label: "Create a new application registration for me and connect to my tenants", - value: "CreateApp", - }, - { - description: "I would like to refresh my token or replace the account I've used.", - icon: , - label: "Refresh Tokens for existing application registration", - value: "UpdateTokens", - }, - { - description: - "I have an existing application and would like to manually enter my token, or update them. This is only recommended for advanced users.", - icon: , - label: "Manually enter credentials", - value: "Manual", - }, - ], - }, - }, - { - description: "Application", - component: CippSAMDeploy, - showStepWhen: (values) => - values?.selectedOption === "CreateApp" || values?.selectedOption === "FirstSetup", - }, - { - description: "Tenants", - component: CippTenantModeDeploy, - showStepWhen: (values) => - values?.selectedOption === "CreateApp" || values?.selectedOption === "FirstSetup", - }, - { - description: "Tenant Type", - component: CippAddTenantTypeSelection, - showStepWhen: (values) => values?.selectedOption === "AddTenant", - }, - { - description: "Direct Tenant", - component: CippDirectTenantDeploy, - showStepWhen: (values) => - values?.selectedOption === "AddTenant" && values?.tenantType === "Direct", - }, - { - description: "GDAP Setup", - component: CippGDAPTenantSetup, - showStepWhen: (values) => - values?.selectedOption === "AddTenant" && values?.tenantType === "GDAP", - }, - { - description: "GDAP Onboarding", - component: CippGDAPTenantOnboarding, - showStepWhen: (values) => - values?.selectedOption === "AddTenant" && - values?.tenantType === "GDAP" && - values?.GDAPInviteAccepted === true, - }, - { - description: "Baselines", - component: CippBaselinesStep, - showStepWhen: (values) => values?.selectedOption === "FirstSetup", - }, - { - description: "Notifications", - component: CippNotificationsStep, - showStepWhen: (values) => values?.selectedOption === "FirstSetup", - }, - { - description: "Next Steps", - component: CippAlertsStep, - showStepWhen: (values) => values?.selectedOption === "FirstSetup", - }, - { - description: "Refresh Tokens", - component: CippDeploymentStep, - showStepWhen: (values) => values?.selectedOption === "UpdateTokens", - }, - { - description: "Manually enter credentials", - component: CippDeploymentStep, - showStepWhen: (values) => values?.selectedOption === "Manual", - }, - { - description: "Confirmation", - component: CippWizardConfirmation, - //confirm and finish button, perform tasks, launch checks etc. - }, - ]; +const Page = () => - return ( - <> - - - ); -}; +Page.getLayout = (page) => {page} -Page.getLayout = (page) => {page}; - -export default Page; +export default Page diff --git a/src/pages/security/compliance/dlp-templates/index.js b/src/pages/security/compliance/dlp-templates/index.js new file mode 100644 index 000000000000..99e949f700d1 --- /dev/null +++ b/src/pages/security/compliance/dlp-templates/index.js @@ -0,0 +1,108 @@ +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { TrashIcon } from "@heroicons/react/24/outline"; +import { GitHub } from "@mui/icons-material"; +import { ApiGetCall } from "../../../../api/ApiCall"; +import { CippPolicyImportDrawer } from "../../../../components/CippComponents/CippPolicyImportDrawer.jsx"; +import { CippDeployCompliancePolicyDrawer } from "../../../../components/CippComponents/CippDeployCompliancePolicyDrawer.jsx"; +import { PermissionButton } from "../../../../utils/permissions.js"; + +const Page = () => { + const pageTitle = "DLP Compliance Policy Templates"; + const cardButtonPermissions = ["Security.DlpCompliancePolicy.ReadWrite"]; + + const integrations = ApiGetCall({ + url: "/api/ListExtensionsConfig", + queryKey: "Integrations", + refetchOnMount: false, + refetchOnReconnect: false, + }); + + const actions = [ + { + label: "Save to GitHub", + type: "POST", + url: "/api/ExecCommunityRepo", + icon: , + data: { + Action: "UploadTemplate", + GUID: "GUID", + }, + fields: [ + { + label: "Repository", + name: "FullName", + type: "select", + api: { + url: "/api/ListCommunityRepos", + data: { WriteAccess: true }, + queryKey: "CommunityRepos-Write", + dataKey: "Results", + valueField: "FullName", + labelField: "FullName", + }, + multiple: false, + creatable: false, + required: true, + validators: { required: { value: true, message: "This field is required" } }, + }, + { + label: "Commit Message", + placeholder: "Enter a commit message for adding this file to GitHub", + name: "Message", + type: "textField", + multiline: true, + required: true, + rows: 4, + }, + ], + confirmText: "Are you sure you want to save this template to the selected repository?", + condition: () => integrations.isSuccess && integrations?.data?.GitHub?.Enabled, + }, + { + label: "Delete Template", + type: "POST", + url: "/api/RemoveDlpCompliancePolicyTemplate", + data: { ID: "GUID" }, + confirmText: "Do you want to delete the template?", + icon: , + color: "danger", + }, + ]; + + const offCanvas = { + extendedInfoFields: ["name", "comments", "Mode", "Workload", "Enabled", "GUID"], + actions: actions, + }; + + const simpleColumns = ["name", "comments", "Mode", "Workload", "Enabled", "GUID"]; + + return ( + + + + + } + /> + ); +}; + +Page.getLayout = (page) => {page}; +export default Page; diff --git a/src/pages/security/compliance/dlp/index.js b/src/pages/security/compliance/dlp/index.js new file mode 100644 index 000000000000..750cfe6ade53 --- /dev/null +++ b/src/pages/security/compliance/dlp/index.js @@ -0,0 +1,112 @@ +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { Book, Block, Check } from "@mui/icons-material"; +import { TrashIcon } from "@heroicons/react/24/outline"; +import { CippDeployCompliancePolicyDrawer } from "../../../../components/CippComponents/CippDeployCompliancePolicyDrawer.jsx"; +import { PermissionButton } from "../../../../utils/permissions.js"; + +const Page = () => { + const pageTitle = "DLP Compliance Policies"; + const apiUrl = "/api/ListDlpCompliancePolicy"; + const cardButtonPermissions = ["Security.DlpCompliancePolicy.ReadWrite"]; + + const actions = [ + { + label: "Create template based on policy", + type: "POST", + icon: , + url: "/api/AddDlpCompliancePolicyTemplate", + dataFunction: (data) => { + return { ...data }; + }, + confirmText: "Are you sure you want to create a template based on this DLP policy?", + }, + { + label: "Enable Policy", + type: "POST", + icon: , + url: "/api/EditDlpCompliancePolicy", + data: { + State: "!enable", + Identity: "Name", + }, + confirmText: "Are you sure you want to enable this DLP policy?", + condition: (row) => row.Enabled === false, + }, + { + label: "Disable Policy", + type: "POST", + icon: , + url: "/api/EditDlpCompliancePolicy", + data: { + State: "!disable", + Identity: "Name", + }, + confirmText: "Are you sure you want to disable this DLP policy?", + condition: (row) => row.Enabled === true, + }, + { + label: "Delete Policy", + type: "POST", + icon: , + url: "/api/RemoveDlpCompliancePolicy", + data: { + Identity: "Name", + }, + confirmText: "Are you sure you want to delete this DLP policy?", + color: "danger", + }, + ]; + + const offCanvas = { + extendedInfoFields: [ + "Name", + "Comment", + "Mode", + "Enabled", + "Workload", + "ExchangeLocation", + "SharePointLocation", + "OneDriveLocation", + "TeamsLocation", + "EndpointDlpLocation", + "RuleCount", + "CreatedBy", + "WhenCreatedUTC", + "WhenChangedUTC", + ], + actions: actions, + }; + + const simpleColumns = [ + "Name", + "Mode", + "Enabled", + "Workload", + "RuleCount", + "CreatedBy", + "WhenCreatedUTC", + "WhenChangedUTC", + ]; + + return ( + + } + /> + ); +}; + +Page.getLayout = (page) => {page}; +export default Page; diff --git a/src/pages/security/compliance/labels-templates/index.js b/src/pages/security/compliance/labels-templates/index.js new file mode 100644 index 000000000000..78477f7735b5 --- /dev/null +++ b/src/pages/security/compliance/labels-templates/index.js @@ -0,0 +1,115 @@ +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { TrashIcon } from "@heroicons/react/24/outline"; +import { GitHub } from "@mui/icons-material"; +import { ApiGetCall } from "../../../../api/ApiCall"; +import { CippPolicyImportDrawer } from "../../../../components/CippComponents/CippPolicyImportDrawer.jsx"; +import { CippDeployCompliancePolicyDrawer } from "../../../../components/CippComponents/CippDeployCompliancePolicyDrawer.jsx"; +import { PermissionButton } from "../../../../utils/permissions.js"; + +const Page = () => { + const pageTitle = "Sensitivity Label Templates"; + const cardButtonPermissions = ["Security.SensitivityLabel.ReadWrite"]; + + const integrations = ApiGetCall({ + url: "/api/ListExtensionsConfig", + queryKey: "Integrations", + refetchOnMount: false, + refetchOnReconnect: false, + }); + + const actions = [ + { + label: "Save to GitHub", + type: "POST", + url: "/api/ExecCommunityRepo", + icon: , + data: { + Action: "UploadTemplate", + GUID: "GUID", + }, + fields: [ + { + label: "Repository", + name: "FullName", + type: "select", + api: { + url: "/api/ListCommunityRepos", + data: { WriteAccess: true }, + queryKey: "CommunityRepos-Write", + dataKey: "Results", + valueField: "FullName", + labelField: "FullName", + }, + multiple: false, + creatable: false, + required: true, + validators: { required: { value: true, message: "This field is required" } }, + }, + { + label: "Commit Message", + placeholder: "Enter a commit message for adding this file to GitHub", + name: "Message", + type: "textField", + multiline: true, + required: true, + rows: 4, + }, + ], + confirmText: "Are you sure you want to save this template to the selected repository?", + condition: () => integrations.isSuccess && integrations?.data?.GitHub?.Enabled, + }, + { + label: "Delete Template", + type: "POST", + url: "/api/RemoveSensitivityLabelTemplate", + data: { ID: "GUID" }, + confirmText: "Do you want to delete the template?", + icon: , + color: "danger", + }, + ]; + + const offCanvas = { + extendedInfoFields: [ + "name", + "DisplayName", + "comments", + "ContentType", + "EncryptionEnabled", + "GUID", + ], + actions: actions, + }; + + const simpleColumns = ["name", "DisplayName", "comments", "ContentType", "EncryptionEnabled", "GUID"]; + + return ( + + + + + } + /> + ); +}; + +Page.getLayout = (page) => {page}; +export default Page; diff --git a/src/pages/security/compliance/labels/index.js b/src/pages/security/compliance/labels/index.js new file mode 100644 index 000000000000..e35ff5942b0f --- /dev/null +++ b/src/pages/security/compliance/labels/index.js @@ -0,0 +1,91 @@ +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { Book } from "@mui/icons-material"; +import { TrashIcon } from "@heroicons/react/24/outline"; +import { CippDeployCompliancePolicyDrawer } from "../../../../components/CippComponents/CippDeployCompliancePolicyDrawer.jsx"; +import { PermissionButton } from "../../../../utils/permissions.js"; + +const Page = () => { + const pageTitle = "Sensitivity Labels"; + const apiUrl = "/api/ListSensitivityLabel"; + const cardButtonPermissions = ["Security.SensitivityLabel.ReadWrite"]; + + const actions = [ + { + label: "Create template based on label", + type: "POST", + icon: , + url: "/api/AddSensitivityLabelTemplate", + dataFunction: (data) => { + return { ...data }; + }, + confirmText: "Are you sure you want to create a template based on this sensitivity label?", + }, + { + label: "Delete Label", + type: "POST", + icon: , + url: "/api/RemoveSensitivityLabel", + data: { + Identity: "Guid", + }, + confirmText: + "Are you sure you want to delete this sensitivity label? Labels currently published to users will be removed from policies.", + color: "danger", + }, + ]; + + const offCanvas = { + extendedInfoFields: [ + "DisplayName", + "Name", + "Comment", + "Tooltip", + "ParentId", + "ContentType", + "EncryptionEnabled", + "EncryptionProtectionType", + "ContentMarkingHeaderEnabled", + "ContentMarkingFooterEnabled", + "ContentMarkingWatermarkEnabled", + "SiteAndGroupProtectionEnabled", + "Priority", + "Disabled", + "PublishedInPolicies", + ], + actions: actions, + }; + + const simpleColumns = [ + "DisplayName", + "Name", + "ContentType", + "EncryptionEnabled", + "ContentMarkingHeaderEnabled", + "ContentMarkingWatermarkEnabled", + "SiteAndGroupProtectionEnabled", + "Priority", + "Disabled", + ]; + + return ( + + } + /> + ); +}; + +Page.getLayout = (page) => {page}; +export default Page; diff --git a/src/pages/security/compliance/retention-templates/index.js b/src/pages/security/compliance/retention-templates/index.js new file mode 100644 index 000000000000..291c989c35ec --- /dev/null +++ b/src/pages/security/compliance/retention-templates/index.js @@ -0,0 +1,108 @@ +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { TrashIcon } from "@heroicons/react/24/outline"; +import { GitHub } from "@mui/icons-material"; +import { ApiGetCall } from "../../../../api/ApiCall"; +import { CippPolicyImportDrawer } from "../../../../components/CippComponents/CippPolicyImportDrawer.jsx"; +import { CippDeployCompliancePolicyDrawer } from "../../../../components/CippComponents/CippDeployCompliancePolicyDrawer.jsx"; +import { PermissionButton } from "../../../../utils/permissions.js"; + +const Page = () => { + const pageTitle = "Retention Policy Templates"; + const cardButtonPermissions = ["Security.RetentionCompliancePolicy.ReadWrite"]; + + const integrations = ApiGetCall({ + url: "/api/ListExtensionsConfig", + queryKey: "Integrations", + refetchOnMount: false, + refetchOnReconnect: false, + }); + + const actions = [ + { + label: "Save to GitHub", + type: "POST", + url: "/api/ExecCommunityRepo", + icon: , + data: { + Action: "UploadTemplate", + GUID: "GUID", + }, + fields: [ + { + label: "Repository", + name: "FullName", + type: "select", + api: { + url: "/api/ListCommunityRepos", + data: { WriteAccess: true }, + queryKey: "CommunityRepos-Write", + dataKey: "Results", + valueField: "FullName", + labelField: "FullName", + }, + multiple: false, + creatable: false, + required: true, + validators: { required: { value: true, message: "This field is required" } }, + }, + { + label: "Commit Message", + placeholder: "Enter a commit message for adding this file to GitHub", + name: "Message", + type: "textField", + multiline: true, + required: true, + rows: 4, + }, + ], + confirmText: "Are you sure you want to save this template to the selected repository?", + condition: () => integrations.isSuccess && integrations?.data?.GitHub?.Enabled, + }, + { + label: "Delete Template", + type: "POST", + url: "/api/RemoveRetentionCompliancePolicyTemplate", + data: { ID: "GUID" }, + confirmText: "Do you want to delete the template?", + icon: , + color: "danger", + }, + ]; + + const offCanvas = { + extendedInfoFields: ["name", "comments", "Enabled", "RestrictiveRetention", "GUID"], + actions: actions, + }; + + const simpleColumns = ["name", "comments", "Enabled", "RestrictiveRetention", "GUID"]; + + return ( + + + + + } + /> + ); +}; + +Page.getLayout = (page) => {page}; +export default Page; diff --git a/src/pages/security/compliance/retention/index.js b/src/pages/security/compliance/retention/index.js new file mode 100644 index 000000000000..962301013f29 --- /dev/null +++ b/src/pages/security/compliance/retention/index.js @@ -0,0 +1,111 @@ +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { Book, Block, Check } from "@mui/icons-material"; +import { TrashIcon } from "@heroicons/react/24/outline"; +import { CippDeployCompliancePolicyDrawer } from "../../../../components/CippComponents/CippDeployCompliancePolicyDrawer.jsx"; +import { PermissionButton } from "../../../../utils/permissions.js"; + +const Page = () => { + const pageTitle = "Purview Retention Policies"; + const apiUrl = "/api/ListRetentionCompliancePolicy"; + const cardButtonPermissions = ["Security.RetentionCompliancePolicy.ReadWrite"]; + + const actions = [ + { + label: "Create template based on policy", + type: "POST", + icon: , + url: "/api/AddRetentionCompliancePolicyTemplate", + data: { Identity: "Name" }, + confirmText: "Are you sure you want to create a template based on this retention policy?", + }, + { + label: "Enable Policy", + type: "POST", + icon: , + url: "/api/EditRetentionCompliancePolicy", + data: { + State: "!enable", + Identity: "Name", + }, + confirmText: "Are you sure you want to enable this retention policy?", + condition: (row) => row.Enabled === false, + }, + { + label: "Disable Policy", + type: "POST", + icon: , + url: "/api/EditRetentionCompliancePolicy", + data: { + State: "!disable", + Identity: "Name", + }, + confirmText: "Are you sure you want to disable this retention policy?", + condition: (row) => row.Enabled === true, + }, + { + label: "Delete Policy", + type: "POST", + icon: , + url: "/api/RemoveRetentionCompliancePolicy", + data: { + Identity: "Name", + }, + confirmText: "Are you sure you want to delete this retention policy?", + color: "danger", + }, + ]; + + const offCanvas = { + extendedInfoFields: [ + "Name", + "Comment", + "Enabled", + "Workload", + "RestrictiveRetention", + "ExchangeLocation", + "SharePointLocation", + "OneDriveLocation", + "ModernGroupLocation", + "TeamsChannelLocation", + "TeamsChatLocation", + "RuleCount", + "CreatedBy", + "WhenCreatedUTC", + "WhenChangedUTC", + ], + actions: actions, + }; + + const simpleColumns = [ + "Name", + "Enabled", + "Workload", + "RuleCount", + "RestrictiveRetention", + "CreatedBy", + "WhenCreatedUTC", + "WhenChangedUTC", + ]; + + return ( + + } + /> + ); +}; + +Page.getLayout = (page) => {page}; +export default Page; diff --git a/src/pages/security/compliance/sit-templates/index.js b/src/pages/security/compliance/sit-templates/index.js new file mode 100644 index 000000000000..3b6bf4b87121 --- /dev/null +++ b/src/pages/security/compliance/sit-templates/index.js @@ -0,0 +1,108 @@ +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { TrashIcon } from "@heroicons/react/24/outline"; +import { GitHub } from "@mui/icons-material"; +import { ApiGetCall } from "../../../../api/ApiCall"; +import { CippPolicyImportDrawer } from "../../../../components/CippComponents/CippPolicyImportDrawer.jsx"; +import { CippDeployCompliancePolicyDrawer } from "../../../../components/CippComponents/CippDeployCompliancePolicyDrawer.jsx"; +import { PermissionButton } from "../../../../utils/permissions.js"; + +const Page = () => { + const pageTitle = "Sensitive Information Type Templates"; + const cardButtonPermissions = ["Security.SensitiveInfoType.ReadWrite"]; + + const integrations = ApiGetCall({ + url: "/api/ListExtensionsConfig", + queryKey: "Integrations", + refetchOnMount: false, + refetchOnReconnect: false, + }); + + const actions = [ + { + label: "Save to GitHub", + type: "POST", + url: "/api/ExecCommunityRepo", + icon: , + data: { + Action: "UploadTemplate", + GUID: "GUID", + }, + fields: [ + { + label: "Repository", + name: "FullName", + type: "select", + api: { + url: "/api/ListCommunityRepos", + data: { WriteAccess: true }, + queryKey: "CommunityRepos-Write", + dataKey: "Results", + valueField: "FullName", + labelField: "FullName", + }, + multiple: false, + creatable: false, + required: true, + validators: { required: { value: true, message: "This field is required" } }, + }, + { + label: "Commit Message", + placeholder: "Enter a commit message for adding this file to GitHub", + name: "Message", + type: "textField", + multiline: true, + required: true, + rows: 4, + }, + ], + confirmText: "Are you sure you want to save this template to the selected repository?", + condition: () => integrations.isSuccess && integrations?.data?.GitHub?.Enabled, + }, + { + label: "Delete Template", + type: "POST", + url: "/api/RemoveSensitiveInfoTypeTemplate", + data: { ID: "GUID" }, + confirmText: "Do you want to delete the template?", + icon: , + color: "danger", + }, + ]; + + const offCanvas = { + extendedInfoFields: ["name", "comments", "Pattern", "Confidence", "Locale", "GUID"], + actions: actions, + }; + + const simpleColumns = ["name", "comments", "Pattern", "Confidence", "Locale", "GUID"]; + + return ( + + + + + } + /> + ); +}; + +Page.getLayout = (page) => {page}; +export default Page; diff --git a/src/pages/security/compliance/sit/index.js b/src/pages/security/compliance/sit/index.js new file mode 100644 index 000000000000..3101f0502218 --- /dev/null +++ b/src/pages/security/compliance/sit/index.js @@ -0,0 +1,70 @@ +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { TrashIcon } from "@heroicons/react/24/outline"; +import { CippDeployCompliancePolicyDrawer } from "../../../../components/CippComponents/CippDeployCompliancePolicyDrawer.jsx"; +import { PermissionButton } from "../../../../utils/permissions.js"; + +const Page = () => { + const pageTitle = "Sensitive Information Types"; + const apiUrl = "/api/ListSensitiveInfoType"; + const cardButtonPermissions = ["Security.SensitiveInfoType.ReadWrite"]; + + const actions = [ + { + label: "Delete SIT", + type: "POST", + icon: , + url: "/api/RemoveSensitiveInfoType", + data: { + Identity: "Name", + }, + confirmText: + "Are you sure you want to delete this Sensitive Information Type? Built-in Microsoft types cannot be deleted.", + color: "danger", + }, + ]; + + const offCanvas = { + extendedInfoFields: [ + "Name", + "Description", + "Publisher", + "Recommended", + "RulePackId", + "RulePackVersion", + "State", + "Type", + ], + actions: actions, + }; + + const simpleColumns = [ + "Name", + "Publisher", + "Description", + "Recommended", + "RulePackVersion", + "State", + ]; + + return ( + + } + /> + ); +}; + +Page.getLayout = (page) => {page}; +export default Page; diff --git a/src/pages/security/reports/mde-onboarding/index.js b/src/pages/security/reports/mde-onboarding/index.js index 015653b411c1..955ec17fa66a 100644 --- a/src/pages/security/reports/mde-onboarding/index.js +++ b/src/pages/security/reports/mde-onboarding/index.js @@ -12,16 +12,18 @@ import { CircularProgress, Button, SvgIcon, - IconButton, - Tooltip, } from "@mui/material"; -import { Sync, Info, OpenInNew } from "@mui/icons-material"; +import { Sync, OpenInNew } from "@mui/icons-material"; +import { Grid } from "@mui/system"; import { ApiGetCall } from "../../../../api/ApiCall"; import { CippHead } from "../../../../components/CippComponents/CippHead"; import { useDialog } from "../../../../hooks/use-dialog"; import { CippApiDialog } from "../../../../components/CippComponents/CippApiDialog"; import { CippQueueTracker } from "../../../../components/CippTable/CippQueueTracker"; +import { CippPropertyListCard } from "../../../../components/CippCards/CippPropertyListCard"; +import { getCippFormatting } from "../../../../utils/get-cipp-formatting"; import { useState } from "react"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const statusColors = { enabled: "success", @@ -64,78 +66,232 @@ const SingleTenantView = ({ tenant }) => { const item = Array.isArray(data) ? data[0] : data; const status = item?.partnerState || "Unknown"; + const platformItems = [ + { + label: "Windows", + value: getCippFormatting(item?.windowsEnabled, "windowsEnabled"), + }, + { + label: "iOS", + value: getCippFormatting(item?.iosEnabled, "iosEnabled"), + }, + { + label: "Android", + value: getCippFormatting(item?.androidEnabled, "androidEnabled"), + }, + { + label: "macOS", + value: getCippFormatting(item?.macEnabled, "macEnabled"), + }, + ]; + + const mamItems = [ + { + label: "iOS MAM", + value: getCippFormatting( + item?.iosMobileApplicationManagementEnabled, + "iosMobileApplicationManagementEnabled" + ), + }, + { + label: "Android MAM", + value: getCippFormatting( + item?.androidMobileApplicationManagementEnabled, + "androidMobileApplicationManagementEnabled" + ), + }, + { + label: "Windows MAM", + value: getCippFormatting( + item?.windowsMobileApplicationManagementEnabled, + "windowsMobileApplicationManagementEnabled" + ), + }, + { + label: "MDE Attach", + value: getCippFormatting( + item?.microsoftDefenderForEndpointAttachEnabled, + "microsoftDefenderForEndpointAttachEnabled" + ), + }, + ]; + + const dataCollectionItems = [ + { + label: "Block iOS on missing partner data", + value: getCippFormatting( + item?.iosDeviceBlockedOnMissingPartnerData, + "iosDeviceBlockedOnMissingPartnerData" + ), + }, + { + label: "Block Android on missing partner data", + value: getCippFormatting( + item?.androidDeviceBlockedOnMissingPartnerData, + "androidDeviceBlockedOnMissingPartnerData" + ), + }, + { + label: "Block Windows on missing partner data", + value: getCippFormatting( + item?.windowsDeviceBlockedOnMissingPartnerData, + "windowsDeviceBlockedOnMissingPartnerData" + ), + }, + { + label: "Block macOS on missing partner data", + value: getCippFormatting( + item?.macDeviceBlockedOnMissingPartnerData, + "macDeviceBlockedOnMissingPartnerData" + ), + }, + { + label: "Block unsupported OS versions", + value: getCippFormatting( + item?.partnerUnsupportedOsVersionBlocked, + "partnerUnsupportedOsVersionBlocked" + ), + }, + { + label: "Unresponsiveness threshold (days)", + value: + item?.partnerUnresponsivenessThresholdInDays ?? + getCippFormatting(null, "partnerUnresponsivenessThresholdInDays"), + }, + { + label: "Collect iOS app metadata", + value: getCippFormatting( + item?.allowPartnerToCollectIOSApplicationMetadata, + "allowPartnerToCollectIOSApplicationMetadata" + ), + }, + { + label: "Collect iOS personal app metadata", + value: getCippFormatting( + item?.allowPartnerToCollectIOSPersonalApplicationMetadata, + "allowPartnerToCollectIOSPersonalApplicationMetadata" + ), + }, + { + label: "Collect iOS certificate metadata", + value: getCippFormatting( + item?.allowPartnerToCollectIosCertificateMetadata, + "allowPartnerToCollectIosCertificateMetadata" + ), + }, + { + label: "Collect iOS personal certificate metadata", + value: getCippFormatting( + item?.allowPartnerToCollectIosPersonalCertificateMetadata, + "allowPartnerToCollectIosPersonalCertificateMetadata" + ), + }, + ]; + return ( <> - - - - - - - - - - - - } - /> - - {isFetching ? ( - - ) : ( - - - Status: - + + + + - - {item?.CacheTimestamp && ( - - Last synced: {new Date(item.CacheTimestamp).toLocaleString()} - - )} - {item?.error && ( - - {item.error} - - )} - {tenantId && status !== "enabled" && status !== "available" && ( - )} - - )} - - + + } + /> + + {isFetching ? ( + + ) : ( + + + Status: + + + {item?.lastHeartbeatDateTime && ( + + Last heartbeat:{" "} + {new Date(item.lastHeartbeatDateTime).toLocaleString()} + + )} + {item?.CacheTimestamp && ( + + Last synced: {new Date(item.CacheTimestamp).toLocaleString()} + + )} + {item?.error && ( + + {item.error} + + )} + {tenantId && status !== "enabled" && status !== "available" && ( + + )} + + )} + + + + {!isFetching && item && ( + + + + + + + + + + + + )} + { const Page = () => { const currentTenant = useSettings().currentTenant; const isAllTenants = currentTenant === "AllTenants"; - const syncDialog = useDialog(); - const [syncQueueId, setSyncQueueId] = useState(null); + + const reportDB = useCippReportDB({ + apiUrl: "/api/ListMDEOnboarding", + queryKey: "MDEOnboarding", + cacheName: "MDEOnboarding", + syncTitle: "Sync MDE Onboarding Status", + allowToggle: false, + defaultCached: true, + }); if (!isAllTenants) { return ; } - const pageActions = [ - - - - - - - - - , - ]; - return ( <> - { - if (result?.Metadata?.QueueId) { - setSyncQueueId(result.Metadata.QueueId); - } - }, - }} + apiUrl={reportDB.resolvedApiUrl} + apiData={reportDB.resolvedApiData} + queryKey={reportDB.resolvedQueryKey} + simpleColumns={[ + "Tenant", + "partnerState", + "lastHeartbeatDateTime", + "microsoftDefenderForEndpointAttachEnabled", + "windowsEnabled", + "iosEnabled", + "androidEnabled", + "macEnabled", + "iosMobileApplicationManagementEnabled", + "androidMobileApplicationManagementEnabled", + "windowsMobileApplicationManagementEnabled", + "partnerUnresponsivenessThresholdInDays", + "CacheTimestamp", + ]} + cardButton={reportDB.controls} /> + {reportDB.syncDialog} ); }; Page.getLayout = (page) => {page}; -export default Page; \ No newline at end of file +export default Page; diff --git a/src/pages/teams-share/onedrive/index.js b/src/pages/teams-share/onedrive/index.js index 8d279cffaf73..7c06e88f1441 100644 --- a/src/pages/teams-share/onedrive/index.js +++ b/src/pages/teams-share/onedrive/index.js @@ -1,43 +1,54 @@ -import { Layout as DashboardLayout } from "../../../layouts/index.js"; -import { CippTablePage } from "../../../components/CippComponents/CippTablePage.jsx"; -import { PersonAdd, PersonRemove } from "@mui/icons-material"; +import { Layout as DashboardLayout } from '../../../layouts/index.js' +import { CippTablePage } from '../../../components/CippComponents/CippTablePage.jsx' +import { PersonAdd, PersonRemove } from '@mui/icons-material' +import { useCippReportDB } from '../../../components/CippComponents/CippReportDBControls' const Page = () => { - const pageTitle = "OneDrive"; + const pageTitle = 'OneDrive' + const reportDB = useCippReportDB({ + apiUrl: '/api/ListSites?type=OneDriveUsageAccount', + queryKey: 'ListSites-OneDriveUsageAccount', + cacheName: 'Sites', + syncTitle: 'Sync OneDrive Report', + syncData: { Types: 'OneDriveUsageAccount' }, + allowToggle: true, + defaultCached: false, + allowAllTenantSync: true, + }) const actions = [ { - label: "Add permissions to OneDrive", + label: 'Add permissions to OneDrive', icon: , - type: "POST", - url: "/api/ExecSharePointPerms", + type: 'POST', + url: '/api/ExecSharePointPerms', data: { - UPN: "ownerPrincipalName", - URL: "webUrl", + UPN: 'ownerPrincipalName', + URL: 'webUrl', RemovePermission: false, }, confirmText: "Select the User to add to this user's OneDrive permissions", fields: [ { - type: "autoComplete", - name: "onedriveAccessUser", - label: "Select User", + type: 'autoComplete', + name: 'onedriveAccessUser', + label: 'Select User', multiple: false, creatable: false, api: { - url: "/api/ListGraphRequest", + url: '/api/ListGraphRequest', data: { - Endpoint: "users", - $select: "id,displayName,userPrincipalName", + Endpoint: 'users', + $select: 'id,displayName,userPrincipalName', $top: 999, $count: true, }, - queryKey: "ListUsersAutoComplete", - dataKey: "Results", + queryKey: 'ListUsersAutoComplete', + dataKey: 'Results', labelField: (user) => `${user.displayName} (${user.userPrincipalName})`, - valueField: "userPrincipalName", + valueField: 'userPrincipalName', addedField: { - id: "id", + id: 'id', }, showRefresh: true, }, @@ -45,57 +56,67 @@ const Page = () => { ], }, { - label: "Remove permissions from OneDrive", + label: 'Remove permissions from OneDrive', icon: , - type: "POST", - url: "/api/ExecSharePointPerms", + type: 'POST', + url: '/api/ExecSharePointPerms', data: { - UPN: "ownerPrincipalName", - URL: "webUrl", + UPN: 'ownerPrincipalName', + URL: 'webUrl', RemovePermission: true, }, confirmText: "Select the User to remove from this user's OneDrive permissions", fields: [ { - type: "autoComplete", - name: "onedriveAccessUser", - label: "Select User", + type: 'autoComplete', + name: 'onedriveAccessUser', + label: 'Select User', multiple: false, creatable: false, api: { - url: "/api/listUsers", + url: '/api/listUsers', labelField: (onedriveAccessUser) => `${onedriveAccessUser.displayName} (${onedriveAccessUser.userPrincipalName})`, - valueField: "userPrincipalName", + valueField: 'userPrincipalName', addedField: { - displayName: "displayName", + displayName: 'displayName', }, }, }, ], }, - ]; + ] + + const simpleColumns = [ + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), + 'displayName', + 'createdDateTime', + 'ownerPrincipalName', + 'lastActivityDate', + 'fileCount', + 'storageUsedInGigabytes', + 'storageAllocatedInGigabytes', + 'reportRefreshDate', + 'webUrl', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), + ] return ( - - ); -}; + <> + + {reportDB.syncDialog} + + ) +} -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page} -export default Page; +export default Page diff --git a/src/pages/teams-share/sharepoint/index.js b/src/pages/teams-share/sharepoint/index.js index 21cefc406ca4..cf1353f52b7f 100644 --- a/src/pages/teams-share/sharepoint/index.js +++ b/src/pages/teams-share/sharepoint/index.js @@ -1,6 +1,6 @@ -import { Layout as DashboardLayout } from "../../../layouts/index.js"; -import { CippTablePage } from "../../../components/CippComponents/CippTablePage.jsx"; -import { Button } from "@mui/material"; +import { Layout as DashboardLayout } from '../../../layouts/index.js' +import { CippTablePage } from '../../../components/CippComponents/CippTablePage.jsx' +import { Button } from '@mui/material' import { Add, AddToPhotos, @@ -9,49 +9,61 @@ import { AdminPanelSettings, NoAccounts, Delete, -} from "@mui/icons-material"; -import Link from "next/link"; -import { CippDataTable } from "../../../components/CippTable/CippDataTable"; -import { useSettings } from "../../../hooks/use-settings"; +} from '@mui/icons-material' +import Link from 'next/link' +import { Stack } from '@mui/system' +import { CippDataTable } from '../../../components/CippTable/CippDataTable' +import { useSettings } from '../../../hooks/use-settings' +import { useCippReportDB } from '../../../components/CippComponents/CippReportDBControls' const Page = () => { - const pageTitle = "SharePoint Sites"; - const tenantFilter = useSettings().currentTenant; + const pageTitle = 'SharePoint Sites' + const tenantFilter = useSettings().currentTenant + const reportDB = useCippReportDB({ + apiUrl: '/api/ListSites?type=SharePointSiteUsage', + queryKey: 'ListSites-SharePointSiteUsage', + cacheName: 'Sites', + syncTitle: 'Sync SharePoint Sites Report', + syncData: { Types: 'SharePointSiteUsage' }, + allowToggle: true, + defaultCached: true, + allowAllTenantSync: true, + }) const actions = [ { - label: "Add Member", - type: "POST", + label: 'Add Member', + type: 'POST', icon: , - url: "/api/ExecSetSharePointMember", + url: '/api/ExecSetSharePointMember', data: { - groupId: "ownerPrincipalName", + groupId: 'ownerPrincipalName', add: true, - URL: "webUrl", - SharePointType: "rootWebTemplate", + URL: 'webUrl', + SharePointType: 'rootWebTemplate', }, - confirmText: "Select the User to add as a member.", + confirmText: 'Select the User to add as a member.', fields: [ { - type: "autoComplete", - name: "user", - label: "Select User", + type: 'autoComplete', + name: 'user', + label: 'Select User', multiple: false, creatable: false, api: { - url: "/api/ListGraphRequest", + url: '/api/ListGraphRequest', data: { - Endpoint: "users", - $select: "id,displayName,userPrincipalName", + Endpoint: 'users', + $select: 'id,displayName,userPrincipalName', $top: 999, $count: true, }, - queryKey: "ListUsersAutoComplete", - dataKey: "Results", + queryKey: 'ListUsersAutoComplete', + dataKey: 'Results', labelField: (user) => `${user.displayName} (${user.userPrincipalName})`, - valueField: "userPrincipalName", + valueField: 'userPrincipalName', addedField: { - id: "id", + id: 'id', }, showRefresh: true, }, @@ -60,38 +72,38 @@ const Page = () => { multiPost: false, }, { - label: "Remove Member", - type: "POST", + label: 'Remove Member', + type: 'POST', icon: , - url: "/api/ExecSetSharePointMember", + url: '/api/ExecSetSharePointMember', data: { - groupId: "ownerPrincipalName", + groupId: 'ownerPrincipalName', add: false, - URL: "URL", - SharePointType: "rootWebTemplate", + URL: 'URL', + SharePointType: 'rootWebTemplate', }, - confirmText: "Select the User to remove as a member.", + confirmText: 'Select the User to remove as a member.', fields: [ { - type: "autoComplete", - name: "user", - label: "Select User", + type: 'autoComplete', + name: 'user', + label: 'Select User', multiple: false, creatable: false, api: { - url: "/api/ListGraphRequest", + url: '/api/ListGraphRequest', data: { - Endpoint: "users", - $select: "id,displayName,userPrincipalName", + Endpoint: 'users', + $select: 'id,displayName,userPrincipalName', $top: 999, $count: true, }, - queryKey: "ListUsersAutoComplete", - dataKey: "Results", + queryKey: 'ListUsersAutoComplete', + dataKey: 'Results', labelField: (user) => `${user.displayName} (${user.userPrincipalName})`, - valueField: "userPrincipalName", + valueField: 'userPrincipalName', addedField: { - id: "id", + id: 'id', }, showRefresh: true, }, @@ -100,37 +112,37 @@ const Page = () => { multiPost: false, }, { - label: "Add Site Admin", - type: "POST", + label: 'Add Site Admin', + type: 'POST', icon: , - url: "/api/ExecSharePointPerms", + url: '/api/ExecSharePointPerms', data: { - UPN: "ownerPrincipalName", + UPN: 'ownerPrincipalName', RemovePermission: false, - URL: "webUrl", + URL: 'webUrl', }, - confirmText: "Select the User to add to the Site Admins permissions", + confirmText: 'Select the User to add to the Site Admins permissions', fields: [ { - type: "autoComplete", - name: "user", - label: "Select User", + type: 'autoComplete', + name: 'user', + label: 'Select User', multiple: false, creatable: false, api: { - url: "/api/ListGraphRequest", + url: '/api/ListGraphRequest', data: { - Endpoint: "users", - $select: "id,displayName,userPrincipalName", + Endpoint: 'users', + $select: 'id,displayName,userPrincipalName', $top: 999, $count: true, }, - queryKey: "ListUsersAutoComplete", - dataKey: "Results", + queryKey: 'ListUsersAutoComplete', + dataKey: 'Results', labelField: (user) => `${user.displayName} (${user.userPrincipalName})`, - valueField: "userPrincipalName", + valueField: 'userPrincipalName', addedField: { - id: "id", + id: 'id', }, showRefresh: true, }, @@ -139,37 +151,37 @@ const Page = () => { multiPost: false, }, { - label: "Remove Site Admin", - type: "POST", + label: 'Remove Site Admin', + type: 'POST', icon: , - url: "/api/ExecSharePointPerms", + url: '/api/ExecSharePointPerms', data: { - UPN: "ownerPrincipalName", + UPN: 'ownerPrincipalName', RemovePermission: true, - URL: "webUrl", + URL: 'webUrl', }, - confirmText: "Select the User to remove from the Site Admins permissions", + confirmText: 'Select the User to remove from the Site Admins permissions', fields: [ { - type: "autoComplete", - name: "user", - label: "Select User", + type: 'autoComplete', + name: 'user', + label: 'Select User', multiple: false, creatable: false, api: { - url: "/api/ListGraphRequest", + url: '/api/ListGraphRequest', data: { - Endpoint: "users", - $select: "id,displayName,userPrincipalName", + Endpoint: 'users', + $select: 'id,displayName,userPrincipalName', $top: 999, $count: true, }, - queryKey: "ListUsersAutoComplete", - dataKey: "Results", + queryKey: 'ListUsersAutoComplete', + dataKey: 'Results', labelField: (user) => `${user.displayName} (${user.userPrincipalName})`, - valueField: "userPrincipalName", + valueField: 'userPrincipalName', addedField: { - id: "id", + id: 'id', }, showRefresh: true, }, @@ -178,75 +190,88 @@ const Page = () => { multiPost: false, }, { - label: "Delete Site", - type: "POST", + label: 'Delete Site', + type: 'POST', icon: , - url: "/api/DeleteSharepointSite", + url: '/api/DeleteSharepointSite', data: { - SiteId: "siteId", + SiteId: 'siteId', }, - confirmText: "Are you sure you want to delete this SharePoint site? This action cannot be undone.", - color: "error", + confirmText: + 'Are you sure you want to delete this SharePoint site? This action cannot be undone.', + color: 'error', multiPost: false, }, - ]; + ] const offCanvas = { - extendedInfoFields: ["displayName", "description", "webUrl"], + extendedInfoFields: ['displayName', 'description', 'webUrl'], actions: actions, children: (row) => ( ), - size: "lg", // Make the offcanvas extra large - }; + size: 'lg', // Make the offcanvas extra large + } + + const simpleColumns = [ + ...reportDB.cacheColumns.filter((c) => c === 'Tenant'), + 'displayName', + 'createdDateTime', + 'ownerPrincipalName', + 'lastActivityDate', + 'fileCount', + 'storageUsedInGigabytes', + 'storageAllocatedInGigabytes', + 'reportRefreshDate', + 'webUrl', + ...reportDB.cacheColumns.filter((c) => c !== 'Tenant'), + ] + + const pageActions = ( + + + + {reportDB.controls} + + ) return ( - - - - - } - /> - ); -}; + <> + + {reportDB.syncDialog} + + ) +} -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page} -export default Page; +export default Page diff --git a/src/pages/teams-share/teams/business-voice/index.js b/src/pages/teams-share/teams/business-voice/index.js index a3aa56764153..3c9354706147 100644 --- a/src/pages/teams-share/teams/business-voice/index.js +++ b/src/pages/teams-share/teams/business-voice/index.js @@ -1,10 +1,20 @@ import { Layout as DashboardLayout } from "../../../../layouts/index.js"; import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; import { PersonAdd, PersonRemove, LocationOn } from "@mui/icons-material"; const Page = () => { const pageTitle = "Teams Business Voice"; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListTeamsVoice", + queryKey: "ListTeamsVoice", + cacheName: "TeamsVoice", + syncTitle: "Sync Teams Business Voice Report", + allowToggle: true, + defaultCached: false, + }); + const actions = [ // the modal dropdowns that were added below may not exist yet, and will need to be tested. { @@ -81,34 +91,40 @@ const Page = () => { }; return ( - + <> + + {reportDB.syncDialog} + ); }; -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page}; export default Page; diff --git a/src/pages/teams-share/teams/list-team/index.js b/src/pages/teams-share/teams/list-team/index.js index bf48cccb08a3..99b51994bafe 100644 --- a/src/pages/teams-share/teams/list-team/index.js +++ b/src/pages/teams-share/teams/list-team/index.js @@ -1,13 +1,24 @@ import { Layout as DashboardLayout } from "../../../../layouts/index.js"; import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; import { Button } from "@mui/material"; +import { Stack } from "@mui/system"; import { Delete, GroupAdd } from "@mui/icons-material"; import Link from "next/link"; import { Edit } from "@mui/icons-material"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const Page = () => { const pageTitle = "Teams"; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListTeams?type=list", + queryKey: "ListTeams-list", + cacheName: "Teams", + syncTitle: "Sync Teams Report", + allowToggle: true, + defaultCached: false, + }); + const actions = [ { label: "Edit Group", @@ -32,22 +43,34 @@ const Page = () => { ]; return ( - - - - } - /> + <> + + + {reportDB.controls} + + } + /> + {reportDB.syncDialog} + ); }; -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page}; export default Page; diff --git a/src/pages/teams-share/teams/teams-activity/index.js b/src/pages/teams-share/teams/teams-activity/index.js index 2f2797a57cbb..f5fb2bb53754 100644 --- a/src/pages/teams-share/teams/teams-activity/index.js +++ b/src/pages/teams-share/teams/teams-activity/index.js @@ -1,18 +1,40 @@ import { Layout as DashboardLayout } from "../../../../layouts/index.js"; import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; const Page = () => { const pageTitle = "Teams Activity List"; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListTeamsActivity?type=TeamsUserActivityUser", + queryKey: "ListTeamsActivity-TeamsUserActivityUser", + cacheName: "TeamsActivity", + syncTitle: "Sync Teams Activity Report", + allowToggle: true, + defaultCached: false, + }); + return ( - + <> + + {reportDB.syncDialog} + ); }; -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page}; export default Page; diff --git a/src/pages/tenant/administration/alert-configuration/alert.jsx b/src/pages/tenant/administration/alert-configuration/alert.jsx index 4f636c58045c..7829d9df639e 100644 --- a/src/pages/tenant/administration/alert-configuration/alert.jsx +++ b/src/pages/tenant/administration/alert-configuration/alert.jsx @@ -29,12 +29,14 @@ import { ApiGetCall, ApiPostCall } from '../../../../api/ApiCall' import { PlusIcon } from '@heroicons/react/24/outline' import { CippFormCondition } from '../../../../components/CippComponents/CippFormCondition' import { CippHead } from '../../../../components/CippComponents/CippHead' +import { useSettings } from '../../../../hooks/use-settings' const AlertWizard = () => { const apiRequest = ApiPostCall({ relatedQueryKeys: ['ListAlertsQueue', 'ListCurrentAlerts'], }) const router = useRouter() + const tenantFilter = useSettings().currentTenant const [editAlert, setAlertEdit] = useState(false) useEffect(() => { if (router.query.id) { @@ -46,6 +48,8 @@ const AlertWizard = () => { url: '/api/ListAlertsQueue', relatedQueryKeys: 'ListAlertsQueue', queryKey: 'ListCurrentAlerts', + data: { tenantFilter }, + waiting: !!tenantFilter, }) const [recurrenceOptions, setRecurrenceOptions] = useState([ { value: '30m', label: 'Every 30 minutes' }, @@ -145,29 +149,54 @@ const AlertWizard = () => { alert.RawAlert.PostExecution.split(',').includes(opt.value) ) let tenantFilterForForm - if (alert.RawAlert.TenantGroup) { + if (alert.RawAlert.Tenants) { + // Multi tenant alert - parse stored JSON + try { + const parsedTenants = + typeof alert.RawAlert.Tenants === 'string' + ? JSON.parse(alert.RawAlert.Tenants) + : alert.RawAlert.Tenants + tenantFilterForForm = Array.isArray(parsedTenants) ? parsedTenants : [parsedTenants] + } catch (error) { + console.error('Error parsing Tenants:', error) + tenantFilterForForm = [ + { + value: alert.RawAlert.Tenant, + label: alert.RawAlert.Tenant, + type: 'Tenant', + }, + ] + } + } else if (alert.RawAlert.TenantGroup) { try { const tenantGroupObject = JSON.parse(alert.RawAlert.TenantGroup) - tenantFilterForForm = { - value: tenantGroupObject.value, - label: tenantGroupObject.label, - type: 'Group', - addedFields: tenantGroupObject, - } + tenantFilterForForm = [ + { + value: tenantGroupObject.value, + label: tenantGroupObject.label, + type: 'Group', + addedFields: tenantGroupObject, + }, + ] } catch (error) { console.error('Error parsing tenant group:', error) - tenantFilterForForm = { + tenantFilterForForm = [ + { + value: alert.RawAlert.Tenant, + label: alert.RawAlert.Tenant, + type: 'Tenant', + }, + ] + } + } else { + // Single tenant + tenantFilterForForm = [ + { value: alert.RawAlert.Tenant, label: alert.RawAlert.Tenant, type: 'Tenant', - } - } - } else { - tenantFilterForForm = { - value: alert.RawAlert.Tenant, - label: alert.RawAlert.Tenant, - type: 'Tenant', - } + }, + ] } let startDateTimeForForm = null if (alert.RawAlert.DesiredStartTime && alert.RawAlert.DesiredStartTime !== '0') { @@ -472,13 +501,16 @@ const AlertWizard = () => { return {} } + const tenants = Array.isArray(values.tenantFilter) ? values.tenantFilter : [values.tenantFilter] + const tenantLabel = tenants.map((t) => t.label || t.value).join(', ') + const postObject = { RowKey: router.query.clone ? undefined : router.query.id ? router.query.id : undefined, tenantFilter: values.tenantFilter, excludedTenants: values.excludedTenants, Name: values.CustomSubject - ? `${values.tenantFilter?.label || values.tenantFilter?.value}: ${values.CustomSubject}` - : `${values.tenantFilter?.label || values.tenantFilter?.value}: ${values.command.label}`, + ? `${tenantLabel}: ${values.CustomSubject}` + : `${tenantLabel}: ${values.command.label}`, Command: { value: `Get-CIPPAlert${values.command.value.name}` }, Parameters: getInputParams(), ScheduledTime: Math.floor(new Date().getTime() / 1000) + 60, @@ -489,7 +521,7 @@ const AlertWizard = () => { CustomSubject: values.CustomSubject, } apiRequest.mutate( - { url: '/api/AddScheduledItem?hidden=true', data: postObject }, + { url: '/api/AddScriptedAlert', data: postObject }, { onSuccess: () => { // Prevent form reload after successful save @@ -884,19 +916,22 @@ const AlertWizard = () => { + value?.length > 0 || + 'At least one tenant or *All Tenants must be selected', }} /> diff --git a/src/pages/tenant/conditional/list-policies/edit.jsx b/src/pages/tenant/conditional/list-policies/edit.jsx new file mode 100644 index 000000000000..156cd39f12b2 --- /dev/null +++ b/src/pages/tenant/conditional/list-policies/edit.jsx @@ -0,0 +1,75 @@ +import React, { useEffect, useState } from "react"; +import { Alert, Box } from "@mui/material"; +import { useForm } from "react-hook-form"; +import { useRouter } from "next/router"; +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import CippFormPage from "../../../../components/CippFormPages/CippFormPage"; +import CippFormSkeleton from "../../../../components/CippFormPages/CippFormSkeleton"; +import { ApiGetCall } from "../../../../api/ApiCall"; +import CippCAPolicyBuilder, { + extractCAPolicyJSON, +} from "../../../../components/CippComponents/CippCAPolicyBuilder"; +import { useSettings } from "../../../../hooks/use-settings.js"; + +const EditCAPolicy = () => { + const router = useRouter(); + const { id: policyId } = router.query; + const tenantFilter = useSettings()?.currentTenant; + const [policyData, setPolicyData] = useState(null); + + const formControl = useForm({ mode: "onChange" }); + + // Fetch the current policies for this tenant + const policiesQuery = ApiGetCall({ + url: `/api/ListConditionalAccessPolicies?tenantFilter=${tenantFilter}`, + queryKey: `CAPolicies-${tenantFilter}`, + enabled: !!policyId && !!tenantFilter, + }); + + useEffect(() => { + if (policiesQuery.isSuccess && policiesQuery.data?.Results) { + const match = policiesQuery.data.Results.find((p) => p.id === policyId); + if (match?.rawjson) { + const parsed = JSON.parse(match.rawjson); + setPolicyData(parsed); + } + } + }, [policiesQuery.isSuccess, policiesQuery.data, policyId]); + + const dataFormatter = (values) => { + const cleaned = extractCAPolicyJSON(values); + return { + tenantFilter, + PolicyId: policyId, + PolicyBody: cleaned, + }; + }; + + return ( + + + {policiesQuery.isLoading ? ( + + ) : policiesQuery.isError ? ( + Error loading policies. + ) : !policyData ? ( + Policy not found for ID: {policyId} + ) : ( + + )} + + + ); +}; + +EditCAPolicy.getLayout = (page) => {page}; + +export default EditCAPolicy; diff --git a/src/pages/tenant/conditional/list-policies/index.js b/src/pages/tenant/conditional/list-policies/index.js index d7f48eac6694..1e85c99b3ebc 100644 --- a/src/pages/tenant/conditional/list-policies/index.js +++ b/src/pages/tenant/conditional/list-policies/index.js @@ -25,6 +25,13 @@ const Page = () => { // Actions configuration const actions = [ + { + label: "Edit Policy", + link: "/tenant/conditional/list-policies/edit?id=[id]", + icon: , + color: "info", + hideBulk: true, + }, { label: "Create template based on policy", type: "POST", diff --git a/src/pages/tenant/conditional/list-template/create.jsx b/src/pages/tenant/conditional/list-template/create.jsx new file mode 100644 index 000000000000..1843c369c323 --- /dev/null +++ b/src/pages/tenant/conditional/list-template/create.jsx @@ -0,0 +1,39 @@ +import React from "react"; +import { Box } from "@mui/material"; +import { useForm } from "react-hook-form"; +import { Layout as DashboardLayout } from "../../../../layouts/index.js"; +import CippFormPage from "../../../../components/CippFormPages/CippFormPage"; +import CippCAPolicyBuilder, { extractCAPolicyJSON } from "../../../../components/CippComponents/CippCAPolicyBuilder"; + +const CreateCATemplate = () => { + const formControl = useForm({ + mode: "onChange", + defaultValues: { + state: { label: "Report-only", value: "enabledForReportingButNotEnforced" }, + }, + }); + + const customDataFormatter = (values) => { + return extractCAPolicyJSON(values); + }; + + return ( + + + + + + ); +}; + +CreateCATemplate.getLayout = (page) => {page}; + +export default CreateCATemplate; diff --git a/src/pages/tenant/conditional/list-template/edit.jsx b/src/pages/tenant/conditional/list-template/edit.jsx index 9521ddae99ed..6d82be777062 100644 --- a/src/pages/tenant/conditional/list-template/edit.jsx +++ b/src/pages/tenant/conditional/list-template/edit.jsx @@ -1,5 +1,5 @@ import React, { useEffect, useState } from "react"; -import { Alert, Box, Typography } from "@mui/material"; +import { Alert, Box, Typography, ToggleButtonGroup, ToggleButton } from "@mui/material"; import { useForm } from "react-hook-form"; import { useRouter } from "next/router"; import { Layout as DashboardLayout } from "../../../../layouts/index.js"; @@ -7,15 +7,29 @@ import CippFormPage from "../../../../components/CippFormPages/CippFormPage"; import CippFormSkeleton from "../../../../components/CippFormPages/CippFormSkeleton"; import { ApiGetCall } from "../../../../api/ApiCall"; import CippTemplateFieldRenderer from "../../../../components/CippComponents/CippTemplateFieldRenderer"; +import CippCAPolicyBuilder, { + extractCAPolicyJSON, +} from "../../../../components/CippComponents/CippCAPolicyBuilder"; const EditCATemplate = () => { const router = useRouter(); const { GUID } = router.query; const [templateData, setTemplateData] = useState(null); const [originalData, setOriginalData] = useState(null); + const [editorMode, setEditorMode] = useState("builder"); const formControl = useForm({ mode: "onChange" }); + // When switching to builder mode, reset the form to clear any empty [] + // values that CippTemplateFieldRenderer may have injected + const handleEditorModeChange = (e, val) => { + if (!val) return; + if (val === "builder" && editorMode !== "builder") { + formControl.reset({}); + } + setEditorMode(val); + }; + // Fetch the template data const templateQuery = ApiGetCall({ url: `/api/ListCATemplates?GUID=${GUID}`, @@ -110,6 +124,14 @@ const EditCATemplate = () => { }; }; + // Build a data formatter that works for both editor modes + const builderDataFormatter = (values) => { + const cleaned = extractCAPolicyJSON(values); + return { GUID, ...cleaned }; + }; + + const activeFormatter = editorMode === "builder" ? builderDataFormatter : customDataFormatter; + return ( { queryKey={[`CATemplate-${GUID}`, "CATemplates"]} backButtonTitle="Conditional Access Templates" postUrl="/api/ExecEditTemplate?type=CATemplate" - customDataformatter={customDataFormatter} + customDataformatter={activeFormatter} formPageType="Edit" + titleButton={ + + Policy Builder + Field Editor + + } > {templateQuery.isLoading ? ( ) : templateQuery.isError || !templateData ? ( Error loading template or template not found. + ) : editorMode === "builder" ? ( + ) : ( { const pageTitle = "Available Conditional Access Templates"; @@ -42,6 +43,37 @@ const Page = () => { icon: , color: "info", }, + { + label: "Add to package", + type: "POST", + url: "/api/ExecSetPackageTag", + data: { GUID: "GUID" }, + fields: [ + { + type: "textField", + name: "Package", + label: "Package Name", + required: true, + validators: { + required: { value: true, message: "Package name is required" }, + }, + }, + ], + confirmText: "Enter the package name to assign to the selected template(s).", + multiPost: true, + icon: , + color: "info", + }, + { + label: "Remove from package", + type: "POST", + url: "/api/ExecSetPackageTag", + data: { GUID: "GUID", Remove: true }, + confirmText: "Are you sure you want to remove the selected template(s) from their package?", + multiPost: true, + icon: , + color: "warning", + }, { label: "Save to GitHub", type: "POST", @@ -110,10 +142,16 @@ const Page = () => { queryKey="ListCATemplates-table" actions={actions} offCanvas={offCanvas} - simpleColumns={["displayName", "GUID"]} + simpleColumns={["displayName", "package", "GUID"]} cardButton={ - { - const [createDefaults, setCreateDefaults] = useState(false); - const [activeStep, setActiveStep] = useState(0); + const [createDefaults, setCreateDefaults] = useState(false) + const [activeStep, setActiveStep] = useState(0) + const { checkPermissions } = usePermissions() + const canViewGdapChecks = checkPermissions(['CIPP.AppSettings.Read']) const relationships = ApiGetCallWithPagination({ - url: "/api/ListGraphRequest", - data: { - Endpoint: "tenantRelationships/delegatedAdminRelationships", - tenantFilter: "", - $top: 300, - }, - queryKey: "ListGDAPRelationships", - }); + url: '/api/ListGDAPRelationships', + queryKey: 'ListGDAPRelationships', + waiting: true, + }) const mappedRoles = ApiGetCallWithPagination({ - url: "/api/ListGDAPRoles", - queryKey: "ListGDAPRoles", - }); + url: '/api/ListGDAPRoles', + queryKey: 'ListGDAPRoles', + waiting: true, + }) const roleTemplates = ApiGetCallWithPagination({ - url: "/api/ExecGDAPRoleTemplate", - queryKey: "ListGDAPRoleTemplates", - }); + url: '/api/ExecGDAPRoleTemplate', + queryKey: 'ListGDAPRoleTemplates', + waiting: true, + }) const pendingInvites = ApiGetCallWithPagination({ - url: "/api/ListGDAPInvite", - queryKey: "ListGDAPInvite", - }); + url: '/api/ListGDAPInvite', + queryKey: 'ListGDAPInvite', + waiting: true, + }) const createCippDefaults = ApiPostCall({ urlFromData: true, - relatedQueryKeys: ["ListGDAPRoleTemplates", "ListGDAPRoles"], - }); + relatedQueryKeys: ['ListGDAPRoleTemplates', 'ListGDAPRoles'], + }) useEffect(() => { if (roleTemplates.isSuccess) { - var promptCreateDefaults = true; + var promptCreateDefaults = true // check templates for CIPP Defaults - const firstPageResults = roleTemplates?.data?.pages?.[0]?.Results; + const firstPageResults = roleTemplates?.data?.pages?.[0]?.Results if ( firstPageResults && Array.isArray(firstPageResults) && firstPageResults.length > 0 && - firstPageResults.find((t) => t?.TemplateId === "CIPP Defaults") + firstPageResults.find((t) => t?.TemplateId === 'CIPP Defaults') ) { - promptCreateDefaults = false; + promptCreateDefaults = false } - setCreateDefaults(promptCreateDefaults); + setCreateDefaults(promptCreateDefaults) } - }, [roleTemplates]); + }, [roleTemplates]) useEffect(() => { if (mappedRoles.isSuccess && roleTemplates.isSuccess && pendingInvites.isSuccess) { - const mappedRolesFirstPage = mappedRoles?.data?.pages?.[0]; + const mappedRolesFirstPage = mappedRoles?.data?.pages?.[0] if ( mappedRolesFirstPage && Array.isArray(mappedRolesFirstPage) && mappedRolesFirstPage.length > 0 ) { - setActiveStep(1); + setActiveStep(1) - const roleTemplatesFirstPage = roleTemplates?.data?.pages?.[0]?.Results; + const roleTemplatesFirstPage = roleTemplates?.data?.pages?.[0]?.Results if ( roleTemplatesFirstPage && Array.isArray(roleTemplatesFirstPage) && roleTemplatesFirstPage.length > 0 ) { - setActiveStep(2); + setActiveStep(2) - const pendingInvitesFirstPage = pendingInvites?.data?.pages?.[0]; + const pendingInvitesFirstPage = pendingInvites?.data?.pages?.[0] if ( pendingInvitesFirstPage && Array.isArray(pendingInvitesFirstPage) && pendingInvitesFirstPage.length > 0 ) { - setActiveStep(4); + setActiveStep(4) } } } @@ -106,7 +108,7 @@ const Page = () => { roleTemplates.isSuccess, roleTemplates.isFetching, pendingInvites.isSuccess, - ]); + ]) return ( { relationships.data?.pages ?.map((page) => page?.Results?.length || 0) .reduce((a, b) => (a || 0) + (b || 0), 0) ?? 0, - name: "GDAP Relationships", - color: "secondary", + name: 'GDAP Relationships', + color: 'secondary', }, { icon: , @@ -142,8 +144,8 @@ const Page = () => { mappedRoles.data?.pages ?.map((page) => page?.length || 0) .reduce((a, b) => (a || 0) + (b || 0), 0) ?? 0, - name: "Mapped Admin Roles", - color: "green", + name: 'Mapped Admin Roles', + color: 'green', }, { icon: , @@ -151,7 +153,7 @@ const Page = () => { roleTemplates.data?.pages ?.map((page) => page?.Results?.length || 0) .reduce((a, b) => (a || 0) + (b || 0), 0) ?? 0, - name: "Role Templates", + name: 'Role Templates', }, { icon: , @@ -159,7 +161,7 @@ const Page = () => { pendingInvites.data?.pages ?.map((page) => page?.length || 0) .reduce((a, b) => (a || 0) + (b || 0), 0) ?? 0, - name: "Pending Invites", + name: 'Pending Invites', }, ]} /> @@ -167,55 +169,59 @@ const Page = () => { - - - - - - - - + {canViewGdapChecks && ( + <> + + + + + + + + + + )} - ); -}; + ) +} Page.getLayout = (page) => ( {page} -); +) -export default Page; +export default Page diff --git a/src/pages/tenant/gdap-management/offboarding.js b/src/pages/tenant/gdap-management/offboarding.js index d9486f775c25..aa6cddc87d0d 100644 --- a/src/pages/tenant/gdap-management/offboarding.js +++ b/src/pages/tenant/gdap-management/offboarding.js @@ -22,60 +22,46 @@ const Page = () => { return vendor.vendorTenantId; }) .join(","); - const vendorGraphFilter = `appOwnerOrganizationId in (${vendorFilter})`; const tenantId = useWatch({ control: formControl.control, name: "tenantFilter", }); const gdapRelationships = ApiGetCall({ - url: "/api/ListGraphRequest", - data: { - Endpoint: "tenantRelationships/delegatedAdminRelationships", - tenantFilter: "", - $top: 300, - }, + url: "/api/ListGDAPRelationships", queryKey: "ListGDAPRelationship", }); const cspContracts = ApiGetCall({ - url: "/api/ListGraphRequest", - data: { - Endpoint: "contracts", - tenantFilter: "", - $top: 300, - }, + url: "/api/ListGDAPContracts", queryKey: "ListContracts", }); const mspApps = ApiGetCall({ - url: "/api/ListGraphRequest", + url: "/api/ListGDAPServicePrincipals", data: { - Endpoint: "servicePrincipals", - TenantFilter: tenantId?.value, - $filter: `appOwnerOrganizationId eq %partnertenantid%`, - $select: "id,displayName,appId,appOwnerOrganizationId", - $count: true, + tenantFilter: tenantId?.value, + ownerType: "partner", }, queryKey: "ListMSPApps-" + tenantId?.value, + waiting: Boolean(tenantId?.value), }); const vendorApps = ApiGetCallWithPagination({ - url: "/api/ListGraphRequest", + url: "/api/ListGDAPServicePrincipals", data: { - Endpoint: "servicePrincipals", - TenantFilter: tenantId?.value, - $filter: vendorGraphFilter, - $select: "id,displayName,appId,appOwnerOrganizationId", - $count: true, + tenantFilter: tenantId?.value, + ownerType: "vendor", + vendorTenantIds: vendorFilter, }, queryKey: "ListVendorApps-" + tenantId?.value, + waiting: Boolean(tenantId?.value), }); return ( <> { label="Select Tenant to Offboard" type="autoComplete" api={{ - url: "/api/ExecExcludeTenant", - data: { - ListAll: true, - }, - queryKey: "ListAllTenants", + url: "/api/ListOffboardTenants", + queryKey: "ListOffboardTenants", labelField: (tenant) => { return `${tenant.displayName} (${tenant.defaultDomainName})`; }, @@ -205,13 +188,11 @@ const Page = () => { label="Vendor Applications to Remove" type="autoComplete" api={{ - url: "/api/ListGraphRequest", + url: "/api/ListGDAPServicePrincipals", data: { - Endpoint: "servicePrincipals", - TenantFilter: tenantId.value, - $filter: vendorGraphFilter, - $select: "id,displayName,appId,appOwnerOrganizationId", - $count: true, + tenantFilter: tenantId.value, + ownerType: "vendor", + vendorTenantIds: vendorFilter, }, dataKey: "Results", queryKey: "ListVendorApps-" + tenantId.value, diff --git a/src/pages/tenant/gdap-management/onboarding/start.js b/src/pages/tenant/gdap-management/onboarding/start.js index c2908d22a467..c5cf9cf5da3a 100644 --- a/src/pages/tenant/gdap-management/onboarding/start.js +++ b/src/pages/tenant/gdap-management/onboarding/start.js @@ -49,11 +49,7 @@ const Page = () => { }); const relationshipList = ApiGetCall({ - url: "/api/ListGraphRequest", - data: { - TenantFilter: "", - Endpoint: "tenantRelationships/delegatedAdminRelationships", - }, + url: "/api/ListGDAPRelationships", queryKey: "GDAPRelationshipOnboarding", }); const onboardingList = ApiGetCallWithPagination({ @@ -317,10 +313,7 @@ const Page = () => { label="Select GDAP Relationship" type="autoComplete" api={{ - url: "/api/ListGraphRequest", - data: { - Endpoint: "tenantRelationships/delegatedAdminRelationships", - }, + url: "/api/ListGDAPRelationships", excludeTenantFilter: true, queryKey: "GDAPRelationships", dataKey: "Results", diff --git a/src/pages/tenant/gdap-management/relationships/index.js b/src/pages/tenant/gdap-management/relationships/index.js index 8c3c3da01bc0..f3a3e4f441a7 100644 --- a/src/pages/tenant/gdap-management/relationships/index.js +++ b/src/pages/tenant/gdap-management/relationships/index.js @@ -4,8 +4,6 @@ import tabOptions from "../tabOptions"; import CippTablePage from "../../../../components/CippComponents/CippTablePage"; import CippGdapActions from "../../../../components/CippComponents/CippGdapActions"; -const pageTitle = "GDAP Relationships"; - const actions = CippGdapActions(); const simpleColumns = [ @@ -47,20 +45,12 @@ const offCanvas = { extendedInfoFields: simpleColumns, }; -const apiUrl = "/api/ListGraphRequest"; -const apiData = { - Endpoint: "tenantRelationships/delegatedAdminRelationships", - tenantFilter: "", - $top: 300, -}; - const Page = () => { return ( { const [relationshipData, setRelationshipData] = useState({}); const relationshipRequest = ApiGetCall({ - url: `/api/ListGraphRequest?Endpoint=tenantRelationships/delegatedAdminRelationships/${id}`, + url: `/api/ListGDAPRelationships?id=${id}`, queryKey: `ListRelationships-${id}`, }); diff --git a/src/pages/tenant/gdap-management/relationships/relationship/mappings.js b/src/pages/tenant/gdap-management/relationships/relationship/mappings.js index 3ec708b70c66..b9669e3f725f 100644 --- a/src/pages/tenant/gdap-management/relationships/relationship/mappings.js +++ b/src/pages/tenant/gdap-management/relationships/relationship/mappings.js @@ -12,7 +12,7 @@ const Page = () => { const { id } = router.query; const relationshipRequest = ApiGetCall({ - url: `/api/ListGraphRequest?Endpoint=tenantRelationships/delegatedAdminRelationships/${id}`, + url: `/api/ListGDAPRelationships?id=${id}`, queryKey: `ListRelationships-${id}`, }); diff --git a/src/pages/tenant/manage/applied-standards.js b/src/pages/tenant/manage/applied-standards.js index 221f7ca2e335..376507ec4017 100644 --- a/src/pages/tenant/manage/applied-standards.js +++ b/src/pages/tenant/manage/applied-standards.js @@ -121,6 +121,17 @@ const Page = () => { enabled: !!templateId, // Only run the query if templateId is available }) + // Fetch drift deviation data for drift templates + const isDriftTemplate = selectedTemplate?.type === 'drift' + const driftApi = ApiGetCall({ + url: '/api/listTenantDrift', + data: { + tenantFilter: currentTenant, + }, + queryKey: `TenantDrift-applied-${currentTenant}`, + enabled: isDriftTemplate && !!currentTenant, + }) + useEffect(() => { if (templateId && templateDetails.isSuccess && templateDetails.data) { const selectedTemplate = templateDetails.data.find((template) => template.GUID === templateId) @@ -1165,6 +1176,50 @@ const Page = () => { }) } + // For drift templates, cross-reference with drift deviation data + if (isDriftTemplate && driftApi.isSuccess && driftApi.data) { + const tenantDriftItems = Array.isArray(driftApi.data) + ? driftApi.data.filter((item) => item.tenantFilter === currentTenant) + : [] + + // Build a lookup of standardName -> deviation status + const deviationLookup = {} + tenantDriftItems.forEach((item) => { + if (item.acceptedDeviations) { + item.acceptedDeviations.forEach((dev) => { + if (dev?.standardName) { + deviationLookup[dev.standardName] = 'Accepted' + deviationLookup[`standards.${dev.standardName}`] = 'Accepted' + } + }) + } + if (item.customerSpecificDeviations) { + item.customerSpecificDeviations.forEach((dev) => { + if (dev?.standardName) { + deviationLookup[dev.standardName] = 'CustomerSpecific' + deviationLookup[`standards.${dev.standardName}`] = 'CustomerSpecific' + } + }) + } + }) + + // Update compliance status for accepted deviations + allStandards.forEach((standard) => { + if (standard.complianceStatus === 'Non-Compliant') { + const devStatus = + deviationLookup[standard.standardId] || + deviationLookup[standard.standardId?.replace(/^standards\./, '')] + if (devStatus === 'Accepted') { + standard.complianceStatus = 'Accepted Deviation' + standard.deviationStatus = 'Accepted' + } else if (devStatus === 'CustomerSpecific') { + standard.complianceStatus = 'Customer Specific' + standard.deviationStatus = 'CustomerSpecific' + } + } + }) + } + setComparisonData(allStandards) } else { setComparisonData([]) @@ -1179,6 +1234,10 @@ const Page = () => { comparisonApi.isSuccess, comparisonApi.data, comparisonApi.isError, + isDriftTemplate, + driftApi.isSuccess, + driftApi.data, + currentTenant, ]) const comparisonModeOptions = [{ label: 'Compare Tenant to Standard', value: 'standard' }] @@ -1233,6 +1292,9 @@ const Page = () => { (filter === 'compliant' && standard.complianceStatus === 'Compliant') || (filter === 'nonCompliant' && standard.complianceStatus === 'Non-Compliant') || (filter === 'overridden' && standard.complianceStatus === 'Overridden') || + (filter === 'acceptedDeviation' && + (standard.complianceStatus === 'Accepted Deviation' || + standard.complianceStatus === 'Customer Specific')) || (filter === 'nonCompliantWithLicense' && standard.complianceStatus === 'Non-Compliant' && !hasLicenseMissing) || @@ -1262,6 +1324,12 @@ const Page = () => { comparisonData?.filter((standard) => standard.complianceStatus === 'Compliant').length || 0 const nonCompliantCount = comparisonData?.filter((standard) => standard.complianceStatus === 'Non-Compliant').length || 0 + const acceptedDeviationCount = + comparisonData?.filter( + (standard) => + standard.complianceStatus === 'Accepted Deviation' || + standard.complianceStatus === 'Customer Specific' + ).length || 0 const reportingDisabledCount = comparisonData?.filter((standard) => standard.complianceStatus === 'Reporting Disabled') .length || 0 @@ -1297,7 +1365,9 @@ const Page = () => { const compliancePercentage = allCount > 0 ? Math.round( - (compliantCount / (allCount - reportingDisabledCount - overriddenCount || 1)) * 100 + ((compliantCount + acceptedDeviationCount) / + (allCount - reportingDisabledCount - overriddenCount || 1)) * + 100 ) : 0 @@ -1360,6 +1430,12 @@ const Page = () => { templateDetails.refetch() }, currentTenant, + templateTenants: Array.isArray(selectedTemplate?.tenantFilter) + ? selectedTemplate.tenantFilter + : [], + excludedTenants: Array.isArray(selectedTemplate?.excludedTenants) + ? selectedTemplate.excludedTenants + : [], }), ] @@ -1371,7 +1447,7 @@ const Page = () => { backUrl="/tenant/standards" actions={actions} actionsData={{}} - isFetching={comparisonApi.isFetching || templateDetails.isFetching} + isFetching={comparisonApi.isFetching || templateDetails.isFetching || driftApi.isFetching} > @@ -1606,6 +1682,17 @@ const Page = () => { combinedScore >= 80 ? 'success' : combinedScore >= 60 ? 'warning' : 'error' } /> + + {isDriftTemplate ? : } + + } + label={isDriftTemplate ? 'Drift Standard' : 'Classic Standard'} + size="small" + color={isDriftTemplate ? 'info' : 'default'} + variant="outlined" + /> )} { > Overridden ({overriddenCount}) + {isDriftTemplate && acceptedDeviationCount > 0 && ( + { + setFilter('acceptedDeviation') + setFilterMenuAnchor(null) + }} + > + Accepted Deviations ({acceptedDeviationCount}) + + )} { @@ -1780,7 +1878,10 @@ const Page = () => { ? 'warning.main' : standard.complianceStatus === 'Reporting Disabled' ? 'grey.500' - : 'error.main', + : standard.complianceStatus === 'Accepted Deviation' || + standard.complianceStatus === 'Customer Specific' + ? 'info.main' + : 'error.main', }} > {standard.complianceStatus === 'Compliant' ? ( @@ -1789,6 +1890,9 @@ const Page = () => { ) : standard.complianceStatus === 'Reporting Disabled' ? ( + ) : standard.complianceStatus === 'Accepted Deviation' || + standard.complianceStatus === 'Customer Specific' ? ( + ) : ( )} @@ -2032,7 +2136,11 @@ const Page = () => { ? 'warning.main' : standard.complianceStatus === 'Reporting Disabled' ? 'grey.500' - : 'error.main', + : standard.complianceStatus === + 'Accepted Deviation' || + standard.complianceStatus === 'Customer Specific' + ? 'info.main' + : 'error.main', borderRadius: '50%', width: 8, height: 8, @@ -2500,7 +2608,10 @@ const Page = () => { ? 'warning.main' : standard.complianceStatus === 'Reporting Disabled' ? 'text.secondary' - : 'error.main', + : standard.complianceStatus === 'Accepted Deviation' || + standard.complianceStatus === 'Customer Specific' + ? 'info.main' + : 'error.main', fontWeight: standard.complianceStatus === 'Non-Compliant' ? 'medium' diff --git a/src/pages/tenant/manage/configuration-backup.js b/src/pages/tenant/manage/configuration-backup.js index 15154dc5e258..2d839fa6466d 100644 --- a/src/pages/tenant/manage/configuration-backup.js +++ b/src/pages/tenant/manage/configuration-backup.js @@ -89,8 +89,8 @@ const Page = () => { queryKey: `BackupTasks-${currentTenant}`, }); - // Use the actual backup files as the backup data - const filteredBackupData = Array.isArray(backupList.data) ? backupList.data : []; + // Use the actual backup files as the backup data — filter out any null entries + const filteredBackupData = Array.isArray(backupList.data) ? backupList.data.filter(Boolean) : []; // Generate backup tags from actual API response items - use raw items directly const generateBackupTags = (backup) => { // Use the Items array directly from the API response without any translation @@ -173,11 +173,12 @@ const Page = () => { }; // Filter backup data by selected tenant if in AllTenants view + const selectedTenantValue = backupTenantFilter?.value ?? backupTenantFilter; const tenantFilteredBackupData = settings.currentTenant === "AllTenants" && - backupTenantFilter && - backupTenantFilter !== "AllTenants" - ? filteredBackupData.filter((backup) => backup.TenantFilter === backupTenantFilter) + selectedTenantValue && + selectedTenantValue !== "AllTenants" + ? filteredBackupData.filter((backup) => backup.TenantFilter === selectedTenantValue) : filteredBackupData; const backupDisplayItems = tenantFilteredBackupData.map((backup, index) => ({ @@ -188,7 +189,7 @@ const Page = () => { tags: generateBackupTags(backup), })); - // Process existing backup configuration, find tenantFilter. by comparing settings.currentTenant with Tenant.value + // Process existing backup configuration const currentConfig = Array.isArray(existingBackupConfig.data) ? existingBackupConfig.data.find( (tenant) => @@ -383,8 +384,9 @@ const Page = () => { No Backup Configuration No backup schedule is currently configured for{" "} - {settings.currentTenant === "AllTenants" ? "any tenant" : settings.currentTenant}. - Click "Add Backup Schedule" to create an automated backup configuration. + {settings.currentTenant === "AllTenants" ? "AllTenants" : settings.currentTenant}. + Click "Add Backup Schedule" to create an automated backup configuration that will apply to all tenants. + A tenant specific backup can exist alongside a global backup, and will run according to its own schedule. )} diff --git a/src/pages/tenant/manage/drift.js b/src/pages/tenant/manage/drift.js index 015ad73c6000..df2a3869dc38 100644 --- a/src/pages/tenant/manage/drift.js +++ b/src/pages/tenant/manage/drift.js @@ -95,6 +95,12 @@ const ManageDriftPage = () => { queryKey: 'ListIntuneTemplates', }) + // API call to get all CA templates for displayName lookup + const caTemplatesApi = ApiGetCall({ + url: '/api/ListCATemplates', + queryKey: 'ListCATemplates', + }) + // API call for standards comparison (when templateId is available) const comparisonApi = ApiGetCall({ url: '/api/ListStandardsCompare', @@ -107,6 +113,49 @@ const ManageDriftPage = () => { enabled: !!templateId && !!tenantFilter, }) + // API call for persistent drift remediation tasks + const persistentDriftTasksApi = ApiGetCall({ + url: '/api/ListScheduledItems', + data: { + tenantFilter: tenantFilter, + SearchTitle: 'Persistent Drift Remediation:*', + }, + queryKey: `PersistentDriftTasks-${tenantFilter}`, + waiting: !!tenantFilter, + }) + + const persistentTaskNameSet = new Set( + (persistentDriftTasksApi.data || []) + .map((task) => (task?.Name ? String(task.Name).toLowerCase() : null)) + .filter(Boolean) + ) + + const getDriftTaskSettingName = (standardName) => { + if (!standardName) return '' + + const normalizedName = String(standardName) + const withoutPrefix = normalizedName.replace(/^standards\./, '') + + if (withoutPrefix.startsWith('IntuneTemplate.')) { + return 'IntuneTemplate' + } + + if (withoutPrefix.startsWith('ConditionalAccessTemplate.')) { + return 'ConditionalAccessTemplate' + } + + return withoutPrefix + } + + const hasPersistentDenyTask = (standardName) => { + const settingName = getDriftTaskSettingName(standardName) + if (!settingName || !tenantFilter) return false + + const expectedTaskName = + `Persistent Drift Remediation: ${settingName} - ${tenantFilter}`.toLowerCase() + return persistentTaskNameSet.has(expectedTaskName) + } + // Process drift data for chart - filter by current tenant and aggregate const rawDriftData = driftApi.data || [] const tenantDriftData = Array.isArray(rawDriftData) @@ -189,6 +238,14 @@ const ManageDriftPage = () => { displayName = template.TemplateList.label } } + // If not found in standardSettings, look up in all CA templates (for tag templates) + if (!displayName && Array.isArray(caTemplatesApi.data)) { + const template = caTemplatesApi.data.find((t) => t.GUID === guid) + if (template?.displayName) { + displayName = template.displayName + } + } + // If template not found, return null to filter it out later if (!displayName) { return null @@ -512,6 +569,7 @@ const ManageDriftPage = () => { : isLicenseSkipped ? 'Skipped - No License Available' : getDeviationStatusText(actualStatus) + const isPersistentDenyEnabled = hasPersistentDenyTask(deviation.standardName) // For skipped items, show different expected/received values let displayExpectedValue = deviation.ExpectedValue || deviation.expectedValue @@ -536,15 +594,29 @@ const ManageDriftPage = () => { text: prettyName, subtext: description, statusColor: isLicenseSkipped ? 'text.secondary' : getDeviationColor(actualStatus), - statusText: actualStatusText, + statusText: isPersistentDenyEnabled + ? `${actualStatusText} | Persistent deny (12h)` + : actualStatusText, standardName: deviation.standardName, // Store the original standardName for action handlers receivedValue: deviation.receivedValue, // Store the original receivedValue for action handlers expectedValue: deviation.expectedValue, // Store the original expectedValue for action handlers originalDeviation: deviation, // Store the complete original deviation object for reference isLicenseSkipped: isLicenseSkipped, // Flag for filtering and disabling actions isActuallyCompliant: isActuallyCompliant, // Flag to move to compliant section + isPersistentDenyEnabled: isPersistentDenyEnabled, children: ( + {isPersistentDenyEnabled && ( + + + + )} + {description && description !== 'No description available' && ( {description} @@ -1134,6 +1206,17 @@ const ManageDriftPage = () => { const handleDeviationAction = (action, deviation) => { if (!deviation) return + const resolvedReceivedValue = + deviation.receivedValue ?? + deviation.CurrentValue ?? + deviation.currentValue ?? + deviation.originalDeviation?.receivedValue ?? + deviation.originalDeviation?.CurrentValue ?? + deviation.originalDeviation?.currentValue ?? + deviation.expectedValue ?? + deviation.ExpectedValue ?? + null + let status let actionText switch (action) { @@ -1168,7 +1251,7 @@ const ManageDriftPage = () => { { standardName: deviation.standardName, // Use the standardName from the original deviation data status: status, - receivedValue: deviation.receivedValue, + receivedValue: resolvedReceivedValue, }, ], tenantFilter: tenantFilter, @@ -1293,6 +1376,7 @@ const ManageDriftPage = () => { ) // Actions for the ActionsMenu + const currentDriftTemplate = standardsApi.data?.find((t) => t.GUID === templateId) const actions = createDriftManagementActions({ templateId, onRefresh: () => { @@ -1306,6 +1390,12 @@ const ManageDriftPage = () => { setTriggerReport(true) }, currentTenant: tenantFilter, + templateTenants: Array.isArray(currentDriftTemplate?.tenantFilter) + ? currentDriftTemplate.tenantFilter + : [], + excludedTenants: Array.isArray(currentDriftTemplate?.excludedTenants) + ? currentDriftTemplate.excludedTenants + : [], }) // Effect to trigger the ExecutiveReportButton when needed @@ -1407,6 +1497,25 @@ const ManageDriftPage = () => { ), })) + // Add action buttons to compliant/aligned items so previously denied and now compliant entries + // can be denied again or denied with remediation persistence. + const alignedItemsWithActions = allAlignedItems.map((item) => ({ + ...item, + cardLabelBoxActions: ( + + ), + })) + // Calculate compliance metrics for badges // Accepted and Customer Specific deviations count as compliant since they are user-approved // Denied deviations are included in total but not in compliant count (they haven't been fixed yet) @@ -1485,7 +1594,7 @@ const ManageDriftPage = () => { const filteredAcceptedItems = applyFilters(acceptedDeviationItemsWithActions) const filteredCustomerSpecificItems = applyFilters(customerSpecificDeviationItemsWithActions) const filteredDeniedItems = applyFilters(deniedDeviationItemsWithActions) - const filteredAlignedItems = applyFilters(allAlignedItems) + const filteredAlignedItems = applyFilters(alignedItemsWithActions) const filteredLicenseSkippedItems = applyFilters(licenseSkippedItems) // Helper function to render items grouped by category when category sort is active @@ -1569,7 +1678,12 @@ const ManageDriftPage = () => { subtitle={subtitle} actions={actions} actionsData={{}} - isFetching={driftApi.isFetching || standardsApi.isFetching || comparisonApi.isFetching} + isFetching={ + driftApi.isFetching || + standardsApi.isFetching || + comparisonApi.isFetching || + persistentDriftTasksApi.isFetching + } > @@ -1918,12 +2032,7 @@ const ManageDriftPage = () => { Compliant Standards - + {renderItemsByCategory(filteredAlignedItems)} )} @@ -1989,7 +2098,7 @@ const ManageDriftPage = () => { }, }} row={actionData.data} - relatedQueryKeys={[`TenantDrift-${tenantFilter}`]} + relatedQueryKeys={[`TenantDrift-${tenantFilter}`, `PersistentDriftTasks-${tenantFilter}`]} /> )} @@ -2148,6 +2257,15 @@ const ManageDriftPage = () => { open={Boolean(anchorEl[`denied-${item.id}`])} onClose={() => handleMenuClose(`denied-${item.id}`)} > + { + handleDeviationAction('deny', item) + handleMenuClose(`denied-${item.id}`) + }} + > + + Rerun standard to align with template + { handleDeviationAction('deny-remediate', item) @@ -2178,6 +2296,34 @@ const ManageDriftPage = () => { ))} + {alignedItemsWithActions.map((item) => ( + handleMenuClose(`aligned-${item.id}`)} + > + { + handleDeviationAction('deny', item) + handleMenuClose(`aligned-${item.id}`) + }} + > + + Rerun standard to align with template + + { + handleDeviationAction('deny-remediate', item) + handleMenuClose(`aligned-${item.id}`) + }} + > + + Deny - Remediate to align with template + + + ))} + {/* Hidden ExecutiveReportButton that gets triggered programmatically */} { const actions = [ { - label: "Refresh Data", + label: 'Refresh Data', icon: , noConfirm: true, customFunction: onRefresh, }, - ]; + ] // Add Generate Report action if handler is provided if (onGenerateReport) { actions.push({ - label: "Generate Report", + label: 'Generate Report', icon: , noConfirm: true, customFunction: onGenerateReport, - }); + }) } // Add template-specific actions if templateId is available @@ -41,57 +44,55 @@ export const createDriftManagementActions = ({ // Conditionally add Edit Template action if (showEditTemplate) { actions.push({ - label: "Edit Template", + label: 'Edit Template', icon: , - color: "info", + color: 'info', noConfirm: true, customFunction: () => { // Use Next.js router for internal navigation - import("next/router") + import('next/router') .then(({ default: router }) => { router.push( `/tenant/standards/templates/template?id=${templateId}&type=${templateType}` - ); + ) }) .catch(() => { // Fallback to window.location if router is not available - window.location.href = `/tenant/standards/templates/template?id=${templateId}&type=${templateType}`; - }); + window.location.href = `/tenant/standards/templates/template?id=${templateId}&type=${templateType}` + }) }, - }); + }) } - actions.push( - { - label: `Run Standard Now (${currentTenant || "Currently Selected Tenant"})`, - type: "GET", - url: "/api/ExecStandardsRun", - icon: , - data: { - TemplateId: templateId, - }, - confirmText: "Are you sure you want to force a run of this standard?", - multiPost: false, + actions.push({ + label: 'Run Standard Now', + type: 'GET', + url: '/api/ExecStandardsRun', + icon: , + data: { + TemplateId: templateId, }, - { - label: "Run Standard Now (All Tenants in Template)", - type: "GET", - url: "/api/ExecStandardsRun", - icon: , - data: { - TemplateId: templateId, - tenantFilter: "allTenants", - }, - confirmText: "Are you sure you want to force a run of this standard?", - multiPost: false, - } - ); + customDataformatter: (_row, _action, formData) => ({ + TemplateId: templateId, + tenantFilter: formData.tenantFilter?.value ?? formData.tenantFilter, + }), + children: ({ formHook }) => ( + + ), + confirmText: 'Are you sure you want to force a run of this standard?', + allowResubmit: true, + multiPost: false, + }) } - return actions; -}; + return actions +} /** * Default export for backward compatibility */ -export default createDriftManagementActions; +export default createDriftManagementActions diff --git a/src/pages/tenant/manage/policies-deployed.js b/src/pages/tenant/manage/policies-deployed.js index d38f68d03698..616f5a64491f 100644 --- a/src/pages/tenant/manage/policies-deployed.js +++ b/src/pages/tenant/manage/policies-deployed.js @@ -1,6 +1,6 @@ -import { Layout as DashboardLayout } from "../../../layouts/index.js"; -import { useRouter } from "next/router"; -import { Policy, Security, AdminPanelSettings, Devices, ExpandMore } from "@mui/icons-material"; +import { Layout as DashboardLayout } from '../../../layouts/index.js' +import { useRouter } from 'next/router' +import { Policy, Security, AdminPanelSettings, Devices, ExpandMore } from '@mui/icons-material' import { Box, Stack, @@ -9,34 +9,34 @@ import { AccordionSummary, AccordionDetails, Chip, -} from "@mui/material"; -import { HeaderedTabbedLayout } from "../../../layouts/HeaderedTabbedLayout"; -import tabOptions from "./tabOptions.json"; -import { CippDataTable } from "../../../components/CippTable/CippDataTable"; -import { CippHead } from "../../../components/CippComponents/CippHead"; -import { ApiGetCall } from "../../../api/ApiCall"; -import standardsData from "../../../data/standards.json"; -import { createDriftManagementActions } from "./driftManagementActions"; -import { useSettings } from "../../../hooks/use-settings"; -import { CippAutoComplete } from "../../../components/CippComponents/CippAutocomplete"; -import { useEffect } from "react"; +} from '@mui/material' +import { HeaderedTabbedLayout } from '../../../layouts/HeaderedTabbedLayout' +import tabOptions from './tabOptions.json' +import { CippDataTable } from '../../../components/CippTable/CippDataTable' +import { CippHead } from '../../../components/CippComponents/CippHead' +import { ApiGetCall } from '../../../api/ApiCall' +import standardsData from '../../../data/standards.json' +import { createDriftManagementActions } from './driftManagementActions' +import { useSettings } from '../../../hooks/use-settings' +import { CippAutoComplete } from '../../../components/CippComponents/CippAutocomplete' +import { useEffect } from 'react' const PoliciesDeployedPage = () => { - const userSettingsDefaults = useSettings(); - const router = useRouter(); - const { templateId } = router.query; - const tenantFilter = router.query.tenantFilter || userSettingsDefaults.tenantFilter; - const currentTenant = userSettingsDefaults.currentTenant; + const userSettingsDefaults = useSettings() + const router = useRouter() + const { templateId } = router.query + const tenantFilter = router.query.tenantFilter || userSettingsDefaults.tenantFilter + const currentTenant = userSettingsDefaults.currentTenant // API call to get standards template data const standardsApi = ApiGetCall({ - url: "/api/listStandardTemplates", - queryKey: "ListStandardsTemplates-Drift", - }); + url: '/api/listStandardTemplates', + queryKey: 'ListStandardsTemplates-Drift', + }) // API call to get standards comparison data const comparisonApi = ApiGetCall({ - url: "/api/ListStandardsCompare", + url: '/api/ListStandardsCompare', data: { TemplateId: templateId, TenantFilter: tenantFilter, @@ -44,66 +44,70 @@ const PoliciesDeployedPage = () => { }, queryKey: `StandardsCompare-${templateId}-${tenantFilter}`, enabled: !!templateId && !!tenantFilter, - }); + }) // API call to get drift data for deviation statuses const driftApi = ApiGetCall({ - url: "/api/listTenantDrift", + url: '/api/listTenantDrift', data: { tenantFilter: tenantFilter, standardsId: templateId, }, queryKey: `TenantDrift-${templateId}-${tenantFilter}`, enabled: !!templateId && !!tenantFilter, - }); + }) // API call to get all Intune templates for displayName lookup const intuneTemplatesApi = ApiGetCall({ - url: "/api/ListIntuneTemplates", - queryKey: "ListIntuneTemplates", - }); + url: '/api/ListIntuneTemplates', + queryKey: 'ListIntuneTemplates', + }) + + // API call to get all CA templates for displayName lookup + const caTemplatesApi = ApiGetCall({ + url: '/api/ListCATemplates', + queryKey: 'ListCATemplates', + }) // Find the current template from standards data - const currentTemplate = (standardsApi.data || []).find( - (template) => template.GUID === templateId - ); - const templateStandards = currentTemplate?.standards || {}; - const comparisonData = comparisonApi.data?.[0] || {}; + const currentTemplate = (standardsApi.data || []).find((template) => template.GUID === templateId) + const templateStandards = currentTemplate?.standards || {} + const comparisonData = comparisonApi.data?.[0] || {} // Helper function to get status from comparison data with deviation status const getStatus = (standardKey, templateValue = null, templateType = null) => { - const comparisonKey = `standards.${standardKey}`; - const comparisonItem = comparisonData[comparisonKey]; - const value = comparisonItem?.Value; + const comparisonKey = `standards.${standardKey}` + const comparisonItem = comparisonData[comparisonKey] + const value = comparisonItem?.Value // If value is true, it's deployed and compliant if (value === true) { - return "Deployed"; + return 'Deployed' } // Check if ExpectedValue and CurrentValue match (like drift.js does) if (comparisonItem?.ExpectedValue && comparisonItem?.CurrentValue) { try { - const expectedStr = JSON.stringify(comparisonItem.ExpectedValue); - const currentStr = JSON.stringify(comparisonItem.CurrentValue); + const expectedStr = JSON.stringify(comparisonItem.ExpectedValue) + const currentStr = JSON.stringify(comparisonItem.CurrentValue) if (expectedStr === currentStr) { - return "Deployed"; + return 'Deployed' } } catch (e) { - console.error("Error comparing values:", e); + console.error('Error comparing values:', e) } } // If value is explicitly false, it means not deployed (not a deviation) if (value === false) { - return "Not Deployed"; + return 'Not Deployed' } // If value is null/undefined, check drift data for deviation status - const driftData = Array.isArray(driftApi.data) ? driftApi.data : []; + const driftData = Array.isArray(driftApi.data) ? driftApi.data : [] // For templates, we need to match against the full template path - let searchKeys = [standardKey, `standards.${standardKey}`]; + let searchKeys = [standardKey, `standards.${standardKey}`] // Add template-specific search keys if (templateValue && templateType) { @@ -111,7 +115,7 @@ const PoliciesDeployedPage = () => { `standards.${templateType}.${templateValue}`, `${templateType}.${templateValue}`, templateValue - ); + ) } const deviation = driftData.find((item) => @@ -122,26 +126,26 @@ const PoliciesDeployedPage = () => { item.standardName?.includes(key) || item.policyName?.includes(key) ) - ); + ) if (deviation && deviation.Status) { - return `Deviation - ${deviation.Status}`; + return `Deviation - ${deviation.Status}` } // Only return "Deviation - New" if we have comparison data but value is null if (comparisonItem) { - return "Deviation - New"; + return 'Deviation - New' } - return "Not Configured"; - }; + return 'Not Configured' + } // Helper function to get display name from drift data const getDisplayNameFromDrift = (standardKey, templateValue = null, templateType = null) => { - const driftData = Array.isArray(driftApi.data) ? driftApi.data : []; + const driftData = Array.isArray(driftApi.data) ? driftApi.data : [] // For templates, we need to match against the full template path - let searchKeys = [standardKey, `standards.${standardKey}`]; + let searchKeys = [standardKey, `standards.${standardKey}`] // Add template-specific search keys if (templateValue && templateType) { @@ -149,7 +153,7 @@ const PoliciesDeployedPage = () => { `standards.${templateType}.${templateValue}`, `${templateType}.${templateValue}`, templateValue - ); + ) } const deviation = driftData.find((item) => @@ -160,277 +164,285 @@ const PoliciesDeployedPage = () => { item.standardName?.includes(key) || item.policyName?.includes(key) ) - ); + ) // If found in drift data, return the display name if (deviation?.standardDisplayName) { - return deviation.standardDisplayName; + return deviation.standardDisplayName } // If not found in drift data and this is an Intune template, look it up in the Intune templates API - if (templateType === "IntuneTemplate" && templateValue && intuneTemplatesApi.data) { - const template = intuneTemplatesApi.data.find((t) => t.GUID === templateValue); + if (templateType === 'IntuneTemplate' && templateValue && intuneTemplatesApi.data) { + const template = intuneTemplatesApi.data.find((t) => t.GUID === templateValue) if (template?.Displayname) { - return template.Displayname; + return template.Displayname + } + } + + // If not found in drift data and this is a CA template, look it up in the CA templates API + if (templateType === 'ConditionalAccessTemplate' && templateValue && caTemplatesApi.data) { + const template = caTemplatesApi.data.find((t) => t.GUID === templateValue) + if (template?.displayName) { + return template.displayName } } - return null; - }; + return null + } // Helper function to get last refresh date const getLastRefresh = (standardKey) => { - const comparisonKey = `standards.${standardKey}`; - const lastRefresh = comparisonData[comparisonKey]?.LastRefresh; - return lastRefresh ? new Date(lastRefresh).toLocaleDateString() : "N/A"; - }; + const comparisonKey = `standards.${standardKey}` + const lastRefresh = comparisonData[comparisonKey]?.LastRefresh + return lastRefresh ? new Date(lastRefresh).toLocaleDateString() : 'N/A' + } // Helper function to get standard name from standards.json const getStandardName = (standardKey) => { - const standardName = `standards.${standardKey}`; - const standard = standardsData.find((s) => s.name === standardName); - return standard?.label || standardKey.replace(/([A-Z])/g, " $1").trim(); - }; + const standardName = `standards.${standardKey}` + const standard = standardsData.find((s) => s.name === standardName) + return standard?.label || standardKey.replace(/([A-Z])/g, ' $1').trim() + } // Helper function to get template label from standards API data const getTemplateLabel = (templateValue, templateType) => { - if (!templateValue || !currentTemplate) return "Unknown Template"; + if (!templateValue || !currentTemplate) return 'Unknown Template' // Search through all templates in the current template data - const allTemplates = currentTemplate.standards || {}; + const allTemplates = currentTemplate.standards || {} // Look for the template in the specific type array if (allTemplates[templateType] && Array.isArray(allTemplates[templateType])) { const template = allTemplates[templateType].find( (t) => t.TemplateList?.value === templateValue - ); + ) if (template?.TemplateList?.label) { - return template.TemplateList.label; + return template.TemplateList.label } } // If not found in the specific type, search through all template types for (const [key, templates] of Object.entries(allTemplates)) { if (Array.isArray(templates)) { - const template = templates.find((t) => t.TemplateList?.value === templateValue); + const template = templates.find((t) => t.TemplateList?.value === templateValue) if (template?.TemplateList?.label) { - return template.TemplateList.label; + return template.TemplateList.label } } } - return "Unknown Template"; - }; + return 'Unknown Template' + } // Process Security Standards (everything NOT IntuneTemplates or ConditionalAccessTemplates) const deployedStandards = Object.entries(templateStandards) - .filter(([key]) => key !== "IntuneTemplate" && key !== "ConditionalAccessTemplate") + .filter(([key]) => key !== 'IntuneTemplate' && key !== 'ConditionalAccessTemplate') .map(([key, value], index) => ({ id: index + 1, name: getStandardName(key), - category: "Security Standard", + category: 'Security Standard', status: getStatus(key), lastModified: getLastRefresh(key), standardKey: key, - })); + })) // Process Intune Templates - const intunePolices = []; - (templateStandards.IntuneTemplate || []).forEach((template, index) => { - console.log("Processing IntuneTemplate in policies-deployed:", template); + const intunePolices = [] + ;(templateStandards.IntuneTemplate || []).forEach((template, index) => { + console.log('Processing IntuneTemplate in policies-deployed:', template) // Check if this template has TemplateList-Tags (try both property formats) - const templateListTags = template["TemplateList-Tags"] || template.TemplateListTags; + const templateListTags = template['TemplateList-Tags'] || template.TemplateListTags // Check if this template has TemplateList-Tags and expand them if (templateListTags?.value && templateListTags?.addedFields?.templates) { console.log( - "Found TemplateList-Tags for IntuneTemplate in policies-deployed:", + 'Found TemplateList-Tags for IntuneTemplate in policies-deployed:', templateListTags - ); - console.log("Templates to expand:", templateListTags.addedFields.templates); + ) + console.log('Templates to expand:', templateListTags.addedFields.templates) // Expand TemplateList-Tags into multiple template items templateListTags.addedFields.templates.forEach((expandedTemplate, expandedIndex) => { - console.log("Expanding IntuneTemplate in policies-deployed:", expandedTemplate); - const standardKey = `IntuneTemplate.${expandedTemplate.GUID}`; + console.log('Expanding IntuneTemplate in policies-deployed:', expandedTemplate) + const standardKey = `IntuneTemplate.${expandedTemplate.GUID}` const driftDisplayName = getDisplayNameFromDrift( standardKey, expandedTemplate.GUID, - "IntuneTemplate" - ); - const packageTagName = templateListTags.value; + 'IntuneTemplate' + ) + const packageTagName = templateListTags.value const templateName = - expandedTemplate.displayName || expandedTemplate.name || "Unknown Template"; + expandedTemplate.displayName || expandedTemplate.name || 'Unknown Template' intunePolices.push({ id: intunePolices.length + 1, name: `${driftDisplayName || templateName} (via ${packageTagName})`, - category: "Intune Template", - platform: "Multi-Platform", - status: getStatus(standardKey, expandedTemplate.GUID, "IntuneTemplate"), + category: 'Intune Template', + platform: 'Multi-Platform', + status: getStatus(standardKey, expandedTemplate.GUID, 'IntuneTemplate'), lastModified: getLastRefresh(standardKey), - assignedGroups: template.AssignTo || "N/A", + assignedGroups: template.AssignTo || 'N/A', templateValue: expandedTemplate.GUID, - }); - }); + }) + }) } else { // Regular TemplateList processing - const templateGuid = template.TemplateList?.value; - const standardKey = `IntuneTemplate.${templateGuid}`; - const driftDisplayName = getDisplayNameFromDrift(standardKey, templateGuid, "IntuneTemplate"); + const templateGuid = template.TemplateList?.value + const standardKey = `IntuneTemplate.${templateGuid}` + const driftDisplayName = getDisplayNameFromDrift(standardKey, templateGuid, 'IntuneTemplate') // Try multiple fallbacks for the name - let templateName = driftDisplayName; + let templateName = driftDisplayName if (!templateName) { - const templateLabel = getTemplateLabel(templateGuid, "IntuneTemplate"); - if (templateLabel !== "Unknown Template") { - templateName = `Intune - ${templateLabel}`; + const templateLabel = getTemplateLabel(templateGuid, 'IntuneTemplate') + if (templateLabel !== 'Unknown Template') { + templateName = `Intune - ${templateLabel}` } } // If still no name, try looking up directly in intuneTemplatesApi by GUID if (!templateName && templateGuid && intuneTemplatesApi.data) { - const intuneTemplate = intuneTemplatesApi.data.find((t) => t.GUID === templateGuid); + const intuneTemplate = intuneTemplatesApi.data.find((t) => t.GUID === templateGuid) if (intuneTemplate?.Displayname) { - templateName = intuneTemplate.Displayname; + templateName = intuneTemplate.Displayname } } // Final fallback if (!templateName) { - templateName = `Intune - ${templateGuid || "Unknown Template"}`; + templateName = `Intune - ${templateGuid || 'Unknown Template'}` } intunePolices.push({ id: intunePolices.length + 1, name: templateName, - category: "Intune Template", - platform: "Multi-Platform", - status: getStatus(standardKey, templateGuid, "IntuneTemplate"), + category: 'Intune Template', + platform: 'Multi-Platform', + status: getStatus(standardKey, templateGuid, 'IntuneTemplate'), lastModified: getLastRefresh(standardKey), - assignedGroups: template.AssignTo || "N/A", + assignedGroups: template.AssignTo || 'N/A', templateValue: templateGuid, - }); + }) } - }); + }) // Add any templates from comparison data that weren't in template standards (e.g., from tags) // Check for IntuneTemplate entries in comparison data Object.keys(comparisonData).forEach((key) => { - if (key.startsWith("standards.IntuneTemplate.")) { - const guid = key.replace("standards.IntuneTemplate.", ""); + if (key.startsWith('standards.IntuneTemplate.')) { + const guid = key.replace('standards.IntuneTemplate.', '') // Check if this GUID is already in our list - const alreadyExists = intunePolices.some((p) => p.templateValue === guid); + const alreadyExists = intunePolices.some((p) => p.templateValue === guid) if (!alreadyExists && comparisonData[key]?.Value === true) { - const standardKey = `IntuneTemplate.${guid}`; - const driftDisplayName = getDisplayNameFromDrift(standardKey, guid, "IntuneTemplate"); + const standardKey = `IntuneTemplate.${guid}` + const driftDisplayName = getDisplayNameFromDrift(standardKey, guid, 'IntuneTemplate') intunePolices.push({ id: intunePolices.length + 1, name: driftDisplayName || `Intune - ${guid}`, - category: "Intune Template", - platform: "Multi-Platform", - status: getStatus(standardKey, guid, "IntuneTemplate"), + category: 'Intune Template', + platform: 'Multi-Platform', + status: getStatus(standardKey, guid, 'IntuneTemplate'), lastModified: getLastRefresh(standardKey), - assignedGroups: "N/A", + assignedGroups: 'N/A', templateValue: guid, - }); + }) } } - }); + }) // Process Conditional Access Templates - const conditionalAccessPolicies = []; - (templateStandards.ConditionalAccessTemplate || []).forEach((template, index) => { - console.log("Processing ConditionalAccessTemplate in policies-deployed:", template); + const conditionalAccessPolicies = [] + ;(templateStandards.ConditionalAccessTemplate || []).forEach((template, index) => { + console.log('Processing ConditionalAccessTemplate in policies-deployed:', template) // Check if this template has TemplateList-Tags (try both property formats) - const templateListTags = template["TemplateList-Tags"] || template.TemplateListTags; + const templateListTags = template['TemplateList-Tags'] || template.TemplateListTags // Check if this template has TemplateList-Tags and expand them if (templateListTags?.value && templateListTags?.addedFields?.templates) { console.log( - "Found TemplateList-Tags for ConditionalAccessTemplate in policies-deployed:", + 'Found TemplateList-Tags for ConditionalAccessTemplate in policies-deployed:', templateListTags - ); - console.log("Templates to expand:", templateListTags.addedFields.templates); + ) + console.log('Templates to expand:', templateListTags.addedFields.templates) // Expand TemplateList-Tags into multiple template items templateListTags.addedFields.templates.forEach((expandedTemplate, expandedIndex) => { - console.log("Expanding ConditionalAccessTemplate in policies-deployed:", expandedTemplate); - const standardKey = `ConditionalAccessTemplate.${expandedTemplate.GUID}`; + console.log('Expanding ConditionalAccessTemplate in policies-deployed:', expandedTemplate) + const standardKey = `ConditionalAccessTemplate.${expandedTemplate.GUID}` const driftDisplayName = getDisplayNameFromDrift( standardKey, expandedTemplate.GUID, - "ConditionalAccessTemplate" - ); - const packageTagName = templateListTags.value; + 'ConditionalAccessTemplate' + ) + const packageTagName = templateListTags.value const templateName = - expandedTemplate.displayName || expandedTemplate.name || "Unknown Template"; + expandedTemplate.displayName || expandedTemplate.name || 'Unknown Template' conditionalAccessPolicies.push({ id: conditionalAccessPolicies.length + 1, name: `${driftDisplayName || templateName} (via ${packageTagName})`, - state: template.state || "Unknown", - conditions: "Conditional Access Policy", - controls: "Access Control", + state: template.state || 'Unknown', + conditions: 'Conditional Access Policy', + controls: 'Access Control', lastModified: getLastRefresh(standardKey), - status: getStatus(standardKey, expandedTemplate.GUID, "ConditionalAccessTemplate"), + status: getStatus(standardKey, expandedTemplate.GUID, 'ConditionalAccessTemplate'), templateValue: expandedTemplate.GUID, - }); - }); + }) + }) } else { // Regular TemplateList processing - const standardKey = `ConditionalAccessTemplate.${template.TemplateList?.value}`; + const standardKey = `ConditionalAccessTemplate.${template.TemplateList?.value}` const driftDisplayName = getDisplayNameFromDrift( standardKey, template.TemplateList?.value, - "ConditionalAccessTemplate" - ); + 'ConditionalAccessTemplate' + ) const templateLabel = getTemplateLabel( template.TemplateList?.value, - "ConditionalAccessTemplate" - ); + 'ConditionalAccessTemplate' + ) conditionalAccessPolicies.push({ id: conditionalAccessPolicies.length + 1, name: driftDisplayName || `Conditional Access - ${templateLabel}`, - state: template.state || "Unknown", - conditions: "Conditional Access Policy", - controls: "Access Control", + state: template.state || 'Unknown', + conditions: 'Conditional Access Policy', + controls: 'Access Control', lastModified: getLastRefresh(standardKey), - status: getStatus(standardKey, template.TemplateList?.value, "ConditionalAccessTemplate"), + status: getStatus(standardKey, template.TemplateList?.value, 'ConditionalAccessTemplate'), templateValue: template.TemplateList?.value, - }); + }) } - }); + }) // Add any CA templates from comparison data that weren't in template standards Object.keys(comparisonData).forEach((key) => { - if (key.startsWith("standards.ConditionalAccessTemplate.")) { - const guid = key.replace("standards.ConditionalAccessTemplate.", ""); + if (key.startsWith('standards.ConditionalAccessTemplate.')) { + const guid = key.replace('standards.ConditionalAccessTemplate.', '') // Check if this GUID is already in our list - const alreadyExists = conditionalAccessPolicies.some((p) => p.templateValue === guid); + const alreadyExists = conditionalAccessPolicies.some((p) => p.templateValue === guid) if (!alreadyExists && comparisonData[key]?.Value === true) { - const standardKey = `ConditionalAccessTemplate.${guid}`; + const standardKey = `ConditionalAccessTemplate.${guid}` const driftDisplayName = getDisplayNameFromDrift( standardKey, guid, - "ConditionalAccessTemplate" - ); + 'ConditionalAccessTemplate' + ) conditionalAccessPolicies.push({ id: conditionalAccessPolicies.length + 1, name: driftDisplayName || `Conditional Access - ${guid}`, - state: "Unknown", - conditions: "Conditional Access Policy", - controls: "Access Control", + state: 'Unknown', + conditions: 'Conditional Access Policy', + controls: 'Access Control', lastModified: getLastRefresh(standardKey), - status: getStatus(standardKey, guid, "ConditionalAccessTemplate"), + status: getStatus(standardKey, guid, 'ConditionalAccessTemplate'), templateValue: guid, - }); + }) } } - }); + }) // Simple filter for all templates (no type filtering) const templateOptions = standardsApi.data @@ -442,35 +454,41 @@ const PoliciesDeployedPage = () => { `Template ${template.GUID}`, value: template.GUID, })) - : []; + : [] // Find currently selected template const selectedTemplateOption = templateId && templateOptions.length ? templateOptions.find((option) => option.value === templateId) || null - : null; + : null // Effect to refetch APIs when templateId changes (needed for shallow routing) useEffect(() => { if (templateId) { - comparisonApi.refetch(); - driftApi.refetch(); + comparisonApi.refetch() + driftApi.refetch() } - }, [templateId]); + }, [templateId]) const actions = createDriftManagementActions({ templateId, - templateType: currentTemplate?.type || "classic", + templateType: currentTemplate?.type || 'classic', showEditTemplate: true, onRefresh: () => { - standardsApi.refetch(); - comparisonApi.refetch(); - driftApi.refetch(); + standardsApi.refetch() + comparisonApi.refetch() + driftApi.refetch() }, currentTenant, - }); - const title = "View Deployed Policies"; - const subtitle = []; + templateTenants: Array.isArray(currentTemplate?.tenantFilter) + ? currentTemplate.tenantFilter + : [], + excludedTenants: Array.isArray(currentTemplate?.excludedTenants) + ? currentTemplate.excludedTenants + : [], + }) + const title = 'View Deployed Policies' + const subtitle = [] return ( { {/* Filters Section */} - + { defaultValue={selectedTemplateOption} value={selectedTemplateOption} onChange={(selectedTemplate) => { - const query = { ...router.query }; + const query = { ...router.query } if (selectedTemplate && selectedTemplate.value) { - query.templateId = selectedTemplate.value; + query.templateId = selectedTemplate.value } else { - delete query.templateId; + delete query.templateId } router.replace( { @@ -507,7 +525,7 @@ const PoliciesDeployedPage = () => { }, undefined, { shallow: true } - ); + ) }} sx={{ width: 300 }} placeholder="Select template..." @@ -528,7 +546,7 @@ const PoliciesDeployedPage = () => { { title="Intune Templates" data={intunePolices} simpleColumns={[ - "name", - "category", - "platform", - "status", - "lastModified", - "assignedGroups", + 'name', + 'category', + 'platform', + 'status', + 'lastModified', + 'assignedGroups', ]} noCard={true} isFetching={ @@ -580,12 +598,12 @@ const PoliciesDeployedPage = () => { title="Conditional Access Templates" data={conditionalAccessPolicies} simpleColumns={[ - "name", - "state", - "status", - "conditions", - "controls", - "lastModified", + 'name', + 'state', + 'status', + 'conditions', + 'controls', + 'lastModified', ]} noCard={true} isFetching={ @@ -597,9 +615,9 @@ const PoliciesDeployedPage = () => { - ); -}; + ) +} -PoliciesDeployedPage.getLayout = (page) => {page}; +PoliciesDeployedPage.getLayout = (page) => {page} -export default PoliciesDeployedPage; +export default PoliciesDeployedPage diff --git a/src/pages/tenant/reports/application-consent/index.js b/src/pages/tenant/reports/application-consent/index.js index 3270740aa766..08ac8b35d47c 100644 --- a/src/pages/tenant/reports/application-consent/index.js +++ b/src/pages/tenant/reports/application-consent/index.js @@ -1,15 +1,43 @@ import { Layout as DashboardLayout } from "../../../../layouts/index.js"; import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; +import { useCippReportDB } from "../../../../components/CippComponents/CippReportDBControls"; -const simpleColumns = ["Tenant", "Name", "ApplicationID", "ObjectID", "Scope", "StartTime"]; - -const apiUrl = "/api/ListOAuthApps"; const pageTitle = "Consented Applications"; const Page = () => { - return ; + const reportDB = useCippReportDB({ + apiUrl: "/api/ListOAuthApps", + queryKey: "ListOAuthApps", + cacheName: "OAuth2PermissionGrants", + syncTitle: "Sync Consented Applications", + allowToggle: true, + defaultCached: true, + }); + + const simpleColumns = [ + ...reportDB.cacheColumns.filter((c) => c === "Tenant"), + "Name", + "ApplicationID", + "ObjectID", + "Scope", + "StartTime", + ...reportDB.cacheColumns.filter((c) => c !== "Tenant"), + ]; + + return ( + <> + + {reportDB.syncDialog} + + ); }; -Page.getLayout = (page) => {page}; +Page.getLayout = (page) => {page}; export default Page; diff --git a/src/pages/tenant/reports/graph-office-reports/index.js b/src/pages/tenant/reports/graph-office-reports/index.js index b97505d12ed4..39bb153c06b6 100644 --- a/src/pages/tenant/reports/graph-office-reports/index.js +++ b/src/pages/tenant/reports/graph-office-reports/index.js @@ -64,7 +64,7 @@ const Page = () => { waiting: !!currentTenant, }) - const reportOptions = (reportListApi.data ?? []).map((r) => ({ + const reportOptions = (Array.isArray(reportListApi.data) ? reportListApi.data : []).map((r) => ({ label: prettifyReportName(r.name), value: r.name, type: r.type ?? null, @@ -156,7 +156,7 @@ const Page = () => { ) : ( { - const pageTitle = "Licences Report"; - const apiUrl = "/api/ListLicenses"; + const pageTitle = 'Licences Report' + const apiUrl = '/api/ListLicenses' const simpleColumns = [ - "Tenant", - "License", - "CountUsed", - "CountAvailable", - "TotalLicenses", - "AssignedUsers", - "AssignedGroups", - "TermInfo", // TODO TermInfo is not showing as a clickable json object in the table, like CApolicies does in the mfa report. IDK how to fix it. -Bobby - ]; + 'Tenant', + 'License', + 'CountUsed', + 'CountAvailable', + 'TotalLicenses', + 'AssignedUsers', + 'AssignedGroups', + 'TermInfo', // TODO TermInfo is not showing as a clickable json object in the table, like CApolicies does in the mfa report. IDK how to fix it. -Bobby + ] - return ; -}; + const actions = [ + { + label: 'Assign License to User', + type: 'POST', + url: '/api/ExecBulkLicense', + icon: , + confirmText: 'Are you sure you want to assign [License] to the selected user?', + multiPost: false, + children: ({ formHook, row }) => ( + `${option.displayName} (${option.userPrincipalName})`, + valueField: 'id', + queryKey: `Users-${row?.Tenant}`, + data: { + Endpoint: 'users', + $select: 'id,displayName,userPrincipalName', + $count: true, + $orderby: 'displayName', + $top: 999, + }, + }} + /> + ), + customDataformatter: (row, action, formData) => ({ + tenantFilter: row.Tenant, + LicenseOperation: 'Add', + Licenses: [{ label: row.License, value: row.skuId }], + userIds: [formData.userIds?.value], + }), + }, + ] -Page.getLayout = (page) => {page}; + const offCanvas = { + extendedInfoFields: [ + 'Tenant', + 'License', + 'CountUsed', + 'CountAvailable', + 'TotalLicenses', + 'AssignedUsers', + 'AssignedGroups', + 'TermInfo', + ], + actions: actions, + } -export default Page; + return ( + + ) +} + +Page.getLayout = (page) => {page} + +export default Page diff --git a/src/pages/tenant/standards/alignment/index.js b/src/pages/tenant/standards/alignment/index.js index a2c67164ed2c..60c05489bc24 100644 --- a/src/pages/tenant/standards/alignment/index.js +++ b/src/pages/tenant/standards/alignment/index.js @@ -1,14 +1,250 @@ import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' import { Layout as DashboardLayout } from '../../../../layouts/index.js' import { TabbedLayout } from '../../../../layouts/TabbedLayout' -import { Delete, Add } from '@mui/icons-material' -import { EyeIcon } from '@heroicons/react/24/outline' +import { ApiGetCallWithPagination } from '../../../../api/ApiCall' +import { useSettings } from '../../../../hooks/use-settings' +import { Delete, Edit } from '@mui/icons-material' +import { EyeIcon, ListBulletIcon, ChartBarIcon, Squares2X2Icon } from '@heroicons/react/24/outline' import tabOptions from '../tabOptions.json' +import { useEffect, useMemo, useState } from 'react' +import ReactMarkdown from 'react-markdown' +import remarkGfm from 'remark-gfm' +import { + Box, + Chip, + Divider, + Stack, + ToggleButton, + ToggleButtonGroup, + Tooltip, + Typography, +} from '@mui/material' +import standardsData from '../../../../data/standards.json' + +const complianceColors = { + compliant: 'success', + 'non-compliant': 'error', + 'accepted deviation': 'info', + 'customer specific': 'info', + 'license missing': 'warning', + 'reporting disabled': 'default', +} + +const compliancePriority = { + compliant: 10, + 'reporting disabled': 20, + 'customer specific': 30, + 'accepted deviation': 40, + 'license missing': 50, + 'non-compliant': 60, +} + +const getComplianceStatus = (status) => String(status ?? 'Unknown').trim() || 'Unknown' + +const getComplianceColor = (status) => + complianceColors[getComplianceStatus(status).toLowerCase()] ?? 'default' + +const getCompliancePriority = (status) => + compliancePriority[getComplianceStatus(status).toLowerCase()] ?? 0 + +const isAlignedComplianceStatus = (status) => + ['compliant', 'accepted deviation', 'customer specific'].includes( + getComplianceStatus(status).toLowerCase() + ) + +const getPageRows = (page) => { + if (Array.isArray(page)) return page + if (Array.isArray(page?.Results)) return page.Results + if (Array.isArray(page?.Data)) return page.Data + if (Array.isArray(page?.data)) return page.data + if (Array.isArray(page?.value)) return page.value + return [] +} + +const getStandardInfo = (standardId) => { + const baseName = standardId?.split('.').slice(0, -1).join('.') + return ( + standardsData.find((s) => s.name === standardId) ?? + standardsData.find((s) => s.name === baseName) + ) +} const Page = () => { const pageTitle = 'Standard & Drift Alignment' + const tenant = useSettings().currentTenant + const [viewMode, setViewMode] = useState('summary') + const [byStandardTenantFilter, setByStandardTenantFilter] = useState('all') + const isSummary = viewMode === 'summary' + const isGranular = viewMode === 'granular' + const isByStandard = viewMode === 'byStandard' + + const { + data: byStandardApiData, + fetchNextPage: fetchNextByStandardPage, + hasNextPage: byStandardHasNextPage, + isFetching: byStandardIsFetching, + isSuccess: byStandardIsSuccess, + } = ApiGetCallWithPagination({ + url: '/api/ListTenantAlignment', + data: { tenantFilter: tenant, granular: 'true' }, + queryKey: `listTenantAlignment-byStandard-source-${tenant}`, + waiting: isByStandard, + }) + + useEffect(() => { + if (isByStandard && byStandardIsSuccess && byStandardHasNextPage && !byStandardIsFetching) { + fetchNextByStandardPage() + } + }, [ + byStandardApiData?.pages?.length, + byStandardHasNextPage, + byStandardIsFetching, + byStandardIsSuccess, + fetchNextByStandardPage, + isByStandard, + ]) + + const byStandardSourceData = useMemo( + () => byStandardApiData?.pages?.flatMap((page) => getPageRows(page)) ?? [], + [byStandardApiData] + ) + + const byStandardData = useMemo(() => { + const groupedStandards = new Map() + + byStandardSourceData.forEach((row) => { + const standardKey = row.standardId || row.standardName + if (!standardKey) return + + const standardInfo = getStandardInfo(row.standardId) + const hasExactMatch = standardsData.find((s) => s.name === row.standardId) + const standardName = hasExactMatch + ? (standardInfo?.label ?? row.standardName ?? standardKey) + : (row.standardName ?? standardInfo?.label ?? standardKey) + + if (!groupedStandards.has(standardKey)) { + groupedStandards.set(standardKey, { + standardId: standardKey, + standardName, + category: standardInfo?.cat ?? 'Uncategorized', + standardTypes: new Set(), + tenants: new Map(), + }) + } + + const standard = groupedStandards.get(standardKey) + const standardType = row.standardType ?? row.templateType + if (standardType) standard.standardTypes.add(standardType) + + const tenantKey = row.tenantFilter ?? row.tenantName ?? row.Tenant ?? 'Unknown' + const status = getComplianceStatus(row.complianceStatus) + const tenant = standard.tenants.get(tenantKey) ?? { + tenantFilter: tenantKey, + complianceStatus: status, + rows: [], + } - const filterList = [ + tenant.rows.push(row) + if (getCompliancePriority(status) > getCompliancePriority(tenant.complianceStatus)) { + tenant.complianceStatus = status + } + standard.tenants.set(tenantKey, tenant) + }) + + return Array.from(groupedStandards.values()) + .map((standard) => { + const tenants = Array.from(standard.tenants.values()) + .map((tenant) => { + const templateNames = [ + ...new Set(tenant.rows.map((row) => row.templateName).filter(Boolean)), + ] + const latestDataCollection = tenant.rows + .map((row) => row.latestDataCollection) + .filter(Boolean) + .sort((a, b) => new Date(b) - new Date(a))[0] + + return { + tenantFilter: tenant.tenantFilter, + complianceStatus: tenant.complianceStatus, + templateName: templateNames.join(', ') || 'N/A', + latestDataCollection, + rowCount: tenant.rows.length, + rows: tenant.rows, + } + }) + .sort((a, b) => a.tenantFilter.localeCompare(b.tenantFilter)) + + const counts = tenants.reduce( + (acc, tenant) => { + switch (getComplianceStatus(tenant.complianceStatus).toLowerCase()) { + case 'compliant': + acc.compliantCount += 1 + break + case 'non-compliant': + acc.nonCompliantCount += 1 + break + case 'accepted deviation': + acc.acceptedDeviationCount += 1 + break + case 'customer specific': + acc.customerSpecificCount += 1 + break + case 'license missing': + acc.licenseMissingCount += 1 + break + case 'reporting disabled': + acc.reportingDisabledCount += 1 + break + default: + acc.otherCount += 1 + } + return acc + }, + { + compliantCount: 0, + nonCompliantCount: 0, + acceptedDeviationCount: 0, + customerSpecificCount: 0, + licenseMissingCount: 0, + reportingDisabledCount: 0, + otherCount: 0, + } + ) + + const totalTenants = tenants.length + const alignedCount = + counts.compliantCount + counts.acceptedDeviationCount + counts.customerSpecificCount + const compliancePercentage = totalTenants + ? Math.round((alignedCount / totalTenants) * 100) + : 0 + const licenseMissingPercentage = totalTenants + ? Math.round((counts.licenseMissingCount / totalTenants) * 100) + : 0 + + return { + standardId: standard.standardId, + standardName: standard.standardName, + category: standard.category, + standardType: Array.from(standard.standardTypes).sort().join(', ') || 'N/A', + totalTenants, + alignedCount, + compliancePercentage, + alignmentScore: compliancePercentage, + LicenseMissingPercentage: licenseMissingPercentage, + complianceScore: `${compliancePercentage}%`, + summaryStatus: compliancePercentage === 100 ? 'Fully Compliant' : 'Needs Attention', + hasNonCompliant: counts.nonCompliantCount > 0 ? 'Yes' : 'No', + hasLicenseMissing: counts.licenseMissingCount > 0 ? 'Yes' : 'No', + hasAcceptedDeviation: counts.acceptedDeviationCount > 0 ? 'Yes' : 'No', + isFullyCompliant: compliancePercentage === 100 ? 'Yes' : 'No', + tenants, + ...counts, + } + }) + .sort((a, b) => a.standardName.localeCompare(b.standardName)) + }, [byStandardSourceData]) + + const summaryFilterList = [ { filterName: 'Drift Templates', value: [{ id: 'standardType', value: 'drift' }], @@ -21,7 +257,58 @@ const Page = () => { }, ] - const actions = [ + const granularFilterList = [ + { + filterName: 'Non-Compliant', + value: [{ id: 'complianceStatus', value: 'Non-Compliant' }], + type: 'column', + }, + { + filterName: 'Compliant', + value: [{ id: 'complianceStatus', value: 'Compliant' }], + type: 'column', + }, + { + filterName: 'Accepted Deviation', + value: [{ id: 'complianceStatus', value: 'Accepted Deviation' }], + type: 'column', + }, + { + filterName: 'Customer Specific', + value: [{ id: 'complianceStatus', value: 'Customer Specific' }], + type: 'column', + }, + { + filterName: 'License Missing', + value: [{ id: 'complianceStatus', value: 'License Missing' }], + type: 'column', + }, + ] + + const byStandardFilterList = [ + { + filterName: 'Fully Compliant', + value: [{ id: 'isFullyCompliant', value: 'Yes' }], + type: 'column', + }, + { + filterName: 'Has Non-Compliant', + value: [{ id: 'hasNonCompliant', value: 'Yes' }], + type: 'column', + }, + { + filterName: 'License Missing', + value: [{ id: 'hasLicenseMissing', value: 'Yes' }], + type: 'column', + }, + { + filterName: 'Accepted Deviation', + value: [{ id: 'hasAcceptedDeviation', value: 'Yes' }], + type: 'column', + }, + ] + + const summaryActions = [ { label: 'View Tenant Report', link: '/tenant/manage/applied-standards/?tenantFilter=[tenantFilter]&templateId=[standardId]', @@ -29,6 +316,13 @@ const Page = () => { color: 'info', target: '_self', }, + { + label: 'Edit Template', + link: '/tenant/standards/templates/template?id=[standardId]&type=[standardType]', + icon: , + color: 'success', + target: '_self', + }, { label: 'Manage Drift', link: '/tenant/manage/drift?templateId=[standardId]&tenantFilter=[tenantFilter]', @@ -53,22 +347,622 @@ const Page = () => { }, ] + const granularActions = [ + { + label: 'View Tenant Report', + link: '/tenant/manage/applied-standards/?tenantFilter=[tenantFilter]&templateId=[templateId]', + icon: , + color: 'info', + target: '_self', + }, + { + label: 'Edit Template', + link: '/tenant/standards/templates/template?id=[templateId]&type=[templateType]', + icon: , + color: 'success', + target: '_self', + }, + { + label: 'Manage Drift', + link: '/tenant/manage/drift?templateId=[templateId]&tenantFilter=[tenantFilter]', + icon: , + color: 'info', + target: '_self', + condition: (row) => row.templateType === 'drift', + }, + ] + + const parseValue = (value) => { + if (value === null || value === undefined || value === '') return null + if (typeof value === 'string') { + try { + return JSON.parse(value) + } catch { + return value + } + } + return value + } + + const normalizeObj = (val) => { + if (Array.isArray(val)) return val.map(normalizeObj) + if (val !== null && typeof val === 'object') { + return Object.fromEntries( + Object.keys(val) + .sort() + .map((k) => [k, normalizeObj(val[k])]) + ) + } + return val + } + + const compareValues = (expected, current) => { + if (!expected || !current) return null + try { + const expectedObj = normalizeObj( + typeof expected === 'object' ? expected : JSON.parse(expected) + ) + const currentObj = normalizeObj(typeof current === 'object' ? current : JSON.parse(current)) + if (JSON.stringify(expectedObj) === JSON.stringify(currentObj)) return null + const differences = {} + const allKeys = new Set([...Object.keys(expectedObj), ...Object.keys(currentObj)]) + allKeys.forEach((key) => { + const e = normalizeObj(expectedObj[key]) + const c = normalizeObj(currentObj[key]) + if (JSON.stringify(e) !== JSON.stringify(c)) { + differences[key] = { expected: expectedObj[key], current: currentObj[key] } + } + }) + return Object.keys(differences).length > 0 ? differences : null + } catch { + return null + } + } + + const granularOffCanvas = { + size: 'md', + title: 'Standard Details', + contentPadding: 0, + children: (row) => { + const expectedParsed = parseValue(row.expectedValue) + const currentParsed = parseValue(row.currentValue) + const diffs = compareValues(expectedParsed, currentParsed) + const baseName = row.standardId?.split('.').slice(0, -1).join('.') + const prettyName = + standardsData.find((s) => s.name === row.standardId)?.label ?? + standardsData.find((s) => s.name === baseName)?.label ?? + row.standardName + + const statusColor = getComplianceColor(row.complianceStatus) + + const properties = [ + { label: 'Standard', value: prettyName }, + { label: 'Status', value: row.complianceStatus, color: statusColor }, + { label: 'Template', value: row.templateName }, + { + label: 'Type', + value: row.standardType === 'drift' ? 'Drift Standard' : 'Classic Standard', + }, + { + label: 'Last Applied', + value: row.latestDataCollection + ? new Date(row.latestDataCollection).toLocaleString() + : 'N/A', + }, + ] + + return ( + + {/* Property list */} + } + sx={{ borderBottom: '1px solid', borderColor: 'divider' }} + > + {properties.map(({ label, value, color }) => ( + + + {label} + + {color ? ( + + ) : ( + + {value ?? 'N/A'} + + )} + + ))} + + + {/* Diff / value content */} + {(expectedParsed || currentParsed) && ( + + {diffs ? ( + <> + + Property Differences + + {Object.entries(diffs).map(([key, { expected, current }]) => ( + + + {key} + + + + + Expected + + + + {JSON.stringify(expected, null, 2)} + + + + + + Current + + + + {JSON.stringify(current, null, 2)} + + + + + + ))} + + ) : ( + <> + {expectedParsed !== null && ( + + + Expected + + + + {typeof expectedParsed === 'object' + ? JSON.stringify(expectedParsed, null, 2) + : String(expectedParsed)} + + + + )} + {currentParsed !== null && ( + + + Current + + + + {typeof currentParsed === 'object' + ? JSON.stringify(currentParsed, null, 2) + : String(currentParsed)} + + + + )} + + )} + + )} + + ) + }, + } + + const byStandardOffCanvas = { + size: 'md', + title: 'Standard Tenant Summary', + contentPadding: 0, + children: (row) => { + const standardInfo = getStandardInfo(row.standardId) + const properties = [ + { label: 'Standard', value: row.standardName }, + { label: 'Category', value: row.category }, + { label: 'Type', value: row.standardType }, + { label: 'Tenants', value: row.totalTenants }, + { label: 'Compliance', value: `${row.alignmentScore}%` }, + { label: 'Licenses Missing', value: `${row.LicenseMissingPercentage}%` }, + ] + const tenants = row.tenants ?? [] + const compliantTenants = tenants.filter((tenant) => + isAlignedComplianceStatus(tenant.complianceStatus) + ) + const nonCompliantTenants = tenants.filter( + (tenant) => !isAlignedComplianceStatus(tenant.complianceStatus) + ) + const filteredTenants = + byStandardTenantFilter === 'compliant' + ? compliantTenants + : byStandardTenantFilter === 'nonCompliant' + ? nonCompliantTenants + : tenants + + return ( + + } + sx={{ borderBottom: '1px solid', borderColor: 'divider' }} + > + {properties.map(({ label, value }) => ( + + + {label} + + + {value ?? 'N/A'} + + + ))} + + + {standardInfo?.helpText && ( + + + Description + + + {standardInfo.helpText} + + + )} + + + + + Tenant Compliance + + { + if (newFilter !== null) setByStandardTenantFilter(newFilter) + }} + sx={{ + alignSelf: { xs: 'flex-start', sm: 'center' }, + '& .MuiToggleButton-root': { py: 0.25, px: 1, fontSize: '0.75rem' }, + }} + > + All ({tenants.length}) + Compliant ({compliantTenants.length}) + + Noncompliant ({nonCompliantTenants.length}) + + + + {filteredTenants.length === 0 && ( + + No tenants match this filter. + + )} + {filteredTenants.map((tenant) => ( + + + + + {tenant.tenantFilter} + + + Template: {tenant.templateName} + + + + + + Last Applied:{' '} + {tenant.latestDataCollection + ? new Date(tenant.latestDataCollection).toLocaleString() + : 'N/A'} + {tenant.rowCount > 1 ? ` (${tenant.rowCount} template matches)` : ''} + + + ))} + + + ) + }, + } + + const modeToggle = ( + + { + if (newViewMode !== null) setViewMode(newViewMode) + }} + sx={{ '& .MuiToggleButton-root': { py: 0.25, px: 1, fontSize: '0.75rem' } }} + > + + + + + Summary + + + + + + + + Per Standard + + + + + + + + By Standard + + + + + + ) + return ( ) } diff --git a/src/pages/tenant/standards/bpa-report/view.js b/src/pages/tenant/standards/bpa-report/view.js index f85fb633a3a3..6abd0203b330 100644 --- a/src/pages/tenant/standards/bpa-report/view.js +++ b/src/pages/tenant/standards/bpa-report/view.js @@ -10,7 +10,7 @@ import { useEffect, useState } from "react"; import CippButtonCard from "../../../../components/CippCards/CippButtonCard"; import { CippDataTable } from "../../../../components/CippTable/CippDataTable"; import { CippImageCard } from "../../../../components/CippCards/CippImageCard"; -import _ from "lodash"; +import { get } from "lodash"; const Page = () => { const router = useRouter(); const { id } = router.query; @@ -52,8 +52,8 @@ const Page = () => { const tenantData = bpaData?.data?.Data?.find((data) => data.GUID === tenantId); const cards = frontendFields.map((field) => { //instead of this, use lodash to get the data for blockData - const blockData = _.get(tenantData, field.value) - ? _.get(tenantData, field.value) + const blockData = get(tenantData, field.value) + ? get(tenantData, field.value) : undefined; return { name: field.name, diff --git a/src/pages/tenant/standards/templates/index.js b/src/pages/tenant/standards/templates/index.js index b23752c50d9b..e6b82787f7db 100644 --- a/src/pages/tenant/standards/templates/index.js +++ b/src/pages/tenant/standards/templates/index.js @@ -1,152 +1,151 @@ -import { Alert, Button } from "@mui/material"; -import { CippTablePage } from "../../../../components/CippComponents/CippTablePage.jsx"; -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; // had to add an extra path here because I added an extra folder structure. We should switch to absolute pathing so we dont have to deal with relative. -import { TabbedLayout } from "../../../../layouts/TabbedLayout"; -import Link from "next/link"; -import { CopyAll, Delete, PlayArrow, AddBox, Edit, GitHub, ContentCopy } from "@mui/icons-material"; -import { ApiGetCall, ApiPostCall } from "../../../../api/ApiCall"; -import { Grid } from "@mui/system"; -import { CippApiResults } from "../../../../components/CippComponents/CippApiResults"; -import { EyeIcon } from "@heroicons/react/24/outline"; -import tabOptions from "../tabOptions.json"; -import { useSettings } from "../../../../hooks/use-settings.js"; -import { CippPolicyImportDrawer } from "../../../../components/CippComponents/CippPolicyImportDrawer.jsx"; -import { PermissionButton } from "../../../../utils/permissions.js"; +import { Alert, Button } from '@mui/material' +import { CippTablePage } from '../../../../components/CippComponents/CippTablePage.jsx' +import { Layout as DashboardLayout } from '../../../../layouts/index.js' // had to add an extra path here because I added an extra folder structure. We should switch to absolute pathing so we dont have to deal with relative. +import { TabbedLayout } from '../../../../layouts/TabbedLayout' +import Link from 'next/link' +import { CopyAll, Delete, PlayArrow, AddBox, Edit, GitHub, ContentCopy } from '@mui/icons-material' +import { ApiGetCall, ApiPostCall } from '../../../../api/ApiCall' +import { Grid } from '@mui/system' +import { CippApiResults } from '../../../../components/CippComponents/CippApiResults' +import { EyeIcon } from '@heroicons/react/24/outline' +import tabOptions from '../tabOptions.json' +import { CippPolicyImportDrawer } from '../../../../components/CippComponents/CippPolicyImportDrawer.jsx' +import { PermissionButton } from '../../../../utils/permissions.js' +import { CippFormTemplateTenantSelector } from '../../../../components/CippComponents/CippFormTemplateTenantSelector.jsx' const Page = () => { - const oldStandards = ApiGetCall({ url: "/api/ListStandards", queryKey: "ListStandards-legacy" }); + const oldStandards = ApiGetCall({ url: '/api/ListStandards', queryKey: 'ListStandards-legacy' }) const integrations = ApiGetCall({ - url: "/api/ListExtensionsConfig", - queryKey: "Integrations", + url: '/api/ListExtensionsConfig', + queryKey: 'Integrations', refetchOnMount: false, refetchOnReconnect: false, - }); + }) - const currentTenant = useSettings().currentTenant; - const pageTitle = "Templates"; - const cardButtonPermissions = ["Tenant.Standards.ReadWrite"]; + const pageTitle = 'Templates' + const cardButtonPermissions = ['Tenant.Standards.ReadWrite'] const actions = [ { - label: "View Tenant Report", - link: "/tenant/manage/applied-standards/?templateId=[GUID]", + label: 'View Tenant Report', + link: '/tenant/manage/applied-standards/?templateId=[GUID]', icon: , - color: "info", - target: "_self", + color: 'info', + target: '_self', }, { - label: "Edit Template", + label: 'Edit Template', //when using a link it must always be the full path /identity/administration/users/[id] for example. - link: "/tenant/standards/templates/template?id=[GUID]&type=[type]", + link: '/tenant/standards/templates/template?id=[GUID]&type=[type]', icon: , - color: "success", - target: "_self", + color: 'success', + target: '_self', }, { - label: "Clone & Edit Template", - link: "/tenant/standards/templates/template?id=[GUID]&clone=true&type=[type]", + label: 'Clone & Edit Template', + link: '/tenant/standards/templates/template?id=[GUID]&clone=true&type=[type]', icon: , - color: "success", - target: "_self", + color: 'success', + target: '_self', }, { - label: "Create Drift Clone", - type: "POST", - url: "/api/ExecDriftClone", + label: 'Create Drift Clone', + type: 'POST', + url: '/api/ExecDriftClone', icon: , - color: "warning", + color: 'warning', data: { - id: "GUID", + id: 'GUID', }, confirmText: - "Are you sure you want to create a drift clone of [templateName]? This will create a new drift template based on this template.", + 'Are you sure you want to create a drift clone of [templateName]? This will create a new drift template based on this template.', multiPost: false, }, { - label: `Run Template Now (${currentTenant || "Currently Selected Tenant"})`, - type: "GET", - url: "/api/ExecStandardsRun", + label: 'Run Template Now', + type: 'GET', + url: '/api/ExecStandardsRun', icon: , data: { - TemplateId: "GUID", + TemplateId: 'GUID', }, - confirmText: "Are you sure you want to force a run of this template?", + allowResubmit: true, + customDataformatter: (row, action, formData) => ({ + TemplateId: row.GUID, + tenantFilter: formData.tenantFilter?.value ?? formData.tenantFilter, + }), + children: ({ formHook, row }) => ( + + ), + confirmText: 'Are you sure you want to force a run of this template?', multiPost: false, }, { - label: "Run Template Now (All Tenants in Template)", - type: "GET", - url: "/api/ExecStandardsRun", - icon: , - data: { - TemplateId: "GUID", - tenantFilter: "allTenants", - }, - confirmText: "Are you sure you want to force a run of this template?", - multiPost: false, - }, - { - label: "Save to GitHub", - type: "POST", - url: "/api/ExecCommunityRepo", + label: 'Save to GitHub', + type: 'POST', + url: '/api/ExecCommunityRepo', icon: , data: { - Action: "UploadTemplate", - GUID: "GUID", + Action: 'UploadTemplate', + GUID: 'GUID', }, fields: [ { - label: "Repository", - name: "FullName", - type: "select", + label: 'Repository', + name: 'FullName', + type: 'select', api: { - url: "/api/ListCommunityRepos", + url: '/api/ListCommunityRepos', data: { WriteAccess: true, }, - queryKey: "CommunityRepos-Write", - dataKey: "Results", - valueField: "FullName", - labelField: "FullName", + queryKey: 'CommunityRepos-Write', + dataKey: 'Results', + valueField: 'FullName', + labelField: 'FullName', }, multiple: false, creatable: false, required: true, validators: { - required: { value: true, message: "This field is required" }, + required: { value: true, message: 'This field is required' }, }, }, { - label: "Commit Message", - placeholder: "Enter a commit message for adding this file to GitHub", - name: "Message", - type: "textField", + label: 'Commit Message', + placeholder: 'Enter a commit message for adding this file to GitHub', + name: 'Message', + type: 'textField', multiline: true, required: true, rows: 4, }, ], - confirmText: "Are you sure you want to save this template to the selected repository?", + confirmText: 'Are you sure you want to save this template to the selected repository?', condition: () => integrations.isSuccess && integrations?.data?.GitHub?.Enabled, }, { - label: "Delete Template", - type: "POST", - url: "/api/RemoveStandardTemplate", + label: 'Delete Template', + type: 'POST', + url: '/api/RemoveStandardTemplate', icon: , data: { - ID: "GUID", + ID: 'GUID', }, - confirmText: "Are you sure you want to delete [templateName]?", + confirmText: 'Are you sure you want to delete [templateName]?', multiPost: false, }, - ]; - const conversionApi = ApiPostCall({ relatedQueryKeys: "listStandardTemplates" }); + ] + const conversionApi = ApiPostCall({ relatedQueryKeys: 'listStandardTemplates' }) const handleConversion = () => { conversionApi.mutate({ - url: "/api/execStandardConvert", + url: '/api/execStandardConvert', data: {}, - }); - }; + }) + } const tableFilter = (
    {oldStandards.isSuccess && oldStandards.data.length !== 0 && ( @@ -154,7 +153,7 @@ const Page = () => { You have legacy standards available. Press the button to convert these standards to @@ -163,7 +162,7 @@ const Page = () => { they are correct and re-enable the schedule. - @@ -175,7 +174,7 @@ const Page = () => { )}
    - ); + ) return ( { actions={actions} tableFilter={tableFilter} simpleColumns={[ - "templateName", - "type", - "tenantFilter", - "excludedTenants", - "updatedAt", - "updatedBy", - "runManually", - "standards", + 'templateName', + 'type', + 'tenantFilter', + 'excludedTenants', + 'updatedAt', + 'updatedBy', + 'runManually', + 'standards', ]} queryKey="listStandardTemplates" /> - ); -}; + ) +} Page.getLayout = (page) => ( {page} -); +) -export default Page; +export default Page diff --git a/src/pages/tenant/standards/templates/template.jsx b/src/pages/tenant/standards/templates/template.jsx index 19cf27c788f2..7e442863b3f1 100644 --- a/src/pages/tenant/standards/templates/template.jsx +++ b/src/pages/tenant/standards/templates/template.jsx @@ -1,205 +1,205 @@ -import { Box, Button, Container, Stack, Typography, SvgIcon, Skeleton } from "@mui/material"; -import { Grid } from "@mui/system"; -import { Layout as DashboardLayout } from "../../../../layouts/index.js"; -import { useForm, useWatch } from "react-hook-form"; -import { useRouter } from "next/router"; -import { Add, SaveRounded } from "@mui/icons-material"; -import { useEffect, useState, useCallback, useMemo, useRef, lazy, Suspense } from "react"; -import standards from "../../../../data/standards"; -import CippStandardAccordion from "../../../../components/CippStandards/CippStandardAccordion"; +import { Box, Button, Container, Stack, Typography, SvgIcon, Skeleton } from '@mui/material' +import { Grid } from '@mui/system' +import { Layout as DashboardLayout } from '../../../../layouts/index.js' +import { useForm, useWatch } from 'react-hook-form' +import { useRouter } from 'next/router' +import { Add, SaveRounded } from '@mui/icons-material' +import { useEffect, useState, useCallback, useMemo, useRef, lazy, Suspense } from 'react' +import standards from '../../../../data/standards' +import CippStandardAccordion from '../../../../components/CippStandards/CippStandardAccordion' // Lazy load the dialog to improve initial page load performance const CippStandardDialog = lazy( - () => import("../../../../components/CippStandards/CippStandardDialog"), -); -import CippStandardsSideBar from "../../../../components/CippStandards/CippStandardsSideBar"; -import { ArrowLeftIcon } from "@mui/x-date-pickers"; -import { useDialog } from "../../../../hooks/use-dialog"; -import { ApiGetCall } from "../../../../api/ApiCall"; -import _ from "lodash"; -import { createDriftManagementActions } from "../../manage/driftManagementActions"; -import { ActionsMenu } from "../../../../components/actions-menu"; -import { useSettings } from "../../../../hooks/use-settings"; -import { CippHead } from "../../../../components/CippComponents/CippHead"; + () => import('../../../../components/CippStandards/CippStandardDialog') +) +import CippStandardsSideBar from '../../../../components/CippStandards/CippStandardsSideBar' +import { ArrowLeftIcon } from '@mui/x-date-pickers' +import { useDialog } from '../../../../hooks/use-dialog' +import { ApiGetCall } from '../../../../api/ApiCall' +import { get } from 'lodash' +import { createDriftManagementActions } from '../../manage/driftManagementActions' +import { ActionsMenu } from '../../../../components/actions-menu' +import { useSettings } from '../../../../hooks/use-settings' +import { CippHead } from '../../../../components/CippComponents/CippHead' const Page = () => { - const router = useRouter(); - const [editMode, setEditMode] = useState(false); - const formControl = useForm({ mode: "onBlur" }); - const { formState } = formControl; - const [dialogOpen, setDialogOpen] = useState(false); - const [expanded, setExpanded] = useState(null); - const [searchQuery, setSearchQuery] = useState(""); - const [selectedStandards, setSelectedStandards] = useState({}); - const [updatedAt, setUpdatedAt] = useState(false); - const [hasUnsavedChanges, setHasUnsavedChanges] = useState(false); - const [currentStep, setCurrentStep] = useState(0); - const [hasDriftConflict, setHasDriftConflict] = useState(false); - const initialStandardsRef = useRef({}); - - const currentTenant = useSettings().currentTenant; + const router = useRouter() + const [editMode, setEditMode] = useState(false) + const formControl = useForm({ mode: 'onBlur' }) + const { formState } = formControl + const [dialogOpen, setDialogOpen] = useState(false) + const [expanded, setExpanded] = useState(null) + const [searchQuery, setSearchQuery] = useState('') + const [selectedStandards, setSelectedStandards] = useState({}) + const [updatedAt, setUpdatedAt] = useState(false) + const [hasUnsavedChanges, setHasUnsavedChanges] = useState(false) + const [currentStep, setCurrentStep] = useState(0) + const [hasDriftConflict, setHasDriftConflict] = useState(false) + const initialStandardsRef = useRef({}) + + const currentTenant = useSettings().currentTenant // Check if this is drift mode - const isDriftMode = router.query.type === "drift"; + const isDriftMode = router.query.type === 'drift' // Set drift mode flag in form when in drift mode useEffect(() => { if (isDriftMode) { - formControl.setValue("isDriftTemplate", true); + formControl.setValue('isDriftTemplate', true) } - }, [isDriftMode, formControl]); + }, [isDriftMode, formControl]) // Watch form values to check valid configuration - const watchForm = useWatch({ control: formControl.control }); + const watchForm = useWatch({ control: formControl.control }) const existingTemplate = ApiGetCall({ url: `/api/listStandardTemplates`, data: { id: router.query.id }, queryKey: `listStandardTemplates-${router.query.id}`, waiting: editMode, - }); + }) // Check if the template configuration is valid and update currentStep useEffect(() => { const stepsStatus = { - step1: !!_.get(watchForm, "templateName"), - step2: _.get(watchForm, "tenantFilter", []).length > 0, + step1: !!get(watchForm, 'templateName'), + step2: get(watchForm, 'tenantFilter', []).length > 0, step3: Object.keys(selectedStandards).length > 0, step4: - _.get(watchForm, "standards") && + get(watchForm, 'standards') && Object.keys(selectedStandards).length > 0 && Object.keys(selectedStandards).every((standardName) => { - const standardValues = _.get(watchForm, standardName, {}); + const standardValues = get(watchForm, standardName, {}) // Always require an action value which should be an array with at least one element - const actionValue = _.get(standardValues, "action"); - return actionValue && (!Array.isArray(actionValue) || actionValue.length > 0); + const actionValue = get(standardValues, 'action') + return actionValue && (!Array.isArray(actionValue) || actionValue.length > 0) }), - }; + } - const completedSteps = Object.values(stepsStatus).filter(Boolean).length; - setCurrentStep(completedSteps); - }, [selectedStandards, watchForm, isDriftMode]); + const completedSteps = Object.values(stepsStatus).filter(Boolean).length + setCurrentStep(completedSteps) + }, [selectedStandards, watchForm, isDriftMode]) // Handle route change events const handleRouteChange = useCallback( (url) => { if (hasUnsavedChanges) { const confirmLeave = window.confirm( - "You have unsaved changes. Are you sure you want to leave this page?", - ); + 'You have unsaved changes. Are you sure you want to leave this page?' + ) if (!confirmLeave) { - router.events.emit("routeChangeError"); - throw "Route change was aborted"; + router.events.emit('routeChangeError') + throw 'Route change was aborted' } } }, - [hasUnsavedChanges, router], - ); + [hasUnsavedChanges, router] + ) // Handle browser back/forward navigation or tab close useEffect(() => { const handleBeforeUnload = (e) => { if (hasUnsavedChanges) { - e.preventDefault(); - e.returnValue = "You have unsaved changes. Are you sure you want to leave this page?"; - return e.returnValue; + e.preventDefault() + e.returnValue = 'You have unsaved changes. Are you sure you want to leave this page?' + return e.returnValue } - }; + } // Add event listeners - window.addEventListener("beforeunload", handleBeforeUnload); - router.events.on("routeChangeStart", handleRouteChange); + window.addEventListener('beforeunload', handleBeforeUnload) + router.events.on('routeChangeStart', handleRouteChange) // Remove event listeners on cleanup return () => { - window.removeEventListener("beforeunload", handleBeforeUnload); - router.events.off("routeChangeStart", handleRouteChange); - }; - }, [hasUnsavedChanges, handleRouteChange, router.events]); + window.removeEventListener('beforeunload', handleBeforeUnload) + router.events.off('routeChangeStart', handleRouteChange) + } + }, [hasUnsavedChanges, handleRouteChange, router.events]) // Track form changes useEffect(() => { // Compare the current form values with the initial values to check for real changes - const currentValues = formControl.getValues(); - const initialValues = initialStandardsRef.current; + const currentValues = formControl.getValues() + const initialValues = initialStandardsRef.current if ( formState.isDirty || JSON.stringify(selectedStandards) !== JSON.stringify(initialStandardsRef.current) ) { - setHasUnsavedChanges(true); + setHasUnsavedChanges(true) } else { - setHasUnsavedChanges(false); + setHasUnsavedChanges(false) } - }, [formState.isDirty, selectedStandards, formControl]); + }, [formState.isDirty, selectedStandards, formControl]) useEffect(() => { if (router.query.id) { - setEditMode(true); + setEditMode(true) } if (existingTemplate.isSuccess) { //formControl.reset(existingTemplate.data?.[0]); - const apiData = existingTemplate.data?.[0]; + const apiData = existingTemplate.data?.[0] Object.keys(apiData.standards).forEach((key) => { if (Array.isArray(apiData.standards[key])) { apiData.standards[key] = apiData.standards[key].filter( - (value) => value !== null && value !== undefined, - ); + (value) => value !== null && value !== undefined + ) } - }); + }) - formControl.reset(apiData); + formControl.reset(apiData) if (router.query.clone) { - formControl.setValue("templateName", `${apiData.templateName} (Clone)`); - formControl.setValue("GUID", ""); + formControl.setValue('templateName', `${apiData.templateName} (Clone)`) + formControl.setValue('GUID', '') } //set the updated at date and user setUpdatedAt({ date: apiData?.updatedAt, user: apiData?.updatedBy, - }); + }) // Transform standards from the API to match the format for selectedStandards - const standardsFromApi = apiData?.standards; - const transformedStandards = {}; + const standardsFromApi = apiData?.standards + const transformedStandards = {} Object.keys(standardsFromApi).forEach((key) => { if (Array.isArray(standardsFromApi[key])) { standardsFromApi[key].forEach((_, index) => { - transformedStandards[`standards.${key}[${index}]`] = true; - }); + transformedStandards[`standards.${key}[${index}]`] = true + }) } else { - transformedStandards[`standards.${key}`] = true; + transformedStandards[`standards.${key}`] = true } - }); + }) - setSelectedStandards(transformedStandards); + setSelectedStandards(transformedStandards) // Store initial state for change detection - initialStandardsRef.current = { ...transformedStandards }; - setHasUnsavedChanges(false); + initialStandardsRef.current = { ...transformedStandards } + setHasUnsavedChanges(false) } - }, [existingTemplate.isSuccess, router]); + }, [existingTemplate.isSuccess, router]) // Memoize categories to avoid unnecessary recalculations const categories = useMemo(() => { return standards.reduce((acc, standard) => { - const { cat } = standard; + const { cat } = standard if (!acc[cat]) { - acc[cat] = []; + acc[cat] = [] } - acc[cat].push(standard); - return acc; - }, {}); - }, []); + acc[cat].push(standard) + return acc + }, {}) + }, []) const handleOpenDialog = useCallback(() => { - setDialogOpen(true); - }, []); + setDialogOpen(true) + }, []) const handleCloseDialog = useCallback(() => { - setDialogOpen(false); - setSearchQuery(""); - }, []); + setDialogOpen(false) + setSearchQuery('') + }, []) const filterStandards = (standardsList) => standardsList.filter( @@ -207,149 +207,161 @@ const Page = () => { standard.label.toLowerCase().includes(searchQuery.toLowerCase()) || standard.helpText.toLowerCase().includes(searchQuery.toLowerCase()) || (standard.tag && - standard.tag.some((tag) => tag.toLowerCase().includes(searchQuery.toLowerCase()))), - ); + standard.tag.some((tag) => tag.toLowerCase().includes(searchQuery.toLowerCase()))) || + (standard.appliesToTest && + standard.appliesToTest.some((testId) => + testId.toLowerCase().includes(searchQuery.toLowerCase()) + )) + ) const handleToggleStandard = (standardName) => { setSelectedStandards((prev) => ({ ...prev, [standardName]: !prev[standardName], - })); - }; + })) + } const handleAddMultipleStandard = (standardName) => { //if the standardname contains an array qualifier,e.g standardName[0], strip that away. - const arrayPattern = /(.*)\[(\d+)\]$/; - const match = standardName.match(arrayPattern); + const arrayPattern = /(.*)\[(\d+)\]$/ + const match = standardName.match(arrayPattern) if (match) { - standardName = match[1]; + standardName = match[1] } setSelectedStandards((prev) => { - const existingInstances = Object.keys(prev).filter((name) => name.startsWith(standardName)); - const newIndex = existingInstances.length; + const existingInstances = Object.keys(prev).filter((name) => name.startsWith(standardName)) + const newIndex = existingInstances.length return { ...prev, [`${standardName}[${newIndex}]`]: true, - }; - }); - }; + } + }) + } const handleRemoveStandard = (standardName) => { - const arrayPattern = /(.*)\[(\d+)\]$/; - const match = standardName.match(arrayPattern); + const arrayPattern = /(.*)\[(\d+)\]$/ + const match = standardName.match(arrayPattern) if (match) { - const baseName = match[1]; - const removedIndex = parseInt(match[2]); + const baseName = match[1] + const removedIndex = parseInt(match[2]) // Remove the item from the form array - const currentArray = formControl.getValues(baseName) || []; - const updatedArray = currentArray.filter((_, i) => i !== removedIndex); - formControl.setValue(baseName, updatedArray); + const currentArray = formControl.getValues(baseName) || [] + const updatedArray = currentArray.filter((_, i) => i !== removedIndex) + formControl.setValue(baseName, updatedArray) // Re-index selectedStandards to keep indices contiguous - const escapedBaseName = baseName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"); - const reindexPattern = new RegExp(`^${escapedBaseName}\\[(\\d+)\\]$`); + const escapedBaseName = baseName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&') + const reindexPattern = new RegExp(`^${escapedBaseName}\\[(\\d+)\\]$`) setSelectedStandards((prev) => { - const newSelected = {}; + const newSelected = {} Object.keys(prev).forEach((key) => { - const keyMatch = key.match(reindexPattern); + const keyMatch = key.match(reindexPattern) if (keyMatch) { - const idx = parseInt(keyMatch[1]); + const idx = parseInt(keyMatch[1]) if (idx < removedIndex) { - newSelected[key] = prev[key]; + newSelected[key] = prev[key] } else if (idx > removedIndex) { // Shift higher indices down by 1 - newSelected[`${baseName}[${idx - 1}]`] = prev[key]; + newSelected[`${baseName}[${idx - 1}]`] = prev[key] } // Skip the removed index } else { - newSelected[key] = prev[key]; + newSelected[key] = prev[key] } - }); - return newSelected; - }); + }) + return newSelected + }) } else { setSelectedStandards((prev) => { - const newSelected = { ...prev }; - delete newSelected[standardName]; - return newSelected; - }); - formControl.unregister(standardName); + const newSelected = { ...prev } + delete newSelected[standardName] + return newSelected + }) + formControl.unregister(standardName) } - }; + } const handleAccordionToggle = (standardName) => { - setExpanded((prev) => (prev === standardName ? null : standardName)); - }; + setExpanded((prev) => (prev === standardName ? null : standardName)) + } - const createDialog = useDialog(); + const createDialog = useDialog() // Save action that will open the create dialog const handleSave = () => { - createDialog.handleOpen(); + createDialog.handleOpen() // Will be set to false after successful save in the dialog component - }; + } // Determine if save button should be disabled based on configuration const isSaveDisabled = isDriftMode - ? !_.get(watchForm, "tenantFilter") || - !_.get(watchForm, "tenantFilter").length || + ? !get(watchForm, 'tenantFilter') || + !get(watchForm, 'tenantFilter').length || currentStep < 4 || hasDriftConflict // For drift mode, require all steps and no drift conflicts - : !_.get(watchForm, "tenantFilter") || - !_.get(watchForm, "tenantFilter").length || - currentStep < 4; + : !get(watchForm, 'tenantFilter') || + !get(watchForm, 'tenantFilter').length || + currentStep < 4 // Create drift management actions (excluding refresh) const driftActions = useMemo(() => { - if (!editMode || !router.query.id) return []; + if (!editMode || !router.query.id) return [] const allActions = createDriftManagementActions({ templateId: router.query.id, - onRefresh: () => {}, // Empty function since we're filtering out refresh + onRefresh: () => {}, currentTenant: currentTenant, - }); + templateTenants: Array.isArray(watchForm?.tenantFilter) ? watchForm.tenantFilter : [], + excludedTenants: Array.isArray(watchForm?.excludedTenants) ? watchForm.excludedTenants : [], + }) // Filter out the refresh action - return allActions.filter((action) => action.label !== "Refresh Data"); - }, [editMode, router.query.id, currentTenant]); + return allActions.filter((action) => action.label !== 'Refresh Data') + }, [ + editMode, + router.query.id, + currentTenant, + watchForm?.tenantFilter, + watchForm?.excludedTenants, + ]) - const actions = []; + const actions = [] const steps = [ - "Set a name for the Template", - "Assigned Template to Tenants", - "Added Standards to Template", - "Configured all Standards", - ]; + 'Set a name for the Template', + 'Assigned Template to Tenants', + 'Added Standards to Template', + 'Configured all Standards', + ] const handleSafeNavigation = (url) => { if (hasUnsavedChanges) { const confirmLeave = window.confirm( - "You have unsaved changes. Are you sure you want to leave this page?", - ); + 'You have unsaved changes. Are you sure you want to leave this page?' + ) if (confirmLeave) { - router.push(url); + router.push(url) } } else { - router.push(url); + router.push(url) } - }; + } return ( - + @@ -364,11 +376,11 @@ const Page = () => { {editMode ? isDriftMode - ? "Edit Drift Template" - : "Edit Standards Template" + ? 'Edit Drift Template' + : 'Edit Standards Template' : isDriftMode - ? "Add Drift Template" - : "Add Standards Template"} + ? 'Add Drift Template' + : 'Add Standards Template'} @@ -669,37 +858,380 @@ return $results`, - + Manual testing on this page is preview-only. Results are persisted only during scheduled tenant test runs with the script enabled. + + + + + Example Scripts + + + + }> + + Licensed Users with Resolved SKU Names + + + + + Lists all users with licenses, resolves SKU IDs to friendly names using the + license cache, and returns a markdown table with an explicit Passed status. + Demonstrates CIPPStatus, CIPPResults, and{' '} + CIPPResultMarkdown. + + display name lookup hashtable +$SkuLookup = @{} +$Licenses | ForEach-Object { + $SkuLookup[$_.skuId] = $_.License +} + +# Build results - users with their resolved license names +$results = $Users | Where-Object { + $_.assignedLicenses.Count -gt 0 +} | ForEach-Object { + $user = $_ + $licenseNames = @($user.assignedLicenses | ForEach-Object { + $name = $SkuLookup[$_.skuId] + if ($name) { $name } else { $_.skuId } + }) + [PSCustomObject]@{ + UserPrincipalName = $user.userPrincipalName + DisplayName = $user.displayName + AccountEnabled = $user.accountEnabled + LicenseCount = $licenseNames.Count + Licenses = $licenseNames -join ', ' + } +} + +# Build markdown table +$header = "### Licensed Users: $($results.Count)\\n\\n| User | Display Name | Enabled | Licenses |\\n|---|---|---|---|" +$rows = $results | ForEach-Object { + "| $($_.UserPrincipalName) | $($_.DisplayName) | $($_.AccountEnabled) | $($_.Licenses) |" +} +$md = @($header) + @($rows) -join "\\n" + +# Return with explicit pass + markdown +@{ + CIPPStatus = 'Passed' + CIPPResults = $results + CIPPResultMarkdown = $md +}`} + language="powershell" + showLineNumbers={true} + /> + + + + + }> + + Disabled Users with Active Licenses + + + + + Finds disabled accounts that still have licenses assigned — a common cost waste + indicator. Returns failed rows as JSON (default Result Display Type behavior). No + wrapper needed — non-empty output automatically means fail. + + + + + + + }> + + MFA Registration Gaps + + + + + Checks user registration details for accounts that haven't registered any MFA + method. Uses Info status so results are always informational rather + than a hard fail. + + + + + + + }> + + Stale Guest Accounts + + + + + Identifies guest accounts that haven't signed in within 90 days. Uses a{' '} + param with a default so the threshold is configurable via Test + Parameters. Simple auto-detection — empty result = pass, non-empty = fail. + + + + + + + }> + + Conditional Access Policy Summary + + + + + Provides an informational summary of all Conditional Access policies grouped by + state. Demonstrates using Group-Object, building a multi-section + markdown report, and %tenantname% replacement variables. Always + passes since it's informational. + + + + setCacheTypesDialogOpen(false)} - maxWidth="sm" + onClose={() => { + setCacheTypesDialogOpen(false) + setExpandedCacheType(null) + }} + maxWidth="md" fullWidth > Cached Types - + + Click the eye icon to explore sample data from the currently selected tenant. + + {cacheTypes.map((cacheType) => ( - - {cacheType.friendlyName} ({cacheType.type}) - - - {cacheType.description} - + + + + {cacheType.friendlyName} ({cacheType.type}) + + + {cacheType.description} + + + + handleExploreCache(cacheType.type)} + color={expandedCacheType === cacheType.type ? 'primary' : 'default'} + > + + + + + + + {cacheExplorerApi.isFetching ? ( + + + Loading sample data... + + ) : cacheExplorerApi.data?.Results?.length > 0 ? ( + + ) : cacheExplorerApi.isSuccess ? ( + + No cached data found for this type on the selected tenant. Run a cache + refresh first. + + ) : !cacheExplorerTenant ? ( + + Select a tenant to explore cached data. + + ) : null} + + ))} - + @@ -765,6 +1297,13 @@ return $results`, disabled={isScriptLoading} /> + + + + + + + + @@ -857,6 +1410,7 @@ return $results`, showLineNumbers={true} editorHeight="540px" readOnly={isScriptLoading} + onMount={handleScriptEditorMount} onChange={(value) => field.onChange(value || '')} /> {scriptContentField.placeholder} + + Type % to insert replacement variables (e.g.{' '} + %tenantid%, %defaultdomain%, or custom variables). + + {hasTenantFilterParam && ( + + -TenantFilter is not needed — data access functions are + automatically locked to the execution tenant. Remove{' '} + -TenantFilter $TenantFilter from your calls. + + )} {fieldState.error?.message && ( {fieldState.error.message} @@ -939,12 +1508,39 @@ return $results`, )} - {testResults?.Results !== undefined && ( + {(testResults?.Results !== undefined || testResults?.CIPPResultMarkdown) && ( - - Test Results - - {selectedReturnType === 'Markdown' ? ( + + Test Results + {testResults?.CIPPStatus && ( + + )} + + {testResults?.CIPPResultMarkdown ? ( + + + {testResults.CIPPResultMarkdown.replace(/\\n/g, '\n')} + + + ) : selectedReturnType === 'Markdown' ? ( { const pageTitle = "Custom Tests"; + const [importDialogOpen, setImportDialogOpen] = useState(false); + const [selectedRepo, setSelectedRepo] = useState(null); + const [selectedBranch, setSelectedBranch] = useState(null); + + const integrations = ApiGetCall({ + url: "/api/ListExtensionsConfig", + queryKey: "Integrations", + refetchOnMount: false, + refetchOnReconnect: false, + }); + + const branchQuery = ApiGetCall({ + url: "/api/ExecGitHubAction", + data: { Action: "GetBranches", FullName: selectedRepo }, + queryKey: `${selectedRepo}-branches`, + waiting: !!selectedRepo, + }); + + const fileTreeQuery = ApiGetCall({ + url: "/api/ExecGitHubAction", + data: { + Action: "GetFileTree", + FullName: selectedRepo, + Branch: selectedBranch, + }, + queryKey: `${selectedRepo}-${selectedBranch}-filetree-customtests`, + waiting: !!selectedRepo && !!selectedBranch, + }); + + const importScriptApi = ApiPostCall({ + relatedQueryKeys: ["Custom Tests"], + urlFromData: true, + }); + + const scriptFiles = (fileTreeQuery.data?.Results || []).filter( + (f) => f.path?.endsWith(".json") && f.path?.startsWith("CustomTests/") + ); + + const handleImportClose = () => { + setImportDialogOpen(false); + setSelectedRepo(null); + setSelectedBranch(null); + }; const simpleColumns = [ "ScriptName", "Description", "Enabled", "AlertOnFailure", + "ResultMode", "ReturnType", "Category", "Pillar", @@ -35,18 +103,33 @@ const Page = () => { title={pageTitle} queryKey="Custom Tests" cardButton={ - + + {integrations.isSuccess && integrations?.data?.GitHub?.Enabled && ( + + )} + + } tenantInTitle={false} apiUrl="/api/ListCustomScripts" @@ -126,8 +209,150 @@ const Page = () => { confirmText: "Are you sure you want to delete the test '[ScriptName]'? This will permanently delete ALL versions of this script.", }, + { + label: "Save to GitHub", + type: "POST", + url: "/api/ExecCommunityRepo", + icon: , + data: { + Action: "UploadScript", + GUID: "ScriptGuid", + }, + fields: [ + { + label: "Repository", + name: "FullName", + type: "select", + api: { + url: "/api/ListCommunityRepos", + data: { WriteAccess: true }, + queryKey: "CommunityRepos-Write", + dataKey: "Results", + valueField: "FullName", + labelField: "FullName", + }, + multiple: false, + creatable: false, + required: true, + validators: { + required: { value: true, message: "This field is required" }, + }, + }, + { + label: "Commit Message", + placeholder: "Enter a commit message for adding this script to GitHub", + name: "Message", + type: "textField", + multiline: true, + required: true, + rows: 4, + }, + ], + confirmText: + "Are you sure you want to save '[ScriptName]' to the selected repository?", + condition: () => integrations.isSuccess && integrations?.data?.GitHub?.Enabled, + }, ]} /> + + + Import Custom Test from GitHub + + + + { + setSelectedRepo(newValue?.value || null); + setSelectedBranch(null); + }} + api={{ + url: "/api/ListCommunityRepos", + queryKey: "CommunityRepos", + dataKey: "Results", + valueField: "FullName", + labelField: "FullName", + }} + multiple={false} + label="Select Repository" + placeholder="Select a repository" + /> + + + { + setSelectedBranch(newValue?.value || null); + }} + options={ + branchQuery.data?.Results?.map((b) => ({ + label: b.name, + value: b.name, + })) || [] + } + multiple={false} + label="Select Branch" + placeholder="Select a branch" + disabled={!selectedRepo} + isFetching={branchQuery.isFetching} + /> + + + + {fileTreeQuery.isFetching ? ( + + + + ) : scriptFiles.length > 0 ? ( + + {scriptFiles.map((file) => ( + { + importScriptApi.mutate({ + url: "/api/ExecCommunityRepo", + data: { + Action: "ImportScript", + FullName: selectedRepo, + Path: file.path, + Branch: selectedBranch, + }, + }); + }} + disabled={importScriptApi.isPending} + > + + + + + + + ))} + + ) : selectedRepo && selectedBranch && !fileTreeQuery.isFetching ? ( + + No custom test files found in the CustomTests/ folder of this repository. + + ) : ( + + Select a repository and branch to browse available custom tests. + + )} + + + + + + + ); }; diff --git a/src/utils/get-cipp-column-size.js b/src/utils/get-cipp-column-size.js index 6719d251151a..d24c5d549b8c 100644 --- a/src/utils/get-cipp-column-size.js +++ b/src/utils/get-cipp-column-size.js @@ -1,16 +1,22 @@ // Returns { size, minSize } overrides for columns where the rendered cell // doesn't match the text-measured width (icons, progress bars, etc.). // Returns null when measurement should be used as-is. -export const getCippColumnSize = (accessorKey) => { - // Portal columns render as a small icon — header width is enough. +// header is the translated column title text. +export const getCippColumnSize = (accessorKey, header) => { + // Portal columns render as a small icon — size based on title length + // plus room for sort icon, column actions, and resize handle. if (accessorKey && accessorKey.startsWith('portal_')) { - return { size: 'header', minSize: 'header' } + const titleLen = header ? header.length : 6 + const px = Math.round(titleLen * 8 + 85) + return { size: px, minSize: px } } // Progress bar / percentage columns need room for the bar component. switch (accessorKey) { case 'alignmentScore': case 'combinedAlignmentScore': + case 'compliancePercentage': + case 'complianceScore': case 'LicenseMissingPercentage': case 'ScorePercentage': return { size: 250, minSize: 250 } @@ -19,6 +25,11 @@ export const getCippColumnSize = (accessorKey) => { case 'info.logoUrl': return { size: 'header', minSize: 'header' } + // String arrays that named handlers transform into CippDataTableButton + // ("X items" button) — don't measure the raw text. + case 'proxyAddresses': + return { size: 'header', minSize: 'header' } + default: return null } diff --git a/src/utils/get-cipp-formatting.js b/src/utils/get-cipp-formatting.js index 93f364ca77b2..5580ab4b5de0 100644 --- a/src/utils/get-cipp-formatting.js +++ b/src/utils/get-cipp-formatting.js @@ -11,6 +11,7 @@ import { BarChart, } from '@mui/icons-material' import { Chip, Link, SvgIcon, Tooltip } from '@mui/material' +import NextLink from 'next/link' import { alpha } from '@mui/material/styles' import { Box } from '@mui/system' import { CippCopyToClipBoard } from '../components/CippComponents/CippCopyToClipboard' @@ -33,6 +34,7 @@ import DOMPurify from 'dompurify' import { getSignInErrorCodeTranslation } from './get-cipp-signin-errorcode-translation' import { CollapsibleChipList } from '../components/CippComponents/CollapsibleChipList' import countryList from '../data/countryList.json' +import standardsData from '../data/standards.json' // Helper function to convert country codes to country names const getCountryNameFromCode = (countryCode) => { @@ -258,7 +260,11 @@ export const getCippFormatting = (data, cellName, type, canReceive, flatten = tr return isText ? data : data } - if (cellName === 'alignmentScore' || cellName === 'combinedAlignmentScore') { + if ( + cellName === 'alignmentScore' || + cellName === 'combinedAlignmentScore' || + cellName === 'compliancePercentage' + ) { // Handle alignment score, return a percentage with a label return isText ? ( `${data}%` @@ -267,6 +273,15 @@ export const getCippFormatting = (data, cellName, type, canReceive, flatten = tr ) } + if (cellName === 'currentDeviationsCount') { + if (data === undefined || data === null) + return isText ? 'N/A' : + const count = Number(data) + const color = count > 0 ? 'warning' : 'success' + const label = count > 0 ? `${count} Deviation${count !== 1 ? 's' : ''}` : 'None' + return isText ? label : + } + if (cellName === 'LicenseMissingPercentage') { return isText ? ( `${data}%` @@ -436,6 +451,29 @@ export const getCippFormatting = (data, cellName, type, canReceive, flatten = tr )) } } + if (cellName === 'complianceStatus') { + if (isText) return data + const complianceColors = { + compliant: 'success', + 'non-compliant': 'error', + 'license missing': 'warning', + 'reporting disabled': 'default', + } + const color = complianceColors[String(data).toLowerCase()] ?? 'default' + return + } + + if (cellName === 'standardName') { + // Already resolved for templates; do a standards.json lookup for classic standards + if (!data?.startsWith('standards.')) return isText ? data : {data} + const baseName = data.split('.').slice(0, -1).join('.') + const label = + standardsData.find((s) => s.name === data)?.label ?? + standardsData.find((s) => s.name === baseName)?.label ?? + data + return label + } + if (cellName === 'standardType') { return isText ? ( data @@ -958,17 +996,12 @@ export const getCippFormatting = (data, cellName, type, canReceive, flatten = tr } // ISO 8601 Duration Formatting - // Add property names here to automatically format ISO 8601 duration strings (e.g., "PT1H23M30S") - // into human-readable format (e.g., "1 hour 23 minutes 30 seconds") across all CIPP tables. - // This works for any API response property that contains ISO 8601 duration format. - const durationArray = [ - 'autoExtendDuration', // GDAP page (/tenant/gdap-management/relationships) - 'deploymentDuration', // AutoPilot deployments (/endpoint/reports/autopilot-deployment) - 'deploymentTotalDuration', // AutoPilot deployments (/endpoint/reports/autopilot-deployment) - 'deviceSetupDuration', // AutoPilot deployments (/endpoint/reports/autopilot-deployment) - 'accountSetupDuration', // AutoPilot deployments (/endpoint/reports/autopilot-deployment) - ] - if (durationArray.includes(cellName)) { + // Any property whose name ends in "Duration" is auto-formatted from ISO 8601 (e.g. "PT1H23M30S") + // into human-readable form (e.g. "1 hour 23 minutes 30 seconds") across all CIPP tables. + // The try/catch below handles same-suffixed fields that are not actually ISO 8601. + // Add explicit entries below for fields that don't follow the *Duration naming convention. + const durationArray = [] + if (durationArray.includes(cellName) || cellName.endsWith('Duration')) { isoDuration.setLocales( { en, @@ -977,8 +1010,26 @@ export const getCippFormatting = (data, cellName, type, canReceive, flatten = tr fallbackLocale: 'en', } ) - const duration = isoDuration(data) - return duration.humanize('en') + try { + const duration = isoDuration(data) + const formattedDuration = duration.humanize('en') + if (formattedDuration) { + return formattedDuration + } + } catch { + // Fall through to the default formatter when a Duration-suffixed field is not ISO 8601. + } + } + + // Internal CIPP navigation links + if ((cellName === 'cippLink') && typeof data === 'string') { + return isText ? ( + data + ) : ( + + View + + ) } //if string starts with http, return a link diff --git a/src/utils/get-cipp-license-translation.js b/src/utils/get-cipp-license-translation.js index 0397585d927a..321379fc6785 100644 --- a/src/utils/get-cipp-license-translation.js +++ b/src/utils/get-cipp-license-translation.js @@ -3,9 +3,18 @@ import M365LicensesAdditional from "../data/M365Licenses-additional.json"; import { getCachedLicense } from "./cipp-license-cache"; import licenseBackfillManager from "./cipp-license-backfill-manager"; +// Create a Map for O(1) lookups of GUID to Product_Display_Name +const licenseByGuid = new Map(); +[...M365LicensesDefault, ...M365LicensesAdditional].forEach((entry) => { + if (entry.GUID) { + const key = entry.GUID.toLowerCase(); + if (!licenseByGuid.has(key)) { + licenseByGuid.set(key, entry.Product_Display_Name); + } + } +}); + export const getCippLicenseTranslation = (licenseArray) => { - //combine M365LicensesDefault and M365LicensesAdditional to one array - const M365Licenses = [...M365LicensesDefault, ...M365LicensesAdditional]; let licenses = []; let missingSkuIds = []; @@ -24,17 +33,16 @@ export const getCippLicenseTranslation = (licenseArray) => { licenseArray?.forEach((licenseAssignment) => { let found = false; - // First, check static JSON files - for (let x = 0; x < M365Licenses.length; x++) { - if (licenseAssignment.skuId === M365Licenses[x].GUID) { - licenses.push( - M365Licenses[x].Product_Display_Name - ? M365Licenses[x].Product_Display_Name - : licenseAssignment.skuPartNumber, - ); - found = true; - break; - } + // First, check static JSON map (O(1) lookup) + const skuLower = licenseAssignment.skuId?.toLowerCase(); + const displayName = skuLower ? licenseByGuid.get(skuLower) : undefined; + if (displayName) { + licenses.push(displayName); + found = true; + } else if (skuLower && licenseByGuid.has(skuLower)) { + // Entry exists but Product_Display_Name is falsy — fall back to skuPartNumber + licenses.push(licenseAssignment.skuPartNumber || licenseAssignment.skuId); + found = true; } // Second, check dynamic cache diff --git a/src/utils/get-cipp-validator.js b/src/utils/get-cipp-validator.js index e1db092ae1ad..b6cff111b8a3 100644 --- a/src/utils/get-cipp-validator.js +++ b/src/utils/get-cipp-validator.js @@ -19,6 +19,12 @@ export const getCippValidator = (value, type) => { return typeof value === "string" || "This is not a valid string"; case "ip": return /^(?:[0-9]{1,3}\.){3}[0-9]{1,3}$/.test(value) || "This is not a valid IP address"; + case "ipAny": + return ( + /^(?:[0-9]{1,3}\.){3}[0-9]{1,3}$/.test(value) || + /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]+|::(ffff(:0{1,4})?:)?((25[0-5]|(2[0-4]|1?[0-9])?[0-9])\.){3}(25[0-5]|(2[0-4]|1?[0-9])?[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1?[0-9])?[0-9])\.){3}(25[0-5]|(2[0-4]|1?[0-9])?[0-9]))$/.test(value) || + "This is not a valid IPv4 or IPv6 address" + ); case "ipv4cidr": return /^(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)(\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)){3}\/([0-9]|[12][0-9]|3[0-2])$/.test(value) || "This is not a valid IPv4 CIDR"; case "ipv6": @@ -41,7 +47,7 @@ export const getCippValidator = (value, type) => { case "wildcardDomain": return /^(\*\.)?([a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?(\.\*)?$/.test(value) || /^(\*)?[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?(\*)?(\.[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?)*$/.test(value) || "This is not a valid domain pattern"; case "wildcardUrl": - return /^(https?:\/\/)?(\*\.)?([a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?(\.\*)?([\/\?\*][a-zA-Z0-9\-\.\~\*\/\?=&%]*)?$/.test(value) || "This is not a valid URL pattern"; + return /^(https?:\/\/)?(\*\.)?([a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?\.)*[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?(\.\*)?([\/\?\*][a-zA-Z0-9\-\.\~\*\/\?=&%]*)?$/.test(value) || "This is not a valid URL pattern"; case "senderEntry": return ( /^(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z][a-zA-Z0-9-]{0,61}[a-zA-Z0-9]$/.test(value) || diff --git a/src/utils/intune-bind-helpers.js b/src/utils/intune-bind-helpers.js new file mode 100644 index 000000000000..6ff61ff0d5bf --- /dev/null +++ b/src/utils/intune-bind-helpers.js @@ -0,0 +1,14 @@ +// Parsers for Intune Admin Template @odata.bind refs (e.g. `groupPolicyDefinitions('GUID')`). +// Shared so the hook and CippJSONView renderer can't drift. + +export const definitionBindPattern = /groupPolicyDefinitions\('([0-9a-f-]{36})'\)/i +export const presentationBindPattern = /presentations\('([0-9a-f-]{36})'\)/i + +export const extractBindGuid = (value, pattern) => { + if (typeof value !== 'string') { + return null + } + + const match = value.match(pattern) + return match?.[1]?.toLowerCase() || null +} diff --git a/yarn.lock b/yarn.lock index a6d5289e57ce..acfda103a76e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1016,14 +1016,14 @@ resolved "https://registry.yarnpkg.com/@emotion/weak-memoize/-/weak-memoize-0.4.0.tgz#5e13fac887f08c44f76b0ccaf3370eb00fec9bb6" integrity sha512-snKqtPW01tN0ui7yu9rGv69aJXr/a/Ywvl11sUjNtEcRc+ng/mQriFL0wLXMef74iHa/EkftbDzU9F8iFbH+zg== -"@eslint-community/eslint-utils@^4.2.0", "@eslint-community/eslint-utils@^4.8.0", "@eslint-community/eslint-utils@^4.9.1": +"@eslint-community/eslint-utils@^4.8.0", "@eslint-community/eslint-utils@^4.9.1": version "4.9.1" resolved "https://registry.yarnpkg.com/@eslint-community/eslint-utils/-/eslint-utils-4.9.1.tgz#4e90af67bc51ddee6cdef5284edf572ec376b595" integrity sha512-phrYmNiYppR7znFEdqgfWHXR6NCkZEK7hwWDHZUjit/2/U0r6XvkDl0SYnoM51Hq7FhCGdLDT6zxCCOY1hexsQ== dependencies: eslint-visitor-keys "^3.4.3" -"@eslint-community/regexpp@^4.12.1", "@eslint-community/regexpp@^4.12.2", "@eslint-community/regexpp@^4.6.1": +"@eslint-community/regexpp@^4.12.1", "@eslint-community/regexpp@^4.12.2": version "4.12.2" resolved "https://registry.yarnpkg.com/@eslint-community/regexpp/-/regexpp-4.12.2.tgz#bccdf615bcf7b6e8db830ec0b8d21c9a25de597b" integrity sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew== @@ -1051,21 +1051,6 @@ dependencies: "@types/json-schema" "^7.0.15" -"@eslint/eslintrc@^2.1.4": - version "2.1.4" - resolved "https://registry.yarnpkg.com/@eslint/eslintrc/-/eslintrc-2.1.4.tgz#388a269f0f25c1b6adc317b5a2c55714894c70ad" - integrity sha512-269Z39MS6wVJtsoUl10L60WdkhJVdPG24Q4eZTH3nnF6lpvSShEK3wQjDX9JRWAUPvPh7COouPpU9IrqaZFvtQ== - dependencies: - ajv "^6.12.4" - debug "^4.3.2" - espree "^9.6.0" - globals "^13.19.0" - ignore "^5.2.0" - import-fresh "^3.2.1" - js-yaml "^4.1.0" - minimatch "^3.1.2" - strip-json-comments "^3.1.1" - "@eslint/eslintrc@^3.3.5": version "3.3.5" resolved "https://registry.yarnpkg.com/@eslint/eslintrc/-/eslintrc-3.3.5.tgz#c131793cfc1a7b96f24a83e0a8bbd4b881558c60" @@ -1081,11 +1066,6 @@ minimatch "^3.1.5" strip-json-comments "^3.1.1" -"@eslint/js@8.57.1": - version "8.57.1" - resolved "https://registry.yarnpkg.com/@eslint/js/-/js-8.57.1.tgz#de633db3ec2ef6a3c89e2f19038063e8a122e2c2" - integrity sha512-d9zaMRSTIKDLhctzH12MtXvJKSSUhaHcjV+2Z+GK+EEY7XKpP5yR4x+N3TAcHTcu963nIr+TMcCb4DBCYX1z6Q== - "@eslint/js@9.39.4": version "9.39.4" resolved "https://registry.yarnpkg.com/@eslint/js/-/js-9.39.4.tgz#a3f83bfc6fd9bf33a853dfacd0b49b398eb596c1" @@ -1142,25 +1122,11 @@ "@humanfs/core" "^0.19.1" "@humanwhocodes/retry" "^0.4.0" -"@humanwhocodes/config-array@^0.13.0": - version "0.13.0" - resolved "https://registry.yarnpkg.com/@humanwhocodes/config-array/-/config-array-0.13.0.tgz#fb907624df3256d04b9aa2df50d7aa97ec648748" - integrity sha512-DZLEEqFWQFiyK6h5YIeynKx7JlvCYWL0cImfSRXZ9l4Sg2efkFGTuFf6vzXjK1cq6IYkU+Eg/JizXw+TD2vRNw== - dependencies: - "@humanwhocodes/object-schema" "^2.0.3" - debug "^4.3.1" - minimatch "^3.0.5" - "@humanwhocodes/module-importer@^1.0.1": version "1.0.1" resolved "https://registry.yarnpkg.com/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz#af5b2691a22b44be847b0ca81641c5fb6ad0172c" integrity sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA== -"@humanwhocodes/object-schema@^2.0.3": - version "2.0.3" - resolved "https://registry.yarnpkg.com/@humanwhocodes/object-schema/-/object-schema-2.0.3.tgz#4a2868d75d6d6963e423bcf90b7fd1be343409d3" - integrity sha512-93zYdMES/c1D69yZiKDBj0V24vqNzB/koF26KPaagAfd3P/4gUlh3Dys5ogAK+Exi9QyzlD8x/08Zt7wIKcDcA== - "@humanwhocodes/retry@^0.4.0", "@humanwhocodes/retry@^0.4.2": version "0.4.3" resolved "https://registry.yarnpkg.com/@humanwhocodes/retry/-/retry-0.4.3.tgz#c2b9d2e374ee62c586d3adbea87199b1d7a7a6ba" @@ -1313,13 +1279,6 @@ resolved "https://registry.yarnpkg.com/@img/sharp-win32-x64/-/sharp-win32-x64-0.34.5.tgz#a81ffb00e69267cd0a1d626eaedb8a8430b2b2f8" integrity sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw== -"@jest/schemas@^29.6.3": - version "29.6.3" - resolved "https://registry.yarnpkg.com/@jest/schemas/-/schemas-29.6.3.tgz#430b5ce8a4e0044a7e3819663305a7b3091c8e03" - integrity sha512-mo5j5X+jIZmJQveBKeS/clAueipV7KgiX1vMgCxam1RNYiqE1w62n0/tJJnHtjW8ZHcQco5gY85jA3mi0L+nSA== - dependencies: - "@sinclair/typebox" "^0.27.8" - "@jridgewell/gen-mapping@^0.3.12", "@jridgewell/gen-mapping@^0.3.5": version "0.3.13" resolved "https://registry.yarnpkg.com/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz#6342a19f44347518c93e43b1ac69deb3c4656a1f" @@ -1368,17 +1327,17 @@ dependencies: "@monaco-editor/loader" "^1.5.0" -"@mui/core-downloads-tracker@^7.3.7": - version "7.3.9" - resolved "https://registry.yarnpkg.com/@mui/core-downloads-tracker/-/core-downloads-tracker-7.3.9.tgz#d944e385f8f7f5e680e5ba479b39ff8602bd4939" - integrity sha512-MOkOCTfbMJwLshlBCKJ59V2F/uaLYfmKnN76kksj6jlGUVdI25A9Hzs08m+zjBRdLv+sK7Rqdsefe8X7h/6PCw== +"@mui/core-downloads-tracker@^7.3.10": + version "7.3.10" + resolved "https://registry.yarnpkg.com/@mui/core-downloads-tracker/-/core-downloads-tracker-7.3.10.tgz#f6af0bbfa825f11849f5f190d984d6f8d5c0d961" + integrity sha512-vrOpWRmPJSuwLo23J62wggEm/jvGdzqctej+UOCtgDUz6nZJQuj3ByPccVyaa7eQmwAzUwKN56FQPMKkqbj1GA== -"@mui/icons-material@7.3.7": - version "7.3.7" - resolved "https://registry.yarnpkg.com/@mui/icons-material/-/icons-material-7.3.7.tgz#01a6019c552e27c7f8a3451bcb47171ede8b34ac" - integrity sha512-3Q+ulAqG+A1+R4ebgoIs7AccaJhIGy+Xi/9OnvX376jQ6wcy+rz4geDGrxQxCGzdjOQr4Z3NgyFSZCz4T999lA== +"@mui/icons-material@7.3.10": + version "7.3.10" + resolved "https://registry.yarnpkg.com/@mui/icons-material/-/icons-material-7.3.10.tgz#f0d232ebe007b3a125a52c5c9e1bece43a83b57c" + integrity sha512-Au0ma4NSKGKNiimukj8UT/W1x2Qx6Qwn2RvFGykiSqVLYBNlIOPbjnIMvrwLGLu89EEpTVdu/ys/OduZR+tWqw== dependencies: - "@babel/runtime" "^7.28.4" + "@babel/runtime" "^7.28.6" "@mui/lab@7.0.0-beta.17": version "7.0.0-beta.17" @@ -1392,16 +1351,16 @@ clsx "^2.1.1" prop-types "^15.8.1" -"@mui/material@7.3.7": - version "7.3.7" - resolved "https://registry.yarnpkg.com/@mui/material/-/material-7.3.7.tgz#50fc9b9f8645a4d26a48d7c5f7fa0c9876a8c679" - integrity sha512-6bdIxqzeOtBAj2wAsfhWCYyMKPLkRO9u/2o5yexcL0C3APqyy91iGSWgT3H7hg+zR2XgE61+WAu12wXPON8b6A== +"@mui/material@7.3.10": + version "7.3.10" + resolved "https://registry.yarnpkg.com/@mui/material/-/material-7.3.10.tgz#1c954b0e7aba220703afe07594388a69383c7363" + integrity sha512-cHvGOk2ZEfbQt3LnGe0ZKd/ETs9gsUpkW66DCO+GSjMZhpdKU4XsuIr7zJ/B/2XaN8ihxuzHfYAR4zPtCN4RYg== dependencies: - "@babel/runtime" "^7.28.4" - "@mui/core-downloads-tracker" "^7.3.7" - "@mui/system" "^7.3.7" - "@mui/types" "^7.4.10" - "@mui/utils" "^7.3.7" + "@babel/runtime" "^7.28.6" + "@mui/core-downloads-tracker" "^7.3.10" + "@mui/system" "^7.3.10" + "@mui/types" "^7.4.12" + "@mui/utils" "^7.3.10" "@popperjs/core" "^2.11.8" "@types/react-transition-group" "^4.4.12" clsx "^2.1.1" @@ -1410,7 +1369,16 @@ react-is "^19.2.3" react-transition-group "^4.4.5" -"@mui/private-theming@^7.3.2", "@mui/private-theming@^7.3.9": +"@mui/private-theming@^7.3.10": + version "7.3.10" + resolved "https://registry.yarnpkg.com/@mui/private-theming/-/private-theming-7.3.10.tgz#2e500959f39c7b305a30ff3f947f47dea9e8eac1" + integrity sha512-j3EZN+zOctxUISvJSmsEPo5o2F8zse4l5vRkBY+ps6UtnL6J7o14kUaI4w7gwo73id9e3cDNMVQK/9BVaMHVBw== + dependencies: + "@babel/runtime" "^7.28.6" + "@mui/utils" "^7.3.10" + prop-types "^15.8.1" + +"@mui/private-theming@^7.3.9": version "7.3.9" resolved "https://registry.yarnpkg.com/@mui/private-theming/-/private-theming-7.3.9.tgz#c785dc429b7ed62cf3952140be703cbe95704a13" integrity sha512-ErIyRQvsiQEq7Yvcvfw9UDHngaqjMy9P3JDPnRAaKG5qhpl2C4tX/W1S4zJvpu+feihmZJStjIyvnv6KDbIrlw== @@ -1419,7 +1387,19 @@ "@mui/utils" "^7.3.9" prop-types "^15.8.1" -"@mui/styled-engine@^7.3.2", "@mui/styled-engine@^7.3.9": +"@mui/styled-engine@^7.3.10": + version "7.3.10" + resolved "https://registry.yarnpkg.com/@mui/styled-engine/-/styled-engine-7.3.10.tgz#53e98c1fdeda972b5932c76f6a2a29faf33f0d11" + integrity sha512-WxE9SiF8xskAQqGjsp0poXCkCqsoXFEsSr0HBXfApmGHR+DBnXRp+z46Vsltg4gpPM4Z96DeAQRpeAOnhNg7Ng== + dependencies: + "@babel/runtime" "^7.28.6" + "@emotion/cache" "^11.14.0" + "@emotion/serialize" "^1.3.3" + "@emotion/sheet" "^1.4.0" + csstype "^3.2.3" + prop-types "^15.8.1" + +"@mui/styled-engine@^7.3.9": version "7.3.9" resolved "https://registry.yarnpkg.com/@mui/styled-engine/-/styled-engine-7.3.9.tgz#e425ca7b5cb559bde01b8fa4a7a842e9b5916f53" integrity sha512-JqujWt5bX4okjUPGpVof/7pvgClqh7HvIbsIBIOOlCh2u3wG/Bwp4+E1bc1dXSwkrkp9WUAoNdI5HEC+5HKvMw== @@ -1431,21 +1411,21 @@ csstype "^3.2.3" prop-types "^15.8.1" -"@mui/system@7.3.2": - version "7.3.2" - resolved "https://registry.yarnpkg.com/@mui/system/-/system-7.3.2.tgz#e838097fc6cb0a2e4c1822478950db89affb116a" - integrity sha512-9d8JEvZW+H6cVkaZ+FK56R53vkJe3HsTpcjMUtH8v1xK6Y1TjzHdZ7Jck02mGXJsE6MQGWVs3ogRHTQmS9Q/rA== +"@mui/system@7.3.10", "@mui/system@^7.3.10": + version "7.3.10" + resolved "https://registry.yarnpkg.com/@mui/system/-/system-7.3.10.tgz#b8e668537605413be168a865d4e980c7d6747320" + integrity sha512-/sfPpdpJaQn7BSF+avjIdHSYmxHp0UOBYNxSG9QGKfMOD6sLANCpRPCnanq1Pe0lFf0NHkO2iUk0TNzdWC1USQ== dependencies: - "@babel/runtime" "^7.28.3" - "@mui/private-theming" "^7.3.2" - "@mui/styled-engine" "^7.3.2" - "@mui/types" "^7.4.6" - "@mui/utils" "^7.3.2" + "@babel/runtime" "^7.28.6" + "@mui/private-theming" "^7.3.10" + "@mui/styled-engine" "^7.3.10" + "@mui/types" "^7.4.12" + "@mui/utils" "^7.3.10" clsx "^2.1.1" - csstype "^3.1.3" + csstype "^3.2.3" prop-types "^15.8.1" -"@mui/system@^7.3.2", "@mui/system@^7.3.7": +"@mui/system@^7.3.2": version "7.3.9" resolved "https://registry.yarnpkg.com/@mui/system/-/system-7.3.9.tgz#d8181dd9ad8c5e9afdf50eb7009062c506976ab1" integrity sha512-aL1q9am8XpRrSabv9qWf5RHhJICJql34wnrc1nz0MuOglPRYF/liN+c8VqZdTvUn9qg+ZjRVbKf4sJVFfIDtmg== @@ -1459,7 +1439,7 @@ csstype "^3.2.3" prop-types "^15.8.1" -"@mui/types@^7.4.10", "@mui/types@^7.4.12", "@mui/types@^7.4.6": +"@mui/types@^7.4.12", "@mui/types@^7.4.6": version "7.4.12" resolved "https://registry.yarnpkg.com/@mui/types/-/types-7.4.12.tgz#e4eba37a7506419ea5c5e0604322ba82b271bf46" integrity sha512-iKNAF2u9PzSIj40CjvKJWxFXJo122jXVdrmdh0hMYd+FR+NuJMkr/L88XwWLCRiJ5P1j+uyac25+Kp6YC4hu6w== @@ -1485,7 +1465,19 @@ prop-types "^15.8.1" react-is "^19.2.4" -"@mui/utils@^7.3.2", "@mui/utils@^7.3.7", "@mui/utils@^7.3.9": +"@mui/utils@^7.3.10": + version "7.3.10" + resolved "https://registry.yarnpkg.com/@mui/utils/-/utils-7.3.10.tgz#b74050131ca9022c0815d16f54f1a6d757ab343d" + integrity sha512-7y2eIfy0h7JPz+Yy4pS+wgV68d46PuuxDqKBN4Q8VlPQSsCAGwroMCV6xWyc7g9dvEp8ZNFsknc59GHWO+r6Ow== + dependencies: + "@babel/runtime" "^7.28.6" + "@mui/types" "^7.4.12" + "@types/prop-types" "^15.7.15" + clsx "^2.1.1" + prop-types "^15.8.1" + react-is "^19.2.3" + +"@mui/utils@^7.3.2", "@mui/utils@^7.3.9": version "7.3.9" resolved "https://registry.yarnpkg.com/@mui/utils/-/utils-7.3.9.tgz#8af5093fc93c2e582fa3d047f561c7b690509bc2" integrity sha512-U6SdZaGbfb65fqTsH3V5oJdFj9uYwyLE2WVuNvmbggTSDBb8QHrFsqY8BN3taK9t3yJ8/BPHD/kNvLNyjwM7Yw== @@ -1689,7 +1681,7 @@ resolved "https://registry.yarnpkg.com/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz#5bd262af94e9d25bd1e71b05deed44876a222e8b" integrity sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A== -"@nodelib/fs.walk@^1.2.3", "@nodelib/fs.walk@^1.2.8": +"@nodelib/fs.walk@^1.2.3": version "1.2.8" resolved "https://registry.yarnpkg.com/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz#e95737e8bb6746ddedf69c556953494f196fe69a" integrity sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg== @@ -1917,11 +1909,6 @@ resolved "https://registry.yarnpkg.com/@rtsao/scc/-/scc-1.1.0.tgz#927dd2fae9bc3361403ac2c7a00c32ddce9ad7e8" integrity sha512-zt6OdqaDoOnJ1ZYsCYGt9YmWzDXl4vQdKTyJev62gFhRGKdx7mcT54V9KIjg+d2wi9EXsPvAPKe7i7WjfVWB8g== -"@sinclair/typebox@^0.27.8": - version "0.27.10" - resolved "https://registry.yarnpkg.com/@sinclair/typebox/-/typebox-0.27.10.tgz#beefe675f1853f73676aecc915b2bd2ac98c4fc6" - integrity sha512-MTBk/3jGLNB2tVxv6uLlFh1iu64iYOQ2PbdOSK3NW8JZsmlaOh2q6sdtKowBhfw8QFLmYNzTW4/oK4uATIi6ZA== - "@sinonjs/text-encoding@^0.7.2": version "0.7.3" resolved "https://registry.yarnpkg.com/@sinonjs/text-encoding/-/text-encoding-0.7.3.tgz#282046f03e886e352b2d5f5da5eb755e01457f3f" @@ -2074,10 +2061,10 @@ resolved "https://registry.yarnpkg.com/@tanstack/query-core/-/query-core-5.96.2.tgz#766dab253476afd0b27959b66abb606d8d2dd9f5" integrity sha512-hzI6cTVh4KNRk8UtoIBS7Lv9g6BnJPXvBKsvYH1aGWvv0347jT3BnSvztOE+kD76XGvZnRC/t6qdW1CaIfwCeA== -"@tanstack/query-devtools@5.93.0": - version "5.93.0" - resolved "https://registry.yarnpkg.com/@tanstack/query-devtools/-/query-devtools-5.93.0.tgz#517f61d4e2cfb9af671e34ad5e7e871052bca814" - integrity sha512-+kpsx1NQnOFTZsw6HAFCW3HkKg0+2cepGtAWXjiiSOJJ1CtQpt72EE2nyZb+AjAbLRPoeRmPJ8MtQd8r8gsPdg== +"@tanstack/query-devtools@5.96.2": + version "5.96.2" + resolved "https://registry.yarnpkg.com/@tanstack/query-devtools/-/query-devtools-5.96.2.tgz#6301662b95d4a7a8b9b53e53d3a9091ae45e4d25" + integrity sha512-vBTB1Qhbm3nHSbEUtQwks/EdcAtFfEapr1WyBW4w2ExYKuXVi3jIxUIHf5MlSltiHuL7zNyUuanqT/7sI2sb6g== "@tanstack/query-persist-client-core@5.92.4": version "5.92.4" @@ -2086,6 +2073,13 @@ dependencies: "@tanstack/query-core" "5.91.2" +"@tanstack/query-persist-client-core@5.96.2": + version "5.96.2" + resolved "https://registry.yarnpkg.com/@tanstack/query-persist-client-core/-/query-persist-client-core-5.96.2.tgz#65ea5a2104a85a2f39ef1a007f6f0ad63fbf1c49" + integrity sha512-BYsP8folbvxzZsNnWJxSenEAdepGNfv809150U78D84yt/THi33EwfUCcdKWFbma5XKwlaFQGWMJKeWnVJ6GVA== + dependencies: + "@tanstack/query-core" "5.96.2" + "@tanstack/query-sync-storage-persister@^5.90.25": version "5.90.27" resolved "https://registry.yarnpkg.com/@tanstack/query-sync-storage-persister/-/query-sync-storage-persister-5.90.27.tgz#249c055565e31e0587c2b1900b0d7e0012982dd3" @@ -2094,19 +2088,19 @@ "@tanstack/query-core" "5.91.2" "@tanstack/query-persist-client-core" "5.92.4" -"@tanstack/react-query-devtools@^5.51.11": - version "5.91.3" - resolved "https://registry.yarnpkg.com/@tanstack/react-query-devtools/-/react-query-devtools-5.91.3.tgz#0f65340fa3f7e7d5575de928ad70cfa6b5f74ff1" - integrity sha512-nlahjMtd/J1h7IzOOfqeyDh5LNfG0eULwlltPEonYy0QL+nqrBB+nyzJfULV+moL7sZyxc2sHdNJki+vLA9BSA== +"@tanstack/react-query-devtools@^5.96.2": + version "5.96.2" + resolved "https://registry.yarnpkg.com/@tanstack/react-query-devtools/-/react-query-devtools-5.96.2.tgz#b44a19f1ebdb45a3e59fcf4e4361ff37500f382c" + integrity sha512-nTFKLGuTOFvmFRvcyZ3ArWC/DnMNPoBh6h/2yD6rsf7TCTJCQt+oUWOp2uKPTIuEPtF/vN9Kw5tl5mD1Kbposw== dependencies: - "@tanstack/query-devtools" "5.93.0" + "@tanstack/query-devtools" "5.96.2" -"@tanstack/react-query-persist-client@^5.76.0": - version "5.90.27" - resolved "https://registry.yarnpkg.com/@tanstack/react-query-persist-client/-/react-query-persist-client-5.90.27.tgz#6bf177ea728eec30df50d87f4151dfac8aeaf4f0" - integrity sha512-rKiCZ2C0kzmyDoLfrPHz2UdEDKHo/oXkKVRbhgtHya/bWH6jWDFX5cSFc1SLB33FDrgR8uOG1MwVohBrI4+F8A== +"@tanstack/react-query-persist-client@^5.96.2": + version "5.96.2" + resolved "https://registry.yarnpkg.com/@tanstack/react-query-persist-client/-/react-query-persist-client-5.96.2.tgz#b47d62fc990a9fd38ddcf4a080d1300ae887e5a0" + integrity sha512-smQ38oVPlnvkG+G7R60IAD9X6azJLRjHEd7twml9XBLYM31ncPDP0tUKy/Gv/4ItVmKTtjZ5VabXpVZxnaWSww== dependencies: - "@tanstack/query-persist-client-core" "5.92.4" + "@tanstack/query-persist-client-core" "5.96.2" "@tanstack/react-query@^5.96.2": version "5.96.2" @@ -2223,11 +2217,6 @@ resolved "https://registry.yarnpkg.com/@tiptap/extension-horizontal-rule/-/extension-horizontal-rule-3.20.5.tgz#c21b2c7405f4aad7b507e36cc3394aba51ea2253" integrity sha512-4UtpUHg8cRzxWjJUGtni5VnXYbhsO7ygf1H1pr4Rv63XMBg9lfYDeSwByIuVy9biEFP7eGEFnezzb5Zlh1btmQ== -"@tiptap/extension-image@^3.20.5": - version "3.20.5" - resolved "https://registry.yarnpkg.com/@tiptap/extension-image/-/extension-image-3.20.5.tgz#90a80ce694dcda452a296d38f457bfbe72bf940d" - integrity sha512-qxKupWKhX75Xc9GJ9Uel+KIFL9x6tb8W3RvQM1UolyJX/H7wyBO7sXp9XmKRkHZsDXRgLVbnkYBe+X83o16AIA== - "@tiptap/extension-italic@^3.20.5": version "3.20.5" resolved "https://registry.yarnpkg.com/@tiptap/extension-italic/-/extension-italic-3.20.5.tgz#c53436f05968b16eda6b8e0efbaebaf3f4587e3b" @@ -2557,11 +2546,6 @@ resolved "https://registry.yarnpkg.com/@types/raf/-/raf-3.4.3.tgz#85f1d1d17569b28b8db45e16e996407a56b0ab04" integrity sha512-c4YAvMedbPZ5tEyxzQdMoOhhJ4RD3rngZIdwC2/qDN3d7JpEhB6fiBRKVY1lg5B7Wk+uPBjn5f39j1/2MY1oOw== -"@types/react-dom@^19.2.3": - version "19.2.3" - resolved "https://registry.yarnpkg.com/@types/react-dom/-/react-dom-19.2.3.tgz#c1e305d15a52a3e508d54dca770d202cb63abf2c" - integrity sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ== - "@types/react-redux@^7.1.20": version "7.1.34" resolved "https://registry.yarnpkg.com/@types/react-redux/-/react-redux-7.1.34.tgz#83613e1957c481521e6776beeac4fd506d11bd0e" @@ -2577,7 +2561,7 @@ resolved "https://registry.yarnpkg.com/@types/react-transition-group/-/react-transition-group-4.4.12.tgz#b5d76568485b02a307238270bfe96cb51ee2a044" integrity sha512-8TV6R3h2j7a91c+1DXdJi3Syo69zzIZbz7Lg5tORM5LEJG7X/E6a1V3drRyBRZq7/utz7A+c4OgYLiLcYGHG6w== -"@types/react@*", "@types/react@^19.2.14": +"@types/react@*": version "19.2.14" resolved "https://registry.yarnpkg.com/@types/react/-/react-19.2.14.tgz#39604929b5e3957e3a6fa0001dafb17c7af70bad" integrity sha512-ilcTH/UniCkMdtexkoCN0bI7pMcJDvmQFPvuPvmEaYA/NSfFTAgdUSLAoVjaRJm7+6PvcM+q1zYOwS4wTYMF9w== @@ -2629,17 +2613,6 @@ "@typescript-eslint/visitor-keys" "8.57.1" debug "^4.4.3" -"@typescript-eslint/parser@^6.21.0": - version "6.21.0" - resolved "https://registry.yarnpkg.com/@typescript-eslint/parser/-/parser-6.21.0.tgz#af8fcf66feee2edc86bc5d1cf45e33b0630bf35b" - integrity sha512-tbsV1jPne5CkFQCgPBcDOt30ItF7aJoZL997JSF7MhGQqOeT3svWRYxiqlfA5RUdlHN6Fi+EI9bxqbdyAUZjYQ== - dependencies: - "@typescript-eslint/scope-manager" "6.21.0" - "@typescript-eslint/types" "6.21.0" - "@typescript-eslint/typescript-estree" "6.21.0" - "@typescript-eslint/visitor-keys" "6.21.0" - debug "^4.3.4" - "@typescript-eslint/project-service@8.57.1": version "8.57.1" resolved "https://registry.yarnpkg.com/@typescript-eslint/project-service/-/project-service-8.57.1.tgz#16af9fe16eedbd7085e4fdc29baa73715c0c55c5" @@ -2649,14 +2622,6 @@ "@typescript-eslint/types" "^8.57.1" debug "^4.4.3" -"@typescript-eslint/scope-manager@6.21.0": - version "6.21.0" - resolved "https://registry.yarnpkg.com/@typescript-eslint/scope-manager/-/scope-manager-6.21.0.tgz#ea8a9bfc8f1504a6ac5d59a6df308d3a0630a2b1" - integrity sha512-OwLUIWZJry80O99zvqXVEioyniJMa+d2GrqpUTqi5/v5D5rOrppJVBPa0yKCblcigC0/aYAzxxqQ1B+DS2RYsg== - dependencies: - "@typescript-eslint/types" "6.21.0" - "@typescript-eslint/visitor-keys" "6.21.0" - "@typescript-eslint/scope-manager@8.57.1": version "8.57.1" resolved "https://registry.yarnpkg.com/@typescript-eslint/scope-manager/-/scope-manager-8.57.1.tgz#4524d7e7b420cb501807499684d435ae129aaf35" @@ -2681,30 +2646,11 @@ debug "^4.4.3" ts-api-utils "^2.4.0" -"@typescript-eslint/types@6.21.0": - version "6.21.0" - resolved "https://registry.yarnpkg.com/@typescript-eslint/types/-/types-6.21.0.tgz#205724c5123a8fef7ecd195075fa6e85bac3436d" - integrity sha512-1kFmZ1rOm5epu9NZEZm1kckCDGj5UJEf7P1kliH4LKu/RkwpsfqqGmY2OOcUs18lSlQBKLDYBOGxRVtrMN5lpg== - "@typescript-eslint/types@8.57.1", "@typescript-eslint/types@^8.57.1": version "8.57.1" resolved "https://registry.yarnpkg.com/@typescript-eslint/types/-/types-8.57.1.tgz#54b27a8a25a7b45b4f978c3f8e00c4c78f11142c" integrity sha512-S29BOBPJSFUiblEl6RzPPjJt6w25A6XsBqRVDt53tA/tlL8q7ceQNZHTjPeONt/3S7KRI4quk+yP9jK2WjBiPQ== -"@typescript-eslint/typescript-estree@6.21.0": - version "6.21.0" - resolved "https://registry.yarnpkg.com/@typescript-eslint/typescript-estree/-/typescript-estree-6.21.0.tgz#c47ae7901db3b8bddc3ecd73daff2d0895688c46" - integrity sha512-6npJTkZcO+y2/kr+z0hc4HwNfrrP4kNYh57ek7yCNlrBjWQ1Y0OS7jiZTkgumrvkX5HkEKXFZkkdFNkaW2wmUQ== - dependencies: - "@typescript-eslint/types" "6.21.0" - "@typescript-eslint/visitor-keys" "6.21.0" - debug "^4.3.4" - globby "^11.1.0" - is-glob "^4.0.3" - minimatch "9.0.3" - semver "^7.5.4" - ts-api-utils "^1.0.1" - "@typescript-eslint/typescript-estree@8.57.1": version "8.57.1" resolved "https://registry.yarnpkg.com/@typescript-eslint/typescript-estree/-/typescript-estree-8.57.1.tgz#a9fd28d4a0ec896aa9a9a7e0cead62ea24f99e76" @@ -2730,14 +2676,6 @@ "@typescript-eslint/types" "8.57.1" "@typescript-eslint/typescript-estree" "8.57.1" -"@typescript-eslint/visitor-keys@6.21.0": - version "6.21.0" - resolved "https://registry.yarnpkg.com/@typescript-eslint/visitor-keys/-/visitor-keys-6.21.0.tgz#87a99d077aa507e20e238b11d56cc26ade45fe47" - integrity sha512-JJtkDduxLi9bivAB+cYOVMtbkqdPOhZ+ZI5LC47MIRrDV4Yn2o+ZnW10Nkmr28xRpSpdJ6Sm42Hjf2+REYXm0A== - dependencies: - "@typescript-eslint/types" "6.21.0" - eslint-visitor-keys "^3.4.1" - "@typescript-eslint/visitor-keys@8.57.1": version "8.57.1" resolved "https://registry.yarnpkg.com/@typescript-eslint/visitor-keys/-/visitor-keys-8.57.1.tgz#3af4f88118924d3be983d4b8ae84803f11fe4563" @@ -2746,12 +2684,7 @@ "@typescript-eslint/types" "8.57.1" eslint-visitor-keys "^5.0.0" -"@uiw/react-json-view@^2.0.0-alpha.41": - version "2.0.0-alpha.41" - resolved "https://registry.yarnpkg.com/@uiw/react-json-view/-/react-json-view-2.0.0-alpha.41.tgz#54425c948175df5fd2155fa22a12cfb023f98773" - integrity sha512-botRpQ5AgymYEsqXSdT2/1LefAJEYfMntvdnx1SqhTQCTW9HygeFZXx9inkYqUmiQZ3+0QlZnodjBvwnUfZhVA== - -"@ungap/structured-clone@^1.0.0", "@ungap/structured-clone@^1.2.0": +"@ungap/structured-clone@^1.0.0": version "1.3.0" resolved "https://registry.yarnpkg.com/@ungap/structured-clone/-/structured-clone-1.3.0.tgz#d06bbb384ebcf6c505fde1c3d0ed4ddffe0aaff8" integrity sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g== @@ -2868,12 +2801,12 @@ acorn-jsx@^5.3.2: resolved "https://registry.yarnpkg.com/acorn-jsx/-/acorn-jsx-5.3.2.tgz#7ed5bb55908b3b2f1bc55c6af1653bada7f07937" integrity sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ== -acorn@^8.15.0, acorn@^8.9.0: +acorn@^8.15.0: version "8.16.0" resolved "https://registry.yarnpkg.com/acorn/-/acorn-8.16.0.tgz#4ce79c89be40afe7afe8f3adb902a1f1ce9ac08a" integrity sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw== -ajv@^6.12.4, ajv@^6.14.0: +ajv@^6.14.0: version "6.14.0" resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.14.0.tgz#fd067713e228210636ebb08c60bd3765d6dbe73a" integrity sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw== @@ -2883,21 +2816,6 @@ ajv@^6.12.4, ajv@^6.14.0: json-schema-traverse "^0.4.1" uri-js "^4.2.2" -ansi-regex@^2.0.0: - version "2.1.1" - resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-2.1.1.tgz#c3b33ab5ee360d86e0e628f0468ae7ef27d654df" - integrity sha512-TIGnTpdo+E3+pCyAluZvtED5p5wCqLdezCyhPZzKPcxvFplEt4i+W7OONCKgeZFT3+y5NZZfOOS/Bdcanm1MYA== - -ansi-regex@^5.0.1: - version "5.0.1" - resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-5.0.1.tgz#082cb2c89c9fe8659a311a53bd6a4dc5301db304" - integrity sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ== - -ansi-styles@^2.2.1: - version "2.2.1" - resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-2.2.1.tgz#b432dd3358b634cf75e1e4664368240533c1ddbe" - integrity sha512-kmCevFghRiWM7HB5zTPULl4r9bVFSWjz62MhqizDGUrq2NWuNMQyuv4tHHoKJHs69M/MF64lEcHdYIocrdWQYA== - ansi-styles@^4.1.0: version "4.3.0" resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-4.3.0.tgz#edd803628ae71c04c85ae7a0906edad34b648937" @@ -2905,11 +2823,6 @@ ansi-styles@^4.1.0: dependencies: color-convert "^2.0.1" -ansi-styles@^5.0.0: - version "5.2.0" - resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-5.2.0.tgz#07449690ad45777d1924ac2abb2fc8895dba836b" - integrity sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA== - apexcharts@5.10.4: version "5.10.4" resolved "https://registry.yarnpkg.com/apexcharts/-/apexcharts-5.10.4.tgz#79c9a05ab40b069f33873a1859de6cb0882ccf0e" @@ -2954,11 +2867,6 @@ array-includes@^3.1.6, array-includes@^3.1.8, array-includes@^3.1.9: is-string "^1.1.1" math-intrinsics "^1.1.0" -array-union@^2.1.0: - version "2.1.0" - resolved "https://registry.yarnpkg.com/array-union/-/array-union-2.1.0.tgz#b798420adbeb1de828d84acd8a2e23d3efe85e8d" - integrity sha512-HGyxoOTYUyCM6stUe6EJgnd4EoewAI7zMdfqO+kGjnlZmBDz/cR5pf8r/cR4Wq60sL/p0IkcjUEEPwS3GFrIyw== - array.prototype.findlast@^1.2.5: version "1.2.5" resolved "https://registry.yarnpkg.com/array.prototype.findlast/-/array.prototype.findlast-1.2.5.tgz#3e4fbcb30a15a7f5bf64cf2faae22d139c2e4904" @@ -3162,13 +3070,6 @@ brace-expansion@^1.1.7: balanced-match "^1.0.0" concat-map "0.0.1" -brace-expansion@^2.0.1: - version "2.0.2" - resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-2.0.2.tgz#54fc53237a613d854c7bd37463aad17df87214e7" - integrity sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ== - dependencies: - balanced-match "^1.0.0" - brace-expansion@^5.0.2: version "5.0.4" resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-5.0.4.tgz#614daaecd0a688f660bbbc909a8748c3d80d4336" @@ -3273,17 +3174,6 @@ ccount@^2.0.0: resolved "https://registry.yarnpkg.com/ccount/-/ccount-2.0.1.tgz#17a3bf82302e0870d6da43a01311a8bc02a3ecf5" integrity sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg== -chalk@^1.1.3: - version "1.1.3" - resolved "https://registry.yarnpkg.com/chalk/-/chalk-1.1.3.tgz#a8115c55e4a702fe4d150abd3872822a7e09fc98" - integrity sha512-U3lRVLMSlsCfjqYPbLyVv11M9CPW4I728d6TCKMAOJueEeB9/8o+eSsMnxPJD+Q+K909sdESg7C+tIkoH6on1A== - dependencies: - ansi-styles "^2.2.1" - escape-string-regexp "^1.0.2" - has-ansi "^2.0.0" - strip-ansi "^3.0.0" - supports-color "^2.0.0" - chalk@^4.0.0: version "4.1.2" resolved "https://registry.yarnpkg.com/chalk/-/chalk-4.1.2.tgz#aac4e2b7734a740867aeb16bf02aad556a1e7a01" @@ -3364,11 +3254,6 @@ commander@^7.2.0: resolved "https://registry.yarnpkg.com/commander/-/commander-7.2.0.tgz#a36cb57d0b501ce108e4d20559a150a391d97ab7" integrity sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw== -common-tags@^1.8.2: - version "1.8.2" - resolved "https://registry.yarnpkg.com/common-tags/-/common-tags-1.8.2.tgz#94ebb3c076d26032745fd54face7f688ef5ac9c6" - integrity sha512-gk/Z852D2Wtb//0I+kRFNKKE9dIIVirjoqPoA1wJU+XePVXZfGeBpk45+A1rKO4Q43prqWBNY/MiIeRLbPWUaA== - concat-map@0.0.1: version "0.0.1" resolved "https://registry.yarnpkg.com/concat-map/-/concat-map-0.0.1.tgz#d8a96bd77fd68df7793a73036a3ba0d5405d477b" @@ -3384,13 +3269,6 @@ convert-source-map@^2.0.0: resolved "https://registry.yarnpkg.com/convert-source-map/-/convert-source-map-2.0.0.tgz#4b560f649fc4e918dd0ab75cf4961e8bc882d82a" integrity sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg== -copy-to-clipboard@^3.3.3: - version "3.3.3" - resolved "https://registry.yarnpkg.com/copy-to-clipboard/-/copy-to-clipboard-3.3.3.tgz#55ac43a1db8ae639a4bd99511c148cdd1b83a1b0" - integrity sha512-2KV8NhB5JqC3ky0r9PMCAZKbUHSwtEo4CwCs0KXgruG43gX5PMqDEBbVU4OUzw2MuAWUfsuFmWvEKG5QRfSnJA== - dependencies: - toggle-selection "^1.0.6" - core-js-compat@^3.48.0: version "3.49.0" resolved "https://registry.yarnpkg.com/core-js-compat/-/core-js-compat-3.49.0.tgz#06145447d92f4aaf258a0c44f24b47afaeaffef6" @@ -3434,7 +3312,7 @@ crelt@^1.0.0: resolved "https://registry.yarnpkg.com/crelt/-/crelt-1.0.6.tgz#7cc898ea74e190fb6ef9dae57f8f81cf7302df72" integrity sha512-VQ2MBenTq1fWZUH9DJNGti7kKv6EeAuYr3cLwxUWhIu1baTaXh4Ib5W2CqHVqib4/MqbYGJqiL3Zb8GJZr3l4g== -cross-spawn@^7.0.2, cross-spawn@^7.0.6: +cross-spawn@^7.0.6: version "7.0.6" resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.6.tgz#8a58fe78f00dcd70c370451759dfbfaf03e8ee9f" integrity sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA== @@ -3680,7 +3558,7 @@ debug@^3.2.7: dependencies: ms "^2.1.1" -debug@^4.0.0, debug@^4.1.0, debug@^4.3.1, debug@^4.3.2, debug@^4.3.4, debug@^4.4.0, debug@^4.4.3: +debug@^4.0.0, debug@^4.1.0, debug@^4.3.1, debug@^4.3.2, debug@^4.4.0, debug@^4.4.3: version "4.4.3" resolved "https://registry.yarnpkg.com/debug/-/debug-4.4.3.tgz#c6ae432d9bd9662582fce08709b038c58e9e3d6a" integrity sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA== @@ -3776,18 +3654,6 @@ diff@^8.0.3: resolved "https://registry.yarnpkg.com/diff/-/diff-8.0.4.tgz#4f5baf3188b9b2431117b962eb20ba330fadf696" integrity sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw== -dir-glob@^3.0.1: - version "3.0.1" - resolved "https://registry.yarnpkg.com/dir-glob/-/dir-glob-3.0.1.tgz#56dbf73d992a4a93ba1584f4534063fd2e41717f" - integrity sha512-WkrWp9GR4KXfKGYzOLmTuGVi1UWFfws377n9cc55/tb6DuqyF6pcQ5AbiHEshaDpY9v6oaSr2XCDidGmMwdzIA== - dependencies: - path-type "^4.0.0" - -dlv@^1.1.3: - version "1.1.3" - resolved "https://registry.yarnpkg.com/dlv/-/dlv-1.1.3.tgz#5c198a8a11453596e751494d49874bc7732f2e79" - integrity sha512-+HlytyjlPKnIG8XuRG8WvmBP8xs8P71y+SKKS6ZXWoEgLuePxtDoUEiH7WkdePWrQ5JBpE6aoVqfZfJUQkjXwA== - doctrine@^2.1.0: version "2.1.0" resolved "https://registry.yarnpkg.com/doctrine/-/doctrine-2.1.0.tgz#5cd01fc101621b42c4cd7f5d1a66243716d3f39d" @@ -3795,13 +3661,6 @@ doctrine@^2.1.0: dependencies: esutils "^2.0.2" -doctrine@^3.0.0: - version "3.0.0" - resolved "https://registry.yarnpkg.com/doctrine/-/doctrine-3.0.0.tgz#addebead72a6574db783639dc87a121773973961" - integrity sha512-yS+Q5i3hBf7GBkd4KG8a7eBNNWNGLTaEwwYWUijIYM7zrlYDM0BFXHjjPWlWZ1Rg7UaddZeIDmi9jF3HmqiQ2w== - dependencies: - esutils "^2.0.2" - dom-helpers@^5.0.1: version "5.2.1" resolved "https://registry.yarnpkg.com/dom-helpers/-/dom-helpers-5.2.1.tgz#d9400536b2bf8225ad98fe052e029451ac40e902" @@ -3865,6 +3724,13 @@ dompurify@^3.3.1: optionalDependencies: "@types/trusted-types" "^2.0.7" +dompurify@^3.4.2: + version "3.4.2" + resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-3.4.2.tgz#f0ff81be682c485505097ba8195a058d8f575218" + integrity sha512-lHeS9SA/IKeIFFyYciHBr2n0v1VMPlSj843HdLOwjb2OxNwdq9Xykxqhk+FE42MzAdHvInbAolSE4mhahPpjXA== + optionalDependencies: + "@types/trusted-types" "^2.0.7" + domutils@^1.5.1: version "1.7.0" resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.7.0.tgz#56ea341e834e06e6748af7a1cb25da67ea9f8c2a" @@ -4097,11 +3963,6 @@ escalade@^3.2.0: resolved "https://registry.yarnpkg.com/escalade/-/escalade-3.2.0.tgz#011a3f69856ba189dffa7dc8fcce99d2a87903e5" integrity sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA== -escape-string-regexp@^1.0.2: - version "1.0.5" - resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz#1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" - integrity sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg== - escape-string-regexp@^4.0.0: version "4.0.0" resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz#14ba83a5d373e3d311e5afca29cf5bfad965bf34" @@ -4242,14 +4103,6 @@ eslint-plugin-react@^7.37.0: string.prototype.matchall "^4.0.12" string.prototype.repeat "^1.0.0" -eslint-scope@^7.1.1, eslint-scope@^7.2.2: - version "7.2.2" - resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-7.2.2.tgz#deb4f92563390f32006894af62a22dba1c46423f" - integrity sha512-dOt21O7lTMhDM+X9mB4GX+DZrZtCUJPL/wlcTqxyrx5IvO0IYtILdtrQGQp+8n5S0gwSVmOf9NQrjMOgfQZlIg== - dependencies: - esrecurse "^4.3.0" - estraverse "^5.2.0" - eslint-scope@^8.4.0: version "8.4.0" resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-8.4.0.tgz#88e646a207fad61436ffa39eb505147200655c82" @@ -4258,7 +4111,7 @@ eslint-scope@^8.4.0: esrecurse "^4.3.0" estraverse "^5.2.0" -eslint-visitor-keys@^3.3.0, eslint-visitor-keys@^3.4.1, eslint-visitor-keys@^3.4.3: +eslint-visitor-keys@^3.4.3: version "3.4.3" resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz#0cd72fe8550e3c2eae156a96a4dddcd1c8ac5800" integrity sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag== @@ -4273,50 +4126,6 @@ eslint-visitor-keys@^5.0.0: resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-5.0.1.tgz#9e3c9489697824d2d4ce3a8ad12628f91e9f59be" integrity sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA== -eslint@^8.57.1: - version "8.57.1" - resolved "https://registry.yarnpkg.com/eslint/-/eslint-8.57.1.tgz#7df109654aba7e3bbe5c8eae533c5e461d3c6ca9" - integrity sha512-ypowyDxpVSYpkXr9WPv2PAZCtNip1Mv5KTW0SCurXv/9iOpcrH9PaqUElksqEB6pChqHGDRCFTyrZlGhnLNGiA== - dependencies: - "@eslint-community/eslint-utils" "^4.2.0" - "@eslint-community/regexpp" "^4.6.1" - "@eslint/eslintrc" "^2.1.4" - "@eslint/js" "8.57.1" - "@humanwhocodes/config-array" "^0.13.0" - "@humanwhocodes/module-importer" "^1.0.1" - "@nodelib/fs.walk" "^1.2.8" - "@ungap/structured-clone" "^1.2.0" - ajv "^6.12.4" - chalk "^4.0.0" - cross-spawn "^7.0.2" - debug "^4.3.2" - doctrine "^3.0.0" - escape-string-regexp "^4.0.0" - eslint-scope "^7.2.2" - eslint-visitor-keys "^3.4.3" - espree "^9.6.1" - esquery "^1.4.2" - esutils "^2.0.2" - fast-deep-equal "^3.1.3" - file-entry-cache "^6.0.1" - find-up "^5.0.0" - glob-parent "^6.0.2" - globals "^13.19.0" - graphemer "^1.4.0" - ignore "^5.2.0" - imurmurhash "^0.1.4" - is-glob "^4.0.0" - is-path-inside "^3.0.3" - js-yaml "^4.1.0" - json-stable-stringify-without-jsonify "^1.0.1" - levn "^0.4.1" - lodash.merge "^4.6.2" - minimatch "^3.1.2" - natural-compare "^1.4.0" - optionator "^0.9.3" - strip-ansi "^6.0.1" - text-table "^0.2.0" - eslint@^9.39.4: version "9.39.4" resolved "https://registry.yarnpkg.com/eslint/-/eslint-9.39.4.tgz#855da1b2e2ad66dc5991195f35e262bcec8117b5" @@ -4366,21 +4175,12 @@ espree@^10.0.1, espree@^10.4.0: acorn-jsx "^5.3.2" eslint-visitor-keys "^4.2.1" -espree@^9.3.1, espree@^9.6.0, espree@^9.6.1: - version "9.6.1" - resolved "https://registry.yarnpkg.com/espree/-/espree-9.6.1.tgz#a2a17b8e434690a5432f2f8018ce71d331a48c6f" - integrity sha512-oruZaFkjorTpF32kDSI5/75ViwGeZginGGy2NoOSg3Q9bnwlnmDm4HLnkl0RE3n+njDXR037aY1+x58Z/zFdwQ== - dependencies: - acorn "^8.9.0" - acorn-jsx "^5.3.2" - eslint-visitor-keys "^3.4.1" - esprima@^4.0.0: version "4.0.1" resolved "https://registry.yarnpkg.com/esprima/-/esprima-4.0.1.tgz#13b04cdb3e6c5d19df91ab6987a8695619b0aa71" integrity sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A== -esquery@^1.4.0, esquery@^1.4.2, esquery@^1.5.0: +esquery@^1.5.0: version "1.7.0" resolved "https://registry.yarnpkg.com/esquery/-/esquery-1.7.0.tgz#08d048f261f0ddedb5bae95f46809463d9c9496d" integrity sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g== @@ -4451,11 +4251,6 @@ fast-diff@1.1.2: resolved "https://registry.yarnpkg.com/fast-diff/-/fast-diff-1.1.2.tgz#4b62c42b8e03de3f848460b639079920695d0154" integrity sha512-KaJUt+M9t1qaIteSvjc6P3RbMdXsNhK61GRftR6SNxqmhthcd9MGIi4T+o0jD8LUSpSnSKXE20nLtJ3fOHxQig== -fast-equals@^4.0.3: - version "4.0.3" - resolved "https://registry.yarnpkg.com/fast-equals/-/fast-equals-4.0.3.tgz#72884cc805ec3c6679b99875f6b7654f39f0e8c7" - integrity sha512-G3BSX9cfKttjr+2o1O22tYMLq0DPluZnYtq1rXumE1SpL/F/SLIfHx08WYQoWSIpeMYf8sRbJ8++71+v6Pnxfg== - fast-equals@^5.3.3: version "5.4.0" resolved "https://registry.yarnpkg.com/fast-equals/-/fast-equals-5.4.0.tgz#b60073b8764f27029598447f05773c7534ba7f1e" @@ -4472,17 +4267,6 @@ fast-glob@3.3.1: merge2 "^1.3.0" micromatch "^4.0.4" -fast-glob@^3.2.9: - version "3.3.3" - resolved "https://registry.yarnpkg.com/fast-glob/-/fast-glob-3.3.3.tgz#d06d585ce8dba90a16b0505c543c3ccfb3aeb818" - integrity sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg== - dependencies: - "@nodelib/fs.stat" "^2.0.2" - "@nodelib/fs.walk" "^1.2.3" - glob-parent "^5.1.2" - merge2 "^1.3.0" - micromatch "^4.0.8" - fast-json-stable-stringify@^2.0.0: version "2.1.0" resolved "https://registry.yarnpkg.com/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz#874bf69c6f404c2b5d99c481341399fd55892633" @@ -4526,13 +4310,6 @@ fflate@^0.8.1: resolved "https://registry.yarnpkg.com/fflate/-/fflate-0.8.2.tgz#fc8631f5347812ad6028bbe4a2308b2792aa1dea" integrity sha512-cPJU47OaAoCbg0pBvzsgpTPhmhqI5eJjh/JIu8tPj5q+T7iLvW/JAYUqmE7KOB4R1ZyEhzBaIQpQpardBF5z8A== -file-entry-cache@^6.0.1: - version "6.0.1" - resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-6.0.1.tgz#211b2dd9659cb0394b073e7323ac3c933d522027" - integrity sha512-7Gps/XWymbLk2QLYK4NzpMOrYjMhdIxXuIvy2QBsLE6ljuodKvdkWs/cpyJJ3CVIVpH0Oi1Hvg1ovbMzLdFBBg== - dependencies: - flat-cache "^3.0.4" - file-entry-cache@^8.0.0: version "8.0.0" resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-8.0.0.tgz#7787bddcf1131bffb92636c69457bbc0edd6d81f" @@ -4567,15 +4344,6 @@ find-up@^5.0.0: locate-path "^6.0.0" path-exists "^4.0.0" -flat-cache@^3.0.4: - version "3.2.0" - resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-3.2.0.tgz#2c0c2d5040c99b1632771a9d105725c0115363ee" - integrity sha512-CYcENa+FtcUKLmhhqyctpclsq7QF38pKjZHsGNiSQF5r4FtoKDWabFDl3hzaEQMvT1LHEysw5twgLvpYYb4vbw== - dependencies: - flatted "^3.2.9" - keyv "^4.5.3" - rimraf "^3.0.2" - flat-cache@^4.0.0: version "4.0.1" resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-4.0.1.tgz#0ece39fcb14ee012f4b0410bd33dd9c1f011127c" @@ -4646,11 +4414,6 @@ formik@2.4.9: tiny-warning "^1.0.2" tslib "^2.0.0" -fs.realpath@^1.0.0: - version "1.0.0" - resolved "https://registry.yarnpkg.com/fs.realpath/-/fs.realpath-1.0.0.tgz#1504ad2523158caa40db4a2787cb01411994ea4f" - integrity sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw== - function-bind@^1.1.2: version "1.1.2" resolved "https://registry.yarnpkg.com/function-bind/-/function-bind-1.1.2.tgz#2c02d864d97f3ea6c8830c464cbd11ab6eab7a1c" @@ -4737,30 +4500,11 @@ glob-parent@^6.0.2: dependencies: is-glob "^4.0.3" -glob@^7.1.3: - version "7.2.3" - resolved "https://registry.yarnpkg.com/glob/-/glob-7.2.3.tgz#b8df0fb802bbfa8e89bd1d938b4e16578ed44f2b" - integrity sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q== - dependencies: - fs.realpath "^1.0.0" - inflight "^1.0.4" - inherits "2" - minimatch "^3.1.1" - once "^1.3.0" - path-is-absolute "^1.0.0" - globals@16.4.0: version "16.4.0" resolved "https://registry.yarnpkg.com/globals/-/globals-16.4.0.tgz#574bc7e72993d40cf27cf6c241f324ee77808e51" integrity sha512-ob/2LcVVaVGCYN+r14cnwnoDPUufjiYgSqRhiFD0Q1iI4Odora5RE8Iv1D24hAz5oMophRGkGz+yuvQmmUMnMw== -globals@^13.19.0: - version "13.24.0" - resolved "https://registry.yarnpkg.com/globals/-/globals-13.24.0.tgz#8432a19d78ce0c1e833949c36adb345400bb1171" - integrity sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ== - dependencies: - type-fest "^0.20.2" - globals@^14.0.0: version "14.0.0" resolved "https://registry.yarnpkg.com/globals/-/globals-14.0.0.tgz#898d7413c29babcf6bafe56fcadded858ada724e" @@ -4774,18 +4518,6 @@ globalthis@^1.0.4: define-properties "^1.2.1" gopd "^1.0.1" -globby@^11.1.0: - version "11.1.0" - resolved "https://registry.yarnpkg.com/globby/-/globby-11.1.0.tgz#bd4be98bb042f83d796f7e3811991fbe82a0d34b" - integrity sha512-jhIXaOzy1sb8IyocaruWSn1TjmnBVs8Ayhcy83rmxNJ8q2uWKCAj3CnJY+KpGSXCueAPc0i05kVvVKtP1t9S3g== - dependencies: - array-union "^2.1.0" - dir-glob "^3.0.1" - fast-glob "^3.2.9" - ignore "^5.2.0" - merge2 "^1.4.1" - slash "^3.0.0" - goober@^2.1.16: version "2.1.18" resolved "https://registry.yarnpkg.com/goober/-/goober-2.1.18.tgz#b72d669bd24d552d441638eee26dfd5716ea6442" @@ -4796,11 +4528,6 @@ gopd@^1.0.1, gopd@^1.2.0: resolved "https://registry.yarnpkg.com/gopd/-/gopd-1.2.0.tgz#89f56b8217bdbc8802bd299df6d7f1081d7e51a1" integrity sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg== -graphemer@^1.4.0: - version "1.4.0" - resolved "https://registry.yarnpkg.com/graphemer/-/graphemer-1.4.0.tgz#fb2f1d55e0e3a1849aeffc90c4fa0dd53a0e66c6" - integrity sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag== - gray-matter@4.0.3: version "4.0.3" resolved "https://registry.yarnpkg.com/gray-matter/-/gray-matter-4.0.3.tgz#e893c064825de73ea1f5f7d88c7a9f7274288798" @@ -4811,13 +4538,6 @@ gray-matter@4.0.3: section-matter "^1.0.0" strip-bom-string "^1.0.0" -has-ansi@^2.0.0: - version "2.0.0" - resolved "https://registry.yarnpkg.com/has-ansi/-/has-ansi-2.0.0.tgz#34f5049ce1ecdf2b0649af3ef24e45ed35416d91" - integrity sha512-C8vBJ8DwUCx19vhm7urhTuUsr4/IyP6l4VzNQDv+ryHQObW3TTTp9yB68WpYgRe2bbaGuZ/se74IqFeVnMnLZg== - dependencies: - ansi-regex "^2.0.0" - has-bigints@^1.0.2: version "1.1.0" resolved "https://registry.yarnpkg.com/has-bigints/-/has-bigints-1.1.0.tgz#28607e965ac967e03cd2a2c70a2636a1edad49fe" @@ -4999,13 +4719,6 @@ hsl-to-rgb-for-reals@^1.1.0: resolved "https://registry.yarnpkg.com/hsl-to-rgb-for-reals/-/hsl-to-rgb-for-reals-1.1.1.tgz#e1eb23f6b78016e3722431df68197e6dcdc016d9" integrity sha512-LgOWAkrN0rFaQpfdWBQlv/VhkOxb5AsBjk6NQVx4yEzWS923T07X0M1Y0VNko2H52HeSpZrZNNMJ0aFqsdVzQg== -html-parse-stringify@^3.0.1: - version "3.0.1" - resolved "https://registry.yarnpkg.com/html-parse-stringify/-/html-parse-stringify-3.0.1.tgz#dfc1017347ce9f77c8141a507f233040c59c55d2" - integrity sha512-KknJ50kTInJ7qIScF3jeaFRpMpE8/lfiTdzf/twXyPBLAGrLRTmkz3AdTnKeh40X8k9L2fdYwEp/42WGXIRGcg== - dependencies: - void-elements "3.1.0" - html-tokenize@^2.0.0: version "2.0.1" resolved "https://registry.yarnpkg.com/html-tokenize/-/html-tokenize-2.0.1.tgz#c3b2ea6e2837d4f8c06693393e9d2a12c960be5f" @@ -5052,13 +4765,6 @@ hyphen@^1.6.4: resolved "https://registry.yarnpkg.com/hyphen/-/hyphen-1.14.1.tgz#c9fbd5e1af750f00d5034aa37f6ec41f95ffed93" integrity sha512-kvL8xYl5QMTh+LwohVN72ciOxC0OEV79IPdJSTwEXok9y9QHebXGdFgrED4sWfiax/ODx++CAMk3hMy4XPJPOw== -i18next@25.8.18: - version "25.8.18" - resolved "https://registry.yarnpkg.com/i18next/-/i18next-25.8.18.tgz#51863b65bc42e3525271f2680ebbf7d150ff53cc" - integrity sha512-lzY5X83BiL5AP77+9DydbrqkQHFN9hUzWGjqjLpPcp5ZOzuu1aSoKaU3xbBLSjWx9dAzW431y+d+aogxOZaKRA== - dependencies: - "@babel/runtime" "^7.28.6" - ignore@^5.2.0: version "5.3.2" resolved "https://registry.yarnpkg.com/ignore/-/ignore-5.3.2.tgz#3cd40e729f3643fd87cb04e50bf0eb722bc596f5" @@ -5092,20 +4798,7 @@ imurmurhash@^0.1.4: resolved "https://registry.yarnpkg.com/imurmurhash/-/imurmurhash-0.1.4.tgz#9218b9b2b928a238b13dc4fb6b6d576f231453ea" integrity sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA== -indent-string@^4.0.0: - version "4.0.0" - resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-4.0.0.tgz#624f8f4497d619b2d9768531d58f4122854d7251" - integrity sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg== - -inflight@^1.0.4: - version "1.0.6" - resolved "https://registry.yarnpkg.com/inflight/-/inflight-1.0.6.tgz#49bd6331d7d02d0c09bc910a1075ba8165b56df9" - integrity sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA== - dependencies: - once "^1.3.0" - wrappy "1" - -inherits@2, inherits@^2.0.1, inherits@^2.0.3, inherits@~2.0.1, inherits@~2.0.3: +inherits@^2.0.1, inherits@^2.0.3, inherits@~2.0.1, inherits@~2.0.3: version "2.0.4" resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c" integrity sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ== @@ -5309,11 +5002,6 @@ is-number@^7.0.0: resolved "https://registry.yarnpkg.com/is-number/-/is-number-7.0.0.tgz#7535345b896734d5f80c4d06c50955527a14f12b" integrity sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng== -is-path-inside@^3.0.3: - version "3.0.3" - resolved "https://registry.yarnpkg.com/is-path-inside/-/is-path-inside-3.0.3.tgz#d231362e53a07ff2b0e0ea7fed049161ffd16283" - integrity sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ== - is-plain-obj@^4.0.0: version "4.1.0" resolved "https://registry.yarnpkg.com/is-plain-obj/-/is-plain-obj-4.1.0.tgz#d65025edec3657ce032fd7db63c97883eaed71f0" @@ -5527,7 +5215,7 @@ jspdf@^4.2.0: object.assign "^4.1.4" object.values "^1.1.6" -keyv@^4.5.3, keyv@^4.5.4: +keyv@^4.5.4: version "4.5.4" resolved "https://registry.yarnpkg.com/keyv/-/keyv-4.5.4.tgz#a879a99e29452f942439f2a405e3af8b31d4de93" integrity sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw== @@ -5551,11 +5239,6 @@ language-tags@^1.0.9: dependencies: language-subtag-registry "^0.3.20" -leaflet-defaulticon-compatibility@^0.1.2: - version "0.1.2" - resolved "https://registry.yarnpkg.com/leaflet-defaulticon-compatibility/-/leaflet-defaulticon-compatibility-0.1.2.tgz#f5e1a5841aeab9d1682d17887348855a741b3c2a" - integrity sha512-IrKagWxkTwzxUkFIumy/Zmo3ksjuAu3zEadtOuJcKzuXaD76Gwvg2Z1mLyx7y52ykOzM8rAH5ChBs4DnfdGa6Q== - leaflet.markercluster@^1.5.3: version "1.5.3" resolved "https://registry.yarnpkg.com/leaflet.markercluster/-/leaflet.markercluster-1.5.3.tgz#9cdb52a4eab92671832e1ef9899669e80efc4056" @@ -5631,18 +5314,10 @@ lodash@^4.17.21, lodash@^4.17.4: resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a" integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w== -loglevel-colored-level-prefix@^1.0.0: - version "1.0.0" - resolved "https://registry.yarnpkg.com/loglevel-colored-level-prefix/-/loglevel-colored-level-prefix-1.0.0.tgz#6a40218fdc7ae15fc76c3d0f3e676c465388603e" - integrity sha512-u45Wcxxc+SdAlh4yeF/uKlC1SPUPCy0gullSNKXod5I4bmifzk+Q4lSLExNEVn19tGaJipbZ4V4jbFn79/6mVA== - dependencies: - chalk "^1.1.3" - loglevel "^1.4.1" - -loglevel@^1.4.1: - version "1.9.2" - resolved "https://registry.yarnpkg.com/loglevel/-/loglevel-1.9.2.tgz#c2e028d6c757720107df4e64508530db6621ba08" - integrity sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg== +lodash@^4.18.1: + version "4.18.1" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c" + integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q== longest-streak@^3.0.0: version "3.1.0" @@ -5925,7 +5600,7 @@ memoize-one@^6.0.0: resolved "https://registry.yarnpkg.com/memoize-one/-/memoize-one-6.0.0.tgz#b2591b871ed82948aee4727dc6abceeeac8c1045" integrity sha512-rkpe71W0N0c0Xz6QD0eJETuWAJGnJ9afsl1srmwPrI+yBCkge5EycXXbYRyvL29zZVUWQCY7InPRCv3GDXuZNw== -merge2@^1.3.0, merge2@^1.4.1: +merge2@^1.3.0: version "1.4.1" resolved "https://registry.yarnpkg.com/merge2/-/merge2-1.4.1.tgz#4368892f885e907455a6fd7dc55c0c9d404990ae" integrity sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg== @@ -6203,7 +5878,7 @@ micromark@^4.0.0: micromark-util-symbol "^2.0.0" micromark-util-types "^2.0.0" -micromatch@^4.0.4, micromatch@^4.0.8: +micromatch@^4.0.4: version "4.0.8" resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-4.0.8.tgz#d66fa18f3a47076789320b9b1af32bd86d9fa202" integrity sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA== @@ -6223,13 +5898,6 @@ mime-types@^2.1.12: dependencies: mime-db "1.52.0" -minimatch@9.0.3: - version "9.0.3" - resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-9.0.3.tgz#a6e00c3de44c3a542bfaae70abfc22420a6da825" - integrity sha512-RHiac9mvaRw0x3AYRgDC1CxAP7HTcNrrECeA8YYJeWnpo+2Q5CegtZjaotWTWxDG3UeGA1coE05iH1mPjT/2mg== - dependencies: - brace-expansion "^2.0.1" - minimatch@^10.2.2: version "10.2.4" resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-10.2.4.tgz#465b3accbd0218b8281f5301e27cedc697f96fde" @@ -6237,7 +5905,7 @@ minimatch@^10.2.2: dependencies: brace-expansion "^5.0.2" -minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2, minimatch@^3.1.5: +minimatch@^3.1.2, minimatch@^3.1.5: version "3.1.5" resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.1.5.tgz#580c88f8d5445f2bd6aa8f3cadefa0de79fbd69e" integrity sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w== @@ -6262,10 +5930,10 @@ ms@^2.1.1, ms@^2.1.3: resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.3.tgz#574c8138ce1d2b5861f0b44579dbadd60c6615b2" integrity sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA== -mui-tiptap@^1.29.1: - version "1.29.1" - resolved "https://registry.yarnpkg.com/mui-tiptap/-/mui-tiptap-1.29.1.tgz#eaf54adebc4af14f55b55cb21ef91347b5074343" - integrity sha512-FyOILZSirwYxXs+WJTVs/3QmycCTDJQ5rkBaZkkgtzskbF8fgCIzKUtuTk7bKRE17aWi+VRoGDAu/VVO4Xp6IA== +mui-tiptap@^1.30.0: + version "1.30.0" + resolved "https://registry.yarnpkg.com/mui-tiptap/-/mui-tiptap-1.30.0.tgz#91257ebb32b12241fe27b24ded42804a3abe2c51" + integrity sha512-BVgv9JstoNsk1SudQuIGV58N7GHlWSdItc8Yxa2BXZ6GFjJ1q1QLFoD6mALRrsKEhxpRfkRHrGaOLlZ5KkO2cQ== dependencies: clsx "^2.1.1" encodeurl "^2.0.0" @@ -6443,13 +6111,6 @@ object.values@^1.1.6, object.values@^1.2.1: define-properties "^1.2.1" es-object-atoms "^1.0.0" -once@^1.3.0: - version "1.4.0" - resolved "https://registry.yarnpkg.com/once/-/once-1.4.0.tgz#583b1aa775961d4b113ac17d9c50baef9dd76bd1" - integrity sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w== - dependencies: - wrappy "1" - optionator@^0.9.3: version "0.9.4" resolved "https://registry.yarnpkg.com/optionator/-/optionator-0.9.4.tgz#7ea1c1a5d91d764fb282139c88fe11e182a3a734" @@ -6562,11 +6223,6 @@ path-exists@^4.0.0: resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-4.0.0.tgz#513bdbe2d3b95d7762e8c1137efa195c6c61b5b3" integrity sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w== -path-is-absolute@^1.0.0: - version "1.0.1" - resolved "https://registry.yarnpkg.com/path-is-absolute/-/path-is-absolute-1.0.1.tgz#174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" - integrity sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg== - path-key@^3.1.0: version "3.1.1" resolved "https://registry.yarnpkg.com/path-key/-/path-key-3.1.1.tgz#581f6ade658cbba65a0d3380de7753295054f375" @@ -6626,38 +6282,11 @@ prelude-ls@^1.2.1: resolved "https://registry.yarnpkg.com/prelude-ls/-/prelude-ls-1.2.1.tgz#debc6489d7a6e6b0e7611888cec880337d316396" integrity sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g== -prettier-eslint@^16.4.2: - version "16.4.2" - resolved "https://registry.yarnpkg.com/prettier-eslint/-/prettier-eslint-16.4.2.tgz#d84bff76e0ce4a6ffccacacb2474f7635ca8ac35" - integrity sha512-vtJAQEkaN8fW5QKl08t7A5KCjlZuDUNeIlr9hgolMS5s3+uzbfRHDwaRnzrdqnY2YpHDmeDS/8zY0MKQHXJtaA== - dependencies: - "@typescript-eslint/parser" "^6.21.0" - common-tags "^1.8.2" - dlv "^1.1.3" - eslint "^8.57.1" - indent-string "^4.0.0" - lodash.merge "^4.6.2" - loglevel-colored-level-prefix "^1.0.0" - prettier "^3.5.3" - pretty-format "^29.7.0" - require-relative "^0.8.7" - tslib "^2.8.1" - vue-eslint-parser "^9.4.3" - -prettier@^3.5.3, prettier@^3.8.1: +prettier@^3.8.1: version "3.8.1" resolved "https://registry.yarnpkg.com/prettier/-/prettier-3.8.1.tgz#edf48977cf991558f4fcbd8a3ba6015ba2a3a173" integrity sha512-UOnG6LftzbdaHZcKoPFtOcCKztrQ57WkHDeRD9t/PTQtmT0NHSeWWepj6pS0z/N7+08BHFDQVUrfmfMRcZwbMg== -pretty-format@^29.7.0: - version "29.7.0" - resolved "https://registry.yarnpkg.com/pretty-format/-/pretty-format-29.7.0.tgz#ca42c758310f365bfa71a0bda0a807160b776812" - integrity sha512-Pdlw/oPxN+aXdmM9R00JVC9WVFoCLTKJvDVLgmJ+qAffBMxsV85l/Lu7sNx4zSzPyoL2euImuEwHhOXdEgNFZQ== - dependencies: - "@jest/schemas" "^29.6.3" - ansi-styles "^5.0.0" - react-is "^18.0.0" - prismjs@^1.30.0: version "1.30.0" resolved "https://registry.yarnpkg.com/prismjs/-/prismjs-1.30.0.tgz#d9709969d9d4e16403f6f348c63553b19f0975a9" @@ -6668,7 +6297,7 @@ process-nextick-args@~2.0.0: resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.1.tgz#7820d9b16120cc55ca9ae7792680ae7dba6d7fe2" integrity sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag== -prop-types@15.8.1, prop-types@15.x, prop-types@^15.6.2, prop-types@^15.7.2, prop-types@^15.8.1: +prop-types@15.8.1, prop-types@^15.6.2, prop-types@^15.7.2, prop-types@^15.8.1: version "15.8.1" resolved "https://registry.yarnpkg.com/prop-types/-/prop-types-15.8.1.tgz#67d87bf1a694f48435cf332c24af10214a3140b5" integrity sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg== @@ -6926,14 +6555,6 @@ react-colorful@^5.6.1: resolved "https://registry.yarnpkg.com/react-colorful/-/react-colorful-5.6.1.tgz#7dc2aed2d7c72fac89694e834d179e32f3da563b" integrity sha512-1exovf0uGTGyq5mXQT0zgQ80uvj2PCwvF8zY1RN9/vbJVSjSo3fsB/4L3ObbF7u70NduSiK4xu4Y6q1MHoUGEw== -react-copy-to-clipboard@^5.1.0: - version "5.1.1" - resolved "https://registry.yarnpkg.com/react-copy-to-clipboard/-/react-copy-to-clipboard-5.1.1.tgz#76adb8be03616e99692fcf3f762365ed3fb5ff16" - integrity sha512-s+HrzLyJBxrpGTYXF15dTgMjAJpEPZT/Yp6NytAtZMRngejxt6Pt5WrfFxLAcsqUDU6sY1Jz6tyHwIicE1U2Xg== - dependencies: - copy-to-clipboard "^3.3.3" - prop-types "^15.8.1" - react-dom@19.2.5: version "19.2.5" resolved "https://registry.yarnpkg.com/react-dom/-/react-dom-19.2.5.tgz#b8768b10837d0b8e9ca5b9e2d58dff3d880ea25e" @@ -6941,14 +6562,6 @@ react-dom@19.2.5: dependencies: scheduler "^0.27.0" -react-draggable@^4.4.6, react-draggable@^4.5.0: - version "4.5.0" - resolved "https://registry.yarnpkg.com/react-draggable/-/react-draggable-4.5.0.tgz#0b274ccb6965fcf97ed38fcf7e3cc223bc48cdf5" - integrity sha512-VC+HBLEZ0XJxnOxVAZsdRi8rD04Iz3SiiKOoYzamjylUcju/hP9np/aZdLHf/7WOD268WMoNJMvYfB5yAK45cw== - dependencies: - clsx "^2.1.1" - prop-types "^15.8.1" - react-dropzone@15.0.0: version "15.0.0" resolved "https://registry.yarnpkg.com/react-dropzone/-/react-dropzone-15.0.0.tgz#bd03c7c2b14fe4ea9db1a9c74502b85339f2e505" @@ -6968,18 +6581,6 @@ react-fast-compare@^2.0.1: resolved "https://registry.yarnpkg.com/react-fast-compare/-/react-fast-compare-2.0.4.tgz#e84b4d455b0fec113e0402c329352715196f81f9" integrity sha512-suNP+J1VU1MWFKcyt7RtjiSWUjvidmQSlqu+eHslq+342xCbGTYmC0mEhPCOHxlW0CywylOC1u2DFAT+bv4dBw== -react-grid-layout@^2.2.3: - version "2.2.3" - resolved "https://registry.yarnpkg.com/react-grid-layout/-/react-grid-layout-2.2.3.tgz#6daf24b8c48448af617238520dd233a9375e2f16" - integrity sha512-OAEJHBxmfuxQfVtZwRzmsokijGlBgzYIJ7MUlLk/VSa43SaGzu15w5D0P2RDrfX5EvP9POMbL6bFrai/huDzbQ== - dependencies: - clsx "^2.1.1" - fast-equals "^4.0.3" - prop-types "^15.8.1" - react-draggable "^4.4.6" - react-resizable "^3.1.3" - resize-observer-polyfill "^1.5.1" - react-hook-form@^7.72.0: version "7.72.0" resolved "https://registry.yarnpkg.com/react-hook-form/-/react-hook-form-7.72.0.tgz#995a655b894249fd8798f36383e43f55ed66ae25" @@ -7000,15 +6601,6 @@ react-html-parser@^2.0.2: dependencies: htmlparser2 "^3.9.0" -react-i18next@16.6.5: - version "16.6.5" - resolved "https://registry.yarnpkg.com/react-i18next/-/react-i18next-16.6.5.tgz#6fd2b0b82ed6988b87e51487d53c28954994d361" - integrity sha512-bfdJhmyjQCXtU9CLcGMn3a1V5/jTeUX/x29cOhlS1Lolm/epRtm24gnYsltxArsc29ow3klSJEijjfYXc5kxjg== - dependencies: - "@babel/runtime" "^7.29.2" - html-parse-stringify "^3.0.1" - use-sync-external-store "^1.6.0" - react-is@^16.13.1, react-is@^16.7.0: version "16.13.1" resolved "https://registry.yarnpkg.com/react-is/-/react-is-16.13.1.tgz#789729a4dc36de2999dc156dd6c1d9c18cea56a4" @@ -7019,11 +6611,6 @@ react-is@^17.0.2: resolved "https://registry.yarnpkg.com/react-is/-/react-is-17.0.2.tgz#e691d4a8e9c789365655539ab372762b0efb54f0" integrity sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w== -react-is@^18.0.0: - version "18.3.1" - resolved "https://registry.yarnpkg.com/react-is/-/react-is-18.3.1.tgz#e83557dc12eae63a99e003a46388b1dcbb44db7e" - integrity sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg== - react-is@^19.2.3: version "19.2.4" resolved "https://registry.yarnpkg.com/react-is/-/react-is-19.2.4.tgz#a080758243c572ccd4a63386537654298c99d135" @@ -7110,14 +6697,6 @@ react-redux@^7.2.0: prop-types "^15.7.2" react-is "^17.0.2" -react-resizable@^3.1.3: - version "3.1.3" - resolved "https://registry.yarnpkg.com/react-resizable/-/react-resizable-3.1.3.tgz#b8c3f8aeffb7b0b2c2306bfc7a742462e58125fb" - integrity sha512-liJBNayhX7qA4tBJiBD321FDhJxgGTJ07uzH5zSORXoE8h7PyEZ8mLqmosST7ppf6C4zUsbd2gzDMmBCfFp9Lw== - dependencies: - prop-types "15.x" - react-draggable "^4.5.0" - react-syntax-highlighter@^16.1.0: version "16.1.1" resolved "https://registry.yarnpkg.com/react-syntax-highlighter/-/react-syntax-highlighter-16.1.1.tgz#928459855d375f5cfc8e646071e20d541cebcb52" @@ -7159,11 +6738,6 @@ react-virtuoso@^4.18.5: resolved "https://registry.yarnpkg.com/react-virtuoso/-/react-virtuoso-4.18.5.tgz#450108e585c7a1124b995c7ea3cf367ed4857631" integrity sha512-QDyNjyNEuurZG67SOmzYyxEkQYSyGmAMixOI6M15L/Q4CF39EgG+88y6DgZRo0q7rmy0HPx3Fj90I8/tPdnRCQ== -react-window@^2.2.7: - version "2.2.7" - resolved "https://registry.yarnpkg.com/react-window/-/react-window-2.2.7.tgz#7f3d31695d4323701b7e80dfc9bbbe1d4a0c160f" - integrity sha512-SH5nvfUQwGHYyriDUAOt7wfPsfG9Qxd6OdzQxl5oQ4dsSsUicqQvjV7dR+NqZ4coY0fUn3w1jnC5PwzIUWEg5w== - react@19.2.5: version "19.2.5" resolved "https://registry.yarnpkg.com/react/-/react-19.2.5.tgz#c888ab8b8ef33e2597fae8bdb2d77edbdb42858b" @@ -7201,10 +6775,10 @@ readable-stream@~1.0.17, readable-stream@~1.0.27-1: isarray "0.0.1" string_decoder "~0.10.x" -recharts@^3.7.0: - version "3.8.0" - resolved "https://registry.yarnpkg.com/recharts/-/recharts-3.8.0.tgz#461025818cbb858e7ff2e5820b67c6143e9b418d" - integrity sha512-Z/m38DX3L73ExO4Tpc9/iZWHmHnlzWG4njQbxsF5aSjwqmHNDDIm0rdEBArkwsBvR8U6EirlEHiQNYWCVh9sGQ== +recharts@^3.8.1: + version "3.8.1" + resolved "https://registry.yarnpkg.com/recharts/-/recharts-3.8.1.tgz#1784b14784dab9a27eb426c475e6a9187f14cf01" + integrity sha512-mwzmO1s9sFL0TduUpwndxCUNoXsBw3u3E/0+A+cLcrSfQitSG62L32N69GhqUrrT5qKcAE3pCGVINC6pqkBBQg== dependencies: "@reduxjs/toolkit" "^1.9.0 || 2.x.x" clsx "^2.1.1" @@ -7218,17 +6792,12 @@ recharts@^3.7.0: use-sync-external-store "^1.2.2" victory-vendor "^37.0.2" -redux-devtools-extension@2.13.9: - version "2.13.9" - resolved "https://registry.yarnpkg.com/redux-devtools-extension/-/redux-devtools-extension-2.13.9.tgz#6b764e8028b507adcb75a1cae790f71e6be08ae7" - integrity sha512-cNJ8Q/EtjhQaZ71c8I9+BPySIBVEKssbPpskBfsXqb8HJ002A3KRVHfeRzwRo6mGPqsm7XuHTqNSNeS1Khig0A== - redux-persist@^6.0.0: version "6.0.0" resolved "https://registry.yarnpkg.com/redux-persist/-/redux-persist-6.0.0.tgz#b4d2972f9859597c130d40d4b146fecdab51b3a8" integrity sha512-71LLMbUq2r02ng2We9S215LtPu3fY0KgaGE0k8WRgl6RkqxtGfl7HUozz1Dftwsb0D/5mZ8dwAaPbtnzfvbEwQ== -redux-thunk@3.1.0, redux-thunk@^3.1.0: +redux-thunk@^3.1.0: version "3.1.0" resolved "https://registry.yarnpkg.com/redux-thunk/-/redux-thunk-3.1.0.tgz#94aa6e04977c30e14e892eae84978c1af6058ff3" integrity sha512-NW2r5T6ksUKXCabzhL9z+h206HQw/NJkcLm1GPImRQ8IzfXwRGqjVhKJGauHirT0DAuyy6hjdnMZaRoAcy0Klw== @@ -7388,21 +6957,11 @@ require-from-string@^2.0.2: resolved "https://registry.yarnpkg.com/require-from-string/-/require-from-string-2.0.2.tgz#89a7fdd938261267318eafe14f9c32e598c36909" integrity sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw== -require-relative@^0.8.7: - version "0.8.7" - resolved "https://registry.yarnpkg.com/require-relative/-/require-relative-0.8.7.tgz#7999539fc9e047a37928fa196f8e1563dabd36de" - integrity sha512-AKGr4qvHiryxRb19m3PsLRGuKVAbJLUD7E6eOaHkfKhwc+vSgVOCY5xNvm9EkolBKTOf0GrQAZKLimOCz81Khg== - reselect@5.1.1, reselect@^5.1.0, reselect@^5.1.1: version "5.1.1" resolved "https://registry.yarnpkg.com/reselect/-/reselect-5.1.1.tgz#c766b1eb5d558291e5e550298adb0becc24bb72e" integrity sha512-K/BG6eIky/SBpzfHZv/dd+9JBFiS4SWV7FIujVyJRux6e45+73RaUHXLmIR1f7WOMaQ0U1km6qwklRQxpJJY0w== -resize-observer-polyfill@^1.5.1: - version "1.5.1" - resolved "https://registry.yarnpkg.com/resize-observer-polyfill/-/resize-observer-polyfill-1.5.1.tgz#0e9020dd3d21024458d4ebd27e23e40269810464" - integrity sha512-LwZrotdHOo12nQuZlHEmtuXdqGoOD0OhaxopaNFxWzInpEgaLWoVuAMbTzixuosCx2nEG58ngzW3vxdWoxIgdg== - resolve-from@^4.0.0: version "4.0.0" resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-4.0.0.tgz#4abcd852ad32dd7baabfe9b40e00a36db5f392e6" @@ -7449,13 +7008,6 @@ rgbcolor@^1.0.1: resolved "https://registry.yarnpkg.com/rgbcolor/-/rgbcolor-1.0.1.tgz#d6505ecdb304a6595da26fa4b43307306775945d" integrity sha512-9aZLIrhRaD97sgVhtJOW6ckOEh6/GnvQtdVNfdZ6s67+3/XwLS9lBcQYzEEhYVeUowN7pRzMLsyGhK2i/xvWbw== -rimraf@^3.0.2: - version "3.0.2" - resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-3.0.2.tgz#f1a5402ba6220ad52cc1282bac1ae3aa49fd061a" - integrity sha512-JZkJMZkAGFFPP2YqXZXPbMlMBgsxzE8ILs4lMIX/2o0L9UBw9O/Y3o6wFw/i9YLapcUJWwqbi3kdxIPdC62TIA== - dependencies: - glob "^7.1.3" - rope-sequence@^1.3.0: version "1.3.4" resolved "https://registry.yarnpkg.com/rope-sequence/-/rope-sequence-1.3.4.tgz#df85711aaecd32f1e756f76e43a415171235d425" @@ -7534,7 +7086,7 @@ semver@^6.3.1: resolved "https://registry.yarnpkg.com/semver/-/semver-6.3.1.tgz#556d2ef8689146e46dcea4bfdd095f3434dffcb4" integrity sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA== -semver@^7.3.6, semver@^7.5.4, semver@^7.7.1, semver@^7.7.3: +semver@^7.7.1, semver@^7.7.3: version "7.7.4" resolved "https://registry.yarnpkg.com/semver/-/semver-7.7.4.tgz#28464e36060e991fa7a11d0279d2d3f3b57a7e8a" integrity sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA== @@ -7685,11 +7237,6 @@ simplebar@6.3.3: dependencies: simplebar-core "^1.3.2" -slash@^3.0.0: - version "3.0.0" - resolved "https://registry.yarnpkg.com/slash/-/slash-3.0.0.tgz#6539be870c165adbd5240220dbe361f1bc4d4634" - integrity sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q== - snake-case@^3.0.4: version "3.0.4" resolved "https://registry.yarnpkg.com/snake-case/-/snake-case-3.0.4.tgz#4f2bbd568e9935abdfd593f34c691dadb49c452c" @@ -7836,20 +7383,6 @@ stringify-entities@^4.0.0: character-entities-html4 "^2.0.0" character-entities-legacy "^3.0.0" -strip-ansi@^3.0.0: - version "3.0.1" - resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-3.0.1.tgz#6a385fb8853d952d5ff05d0e8aaf94278dc63dcf" - integrity sha512-VhumSSbBqDTP8p2ZLKj40UjBCV4+v8bUSEpUb4KjRgWk9pbqGF4REFj6KEagidb2f/M6AzC0EmFyDNGaw9OCzg== - dependencies: - ansi-regex "^2.0.0" - -strip-ansi@^6.0.1: - version "6.0.1" - resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-6.0.1.tgz#9e26c63d30f53443e9489495b2105d37b67a85d9" - integrity sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A== - dependencies: - ansi-regex "^5.0.1" - strip-bom-string@^1.0.0: version "1.0.0" resolved "https://registry.yarnpkg.com/strip-bom-string/-/strip-bom-string-1.0.0.tgz#e5211e9224369fbb81d633a2f00044dc8cedad92" @@ -7898,11 +7431,6 @@ stylis@4.2.0: resolved "https://registry.yarnpkg.com/stylis/-/stylis-4.2.0.tgz#79daee0208964c8fe695a42fcffcac633a211a51" integrity sha512-Orov6g6BB1sDfYgzWfTHDOxamtX1bE/zo104Dh9e6fqJ3PooipYyfJ0pUmrZO2wAvO8YbEyeFrkV91XTsGMSrw== -supports-color@^2.0.0: - version "2.0.0" - resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-2.0.0.tgz#535d045ce6b6363fa40117084629995e9df324c7" - integrity sha512-KKNVtd6pCYgPIKU4cp2733HWYCpplQhddZLBUryaAHou723x+FRzQ5Df824Fj+IyyuiQTRoub4SnIFfIcrp70g== - supports-color@^7.1.0: version "7.2.0" resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-7.2.0.tgz#1b7dcdcb32b8138801b3e478ba6a51caa89648da" @@ -7950,11 +7478,6 @@ text-segmentation@^1.0.3: dependencies: utrie "^1.0.2" -text-table@^0.2.0: - version "0.2.0" - resolved "https://registry.yarnpkg.com/text-table/-/text-table-0.2.0.tgz#7f5ee823ae805207c00af2df4a84ec3fcfa570b4" - integrity sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw== - through2@~0.4.1: version "0.4.2" resolved "https://registry.yarnpkg.com/through2/-/through2-0.4.2.tgz#dbf5866031151ec8352bb6c4db64a2292a840b9b" @@ -8003,11 +7526,6 @@ to-regex-range@^5.0.1: dependencies: is-number "^7.0.0" -toggle-selection@^1.0.6: - version "1.0.6" - resolved "https://registry.yarnpkg.com/toggle-selection/-/toggle-selection-1.0.6.tgz#6e45b1263f2017fa0acc7d89d78b15b8bf77da32" - integrity sha512-BiZS+C1OS8g/q2RRbJmy59xpyghNBqrr6k5L/uKBGRsTfxmu3ffiRnd8mlGPUVayg8pvfi5urfnu8TU7DVOkLQ== - toposort@^2.0.2: version "2.0.2" resolved "https://registry.yarnpkg.com/toposort/-/toposort-2.0.2.tgz#ae21768175d1559d48bef35420b2f4962f09c330" @@ -8023,11 +7541,6 @@ trough@^2.0.0: resolved "https://registry.yarnpkg.com/trough/-/trough-2.2.0.tgz#94a60bd6bd375c152c1df911a4b11d5b0256f50f" integrity sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw== -ts-api-utils@^1.0.1: - version "1.4.3" - resolved "https://registry.yarnpkg.com/ts-api-utils/-/ts-api-utils-1.4.3.tgz#bfc2215fe6528fecab2b0fba570a2e8a4263b064" - integrity sha512-i3eMG77UTMD0hZhgRS562pv83RC6ukSAC2GMNWc+9dieh/+jDM5u5YG+NHX6VNDRHQcHwmsTHctP9LhbC3WxVw== - ts-api-utils@^2.4.0: version "2.5.0" resolved "https://registry.yarnpkg.com/ts-api-utils/-/ts-api-utils-2.5.0.tgz#4acd4a155e22734990a5ed1fe9e97f113bcb37c1" @@ -8043,7 +7556,7 @@ tsconfig-paths@^3.15.0: minimist "^1.2.6" strip-bom "^3.0.0" -tslib@^2.0.0, tslib@^2.0.3, tslib@^2.4.0, tslib@^2.7.0, tslib@^2.8.0, tslib@^2.8.1: +tslib@^2.0.0, tslib@^2.0.3, tslib@^2.4.0, tslib@^2.7.0, tslib@^2.8.0: version "2.8.1" resolved "https://registry.yarnpkg.com/tslib/-/tslib-2.8.1.tgz#612efe4ed235d567e8aba5f2a5fab70280ade83f" integrity sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w== @@ -8055,11 +7568,6 @@ type-check@^0.4.0, type-check@~0.4.0: dependencies: prelude-ls "^1.2.1" -type-fest@^0.20.2: - version "0.20.2" - resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-0.20.2.tgz#1bf207f4b28f91583666cb5fbd327887301cd5f4" - integrity sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ== - type-fest@^2.19.0: version "2.19.0" resolved "https://registry.yarnpkg.com/type-fest/-/type-fest-2.19.0.tgz#88068015bb33036a598b952e55e9311a60fd3a9b" @@ -8120,11 +7628,6 @@ typescript-eslint@^8.46.0: "@typescript-eslint/typescript-estree" "8.57.1" "@typescript-eslint/utils" "8.57.1" -typescript@5.9.3: - version "5.9.3" - resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.9.3.tgz#5b4f59e15310ab17a216f5d6cf53ee476ede670f" - integrity sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw== - uc.micro@^2.0.0, uc.micro@^2.1.0: version "2.1.0" resolved "https://registry.yarnpkg.com/uc.micro/-/uc.micro-2.1.0.tgz#f8d3f7d0ec4c3dea35a7e3c8efa4cb8b45c9e7ee" @@ -8184,7 +7687,7 @@ unicode-trie@^2.0.0: pako "^0.2.5" tiny-inflate "^1.0.0" -unified@^11.0.0: +unified@^11.0.0, unified@^11.0.5: version "11.0.5" resolved "https://registry.yarnpkg.com/unified/-/unified-11.0.5.tgz#f66677610a5c0a9ee90cab2b8d4d66037026d9e1" integrity sha512-xKvGhPWw3k84Qjh8bI3ZeJjqnyadK+GEFtazSfZv/rKeTkTjOJho6mFqh2SM96iIcZokxiOpg78GazTSg8+KHA== @@ -8357,24 +7860,6 @@ vite-compatible-readable-stream@^3.6.1: string_decoder "^1.1.1" util-deprecate "^1.0.1" -void-elements@3.1.0: - version "3.1.0" - resolved "https://registry.yarnpkg.com/void-elements/-/void-elements-3.1.0.tgz#614f7fbf8d801f0bb5f0661f5b2f5785750e4f09" - integrity sha512-Dhxzh5HZuiHQhbvTW9AMetFfBHDMYpo23Uo9btPXgdYP+3T5S+p+jgNy7spra+veYhBP2dCSgxR/i2Y02h5/6w== - -vue-eslint-parser@^9.4.3: - version "9.4.3" - resolved "https://registry.yarnpkg.com/vue-eslint-parser/-/vue-eslint-parser-9.4.3.tgz#9b04b22c71401f1e8bca9be7c3e3416a4bde76a8" - integrity sha512-2rYRLWlIpaiN8xbPiDyXZXRgLGOtWxERV7ND5fFAv5qo1D2N9Fu9MNajBNc6o13lZ+24DAWCkQCvj4klgmcITg== - dependencies: - debug "^4.3.4" - eslint-scope "^7.1.1" - eslint-visitor-keys "^3.3.0" - espree "^9.3.1" - esquery "^1.4.0" - lodash "^4.17.21" - semver "^7.3.6" - w3c-keyname@^2.2.0: version "2.2.8" resolved "https://registry.yarnpkg.com/w3c-keyname/-/w3c-keyname-2.2.8.tgz#7b17c8c6883d4e8b86ac8aba79d39e880f8869c5" @@ -8450,11 +7935,6 @@ word-wrap@^1.2.5: resolved "https://registry.yarnpkg.com/word-wrap/-/word-wrap-1.2.5.tgz#d2c45c6dd4fbce621a66f136cbe328afd0410b34" integrity sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA== -wrappy@1: - version "1.0.2" - resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" - integrity sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ== - xtend@~2.1.1: version "2.1.2" resolved "https://registry.yarnpkg.com/xtend/-/xtend-2.1.2.tgz#6efecc2a4dad8e6962c4901b337ce7ba87b5d28b"